Credit card theft campaign abuses Stripe to host stolen payment info By Bill Toulas June 4, 2026 04:47 PM A new Magecart campaign is using Stripe's API infrastructure to host the credit card-stealing payload and the data exfiltrated from checkout pages. …
… Unlike the more common phishing pages that capture username and password pairs, the campaign uses a live AiTM setup, as the attacker uses the credentials to log into the platform in real-time. …
… Multiple posts focused not on theft itself, but on operational visibility and campaign management. …
Infinite Campus data breach affects 137,000 school staff accounts By Sergiu Gatlan June 15, 2026 08:38 AM The ShinyHunters extortion gang stole personal information from more than 137,000 school staff accounts in a Salesforce data theft attack that targeted the widely used Infinite Campus K-12 stud… …
… Canvas is one of the most widely used learning management systems in higher education and K-12 environments, helping schools manage coursework, assignments, grading, and communication between students and faculty. …
… The campaigns were attributed to the TeamPCP hacker group. …
… In a post on their dark web leak site, the cybercrime group claims to have stolen over 40GB of documents containing student finance data, billing and payment information, credit card and payment details, and campus portal exports from the University of Nottingham and its Malaysia and China campuses… …
Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign By Bill Toulas May 24, 2026 10:12 AM A large-scale campaign is exploiting a critical SQL injection vulnerability CVE-2026-26980 in Ghost CMS to inject malicious JavaScript code that triggers ClickFix attack flows. …
Over 116,000 Mincraft systems infected in WeedHack malware campaign By Bill Toulas June 2, 2026 05:54 PM A large-scale malware campaign dubbed WeedHack is targeting Minecraft players and has infected more than 116,000 systems since January. …