ThreatsDay Bulletin: WhatsApp Hijacks, MCP Leaks, AI Recon, React2Shell Exploit and 15 More Stories

ThreatsDay Bulletin: WhatsApp Hijacks, MCP Leaks, AI Recon, React2Shell Exploit and 15 More Stories

This week’s ThreatsDay Bulletin highlights how cyber attackers continuously adapt by modifying familiar tools and tactics, making the threat landscape more dynamic. Key incidents include a large international scam ring, emerging modular info stealers, and increased exploitation of vulnerabilities like React2Shell. #Eurojust #SantaStealer #React2Shell

Keypoints

    <li Attackers are reshaping old malware tools and tactics to stay ahead of defenses.

    <li An international scam ring in Europe was dismantled, arresting 12 suspects involved in defrauding over €10 million.

    <li A new modular info stealer called SantaStealer exfiltrates sensitive data and operates via Telegram.

    <li Bulletproof hosting services remain resilient, quickly migrating operations after takedowns.

    <li Exploitation of the React2Shell vulnerability is spreading malware, including ransomware like Weaxor.

Read More: https://thehackernews.com/2025/12/threatsday-bulletin-whatsapp-hijacks.html