September 9, 2026
- A financially motivated group ran a large-scale credential-harvesting campaign end to end in under six hours using an autonomous multi-agent framework, according to Google Threat Intelligence Group. GTIG also reports actors in healthcare, government and media stealing proprietary-model API credentials and co-opting victim cloud environments to run their own AI workloads. It attributes a run of PyPI, npm and Docker Hub supply-chain compromises to TeamPCP (aka Altered Spider, UNC6780), which deploys the SANDCLOCK stealer — a Python, Linux- and Kubernetes-aware component of what has been publicly called CanisterWorm, with container-escape functionality — and its successor DUSTMAKER, both aimed at developer and AI coding-assistant credentials (The Hacker News, BleepingComputer). · AI & Model Security
in One Phone Call, Zero Clicks: A WeChat Worm Crossed iOS and Android