InternetNews

🌐 Microsoft X Account Hacked to Promote Fake Clippy Crypto Token

Microsoft's official X account, with over 13 million followers, was hijacked on Thursday to promote a fraudulent cryptocurrency token impersonating its Clippy assistant.

The attackers used the account to follow and repost content from a fake Clippy profile promoting $Clippy in an apparent pump-and-dump scheme.

Microsoft confirmed unauthorized access, removed the posts and secured the account. The company has denied any affiliation with the token and is investigating the incident.

🌐 @InternetNews | 💬 @Commune

🌐 Sponsored by @Overview
Your gateway to the entire network.

🌐 RUSSIA PROPOSES NEW ANTI-FRAUD RULES

Russia's Ministry of Digital Development has presented a third package of measures targeting phone and online fraud.

📱 SIM cards

• Reselling SIM cards already registered to another person would be prohibited.

• Operators would also be required to sell SIM cards with a zero balance, ending the use of pre-activated cards with credit.

✈️ Websites & apps

• Services with user accounts would have to retain registration, login and account-deletion records for three years.

• The information could be provided to authorized authorities upon request.

📞 Virtual PBX

• New restrictions would be introduced for virtual PBX systems used for internet-based calling.

• The package also proposes new rules governing the use of subscriber data for SMS campaigns.

The measures are currently part of a proposed package and are expected to take effect from March 1, 2028, if adopted.

🌐 @InternetNews | 💬 @Commune

🌐 Sponsored by @Overview
Your gateway to the entire network.

🌐 MetaMask exits ~17,000 Ethereum validators after security incident

MetaMask is proactively exiting thousands of Ethereum validators following a security incident affecting part of its infrastructure.

On-chain researchers estimate that around 17,000 validators holding more than 500,000 ETH are being exited.

Block rewards from 18 validators were reportedly redirected, with approximately 0.36 ETH diverted. The staked ETH itself does not appear to have been stolen.

MetaMask says there is no immediate threat to user wallets and that its staking operations are non-custodial.

The affected validators could take up to 45 days to fully exit, withdraw and be reactivated.

🌐 @InternetNews | 💬 @Commune

🌐 Sponsored by @Overview
Your gateway to the entire network.

🌐 Telegram username @damn sold for $215,000

The username @damn was sold last night for approximately $215,000.

The deal was completed within minutes after the buyer contacted the owner, @plug, directly.

🌐 @InternetNews | 💬 @Commune

🌐 Sponsored by @Overview
Your gateway to the entire network.

🌐 CRYPTO HACK LOSSES HIT $766M IN SEPTEMBER

The crypto industry suffered 55 major hacks in September, with total losses reaching around $766.5M — a roughly 462% increase from August's $136.3M.

The biggest incidents were Bitget at ~$387M and Liquid Network at ~$320M, which together accounted for most of the month's losses.

Around $285M from the Liquid Network exploit was later returned.

September was the worst month of 2026 so far for crypto hack losses.

🌐 @InternetNews | 💬 @Commune

🌐 Sponsored by @Overview
Your gateway to the entire network.

🌐 White House misspells “United States” in Super Intelligence accord

The White House Accord on Super Intelligence, signed by Donald Trump and six major AI executives, contains a typo beneath Trump's signature:

“President of the Unites States.”

The typo appears in the document shared by Trump and has been confirmed by multiple outlets and fact-checkers.

The accord was signed on September 29 as the Trump administration pushes the use of “Super Intelligence” instead of “Artificial Intelligence” in federal communications.

🌐 @InternetNews | 💬 @Commune

🌐 Sponsored by @Overview
Your gateway to the entire network.

🌐 Mirage Lamp upgrade details

Telegram's new Mirage Lamp collectible gift has 52 possible models, with rarities ranging from 0.5% to 3%.

