Frequency
3
occurrences
First Seen
February 10, 2026
Last Seen
June 21, 2026
Related Threat Clusters
-
Salesloft Drift OAuth Token Breach Exposes Salesforce Data
Between August 9 and August 17, 2025, the threat actor UNC6395 exploited stolen OAuth tokens from Salesloft's Drift integration to access Salesforce environments of over 700 organizations, including major tech firms.…
3 articles · Updated June 21, 2026 -
Typosquatting Attack Targets Python Developers with Malicious Package
A malicious Python package named 'parsimonius' was uploaded to the Python Package Index (PyPI), mimicking the legitimate 'parsimonious' library. This typosquatting attack exploited developer trust, leading to 2,474…
6 articles · Updated June 5, 2026 -
AI-Generated React2Shell Malware Discovered by Researchers
Researchers from Darktrace identified a new malware sample named React2Shell, created using AI and large language models (LLMs). This malware exploits a known vulnerability, allowing less skilled hackers to generate…
6 articles · Updated February 12, 2026
Recent Intelligence Reports
- Salesloft Drift OAuth Token Breach Enables Salesforce Data Theft in UNC6395 'Icarus ... — Rescana · June 21, 2026
- Malicious Python Package Mimics Parsimonious Parser — Gbhackers · June 5, 2026
- AI/LLM-Generated Malware Used to Exploit React2Shell — Darktrace · February 10, 2026