--- title: Human-Centric Attacks and Supply Chain Risks Demand Urgent Action description: This week’s cyber landscape highlights the critical importance of patching, vigilance, and staff awareness to defend against sophisticated global threats targeting Australian organisations. image: https://digitalfrontierpartners.com.au/hubfs/AI-Generated%20Media/Images/The%20image%20depicts%20a%20dark%20ominous%20digital%20landscape%20filled%20with%20intricate%20lines%20of%20code%20and%20various%20cybersecurity%20icons%20In%20the%20foreground%20a%20stylized%20re-1.png --- [Skip to content](https://digitalfrontierpartners.com.au/news/human-centric-attacks-and-supply-chain-risks-demand-urgent-action#main-content) [![](https://digitalfrontierpartners.com.au/hs-fs/hubfs/DFP-Logo.webp?width=1200&height=342&name=DFP-Logo.webp)](https://www.digitalfrontierpartners.com.au/) - [Services](https://digitalfrontierpartners.com.au/news/human-centric-attacks-and-supply-chain-risks-demand-urgent-action#products) Show submenu for Services - [Cybersecurity](https://digitalfrontierpartners.com.au/cybersecurity-services-24/7-threat-monitoring-and-response-dfp) - [Due Diligence](https://digitalfrontierpartners.com.au/technology-due-diligence-product-assessment-digital-frontier-partners) - [Enterprise AI](https://digitalfrontierpartners.com.au/enterprise-ai) - [Technology Advisory](https://digitalfrontierpartners.com.au/technology-advisory-services-digital-frontier-partners) - [Workforce Optimisation](https://digitalfrontierpartners.com.au/workforce-optimisation-ai-driven-cost-control-and-performance-dfp) - Resources Show submenu for Resources - [News](https://digitalfrontierpartners.com.au/news/tag/news) - [Case Studies](https://digitalfrontierpartners.com.au/news/tag/case-study) - [Research](https://digitalfrontierpartners.com.au/news/tag/research) - [Weekly Cyber Reports](https://digitalfrontierpartners.com.au/news/tag/weekly-cyber-reports) - [About](https://digitalfrontierpartners.com.au/news/human-centric-attacks-and-supply-chain-risks-demand-urgent-action#about) Show submenu for About - [About Us](https://digitalfrontierpartners.com.au/about) - [Contact Us](https://digitalfrontierpartners.com.au/contact) Open main navigation Close main navigation - [Services](https://digitalfrontierpartners.com.au/news/human-centric-attacks-and-supply-chain-risks-demand-urgent-action#products) Show submenu for Services - [Cybersecurity](https://digitalfrontierpartners.com.au/cybersecurity-services-24/7-threat-monitoring-and-response-dfp) - [Due Diligence](https://digitalfrontierpartners.com.au/technology-due-diligence-product-assessment-digital-frontier-partners) - [Enterprise AI](https://digitalfrontierpartners.com.au/enterprise-ai) - [Technology Advisory](https://digitalfrontierpartners.com.au/technology-advisory-services-digital-frontier-partners) - [Workforce Optimisation](https://digitalfrontierpartners.com.au/workforce-optimisation-ai-driven-cost-control-and-performance-dfp) - Resources Show submenu for Resources - [News](https://digitalfrontierpartners.com.au/news/tag/news) - [Case Studies](https://digitalfrontierpartners.com.au/news/tag/case-study) - [Research](https://digitalfrontierpartners.com.au/news/tag/research) - [Weekly Cyber Reports](https://digitalfrontierpartners.com.au/news/tag/weekly-cyber-reports) - [About](https://digitalfrontierpartners.com.au/news/human-centric-attacks-and-supply-chain-risks-demand-urgent-action#about) Show submenu for About - [About Us](https://digitalfrontierpartners.com.au/about) - [Contact Us](https://digitalfrontierpartners.com.au/contact) - [Contact us](https://digitalfrontierpartners.com.au/contact) [Contact us](https://digitalfrontierpartners.com.au/contact) 13 January 2026, 9:48:41 am AEDT # Human-Centric Attacks and Supply Chain Risks Demand Urgent Action ![Picture of Digital Frontier