The Exploit Post

Sign in Subscribe

News

News

Malicious ShadyPanda Extensions for Chrome and Edge Installed Over 4.3 Million Times

Malicious ShadyPanda Extensions for Chrome and Edge Installed Over 4.3 Million Times

Security researchers have discovered a sophisticated malware campaign that infected millions of browser users through extensions that appeared harmless for years before activating dangerous spyware capabilities. The ShadyPanda campaign, uncovered by Koi Security, distributed 145 malicious extensions—20 for Chrome and 125 for Edge—that were collectively installed over 4.

Japanese Beer Manufacturer Asahi Reports Data Breach Affecting 1.9 Million People

Japanese Beer Manufacturer Asahi Reports Data Breach Affecting 1.9 Million People

Asahi Group Holdings, Japan's largest beer producer, has confirmed that a ransomware attack in fall 2025 compromised personal data belonging to nearly two million customers, employees, and business contacts. The breach affected 1.9 million individuals across multiple categories: 1.525 million customer service contacts, 114,000 external

Android Malware "Albiriox" Targets Over 400 Banking and Cryptocurrency Apps

Android Malware "Albiriox" Targets Over 400 Banking and Cryptocurrency Apps

Cybersecurity researchers at Cleafy identified a new Android banking Trojan called Albiriox that targets more than 400 applications worldwide—including banking, financial, cryptocurrency, trading, payment, investment, and gaming platforms. Russian-speaking hackers are distributing the malware using a "malware-as-a-service" (MaaS) model. Albiriox gives attackers complete control over infected smartphones,

Organizer of Evil Twin Attacks on Board Aircraft Sentenced to Seven Years in Prison

Organizer of Evil Twin Attacks on Board Aircraft Sentenced to Seven Years in Prison

An Australian court sentenced a 44-year-old man who spent several months stealing the personal data of airline passengers and airport visitors. The criminal received seven years and four months imprisonment for creating fake Wi-Fi networks and subsequently using the stolen information. Discovery and Arrest This case began in April 2024

Tomiris Attacks Diplomatic Services and Government Institutions in Russia and CIS

Tomiris Attacks Diplomatic Services and Government Institutions in Russia and CIS

Researchers from Kaspersky Lab discovered recent activity by the APT group Tomiris, which has been attacking the government sector in Russia and CIS countries since early 2025. The group's primary victims are foreign ministries and other diplomatic structures. Over the past year, more than 1,000 users have

Police Shut Down Cryptomixer Service, Seize $29 Million in Cryptocurrency

Police Shut Down Cryptomixer Service, Seize $29 Million in Cryptocurrency

Law enforcement agencies in Switzerland and Germany have dismantled Cryptomixer, a major cryptocurrency mixing service that laundered approximately $1.5 billion in Bitcoin since 2016. The takedown, codenamed "Operation Olympia," took place in Zurich between November 24-28. Authorities seized three servers containing over 12 TB of data, shut

SmartTube Hacked and Distributing Malicious Updates

SmartTube Hacked and Distributing Malicious Updates

A popular open-source YouTube client for TV platforms has been compromised, with attackers embedding malware into official updates through stolen signing keys. SmartTube, a free YouTube client for Android TV and Fire TV devices, attracts millions of users with its ad-blocking features and smooth performance on low-powered hardware. These same