حوادث أمن الذكاء الاصطناعي: Microsoft 365 mailboxes and phishing targets
ملف موثّق واحد كانت فيه Microsoft 365 mailboxes and phishing targets الهدف أو المنصة المُستغلة. له رابط دائم ومصادر أولية وصيغة استشهاد جاهزة.
حسب النوع · المصطلحات
الكلتصيّد بالذكاء الاصطناعيسلسلة توريد الذكاء الاصطناعيبرمجيات خبيثة بمساعدة الذكاء الاصطناعياختطاف الوكلاءاحتيال بالتزييف العميقاختطاف نماذج اللغةتسريب نماذج وبياناتحقن الأوامرعمليات دول بالذكاء الاصطناعي
حسب الدولة
الإماراتالأرجنتينالنمساأستراليابنغلاديشالبرازيلتشيليالصينكولومبياألمانيامصرإسبانيافنلندافرنساالمملكة المتحدةGHGRهونغ كونغإندونيسياأيرلنداإسرائيلالهندIQإيطالياالأردناليابانكينياكوريا الجنوبيةKWالمكسيكماليزيانيجيرياهولنداالنرويجنيوزيلنداPEالفلبينباكستانQAروسياالسويدسنغافورةتايلاندتركياتايوانأوكرانياالولايات المتحدةUYUZفيتنامجنوب أفريقياعالمي
حسب الشركة
17 victims incl. US and Australian healthcare, UK industry208 investors worldwide300+ organizations' developers85+ organisations listed on FunkSec leak siteAadhaar holders, DigiLocker and digital lendersAbout 50 organisations across six sectors worldwideAI vendors' evaluation sandboxes and API keysAmazon Q Developer extensionAn organisation in Southeast AsiaAndroid users; Hugging Face CDNAndroid users outside Google PlayAnthropic ClaudeAnthropic Claude and MiMo end users' dataAnthropic Claude Code (before 2.1.64)Anthropic Claude Code CLIAnthropic Claude Code / developersAnthropic Claude Mythos PreviewAnthropic Claude Opus 4.6 and 4.7 reasoning outputsAnthropic mcp-server-gitAntigravity IDE userApps generated by the Lovable AI app builderArgentine Facebook users; YPF and spokesman Manuel AdorniArgentine social media usersAsana MCP server customersAustralian retail investorsAviation, defence, telecom and government in US and MideastAWS accounts of organizations publishing to Hugging Face and code hostsBanco de Credito del Peru customersBangladeshi online shoppersBanks and crypto exchanges' KYC checksBase44 (Wix) AI app platformBerriAI LiteLLM proxyBrazilian consumersBusinesses targeted by phishing and BECBuyers' victims via ransomware-as-a-serviceChatGPT Gmail connectorChilean social media users; President Gabriel BoricClaude Opus 4.8 and another US lab's frontier modelCline CLI usersCloud and AI API account holders (OpenAI, AWS, Azure)Cloud environment of an unnamed organisationCodeway Chat & Ask AIColombian social media users; Mayor Federico GutierrezComfyUI image-generation servers; Rubick.ai platformCompromised cloud tenant and its third-party credentialsCompromised systems in the actor's intrusion campaignCopilot Studio, Salesforce AgentforceCorporate cloud tenantsCryptocurrency and intrusion targets of North Korean groupsCryptocurrency exchange customersCursor AI code editorCursor AI code editor (2.x)Cursor AI editor users on macOSCursor IDE users installing Solidity extensionsCustomers buying discounted Claude accessDating-app users in Taiwan, Singapore, Malaysia and the USDeepSeekDeepSeek chat and API servicesDevelopers and crypto firms targeted by DPRK luresDevelopers installing MCP servers via npxDevelopers integrating the DeepSeek APIDevelopers running Ray AI compute clustersDevelopers using Alibaba Cloud AI Labs servicesDevelopers using JetBrains IDE AI assistant pluginsDevelopers using the @mastra AI agent frameworkDevelopers with GitHub and npm tokensDigital yuan app users in mainland ChinaDr. Marie Faith Sagun-Villarta, PampangaDutch banks and rental applicantsElderly residents of AtticaElderly Tokyo residentsEmbedded devices, TP-Link firmware and OFTP implementationsEnterprise email usersEuropean political parties, media, think tanks, SaaS firmsExposed LiteLLM, Ollama, Gotenberg and Gitea serversExposed Ollama serversExposed Ollama, vLLM and MCP endpointsExposed Open WebUI instancesFintech and crypto companiesFlowise AI agent builderFrench public and private entitiesFrench savers over 