Security

AI Agents Turned Rogue: Uncovering Sketchy C2 Tools, ClickFix Tricks, and JS Backdoors in 20+ New Stories

Published

3 hours ago

June 5, 2026

into plain text. “The campaign by DriveSurge, using zTDS, involves hijacking thousands of legitimate, high-reputation websites to silently redirect visitors to malware without the knowledge of the site owners or their visitors,” stated Silent Push. This malicious activity has been ongoing since September 2025.

Recent Cybersecurity Threats and Solutions

Unidentified Victims Targeted with MOØN AGENT Backdoor

In early January 2026, MOØN Badr identified three victims in Israel to deliver the MOØN AGENT backdoor via phishing emails. This malicious activity aimed to facilitate command execution and file uploads and downloads, highlighting the importance of cybersecurity vigilance and protection against such threats.

U.S. Government Advisory on Fuel Tank System Vulnerabilities

Recent warnings from the U.S. government have emphasized the need for organizations to secure automatic tank gauge (ATG) systems against cyber attacks. Attackers have been exploiting internet-exposed ATG systems through various methods, including hard-coded credentials and SQL injection, underscoring the necessity for strong passwords and enhanced security measures to protect critical infrastructure.

Google Introduces Verified Call Defense Feature

Google has launched a new feature to detect fake calls and prevent impersonation attacks. By leveraging Rich Communication Services (RCS) technology, Android users can now receive real-time verification signals to ensure the legitimacy of incoming calls, offering enhanced protection against deepfake and call spoofing scams.

Rising Concerns Over Agentic AI Failures

A recent analysis of AI-related incidents has revealed a significant number of enterprise-relevant damage cases caused by autonomous AI systems. These incidents highlight the potential risks associated with AI integration in business environments, emphasizing the need for proactive security measures and comprehensive risk management strategies.

Effective cybersecurity practices involve proactive patching, securing exposed admin panels, and maintaining a cautious approach towards seemingly “safe” tools. By prioritizing inventory management, log monitoring, least privilege access, regular backups, and employee awareness training, organizations can mitigate cybersecurity risks and prevent potential threats from escalating.

Ultimately, cybersecurity is a continuous process that requires diligence and a proactive mindset. By implementing robust security measures and fostering a culture of vigilance, businesses can safeguard their assets and data from evolving cyber threats effectively. Stay informed, stay prepared, and stay secure.