<![CDATA[ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories]]>A ransomware affiliate has reportedly betrayed their own operation by keeping the profits for themselves, highlighting that trust issues exist on both sides of the criminal ecosystem. Separately, an attacker left a server exposed with tools and traces of an intrusion, exposing their own toolkit in the process.

The week also saw malicious code surface in developer packages and extensions, continuing a worrying trend of supply chain compromise.

Details remain limited in the source report, so specific identifiers such as CVE IDs are not available at this time. Affected package and extension names, along with mitigation guidance, were not disclosed.

  • Review any developer packages and extensions currently in use
  • Monitor for signs of unauthorized access or exposed infrastructure
  • Treat supply chain components as potential attack vectors until verified

Source: The Hacker News

Are you reviewing your developer dependencies and extensions in light of this week's supply chain activity?

]]>https://xploitlk.com/topic/644/threatsday-ransomware-affiliate-betrayal-whatsapp-rat-exposed-hacker-tools-and-12-more-storiesRSS for NodeTue, 27 Oct 2026 07:51:04 GMTSun, 11 Oct 2026 04:30:18 GMT60