Trust and the enticing consultancy offer

This week’s Threat Source newsletter highlights rising AI-integrated malware and tooling (Talos CAIRN) and reports several active incidents: an autonomous AI C2 implant (CLOSEDQUORUM), fake LastPass installers distributing an infostealer and kernel-level EDR killer, a claimed ShinyHunters leak of FBI employee data, targeted attacks on Colorado water utilities, and increased ransomware activity in Japan; the bulletin also provides multiple malware hashes and discusses social-engineering recruitment lures and other attacker TTPs.