Real emails, hijacked payments: Two H1 2026 attack chains

Gen's H1 2026 Threat Report examines two separate attack chains. One used compromised business inboxes and browser manipulation in a banking-malware campaign, while the other used clipboard hijacking to redirect cryptocurrency payments.

Read at the source

Summary written for cymesh.dev. The full article lives at BleepingComputer.

Topics

malware

~/cymesh.net

Certificates expire quietly

cymesh.net watches your TLS and SSL certificates and warns you before one lapses.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks

Talk to us See cymesh.net

~/related/real-emails-hijacked-payments-two-h1-2026-attack-chains-1qzldb

2026-09-11 01:00 UTC[info]

Indonesia Hit by Android Banking App-Cloning Campaign

Dark Readingmalware mobile

2026-09-10 21:40 UTC[high]

New Android malware encrypts files, steals data, and harasses victims

BleepingComputerransomware malware mobile

2026-09-10 11:33 UTC[info]

Gigabud Creates Android Work Profiles to Hide From Banking App Malware Checks

The Hacker Newsmalware mobile

2026-09-10 05:30 UTC[info]

Product showcase: GitGuardian Honeytoken catches credential theft as it happens

Help Net Securitycloud malware

2026-09-09 16:30 UTC[crit]

Multiple Chinese hacking groups seen using identical Chrome zero-day exploit

The Recordzero-day apt malware

2026-09-09 14:23 UTC[info]

Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA

The Hacker Newsai malware