Weekly Security Roundup: KelpDAO Exploit, Malicious npm Packages, Active RCEs and More
Summary
This week’s roundup covers a $290M KelpDAO exploit that LayerZero said may be linked to TraderTraitor, malicious npm packages, active RCEs, AI-agent prompt injection, stealth techniques, and other security developments.
Key points
- LayerZero said North Korean actors tracked as TraderTraitor may have been behind the $290M KelpDAO exploit; KelpDAO said LayerZero-hosted RPC nodes were compromised. Arbitrum temporarily froze 30,766 ETH connected to the exploit.
- Malicious npm packages were found stealing data, adding SSH backdoors, and delivering XWorm or minirat; some @fairwords packages also attempted to spread to other npm packages and PyPI.
- VulnCheck reported exploitation of MajorDoMo flaws CVE-2026-27175 and CVE-2026-27174, and an ActiveMQ Jolokia RCE chain involving CVE-2026-34197 and CVE-2024-32114.
- Forcepoint reported 10 indirect prompt-injection payloads targeting AI agents, designed to trigger actions such as financial fraud, data destruction, and API-key theft.
- Cisco Talos described macOS techniques using Remote Application Scripting and Spotlight metadata to stage payloads; CYFIRMA reported phishing-delivered abuse of a signed Intel utility for stealthy .NET execution.
- The U.K. NCSC introduced the SilentGlass display-protection device and endorsed passkeys as the default authentication choice for digital services.
- Infrawatch identified ProxySmart control panels linked to mobile proxy infrastructure across 17 countries; ProxySmart disputed the characterization of its service as a SIM farm.
Article Details
- Event Type
- Weekly cybersecurity incident roundup covering a reported DeFi theft, active vulnerability exploitation, software supply-chain malware, phishing, espionage and ransomware activity, privacy concerns, and security policy developments.
- Impact
- The KelpDAO exploit resulted in reported losses of $290 million; LayerZero linked the attack to TraderTraitor, while KelpDAO said its own systems were not involved. Malicious npm packages were reported stealing data, installing SSH backdoors, and delivering remote-access malware. Active exploitation of MajorDoMo and Apache ActiveMQ flaws was reported, alongside phishing, ransomware activity, and other security and privacy risks.
Indicators of compromise
| Type | Indicator | Context |
|---|---|---|
| DOMAIN | fudcrypt[.]net | Domain for FUD Crypt, a cryptor-as-a-service platform marketed to deploy Windows executables using stealth and evasion techniques. |
MITRE ATT&CK
T1041 · Exfiltration Over C2 ChannelA report on indirect prompt injection describes covert exfiltration of data through a return channel to the attacker.T1059.004 · Unix ShellA compromised npm package reportedly fetched a shell script that downloaded and persisted minirat on macOS.T1098.004 · SSH Authorized KeysMalicious npm packages were reported adding an attacker public key to ~/.ssh/authorized_keys for SSH backdoor access.T1190 · Exploit Public-Facing ApplicationReported active exploitation of vulnerabilities in MajorDoMo and Apache ActiveMQ to achieve remote code execution.T1195.002 · Compromise Software Supply ChainMalicious npm packages and compromised legitimate packages were used to distribute malware and steal data.T1204.002 · Malicious FileThe reported phishing campaign used a disguised LNK file to execute IAStorHelp.exe.T1566.001 · Spearphishing AttachmentA reported campaign used phishing emails containing ZIP archives with an LNK file disguised as a PDF.
