Data Exfiltration

Agentic AI: The Data Exfiltration Risk Hiding Inside Your AI Agent

Agentic AI is creating unsupervised data exfiltration paths that traditional security tools struggle to detect. This blog examines the attack surface and how to address it.

CamoLeak: How GitHub Copilot Became An Exfiltration Channel

CamoLeak (CVE-2025-59145) turned GitHub Copilot into a silent data exfiltration channel via prompt injection and GitHub's own image proxy. CVSS 9.6.

Venom Stealer Turns ClickFix Into a Full Exfiltration Pipeline

BlackFog analyzes Venom Stealer, a new MaaS infostealer that uses ClickFix delivery to launch an automated exfiltration pipeline covering credential theft, wallet cracking, and fund sweeping.

LotAI: How Attackers Weaponize AI Assistants for Data Exfiltration

What happens when attackers use your approved AI tools as a data exfiltration channel? New research reveals how the LotAI technique turns Copilot and Grok into covert C2 relays.

Steaelite RAT Enables Double Extortion Attacks from a Single Panel

Steaelite is a newly emerging RAT that unifies credential theft, data exfiltration, and ransomware in a single web panel, accelerating double extortion attacks.

ClawdBot and OpenClaw: When Local AI Becomes A Data Exfiltration Goldmine

ClawdBot stores API keys, chat histories, and user memories in plaintext files, and infostealers like RedLine, Lumma, and Vidar are already targeting it.

Prompt Poaching: How Fake ChatGPT Extensions Stole 900k Users’ Data

Two fake AI extensions hit 900k Chrome users, stealing chats, code and data – a stark example of Prompt Poaching.

Lotus C2 – A New C2 Framework Sold as a Cybercrime Kit

Learn how Lotus C2 enables credential theft, data exfiltration, and mass attacks, blurring red team and cybercrime lines.

The Void: A New MaaS Infostealer Targeting 20+ Browsers

Find out how Model Context Protocol (MCP) could be abused as a covert channel for data theft: five real risks, examples, and mitigations.

How MCP Could Become a Covert Channel for Data Theft

Find out how Model Context Protocol (MCP) could be abused as a covert channel for data theft: five real risks, examples, and mitigations.

Why do Businesses Need Advanced Enterprise DLP Solutions?

Enterprise DLP systems play a key role in protecting businesses from both deliberate cyberattacks and accidental data breaches. Here's why all firms need one.

DNS Exfiltration: How Hackers Use Your Network to Steal Data Without Detection

Learn how DNS exfiltration works and why this method of data theft often goes undetected.