50 and companiesFrontier model providers' account and billing controlsGamers downloading a trojanized gaming toolGerman Bundestag election candidates and votersGhanaian social media usersGitHub Copilot ChatGitHub Copilot in Visual Studio and VS CodeGitLab Duo AI assistantGoogle Cloud Vertex AI Agent EngineGoogle Gemini assistant and Google Home integrationsGoogle Gemini CLIGoogle Gemini (Cloud Assist, Search, Browsing Tool)Google Gemini Enterprise and Vertex AI SearchGoogle Gemini for Workspace (Gmail summaries)Google Gemini / multiple sectorsGovernment bodies in Uzbekistan, Turkmenistan and KazakhstanGrafana AI assistantHealthcare, government, emergency servicesHugging FaceHugging Face Hub users loading PyTorch modelsHugging Face users downloading OpenAI releasesImmigrants in Finland; Finnish PoliceIndian Facebook users; Finance Minister Nirmala SitharamanIndian retail investors; impersonated market analystsIndividuals targeted by doxing and remote-access malwareIndonesian social media users across 20 provincesIndonesian TikTok users; Governor Khofifah Indar ParawansaInternet-exposed Open WebUI deploymentInvestors in Austria, Germany, Italy, Spain, UK and CanadaIraqi government officialsIrish consumersIsraeli banks and about 120 identity theft victimsIsraeli retail investorsItalian business executivesJapanese internet users in a teen hacking chat groupJapanese residents called from a Kuala Lumpur call centreJob seekers in Eastern European countriesJordanian citizens; impersonated public figuresKenyan crypto buyersKenyan public; President William RutoKuwaiti bank customersLangflow AI agent workflow serversLangflow AI pipeline serversLangflow serversLebanese singer Haifa WehbeLenovo Lena customer support chatbot (GPT-4 based)Linux cloud environmentsLinux IoT devices across 17 architecturesLiteLLM proxies before 1.84.0 exposing MCPLitigants with pending court cases in Sao Paulo stateLLM-based malware analysis pipelinesLovable projects created before November 2025Malaysian retail investorsMarimo Python notebook serversMcDonald's / Paradox.aiMcKinsey Lilli AI platformMercor; clients Meta, OpenAI, AnthropicMeta AI account-recovery assistant / InstagramMeta AI app usersMeta AI chatbotMeta internal systemsMexican bank customersMexican Facebook users; President Claudia SheinbaumMexican tax authority, electoral institute, state governmentsMicrosoft 365 CopilotMicrosoft 365 Copilot Chat customersMicrosoft 365 Copilot enterprise customersMicrosoft 365 Copilot Enterprise SearchMicrosoft 365 mailboxes and phishing targetsMicrosoft 365 users, UPS customers, Aave wallet holdersMicrosoft Azure OpenAI customersMicrosoft Copilot and GitHub repository ownersMicrosoft Copilot PersonalMLflow tracking servers 3.3.0 to 3.14.xMoltbookMore than 320 companies employing remote IT contractorsMuddyWater phishing victims via compromised corporate emailMultinational firm (Singapore office)Music streaming platforms and royalty poolsNew Zealand retail investorsNigerian investor Fredrick Amaechi; Peter Obi's likenessNigerian social media usersNone confirmed; proof-of-concept or red team toolingNorwegian Tax AdministrationNotion AI agents (Notion 3.0)npm/PyPI AI developer packagesnpm users with Solana walletsNx build system usersOld Mutual customers and South African publicOmniGPT (multi-model AI chat aggregator)Open-source maintainers on PyPI, npm and Docker HubOpenAI API platform usersOpenAI ChatGPT code execution runtimeOpenAI ChatGPT Connectors (Google Drive, SharePoint)OpenAI ChatGPT Deep Research agent (Gmail connector)OpenAI ChatGPT (GPT-4o and GPT-5)OpenAI ChatGPT usersOpenAI Codex usersOpenAI Codex (web, CLI, SDK, IDE extension)OpenAI internal source repositoriesOpenAI models (via API)OpenClaw agent usersOpenClaw usersOrganisations with vulnerable WordPress servers and WindowsOwners of internet-connected security