CVE
CVE-2024-32114apache · activemq; Apache Software Foundation · Apache ActiveMQVulnCheck said it’s seeing active exploitation of the Apache ActiveMQ Jolokia remote code execution chain that strings together CVE-2026-34197 and CVE-2024-32114.CVE-2024-57046Netgear · Dgn2200 firmwarethat have witnessed exploitation efforts include CVE-2025-22952, an SSRF in Elestio Memos, and CVE-2024-57046, an authentication bypass in NETGEAR DGN2200 routers.CVE-2025-22952Usememos · Memosstaged payload.” Other vulnerabilities that have witnessed exploitation efforts include CVE-2025-22952, an SSRF in Elestio Memos, and CVE-2024-57046, an authentication bypass in NETGEAR DGN2200 routers.CVE-2026-27174sergejey · MajorDoMois a critical command injection vulnerability that started seeing exploitation on April 13, CVE-2026-27174 allows unauthenticated remote code execution via the PHP console in the admin panel and was firstCVE-2026-27175sergejey · MajorDoMoWhile CVE-2026-27175 is a critical command injection vulnerability that started seeing exploitation on April 13, CVE-2026-27174 allows unauthenticated remote code execution via the PHP console in the admin panel and wasCVE-2026-34197Apache Software Foundation · Apache ActiveMQ; Apache Software Foundation · Apache ActiveMQ All; +2 moreVulnCheck said it’s seeing active exploitation of the Apache ActiveMQ Jolokia remote code execution chain that strings together CVE-2026-34197 and CVE-2024-32114.
People
Alexander HanffWeb privacy expert who reported that the Claude desktop app placed browser configuration files and pre-authorized browser interaction.Jacob BainesVulnCheck's Jacob Baines described the Apache ActiveMQ Jolokia vulnerability chain and its zero-credential remote code execution impact.Morgan RobertsonSecurity researcher who reported that many internet-connected Perforce P4 servers were misconfigured and exposed source code and sensitive files.
Threat Actors
0APTRansomware group reported to have leaked the Krybit operation's database, credentials, wallet information, encryption tokens, and an exfiltration inventory.HandalaNamed as an Iran-adopted hacktivist persona; DomainTools described it as part of a coordinated, MOIS-aligned cyber influence ecosystem.Homeland JusticeNamed as an Iran-adopted hacktivist persona; DomainTools described it as part of a coordinated, MOIS-aligned cyber influence ecosystem.Jade SleetLayerZero said the group may have been behind the KelpDAO exploit; this is reported attribution, not confirmed involvement.KarmaNamed as an Iran-adopted hacktivist persona; DomainTools described it as part of a coordinated, MOIS-aligned cyber influence ecosystem.KrybitRansomware group reported to have compromised 0APT's server, defaced its leak site, and published data and system files.Lazarus GroupThe article says Lazarus Group was linked to the $285 million theft from Drift Protocol; the source does not present this as confirmed attribution.
Malware
CloverPlusThe attack has been found to leverage a loader to deliver Gh0st RAT trojan and CloverPlus adware, an unwanted software designed to install advertising components and change browser behavior, such as startup pages andFormBookFormbook phishing surgeGh0st RATThe attack has been found to leverage a loader to deliver Gh0st RAT trojan and CloverPlus adware, an unwanted software designed to install advertising components and change browser behavior, such as startup pages andminirata $290M KelpDAO heist tied to TraderTraitor to widespread malicious npm packages deploying XWorm and minirat, active RCEs, AI prompt-injection attacks, and stealth execution techniques against trusted binaries andXWormrange from a $290M KelpDAO heist tied to TraderTraitor to widespread malicious npm packages deploying XWorm and minirat, active RCEs, AI prompt-injection attacks, and stealth execution techniques against trusted
Vendors
CiscoReports from Iranian media have claimed that hardware made by Cisco, Juniper, Fortinet, and MikroTik either rebooted or disconnected during recent attacks on Iran, despite the country being cut off from the globalClarifaiAccording to Reuters, AI company Clarifai said it has deleted 3 million profile photos taken from dating site OkCupid in 2014.FortinetReports from Iranian media have claimed that hardware made by Cisco, Juniper, Fortinet, and MikroTik either rebooted or disconnected during recent attacks on Iran, despite the country being cut off from the globalJuniper NetworksReports from Iranian media have claimed that hardware made by Cisco, Juniper, Fortinet, and MikroTik either rebooted or disconnected during recent attacks on Iran, despite the country being cut off from the globalMikroTikReports from Iranian media have claimed that hardware made by Cisco, Juniper, Fortinet, and MikroTik either rebooted or disconnected during recent attacks on Iran, despite the country being cut off from the globalProxySmartInfrawatch said that it identified 87 instances of ProxySmart control panels in 17 countries that are linked to at least 24 commercial proxy providers and 35 cellular providers.
