[sheetcreep]

June 17, 2026

• SHEETCREEP (Pakistan-linked) targeted Indian military and political figures via a malicious .lnk delivering C# code that uses Google Sheets for C2 — but operators hardcoded the Google C2 sheet and embedded the access key in the payload, exposing their full target list (~91 monitored individuals). Securonix. · Threat Activity

in Microsoft 365 Copilot 'SearchLeak' Enables One-Click Data Theft as Novo Nordisk Loses Internal AI Models to Extortionists