camerasPensioner in Mannheim/Heidelberg areaPerplexity Comet AI browserPerplexity Comet, Copilot in Edge, Gemini in ChromePhishing and credential-theft victims of subscribersPhishing, BEC and ransomware victims of subscribersPindrop Security (hiring process)postmark-mcp usersPotential phishing and malware victims worldwidePresident Bola Tinubu; Nigerian public discoursePrivate individual (53-year-old interior designer)Private investor in Lichtenberg, SaxonyPublic administration employees' Exchange and OWA accountsPyPI users; two real companies; an internet-facing appPyTorch Lightning usersQatarEnergy brand and Gulf investorsRay (Anyscale) AI compute clustersRetail investors across EuropeRetail investors in the UK and EuropeRetired couple in Pesaro; Prime Minister Meloni's likenessRetired engineer in SurreyRubyGems / RubyDoc.infoSaaStr production database on ReplitSalesforce AgentforceSalesloft Drift / Salesforce customersSelf-hosted llama.cpp inference serversSelf-hosted n8n AI workflow automation serversSelf-hosted Ollama deploymentsSelf-hosted OpenClaw (Clawdbot/Moltbot) instancesSenior US federal and state officials and their contactsServiceNow Now Assist AI Agents and Virtual Agent APISeven Hong Kong banks and stored-value facilitiesSingapore business professionalSmall business sites on Shopify, Wix, Squarespace, GoDaddySmithery.ai hosted MCP serversSocial-media users in Japan, China and English marketsSocial-media users targeted by investment and romance scamsSophos customer tenant; Sophos, CrowdStrike and Defender EDRSouth African publicSouth African retail investorsSouth African retail investors; FSCA and Nedbank brandsSouth Korean DeepSeek app usersSouth Korean defense-related researchersSouth Korean diplomatic entitiesSouth Korean men targeted onlineStarmangalsutra (Sky Gold and Diamonds)Supabase MCP server used from CursorSwedish consumersSwedish retail investorsSystems affected by recently published CVEsTaiwanese investment and semiconductor firms, US academiaTech, finance, chemical firms, government agenciesThai banks' KYC and account-opening systemsThai residents including beauty queen Charlotte AustinTrump International Hotel, Las VegasTurkish social media usersUAE social media usersUK mobile users recruited via SMS, WhatsApp and TelegramUkrainian/European defense, drone makers, North African governmentUkrainian government bodiesUkrainian organisationsUnnamed organisation running Langflow, MySQL and NacosUnnamed organisation under long-term espionage accessUruguayan social media users; President Yamandu OrsiUS companies hiring remote IT workersUS critical manufacturing, energy, water, chemical and foodUS defence and telecom infrastructureUS Fortune 500 technology companiesUS organizationsUS senator's office, journalists and researchersUS State Department / senior officialsUsers of an unnamed open-source web admin toolUsers of DORA, DONI, ROMI, LUMA and other dating appsUsers of Google, Microsoft, Anthropic, Amazon and OpenAI AIUsers searching for OpenClaw downloadsVercel / Context.aiVictims of investment, romance and impersonation scamsVidoc Security Lab (hiring developers in Poland)Vietnamese business executives and officialsVisa applicants in seven countriesVS Code, Cursor and Windsurf usersVS Code users of AI coding assistant extensionsVyro AI (ImagineArt, Chatly, Chatbotx apps)Web3 and crypto executives and blockchain developersWestern companies hiring remote developersWestern employers hiring remote IT staffWestern social-media users organising anti-China protestsWindows and Linux systemsWindows hosts of unknown victimsWindows hosts targeted by the proof-of-concept frameworkWindows systemsWindows users targeted by the group's malwareWuhan MCN agency's official account and company registrationxAI Grok usersxAI private and fine-tuned LLMsxAI private LLMs including grok-4-0709