Partners](https://digitalfrontierpartners.com.au/hs-fs/hubfs/500x%20DFP%20(3).png?width=50&name=500x%20DFP%20(3).png) [Digital Frontier Partners](https://digitalfrontierpartners.com.au/news/author/digital-frontier-partners) This week’s cyber landscape is a reminder that the weakest link is often not a piece of technology, but a moment of human trust. Attackers are blending technical exploits with social engineering, supply chain compromise, and legacy vulnerabilities—making vigilance, patch discipline, and staff awareness more critical than ever for Australian organisations. --- ### The Threats at the Gates Organisations globally—including in Australia—have faced a wave of sophisticated phishing and malware campaigns. North Korea’s Kimsuky group has ramped up “quishing” attacks, embedding malicious QR codes in phishing emails to bypass traditional defences. Russian APT28 continues credential harvesting via spoofed Outlook and Google login pages, while China-linked UAT-7290 has breached telecommunications firms by exploiting edge-device flaws and deploying Linux implants. The hospitality sector is being targeted by a new ClickFix campaign using fake Booking.com cancellation notices and a faux Blue Screen of Death to deliver the DCRat remote-access trojan. In Brazil, the Astaroth banking worm is spreading through compromised WhatsApp contact lists. Supply chain threats persist: attackers have slipped NodeCordRAT into npm libraries, hijacked Chrome extension namespaces to harvest ChatGPT conversations from over 900,000 users, and leveraged the React2Shell bug to deploy cryptominers and Mirai variants via the RondoDox botnet. Urgent patching is critical following active exploits of high-severity flaws, including MongoDB’s “MongoBleed” memory leak, HPE OneView RCE, Trend Micro Apex Central RCE, and multiple critical n8n automation-platform vulnerabilities. Newly disclosed deserialization weaknesses in popular Bluetooth chips and command-injection in unsupported D-Link DSL routers underscore the risks of legacy hardware. --- ### Critical Vulnerabilities and Exploits: The Crumbling Bridges - **VMware ESXi:** Attackers exploited three zero-days after breaching SonicWall VPN devices, enabling VM escape and hypervisor compromise. - **HPE OneView:** A critical unauthenticated RCE flaw allows full takeover of centralised IT infrastructure. - **Trend Micro Apex Central:** Unauthenticated attackers can load malicious DLLs to execute code as SYSTEM. - **n8n Workflow Automation:** Multiple RCE bugs allow unauthenticated remote code execution and full system control. - **MongoDB “MongoBleed”:** Zlib memory-leak vulnerability enables attackers to extract credentials and tokens from server memory. - **Legacy D-Link DSL Routers:** End-of-life routers remain open to remote command injection. - **Coolify Self-Hosted:** Eleven vulnerabilities enable command injection, auth bypass, and info disclosure. - **TOTOLINK EX200:** Firmware upload error triggers unauthenticated root-level telnet service. - **Cisco ISE & Snort:** XML parsing and DCE/RPC vulnerabilities patched. - **Veeam Backup & Replication:** Multiple RCE and privilege escalation flaws. - **npm Packages:** AdonisJS BodyParser and jsPDF path-traversal flaws. - **Hitachi Energy Asset Suite:** Java deserialization RCE in JasperReports. - **Kimwolf Android Botnet:** Over 2 million devices infected via exposed ADB services. Australian organisations should prioritise patch management, retire unsupported devices, enforce network segmentation, and monitor for signs of compromise. --- ### Malware and Botnet Campaigns: The Saboteurs Within - **Kimwolf Android Botnet:** Infected over two million devices by exploiting exposed ADB services and proxy networks. - **RondoDox Botnet:** Scanning more than 90,000 vulnerable Next.js servers for React2Shell, deploying cryptominers