It remains unclear how long the IT services giant's systems were infiltrated and just how the cyberattack unfolded.

The group uses pretty standard open source tooling and social engineering to burrow into high-level government agencies across the globe.

Credential-stealing emails are getting past artificial intelligence's "known good" email security controls by cloaking malicious payloads within seemingly benign emails. The tactic poses a significant threat to enterprise networks.

Machine-learning model platforms like Hugging Face are suspectible to the same kind of attacks that threat actors have executed successfully for years via npm, PyPI, and other open source repos.

On the Dark Web, stolen secrets are your enemy, and context is your friend.

Interpol assisted in the operation, in which analysts identified Grandoreiro group members by analyzing and matching malware samples.