Resources & Insights
John Rainier Navato
3 articles
-
Blog從 LiteLLM 到 Telnyx：TeamPCP 攻擊戰術轉型，威脅範圍再擴大
TeamPCP 的攻擊行動不再侷限於 LiteLLM，將 Telnyx Python SDK 與隱匿的 WAV 惡意檔案結合，竊取 Linux、macOS 和 Windows 的登入憑證。
March 30th, 2026 6 minJohn Rainier Navato
Read article -
BlogYour AI Gateway Was a Backdoor: Inside the LiteLLM Supply Chain Compromise
TeamPCP orchestrated one of the most sophisticated multi-ecosystem supply chain campaigns publicly documented to date. It cascaded through developer tooling and compromised LiteLLM and exposed how AI proxy services that concentrate API keys and cloud credentials become high-value collateral when supply chain attacks compromise upstream dependencies.
March 26th, 2026 26 minPeter Girnus, Deep Patel, Simon Dulude, Ashish Verma…
Read article -
Blog收到熟人傳來的 ZIP 壓縮檔？小心 WhatsApp 新病毒「SORVEPOTEL」正在竊資料！
TrendAI™ Research 發現了一個正在利用 ZIP 附件檔案並經由 WhatsApp 散布的惡意程式攻擊行動。惡意程式一旦執行，就會建立常駐機制，然後經由被駭入的 WhatsApp 帳號將自己複製並傳送給受害者的聯絡人。
October 3rd, 2025 15 minJeffrey Francis Bonaobra, Maristel Policarpio, Sophia Nilette Robles, Cj Arsley Mateo…
Read article