#unit-42
-
Three Attacks on Google Password Manager Let Attackers Hijack Passkey Accounts
Unit 42 researchers describe three ways malware running with ordinary user privileges on Windows can log into a victim's passkey-protected accounts — with no fingerprint, no PIN and no on-screen prompt of any kind.
-
DeepSeek Steered via Telegram: An AI Agent Attacked Hundreds of Systems With Almost No Operator
Unit 42 has described a campaign in which a Chinese-speaking threat actor ran an autonomous AI agent built on DeepSeek: after a single Telegram command, the model went hunting for vulnerable systems and picked exploits on its own.