Products
Apache ActiveMQVulnCheck said it’s seeing active exploitation of the Apache ActiveMQ Jolokia remote code execution chain that strings together CVE-2026-34197 and CVE-2024-32114.ClaudeThe Claude desktop app has been found granting itself permission to access web browser data, even if some browsers haven’t even been installed on a user’s computer, web privacy expert Alexander Hanff said.Elestio MemosOther vulnerabilities that have witnessed exploitation efforts include CVE-2025-22952, an SSRF in Elestio Memos, and CVE-2024-57046, an authentication bypass in NETGEAR DGN2200 routers.MajorDoMoActive exploitation includes critical RCEs in MajorDoMo and a zero-credential ActiveMQ Jolokia chain.NETGEAR DGN2200include CVE-2025-22952, an SSRF in Elestio Memos, and CVE-2024-57046, an authentication bypass in NETGEAR DGN2200 routers.Perforce P4a related development, security researcher Morgan Robertson revealed that almost three-quarters of Perforce P4 source code management servers connected to the internet are misconfigured and leaking source code andProxySmartInfrawatch said that it identified 87 instances of ProxySmart control panels in 17 countries that are linked to at least 24 commercial proxy providers and 35 cellular providers.SilentGlassNational Cyber Security Centre (NCSC) has unveiled a new technology called SilentGlass that’s designed to protect video connections from cyber attacks.TelegramTelegram under CSAM probe
Tools
FUD CryptThere is a new cryptor-as-a-service platform called FUD Crypt (fudcrypt[.]net).Metasploit Framework“CVE-2026-27174 saw exploitation that ended in a Metasploit php/meterpreter/reverse_tcp staged payload.” Other vulnerabilities that have witnessed exploitation efforts include CVE-2025-22952, an SSRF in Elestio Memos,ModemManagerModems are managed through ModemManager, an open-source USB dongle management tool.TerrariumA group of academics has released a hackable, modular, and configurable open-source framework called Terrarium for studying and evaluating decentralized LLM-based multi-agent systems (MAS).
Countries
BelarusA Belarus-based turnkey solution is assisting SIM farm operators in supporting cybercrime on an industrial scale.Iranmade by Cisco, Juniper, Fortinet, and MikroTik either rebooted or disconnected during recent attacks on Iran, despite the country being cut off from the global internet.UkraineThe European Union imposed sanctions on two pro-Russian organizations accused of spreading disinformation and supporting the Kremlin’s hybrid influence operations against Europe and Ukraine.United KingdomThe U.K. National Cyber Security Centre (NCSC) has unveiled a new technology called SilentGlass that’s designed to protect video connections from cyber attacks.United StatesThese arguments have found purchase in China, whose state media agency Xinhua called U.S.-made equipment the “real trojan horse.” The disclosure comes as DomainTools revealed that the various hacktivist personas adopted
Industries
Automotiveexposing intellectual property across more than a dozen sectors, including gaming, healthcare, automotive, finance, and government,” Robertson said.Decentralized financethat North Korean threat actors tracked TraderTraitor may have been behind the recent hack of decentralized finance (DeFi) project KelpDAO, resulting in the theft of $290 million.Gamingremotely; potentially exposing intellectual property across more than a dozen sectors, including gaming, healthcare, automotive, finance, and government,” Robertson said.Government“Already successfully deployed on Government estates, SilentGlass is now available for anyone to buy and use.Healthcarepotentially exposing intellectual property across more than a dozen sectors, including gaming, healthcare, automotive, finance, and government,” Robertson said.