WhisperX tag archive

#account-compromise

This page collects WhisperX intelligence signals tagged #account-compromise. It is designed for humans, search engines, and AI agents: each item links to a canonical source-backed record with sector, source, timestamp, credibility, and exportable structured data.

Latest Signals (2)

The Lab · 2026-04-01 02:27:01 · GitHub Issues

1. Axios npm Package Compromised: Malicious Versions 1.14.1 & 0.30.4 Drop Remote Access Trojan

A critical supply chain attack has compromised the widely-used Axios HTTP client library on the npm registry. Malicious versions 1.14.1 and 0.30.4 have been published, containing a remote access trojan (RAT) designed to steal sensitive environment variables from infected systems. This is not a typical dependency confus...

The Vault · 2026-05-09 04:31:44 · r/netsec

2. "AccountDumpling": Google-Sent Phishing Campaign Compromises 30,000+ Facebook Accounts, Researchers Warn

Security researchers have uncovered a large-scale phishing operation that exploited Google infrastructure to compromise more than 30,000 Facebook accounts, according to findings published by Guard.io's threat intelligence team. The campaign, dubbed "AccountDumpling," leveraged compromised Facebook business accounts to ...