🕯 Crimson Shrine — 0.5%
🕯 Warm Pixel — 0.5%
🕯 Soft Glow — 1%
🕯 Ancestral Flame — 1%
🕯 Crimson Dusk — 1%
🕯 Split Aura — 1%
🕯 Dream Prism — 1%
🕯 Qamara — 1%
🕯 Iron Hearth — 1%
🕯 Amber Alcove — 1%
🕯 Viridian Fire — 1.5%
🕯 Emerald Star — 1.5%
🕯 Ruby Moon — 1.5%
🕯 Mosaic — 1.5%
🕯 Silent Bell — 1.5%
🕯 Rising Flame — 1.5%
🕯 Kul Sharif — 1.5%
🕯 Deep Forest — 1.5%
🕯 Rising Sun — 1.5%
🕯 Sacred Love — 1.5%
🕯 Golden Filament — 1.5%
🕯 Ruby Comet — 1.5%
🕯 Green Canopy — 1.5%
🕯 Captured Night — 2%
🕯 Frost Bloom — 2%
🕯 Verdant Gold — 2%
🕯 Copper Halo — 2%
🕯 Moroccan — 2%
🕯 Blue Mosque — 2%
🕯 Rock Shrine — 2%
🕯 Starlight — 2%
🕯 Crystal Wish — 2%
🕯 Tulip Petals — 2%
🕯 Agrabah — 2.5%
🕯 Pearl Dome — 2.5%
🕯 Eternal Jade — 2.5%
🕯 Celestia — 2.5%
🕯 Silver Chalice — 2.5%
🕯 Ivory Veil — 2.5%
🕯 Dancing Shadows — 2.5%
🕯 Dream Orb — 2.5%
🕯 Magma Crown — 2.5%
🕯 Azure Tear — 2.5%
🕯 Generous Glow — 2.5%
🕯 White Gilded — 3%
🕯 Mystic Purple — 3%
🕯 Moonlit Flower — 3%
🕯 Zahira — 3%
🕯 Fiery Leaf — 3%
🕯 Desert Jewel — 3%
🕯 Frosted Glass — 3%
🕯 Oasis — 3%

🕓 Upgrade price schedule (UTC+3):

17:46 → 1M⭐️
18:46 → 376.2k⭐️
19:46 → 146.1k⭐️
20:46 → 58.7k⭐️
21:46 → 24.4k⭐️
22:46 → 10.5k⭐️
23:46 → 4698⭐️
00:46 → 2185⭐️
01:46 → 1060⭐️
02:46 → 537⭐️
03:46 → 285⭐️
04:46 → 160⭐️
05:46 → 94⭐️
06:46 → 60⭐️
07:46 → 40⭐️
08:46 → 30⭐️
09:46 → 25⭐️

The upgrade price decreases each hour according to the schedule above.

🌐 @InternetNews | 💬 @Commune

🌐 Sponsored by @Overview
Your gateway to the entire network.

🌐 KillSec ransomware group dismantled

Authorities across nine countries have taken down infrastructure linked to the KillSec ransomware group in an international operation.

Three suspects were arrested, including a 16-year-old suspected of being the group's main operator. Authorities linked KillSec to around 1,000 suspected attacks worldwide, with roughly 500 identified as successful so far.

Investigators secured at least 110 TB of stolen data and took control of five servers used by the group. Eight properties were also searched across Spain, Greece, Romania and the UK.

KillSec allegedly exploited software vulnerabilities and poorly secured access points, particularly those linked to cloud storage, before threatening victims with publication of their stolen data unless a ransom was paid.

The operation was coordinated by Europol and Eurojust.

🌐 @InternetNews | 💬 @Commune

🌐 Sponsored by @Overview
Your gateway to the entire network.

🌐 NEAR Intents exploited for $3.8M+

NEAR Intents has confirmed a security incident after multiple irregular outflows were detected from its BSC hot wallet.

On-chain investigator ZachXBT reported that the stolen funds were quickly transferred to KuCoin and then bridged to Bitcoin. The affected wallet has since stopped processing transactions.

NEAR Intents says the incident impacts multiple EVM chains. Its preliminary investigation points to a vulnerability involving Omni's deposit/withdrawal infrastructure and smart contracts.

The project says the vulnerability has been patched and that affected users will be fully compensated. Deposits and withdrawals on BSC, Polygon, TON and other chains are temporarily suspended.

BSC theft address:
0x09fd1f5d9f185067a92493e43aa259ea4ab3ad37

🌐 @InternetNews | 💬 @Commune

🌐 Sponsored by @Overview
Your gateway to the entire network.

🌐 Major outage on Fragment

Users are reporting issues on the website Fragment.com: paid star orders are not being delivered, and information in NFT auctions is not updating.

Until the issues are fixed, I recommend using Marketapp.

🌐 @InternetNews | 💬 @Commune

🌐 Sponsored by @Overview
Your gateway to the entire network.

