Today's briefing opens with Operation DragonReturn, a China-linked espionage campaign targeting Indian taxpayers during filing season. Threat actors impersonating the Indian tax authority delivered spear-phishing emails containing a malicious ZIP archive that used DLL side-loading and steganography to install DcRAT — a full remote access trojan capable of keylogging, credential theft, and persistent surveillance. Infrastructure overlaps with Silver Fox, a Chinese cybercrime group with a documented history of tax-themed attacks on Indian targets.

Next, the FBI and Google jointly disrupted NetNut, a residential proxy botnet that silently conscripted millions of home routers and consumer devices — some arriving pre-compromised from grey-market suppliers — into criminal relay infrastructure used for password spraying, account takeover, advertising fraud, and DDoS operations. While the disruption is significant, historical patterns suggest operators will attempt to rebuild quickly.

The episode's most forward-looking story is BioShocking, a proof-of-concept demonstrating that prompt injection can manipulate agentic AI browsers into accessing authenticated repositories and exfiltrating SSH credentials. Researchers tested six mainstream agentic products; all six were vulnerable. Because these agents operate inside live sessions with inherited user permissions, a compromised agent becomes an account takeover vector — and most enterprises currently have no telemetry covering what their AI agents do inside those sessions.

Finally, LevelBlue's tracking of ValleyRAT highlights a converging playbook: DLL side-loading appearing across multiple independent campaigns targeting Chinese and Japanese speakers via fake LINE installers and salary-themed lures.

The through-line is trust — placed too early, at the wrong layer, with insufficient visibility. A YesWee production.

This episode includes AI-generated content.