##CornFlake
Russian APT lets AI agents rebuild its malware every time it is detected - hash blocking is dead. https://intel.threadlinqs.com/threat/TL-2026-3117 #ThreatIntel #CornFlake #ChocoShell #Embassy
October 9, 2026 at 9:49 AM
Russia's SVR turns hotel Wi-Fi into a malware and device-code phishing trap for business travelers. https://intel.threadlinqs.com/threat/TL-2026-2765 #ThreatIntel #CornFlake #ChocoShell #FruitStone
September 29, 2026 at 12:10 PM
Midnight Blizzard used Claude to auto-rebuild malware until it slipped past every AV signature. https://intel.threadlinqs.com/threat/TL-2026-2446 #ThreatIntel #CornFlake #ChocoShell #FruitStone
September 11, 2026 at 1:40 PM
August 3, 2026 at 9:42 PM
Hijacked hotel Wi-Fi captive portals pushed fake update pages that installed CornFlake RAT, stealing webcam, mic, keystrokes, cookies, and passwords. Microsoft linked the campaign to CaptiveCrunch and Storm-2945. #CornFlake #CaptiveCrunch
Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware
Microsoft says hijacked hotel Wi-Fi captive portals were used to push a fake browser or OS update that delivered CornFlake, a RAT capable of stealing webcam images, microphone audio, keystrokes, cookies, and passwords. The activity, tracked as CaptiveCrunch and attributed by Microsoft to Storm-2945, also used device code phishing and ChocoShell...
www.hendryadrian.com
August 1, 2026 at 10:45 AM
#milkbar #cornflake #cereal #cookies #marshmallow Milk Bar Cornflake Cookies
June 2, 2025 at 6:47 AM
Russian SVR Hackers Hijack Hotel Wi-Fi Networks to Spy on Corporate Travelers
#captivecrunch #chocoshell #cornflake #darkhotel #device-codeAuthentication #microsoft365 #midnightBlizzard #reliaquest #storm-2945 #svr
#nile1
Russian SVR Hackers Hijack Hotel Wi-Fi Networks to Spy on Corporate Travelers
Russian state-backed cyber-espionage group Midnight Blizzard has compromised hotel and conference center Wi-Fi networks across several countries, using
nile1.com
August 4, 2026 at 2:54 PM
Hackers hijack hotel Wi-Fi to push fake updates, installing CornFlake malware that spies on travelers. Stay cautious. #CyberSecurity #HotelWiFi #Malware #CornFlake #APT29 #TravelSecurity thedailytechfeed.com/hijacked-hot...
August 1, 2026 at 6:40 AM
Time to try a big cookie. This limited edition is a spin on cereal and milk, yes actual cornflakes. Let's try the most breakfast cookie ever.
Sainsbury's - £2.25
youtu.be/NAWMIrskSro
#SainsburysTasteTheDifferenceCerealAndMilkCornflakeCookies #WhiteChocolate #Cornflake #Cookies #Review
December 22, 2025 at 12:39 PM
~Mandiant~
UNC5774 deploys CORNFLAKE.V3 backdoor via UNC5518's ClickFix lures for recon and credential harvesting.
-
IOCs: 138. 199. 161. 141, 159. 69. 3. 151, varying-rentals-calgary-predict. trycloudflare. com
-
#CORNFLAKE #Malware #ThreatIntel
CORNFLAKE.V3 Backdoor Analysis
cloud.google.com
August 20, 2025 at 4:02 PM
Storm-2945 hijacks hotel Wi-Fi to drop dual malware - ChocoShell infostealer + CornFlake Go RAT. https://intel.threadlinqs.com/threat/TL-2026-1857 #ThreatIntel #CornFlake #ChocoShell #Storm
August 4, 2026 at 7:37 AM
SVR-aligned hackers hijack hotel Wi-Fi, deploy CornFlake RAT + ChocoShell to steal M365 tokens. https://intel.threadlinqs.com/threat/TL-2026-1853 #ThreatIntel #CornFlake #ChocoShell #FruitStone
August 4, 2026 at 4:46 AM
Hotel Wi-Fi is now the initial access vector - Storm-2945 forges DNS to steal MFA-approved M365 tokens. https://intel.threadlinqs.com/threat/TL-2026-1808 #ThreatIntel #CornFlake #ChocoShell #FruitStone
August 1, 2026 at 3:12 PM