and Mirai variants. - **Boto Cor-de-Rosa:** Weaponises WhatsApp to spread the Astaroth banking trojan. - **PHALT#BLYX:** Targets hospitality with fake Booking.com cancellations and a fake BSOD to deliver DCRat. - **BlackCat Affiliates:** SEO poisoning tricks users into installing backdoor Trojans. - **NodeCordRAT:** Malicious npm packages install RATs and harvest credentials. - **VVS Stealer:** Obfuscated Python loader harvesting credentials from over a million browsers. - **State-Aligned Groups:** Deploying Hijack Loader, Remcos RAT, and Linux implants in telecom networks. Australian organisations should urgently secure exposed IoT endpoints, enforce multifactor authentication, and monitor network traffic for anomalous activity. --- ### Phishing and Social Engineering Techniques: Identity is the New Perimeter - **Kimsuky “Quishing”:** QR-code phishing to divert targets from secure environments. - **MuddyWater:** Spear-phishing with malicious Word documents to deploy Rust-based RAT. - **APT28:** Credential harvesting via spoofed login pages. - **Tycoon2FA:** Surge in domain-spoofed Office 365 attacks. - **PHALT#BLYX:** Fake Booking.com cancellation emails and faux BSOD. - **Callback-Style Phishing:** Emerging on Microsoft Teams. - **Deepfake Tools:** Undermining KYC checks. Mitigations should include enforcing multi-factor authentication, bolstering staff awareness of QR-code and domain-spoofing lures, and monitoring for anomalous login-page redirects. --- ### Data Breaches and Ransomware Incidents: What’s at Stake - **BreachForums:** Illicit-data marketplace breached, exposing 324,000 user accounts. - **Illinois Department of Human Services:** Misconfiguration left nearly 700,000 Medicaid and Medicare recipients’ personal details publicly accessible. - **ManageMyHealth (NZ):** Ransomware attack exfiltrated 108 GB of patient records, affecting up to 130,000 individuals. These breaches underscore ongoing vulnerabilities in public-sector and healthcare systems and the critical need for robust access controls and incident response measures. --- ### State-Sponsored and APT Cyber Operations: The Shadowy Figures - **Kimsuky (North Korea):** Deploying QR-code “quishing” in spear-phishing campaigns. - **China-Linked Actors:** Exploiting unpatched edge-device vulnerabilities and SonicWall VPNs to deliver VMware ESXi zero-day exploits. - **MuddyWater (Iran):** Custom Rust-based RATs via malicious VBA-macro documents. - **APT28 (Russia):** Credential-harvesting attacks against energy and policy bodies. - **UAT-7290 (China):** Implanting Linux malware to create relay nodes in telecom networks. Australian organisations should urgently patch known exploited vulnerabilities, enforce robust multi-factor authentication, and enhance monitoring for unusual remote-access-tool activity. --- ### Building a Resilient City: Business Actions 1. **Patch with Purpose:** Prioritise actively exploited flaws and track closure. 2. **Harden Identity:** Move to phishing-resistant MFA, enforce conditional access, and rotate high-risk tokens. 3. **Control the Supply Chain:** Maintain a live inventory, lock down CI/CD permissions, whitelist extensions, and scan for malicious packages. 4. **Segment and Monitor:** Isolate OT/IoT, restrict admin/API surfaces, deploy EDR with kernel integrity checks, and monitor cloud-storage and blockchain usage. 