John Rainier Navato
4 articles
-
BlogTeamPCP’s Telnyx Attack Marks a Shift in Tactics Beyond LiteLLM
Moving beyond their LiteLLM campaign, TeamPCP weaponizes the Telnyx Python SDK with stealthy WAV‑based payloads to steal credentials across Linux, macOS, and Windows.
March 30th, 2026 6 minJohn Rainier Navato
Read article -
BlogYour AI Gateway Was a Backdoor: Inside the LiteLLM Supply Chain Compromise
TeamPCP orchestrated one of the most sophisticated multi-ecosystem supply chain campaigns publicly documented to date. It cascaded through developer tooling and compromised LiteLLM and exposed how AI proxy services that concentrate API keys and cloud credentials become high-value collateral when supply chain attacks compromise upstream dependencies.
March 26th, 2026 26 minPeter Girnus, Deep Patel, Simon Dulude, Ashish Verma…
Read article -
BlogMalware Autopropagável se Espalha Via WhatsApp, Alvo: Usuários Brasileiros
A TrendAI™ Research identificou uma campanha ativa se espalhando via WhatsApp através de um anexo de arquivo ZIP. Quando executado, o malware estabelece persistência e sequestra a conta do WhatsApp comprometida para enviar cópias de si mesmo para os contatos da vítima.
October 3rd, 2025 15 minJeffrey Francis Bonaobra, Maristel Policarpio, Sophia Nilette Robles, Cj Arsley Mateo…
Read article -
BlogAgenda Ransomware Group Adds SmokeLoader and NETXLOADER to Their Arsenal
During our monitoring of Agenda ransomware activities, we uncovered campaigns that made use of the SmokeLoader malware and a new loader we've named NETXLOADER.
May 7th, 2025 13 minJacob Santos, Raymart Yambot, John Rainier Navato, Sarah Pearl Camiling…
Read article