COLDCARD Audit Phishing: 25.7MB Batch File Embeds ScreenConnect and Uses Chat to Trick...
COLDCARD Audit Phishing: 25.7MB Batch File Embeds ScreenConnect and Uses Chat to Trick Admins into Running It
1. Basic Information
Article Title: COLDCARD security audit phishing attack installs remote access tool
Publisher: BleepingComputer
Publication Date: August 5, 2026
COLDCARD security audit phishing attack installs remote access tool
Fake Adobe and Zoom Updates Install ScreenConnect for Persistent Remote Access
Smoke#Screen RMM Takeover Gambit Exposes Threat Actor Playbook
Hardware Wallet Firms Warn of Phishing Surge as Coldcard Losses Near $130M - Decrypt
Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk
A phishing campaign is exploiting fears surrounding the recently disclosed COLDCARD wallet vulnerability and suspected $88.6…
Rapid7 pulls 1,048 files from an exposed server, linking an LLM-assisted phishing pipeline to a live WebDAV campaign targeting…
SMOKE#SCREEN uses fake Adobe and Zoom updates, document lures, and trusted cloud services to install ScreenConnect for persistent…
The attacks use diverse social engineering lures and rotating payloads to deliver ScreenConnect for persistent remote access to…
Attackers are exploiting the chat-sharing features in ChatGPT and Claude to spread malware through shared conversations. The…
SCMBANKER watches banking windows, captures screenshots, hijacks CLABE and card numbers, and can deploy Remote Utilities for…
