Discord dismantles Spy.pet site that snooped on millions of users
ID: 6f06ee74-7755-5f47-99a3-1475f8419999
STIX ID: report--6f06ee74-7755-5f47-99a3-1475f8419999
Feed Name: The Register (Security)
Threat Score
A roundup reports that the Spy.pet site scraped and sold Discord messages from millions of users before being taken offline and later briefly returning; it highlights critical vulnerabilities including an actively exploited CrushFTP RCE (CVE-2024-4040, CVSS 10.0); describes a CoralRaider-linked infostealer campaign hosting payloads on CDN cache servers (Cryptbot, LummaC2, Rhadamanthys); and details an eScan update hijack in India distributing GuptizMiner—potentially linked to North Korean APT Kimsuky.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.