5. **Prepare for Failure:** Test ransomware playbooks, verify offline backups, and rehearse third-party breach response. --- ### Final Word: Human Factors and Patch Discipline Are Your Best Defence This week’s lesson is clear: attackers are exploiting both technology and human behaviour. Speed and discipline in patching, identity management, and supply chain oversight are now board-level concerns. The organisations that measure and improve these areas are the ones best positioned to withstand the next wave of cyber threats. [Weekly Cyber Reports](https://digitalfrontierpartners.com.au/news/tag/weekly-cyber-reports) ## Related posts [![](https://digitalfrontierpartners.com.au/hs-fs/hubfs/AI-Generated%20Media/Images/The%20image%20showcases%20a%20sleek%20modern%20boardroom%20filled%20with%20executives%20engaged%20in%20a%20serious%20discussion%20The%20large%20glass%20conference%20table%20is%20adorned%20with%20laptops%20and%20digital%20tablets%20displaying%20various%20cybersecurity%20dashboards%20and%20statistics%20A%20prominent%20sc-1.png?height=200&name=The%20image%20showcases%20a%20sleek%20modern%20boardroom%20filled%20with%20executives%20engaged%20in%20a%20serious%20discussion%20The%20large%20glass%20conference%20table%20is%20adorned%20with%20laptops%20and%20digital%20tablets%20displaying%20various%20cybersecurity%20dashboards%20and%20statistics%20A%20prominent%20sc-1.png)](https://digitalfrontierpartners.com.au/news/cyber-defence-why-this-weeks-threats-demand-executive-attention) ## [Cyber Defence: Why This Week's Threats Demand Executive Attention](https://digitalfrontierpartners.com.au/news/cyber-defence-why-this-weeks-threats-demand-executive-attention) 8 September 2025, 10:54:31 am AEST [Read more](https://digitalfrontierpartners.com.au/news/cyber-defence-why-this-weeks-threats-demand-executive-attention) [![](https://digitalfrontierpartners.com.au/hs-fs/hubfs/AI-Generated%20Media/Images/Ominous%20Cyber%20Threat%20Abstract%20Landscape.png?height=200&name=Ominous%20Cyber%20Threat%20Abstract%20Landscape.png)](https://digitalfrontierpartners.com.au/news/supply-chain-compromise-identity-exposure-and-expanding-infrastructure-risk) ## [Supply‑Chain Compromise, Identity Exposure and Expanding Infrastructure Risk](https://digitalfrontierpartners.com.au/news/supply-chain-compromise-identity-exposure-and-expanding-infrastructure-risk) 23 June 2026, 11:00:12 am AEST [Read more](https://digitalfrontierpartners.com.au/news/supply-chain-compromise-identity-exposure-and-expanding-infrastructure-risk) [![](https://digitalfrontierpartners.com.au/hs-fs/hubfs/AI-Generated%20Media/Images/Cybersecurity%20Threats%20in%20Digital%20Landscape.png?height=200&name=Cybersecurity%20Threats%20in%20Digital%20Landscape.png)](https://digitalfrontierpartners.com.au/news/ai-accelerated-exploitation-supply-chain-poisoning-and-identity-risk) ## [AI‑Accelerated Exploitation, Supply‑Chain Poisoning and Identity Risk](https://digitalfrontierpartners.com.au/news/ai-accelerated-exploitation-supply-chain-poisoning-and-identity-risk) 28 April 2026, 9:13:56 am AEST [Read more](https://digitalfrontierpartners.com.au/news/ai-accelerated-exploitation-supply-chain-poisoning-and-identity-risk) ###### Visit Us On: [linkedin-in icon](https://www.linkedin.com/company/digitalfrontierpartners/posts/?feedView=all) [Follow us on Facebook](https://www.youtube.com/watch?v=-BsUxioXzCk&t=6s) --- [![](https://digitalfrontierpartners.com.au/hs-fs/hubfs/DFP-Logo.webp?width=1200&height=342&name=DFP-Logo.webp)](https://digitalfrontierpartners.com.au/) Level 4, 350 Collins St, Melbourne VIC, Australia 3000 +61 [1800 288 817](https://www.google.com/search?q=digital+frontier+partners&oq=digital+&gs_lcrp=EgZjaHJvbWUqDwgAECMYJxjjAhiABBiKBTIPCAAQIxgnGOMCGIAEGIoFMhUIARAuGCcYrwEYxwEYgAQYigUYjgUyBggCEEUYOTIMCAMQABhDGIAEGIoFMgwIBBAAGEMYgAQYigUyBggFEEUYPDIGCAYQRRg8MgYIBxBFGDzSAQg0MzQ1ajBqN6gCALACAA&sourceid=chrome&ie=UTF-8#) Company   - [Home](https://digitalfrontierpartners.com.au/hp) - [About Us](https://digitalfrontierpartners.com.au/about) - [Careers](https://digitalfrontierpartners.zohorecruit.com.au/jobs/Careers) - [Contact Us](https://digitalfrontierpartners.com.au/contact) --- Resources - [News](https://digitalfrontierpartners.com.au/news) - [Research](https://digitalfrontierpartners.com.au/news) - [Weekly Cyber