https://blog.dansec.red/vendors/virustotal/Recent content in VirusTotal on DanSec DailyHugoen-gbMon, 09 Feb 2026 00:00:00 +0000https://blog.dansec.red/posts/2026-02-09-cybersecurity-news/Mon, 09 Feb 2026 00:00:00 +0000https://blog.dansec.red/posts/2026-02-09-cybersecurity-news/<h2 id="major-incidents-or-breaches">Major Incidents or Breaches</h2> <ul> <li>BridgePay, a major U.S. payment gateway provider, confirmed a ransomware attack that caused significant outages across its services. The incident began on Friday and resulted in key systems being taken offline.</li> <li>Moltbook, a social network for AI agents, exposed personal data belonging to real users. The exposure was not limited to AI-generated content but included sensitive information about actual individuals.</li> </ul> <h2 id="newly-discovered-vulnerabilities">Newly Discovered Vulnerabilities</h2> <ul> <li>Organizations have been urged to replace discontinued edge devices following reports that unsupported hardware is being actively targeted by state-sponsored threat actors. The US government has highlighted ongoing attacks exploiting vulnerabilities in these obsolete devices.</li> </ul> <h2 id="notable-threat-actor-activity">Notable Threat Actor Activity</h2> <ul> <li>A state-aligned cyberespionage group tracked as TGR-STA-1030/UNC6619 has conducted “Shadow Campaigns,” targeting government infrastructure in 155 countries. The operation is global in scale and focused on espionage objectives.</li> <li>German federal agencies (BfV and BSI) issued a joint advisory regarding a phishing campaign using the Signal messaging app. The campaign specifically targets politicians, military personnel, and journalists in Germany.</li> </ul> <h2 id="trends-tools-or-tactics-of-interest">Trends, Tools, or Tactics of Interest</h2> <ul> <li>OpenClaw (formerly Moltbot/Clawdbot) has integrated VirusTotal scanning into its ClawHub skill marketplace, scanning uploaded skills for malicious content.</li> <li>A new open-source tool named Tirith has been released to detect and block homoglyph (imposter) attacks in command-line environments by analyzing URLs in typed commands and preventing the execution of suspicious commands.</li> </ul>