🌐 U.S. SANCTIONS NETWORK BEHIND $40.7M ATM JACKPOTTING SCHEME

The U.S. Treasury has sanctioned 10 individuals and entities linked to a Tren de Aragua ATM jackpotting operation that authorities say caused $40.73M in reported losses across more than 1,500 attacks.

The attackers allegedly used Ploutus malware, deployed with devices including Raspberry Pis, to force ATMs to dispense cash. The malware was designed to erase itself after attacks.

The alleged mastermind, Anibal “Prometheus” Aguirre, is on the FBI’s Ten Most Wanted list. Authorities say proceeds were laundered through cryptocurrency, with seven crypto addresses also sanctioned.

🌐 @InternetNews | 💬 @Commune

🌐 Sponsored by @Overview
Your gateway to the entire network.

🌐 ALGORITHM CUP OWNER REPORTEDLY SCAMMED AFTER EARLIER 100-STAR INCIDENT

The owner of Algorithm Cup #34 was previously accused of taking 100 Stars from a potential buyer after claiming he couldn't transfer the gift, then allegedly cutting contact after receiving the Stars.

Now, the same owner has reportedly fallen victim to a $5,700 fake-USDT scam while selling the Algorithm Cup gift.

The buyer allegedly sent fake USDT as payment, with the seller only realizing afterward that the funds weren't genuine.

🌐 @InternetNews | 💬 @Commune

🌐 Sponsored by @Overview
Your gateway to the entire network.

🌐 CISCO SD-WAN MANAGER ZERO-DAY ACTIVELY EXPLOITED

Cisco has warned of an actively exploited critical authentication bypass vulnerability (CVE-2026-76504) in Catalyst SD-WAN Manager.

The CVSS 9.8 flaw allows unauthenticated remote attackers to bypass authentication and access the Manager's API with admin privileges.

Cisco says there is no workaround, but security updates are available. Internet-exposed systems are particularly at risk.

🌐 @InternetNews | 💬 @Commune

🌐 Sponsored by @Overview
Your gateway to the entire network.

🌐 EX-NCA OFFICER ORDERED TO REPAY £1.8M AFTER STEALING SILK ROAD BITCOIN

Former UK National Crime Agency officer Paul Chowles has been ordered to repay £1.81M after stealing 50 BTC seized during the Silk Road 2.0 investigation.

He transferred the Bitcoin from a confiscated wallet and attempted to disguise the trail through cryptocurrency transactions. 30 BTC were later recovered.

Chowles was sentenced to 5½ years in prison in July 2025 after pleading guilty to theft and money laundering.

🌐 @InternetNews | 💬 @Commune

🌐 Sponsored by @Overview
Your gateway to the entire network.

🌐 SCAMMERS ARE BUILDING FAKE FBI OFFICES TO FOOL VICTIMS

The FBI is warning about scammers impersonating federal agents, spoofing real FBI field-office numbers and using the names of actual FBI, DEA and Secret Service personnel.

In one case, a scammer staged an entire fake FBI office for a video call, complete with a desk, FBI seal and a suited “agent,” to convince victims they were speaking with law enforcement.

The FBI says legitimate agents will never demand payment or sensitive information through these types of calls.

🌐 @InternetNews | 💬 @Commune

🌐 Sponsored by @Overview
Your gateway to the entire network.

🌐 FORMER AIR FORCE MEMBERS SENTENCED OVER $2.4M PHISHING SCHEME

Two former U.S. Air Force members have been sentenced for a cyber intrusion scheme that used phishing emails to steal credentials and redirect business payments.

The pair diverted more than $2.4 million from two victims, according to the DOJ.

Chijioke Timothy Odimegwu was sentenced to 111 months in prison, while Harafat Mogaji received 78 months. Both were also ordered to pay restitution.

🌐 @InternetNews | 💬 @Commune

🌐 Sponsored by @Overview
Your gateway to the entire network.

🌐 NEW SPECTRE-V2 ATTACK LEAKS LINUX ROOT PASSWORD HASHES

Researchers have disclosed a new Spectre-v2 variant called Branch Target Reuse (BTR) that can extract Linux root password hashes from vulnerable Intel CPUs in minutes.

The attack recovered a root password hash in around 3 minutes on Raptor Cove and 5 minutes on Lion Cove CPUs.

Linux mitigations have already been merged for the vulnerability.

🌐 @InternetNews | 💬 @Commune

🌐 Sponsored by @Overview
Your gateway to the entire network.