www.osintinvestigate.com

Security researchers and the FBI are warning that a wave of FIFA-themed fraud is already hitting World Cup 2026 fans, days before the June 11 kickoff.

Recent reports describe thousands of lookalike FIFA domains, banking malware hidden inside pirate streaming apps, and at least one operation that copies FIFA's login page well enough to take over real accounts.

www.osintinvestigate.com

Threat actors are actively exploiting a critical security flaw in Everest Forms Pro, a WordPress plugin with about 4,000 active installations, to execute arbitrary code, leading to a complete site compromise.

www.osintinvestigate.com

Unknown attackers spent at least five months inside the Outlook mailbox of a senior executive at a major global stock exchange, copying the inbox out in small, repeated batches and routing it through Dropbox and OneDrive so the traffic blended into normal cloud activity.

www.osintinvestigate.com

Cybersecurity researchers have flagged a large-scale operation that impersonates open-source and freeware projects to funnel unsuspecting users through a Traffic Distribution System (TDS) and deliver malware families like Remus Stealer, AnimateClipper, and the SessionGate framework.

www.osintinvestigate.com

Cybersecurity researchers have shed light on a macOS malvertising campaign codenamed Operation FlutterBridge that spreads a new backdoor called FlutterShell.

www.osintinvestigate.com

Cybersecurity researchers have disclosed details of a spear-phishing campaign likely undertaken by the Pakistan-aligned SideCopy group targeting Afghanistan's Ministry of Finance with an open-source remote access trojan called Xeno RAT.

www.osintinvestigate.com

A new cyber espionage campaign codenamed Operation Dragon Weave has been observed targeting officials and citizens in the Czech Republic and Taiwan to deliver an AdaptixC2 agent.

www.osintinvestigate.com

Crypto investment products saw $1.67 billion in outflows last week, the second-largest weekly withdrawal of 2026, bringing three-week redemptions to $4.21 billion.
The pullback, driven largely by U.S. investors amid rising geopolitical tensions involving Iran and Israel, pushed assets under management down to about $141 billion, the lowest since early April.
Bitcoin funds bore the brunt with a record $1.44 billion weekly outflow and sharply reduced year-to-date inflows, while Ethereum products also saw heavy redemptions and only a handful of altcoins, led by XRP, attracted notable new money.

Bitcoin price started a fresh decline below the $72,500 zone. BTC is consolidating and might continue to move down if it dips below $70,500.

www.osintinvestigate.com

An unknown threat actor has been observed using a large language model (LLM) agent to conduct post-compromise actions after obtaining initial access following the exploitation of a publicly-accessible Marimo network using a recently disclosed vulnerability.