Quite Hacker

🔐 The password manager you trust with your LIFE just got supply chain attacked.

source: https://cyberpings.com/article/bitwarden-cli-compromised-checkmarx-supply-chain-mobm

Bitwarden's CLI tool on npm was hijacked for 90 minutes on April 22 — and in that window, anyone who installed the update got malware that stole EVERYTHING. GitHub tokens, npm tokens, SSH keys, .env files, cloud secrets, shell history — even configs from AI coding tools like Cursor and Claude. The stolen data was encrypted and exfiltrated to a domain impersonating security firm Checkmarx.

The attackers didn't hack Bitwarden directly. They compromised a GitHub Action in Bitwarden's CI/CD pipeline and used it to publish a poisoned version. This is the first time a package using npm's Trusted Publishing has ever been compromised. Bitwarden says no user vault data was at risk — but if you're a developer who installed /[email protected], your entire dev environment is compromised.

90 minutes. That's all it took. Did you update during that window? 👇

💻 You're using Slack. The hacker is using YOUR PC too. At the same time. And you can't see them.

source: https://cyberpings.com/article/fake-slack-download-trojan-invisible-desktop-mo5e

A fake Slack download site called "slacks.pro" installs the real Slack app — but secretly loads a hidden malware toolkit alongside it. While you're chatting with your team, attackers create an invisible second desktop on your machine. They can open browsers, access your bank, steal credentials — and nothing shows up on your screen. You'd never know.

The malware disguises itself as a "Windows Component Update Service by Microsoft," disables Windows Defender, injects itself into explorer.exe, and communicates with a remote server. The site auto-downloads the fake installer with just one click anywhere on the page. One mistyped URL is all it takes.

Slack is used by 77 of the Fortune 100 across 200,000+ companies. If one employee downloads this, the entire corporate network is at risk.

Always download from the official site. Always check the URL 👇

🔑 Your Gmail isn't just email. It's the master key to your ENTIRE digital life. And hackers know it.

Think about everything connected to your Google account — password resets, MFA codes, bank notifications, SaaS logins, payment approvals, OAuth permissions. If someone takes over your Gmail, they don't just read your emails. They own every single app and service connected to it.

And here's the scary part — modern attackers don't even need your password anymore. They're stealing browser session cookies and OAuth tokens that bypass MFA completely. Once inside your Google Workspace, they set up silent forwarding rules, delete security alerts you'd normally see, and quietly take control. It all looks like normal activity — no malware, no alerts, no red flags.
Your inbox isn't a productivity tool. It's identity infrastructure. Are you treating it that way? When's the last time you checked your Gmail forwarding rules and linked devices? 👇

source: https://cyberpings.com/article/google-workspace-identity-breach-mnti

The EUROPEAN UNION just got hacked. Not a company. Not a startup. The actual governing body of Europe.

source: https://cyberpings.com/article/shinyhunters-hack-european-commission-mnak

ShinyHunters — one of the most notorious cybercrime groups in the world — just breached the European Commission's Amazon cloud account and claims to have stolen 350GB+ of data. We're talking mail server dumps, internal databases, confidential contracts, and sensitive documents from the institution that governs 450 million people across 27 countries.

The EU confirmed the attack, saying data was taken from Europa.eu websites. ShinyHunters posted the Commission on their dark web leak site with proof. This is the same crew behind massive breaches of Odido, SoundCloud, and Canada Goose — and they primarily get in through voice phishing and social engineering.

The scariest part? This is the EU's SECOND cyberattack this year. They got hit in January too.

If the European Union can't keep hackers out, who can? 👇

✈️ One typo. That's all it takes. You type "telegrgam" instead of "telegram" — and hackers own your PC.

Attackers built fake Telegram download sites with URLs so close to the real thing, you'd never notice the difference. Click download, and you get what looks like a normal installer. But behind the scenes, it immediately kills your Windows Defender, drops hidden files, and runs malware directly in your computer's memory — meaning your antivirus literally can't see it because there's nothing on disk to scan.

The scariest part? Multiple fake domains are active — telegrgam.com, telefgram.com, tejlegram.com — all waiting for one careless typo. The malware connects to a remote server giving attackers full access to your system while staying completely invisible.

Always download apps from official sources only. Always check the URL. One letter can cost you everything 👇