Infoblox traces Help TDS tech support scams to Hotejka, an apparent ROI777 rebrand
Infoblox ties the Help TDS traffic distribution system, active since at least 2017, to a Russian-language affiliate program called Hotejka. The Hacker News reports the scams run on more than 20,000 Cloudflare Pages domains and aim to put remote desktop tools on victims' machines.
Reality
- Evidence58
- Adoption50
- Hype gap+10
- Incentives45
- Confidence62
ICANN will name who applied for 1,600-plus new top-level domains on October 7
ICANN's first open round for new top-level domains since 2012 drew more than 1,600 applications, according to Wired. The list stays private until October 7, the first day brand teams can see who wants their name or the word for what they sell.
Reality
- Evidence45
- Adoption50
- Hype gap+10
- Incentives60
- Confidence50
Bricks & Minifigs cites Google Drive logs to unmask whoever runs The BAM Map
Bricks & Minifigs sued the anonymous operators of The BAM Map after filing two copyright takedowns over internal documents the site published. Its complaint swaps copyright for trade-secret and contract claims that point at someone inside BAM's own franchise network.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap
- Not scored
- Incentives70
- Confidence35
buildOne report1 publisher Certificate transparency logs leak bucket names before the first API call
Block Public Access stops anonymous reads. It does nothing about the naming scheme an attacker has already rebuilt from your public TLS certificates, and that reconstruction leaves no log behind.
Reality
- Evidence46
- Adoption55
- Hype gap+10
- Incentives35
- Confidence45
Island says the kit relays Microsoft 365 sign-ins behind genuine Docusign envelopes and legitimate Microsoft or Google redirects, leaving sender reputation nothing to grade.
Reality
- Evidence60
- Adoption58
- Hype gap+18
- Incentives74
- Confidence62
buildOne report1 publisher Grok built its own prompt injection: the filter never saw the payload
Adversa says it hid data-exfiltration instructions in AES-256-GCM ciphertext and let Grok decrypt them in its own Python sandbox. The plaintext version of the same attack was refused.
Reality
- Evidence42
- Adoption20
- Hype gap+22
- Incentives68
- Confidence44
buildOne report1 publisher An OAuth login now lets Claude rewrite, or delete, your live ElevenLabs voice agent
The hosted MCP connector turns model-cost comparison into a chat query, and turns change management into a confirmation screen that reports approval rather than correctness.
Reality
- Evidence42
- Adoption20
- Hype gap+12
- Incentives58
- Confidence48