Sable Index

Five companies just landed on Qilin’s dark-web hit list Colonial Hyundai, The Big Table Group, Nolan Consulting Group, Jouvet SAS and G&S Technologies have appeared on Qilin’s ransomware portal. Qilin’s next move could be a ransom deadline or data leak. @SableIndex | @SableIndexOTC

The Com-linked crypto ringleader pleads guilty Malone Lam pleaded guilty in Washington on September 8 to leading a cybercrime scheme that stole more than $245 million in cryptocurrency. Callers posed as Google and Gemini staff, tricked a wealthy investor into revealing access codes, and drained over 4100 bitcoin. Threat actor: Malone Lam. Court filings list his aliases as “King Greavys”, “King Greavy”, “Greavys”, “Kg”, “Anne Hathaway” and “$$$” - these are all names used by the same person. @SableIndex | @SableIndexOTC

UTA0560 exploited Chrome and Windows zero-days in one chain Chinese-linked threat actor UTA0560 targeted NGOs and European organisations with precision spear-phishing. Victims were sent to trusted websites where a reflective XSS flaw in Google Chrome helped launch the first stage of the attack. The chain then used CVE-2026-85046 in Chrome and CVE-2026-85880 in the Windows kernel to escape browser protections and execute malware silently. The combination allowed attackers to move from a booby-trapped web page to deeper system access without obvious user interaction. @SableIndex | @SableIndexOTC

Suspected TON NFT exploit may leave buyers without assets One seller is receiving GRAM from automatic buy orders while keeping the NFT, potentially leaving buyers without the asset they paid for. The wallet balance reportedly rose from about 300 to 1,400 TON within minutes and is still increasing. The reported wallet is visible on TONViewer. The exploit and any losses remain unverified. @SableIndex | @SableIndexOTC