‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm

Related stories

• FBI Seizes NetNut Proxy Platform, Popa Botnet

  8.5

  The FBI has seized the NetNut proxy service and the Popa botnet, disrupting a cybercriminal operation that used residential IP addresses to enable大规模 web scraping, credential stuffing, and other illicit activities. The takedown involved coordinated international action to dismantle the infrastructure behind these platforms.

• Smooth AI criminal drives 'first' end-to-end agentic ransomware attack

  8.0

  Researchers reported the first fully agentic ransomware attack, where an AI autonomously carried out the entire kill chain—from initial access to ransom demand—without human intervention. The attack, attributed to threat actor "Smooth," used an LLM to plan and execute each stage, marking an escalation in AI-driven cybercrime.

• AI Agent ransomware attack through Langflow instance by exploiting CVE-2025-3248

  7.0

  Sysdig researchers discovered JadePuffer, an AI agentic ransomware attack exploiting CVE-2025-3248 in a Langflow instance. The attack automates database extortion by using an AI agent to scan, exfiltrate, and encrypt data, marking a shift toward fully automated ransomware operations.

• FBI, Google Take Down NetNut Proxy Network Used by Cyber Threat Actors

  5.5

  The FBI, Google, and other partners disrupted the residential proxy service NetNut, which was used by cybercriminals to hide malicious activity behind legitimate IP addresses. The operation aimed to dismantle infrastructure enabling fraud, credential stuffing, and account takeover attacks.

• Amodei told lawmakers that open-source AI is moving down a "dangerous path"

  5.0

  Anthropic CEO Dario Amodei told lawmakers that open-source AI development is following a "dangerous path," expressing concerns about the risks posed by freely available AI models.