🎯 Exfiltration Over Web Service

The items that name it 5

• Passkey-themed social engineering leads to identity and cloud compromise
  writeup2026-09-09

  High-volume cloud data access and automated Python-based activity used for rapid collection and exfiltration.

• Numbat
  repo2026-09-05
• Anthropic's Fever Dream: Claude's package that stole real keys
  writeup2026-07-31

  POSTs stolen data as JSON to a hardcoded, unauthenticated Pipedream webhook URL (hxxps://enqqnvvtgrnyl[.]x[.]pipedream[.]net/).

• Socket: 11 Malicious NuGet Tools Pose as Game Cheats
  writeup2026-07-15

  Telemetry, licensing state, and inventory data exfiltrated to Google Sheets; screenshots exfiltrated via Telegram

• BufferZoneCorp Malicious Gems & Go Modules
  writeup2026-05-06It is written here as Exfiltration Over Web Service: Exfiltration Over Webhook.