Manchester Airports Group isn't the only org doing this - I've been monitoring Fulcrumsec, they're mass getting .js files and running them through automated credential scanners.
No, it isn't an GenAI Mega Cyber attack - they're just looking for simple errors, harvesting data and then blackmailing the orgs.
Kevin Beaumont
npub1lc…6lcye
2026-09-01 10:54:57 UTC
in reply to nevent1q…lzck
Author Public Key
npub1lcc6wn885u6k395x5j5tmdm94r6dh9zajxm8gyk82pv2s2j3el7sc6lcyePublished at
2026-09-01 10:54:57 UTCEvent JSON
{
"id": "eb41ef426dd1e543865385154de238fe4619df1f2343d332bbd978684eb423b0",
"pubkey": "fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd",
"created_at": 1788260097,
"kind": 1,
"tags": [
[
"proxy",
"https://cyberplace.social/@GossiTheDog/117195413749595576",
"web"
],
[
"p",
"fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd"
],
[
"e",
"10eb3fa3b93f1c9b8232c1280d6978117e01786d7ca72b138750f9ac8d11e26e",
"",
"root",
"fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd"
],
[
"e",
"eb88d80061d4de05cf24253b1a3534536efdc95e1f01facedc783306a3f08daf",
"",
"reply",
"fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd"
],
[
"proxy",
"https://cyberplace.social/users/GossiTheDog/statuses/117195413749595576",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://cyberplace.social/users/GossiTheDog/statuses/117195413749595576",
"pink.momostr"
],
[
"-"
]
],
"content": "Manchester Airports Group isn't the only org doing this - I've been monitoring Fulcrumsec, they're mass getting .js files and running them through automated credential scanners. \n\nNo, it isn't an GenAI Mega Cyber attack - they're just looking for simple errors, harvesting data and then blackmailing the orgs.",
"sig": "399d05408bc53fb9d6f30644578996db91c6537aed0d53aa4880ca480750b9477f97b97e09686e128b1978d853e668c31c8dd940cc199b591330c2d036cdb8c8"
}