🎯 Account Takeover

The items that name it 7

• Syrian Hacker Gets Prison Time in US After Over a Decade on the Run
  articleas techniques2026-10-31

  Agha took over the Associated Press Twitter account in 2013 and used it to post a fabricated report that President Barack Obama was hurt in two White House blasts

• Earliest Known PolinRider Malware Found in 2025 npm Packages
  writeupas classification.key entities2026-10-30
• Glassworm Hacks OVH Clouds CLI tool
  writeupas classification.key entities2026-10-19
• New research: malware in open source ecosystems surges 14x as attackers hijack trusted packages | Endor Labs
  articleas classification.key entities2026-10-12
• The Fraud Ecosystem: A Transition From Known Marketplaces to a Fragmented Environment
  articleas techniques2026-09-11It is written here as Account Takeover (ATO).

  Common technique across marketplaces; acquiring stolen or self-registered accounts that have already bypassed anti-fraud protections for rapid criminal deployment

• Compromised @injectivelabs/sdk-ts exfiltrates wallet keys through fake telemetry
  writeupas classification.key entities2026-07-09
• The Software Supply Chain Malware Landscape: January - May 2026
  articleas techniques2026-06-03It is written here as Account takeover (ATO).

  Threat actor gains control of a maintainer account or pipeline to compromise a legitimate package, inheriting the publisher's reputation, download history, and position in dependency trees; targets high-download packages; grew from below 10% of weekly threat reports in most of Q1, spiked with the Ma