Report](https://digitalfrontierpartners.com.au/news) - [Case Studies](https://digitalfrontierpartners.com.au/news) --- Policies - [Privacy Policy](https://digitalfrontierpartners.com.au/news/privacy-policy) - [Information Security Policy](https://digitalfrontierpartners.com.au/news/information-security-policy) - [Quality Policy](https://digitalfrontierpartners.com.au/news/quality-policy) Products and Services - [Cybersecurity](https://digitalfrontierpartners.com.au/cybersecurity-services-24/7-threat-monitoring-and-response-dfp) - [Due Diligence](https://digitalfrontierpartners.com.au/technology-due-diligence-product-assessment-digital-frontier-partners) - [Enterprise Artificial Intelligence (AI)](https://digitalfrontierpartners.com.au/enterprise-ai) - [Technology Advisory](https://digitalfrontierpartners.com.au/technology-advisory-services-digital-frontier-partners) - [Workforce Optimisation](https://digitalfrontierpartners.com.au/workforce-optimisation-ai-driven-cost-control-and-performance-dfp) --- Industries - [Local Government](https://digitalfrontierpartners.com.au/localgovernment-cybersecurity) - [Financial Services Cyber Security](https://digitalfrontierpartners.com.au/financialservices) - [Financial Services Artificial Intelligence](https://digitalfrontierpartners.com.au/financial-services-artificial-intelligence) - [Mid Market Enterprise AI](https://digitalfrontierpartners.com.au/enterprise-artificial-intelligence) - [Aged Care Roster Optimisation](https://digitalfrontierpartners.com.au/aged-care-rostering-optimisation) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Digital Frontier Partners", "url" : "https://digitalfrontierpartners.com.au/news/author/digital-frontier-partners" }, "dateModified" : "2026-01-12T22:48:41.353Z", "datePublished" : "2026-01-12T22:48:41.000Z", "headline" : "Human-Centric Attacks and Supply Chain Risks Demand Urgent Action", "image" : [ "https://digitalfrontierpartners.com.au/hubfs/AI-Generated%20Media/Images/The%20image%20depicts%20a%20dark%20ominous%20digital%20landscape%20filled%20with%20intricate%20lines%20of%20code%20and%20various%20cybersecurity%20icons%20In%20the%20foreground%20a%20stylized%20re-1.png" ], "mainEntityOfPage" : { "@id" : "https://digitalfrontierpartners.com.au/news/human-centric-attacks-and-supply-chain-risks-demand-urgent-action", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://digitalfrontierpartners.com.au/hubfs/DFP-Logo.webp" } } } ``` ```json { "@context" : "https://schema.org", "@id" : "https://digitalfrontierpartners.com.au/#organisation", "@type" : "Organization", "address" : { "@type" : "PostalAddress", "addressCountry" : "AU", "addressLocality" : "Melbourne", "addressRegion" : "VIC", "postalCode" : "3000", "streetAddress" : "Level 4, 350 Collins Street" }, "description" : "Digital Frontier Partners provides enterprise technology advisory, AI enablement, workforce optimisation and cybersecurity services, helping organisations align strategy, value and risk.", "email" : "contact@digitalfrontierpartners.com", "knowsAbout" : [ "Enterprise AI enablement", "Artificial intelligence strategy", "AI governance and risk", "Workforce optimisation", "Cybersecurity", "Technology due diligence", "Digital transformation" ], "logo" : { "@type" : "ImageObject", "contentUrl" : "https://digitalfrontierpartners.com.au/hs-fs/hubfs/DFP-Logo.webp?width=1200&height=342&name=DFP-Logo.webp", "height" : 342, "width" : 1200 }, "name" : "Digital Frontier Partners", "telephone" : "+61 1800 288 817", "url" : "https://digitalfrontierpartners.com.au/" } ``` ```json { "@context" : "https://schema.org", "@id" : "https://digitalfrontierpartners.com.au/#website", "@type" : "WebSite", "inLanguage" : "en-AU", "name" : "Digital Frontier Partners", "publisher" : { "@id" : "https://digitalfrontierpartners.com.au/#organisation" }, "url" : "https://digitalfrontierpartners.com.au/" } ```