Adversarial Podcast Ep. 24 – Global Lumma takedown, Coinbase employee bribed, malicious MCP integrations and NPM packages

00:00 Intro

02:49 Authorities Carry Out Elaborate Global Takedown of Infostealer Heavily Used by Cybercriminals

14:29 Coinbase says hackers bribed staff to steal customer data and are demanding $20 million ransom

26:24 Fake OpenAI MCP Integration

32:25 Malicious npm Packages Infect 3,200+ Cursor Users With Backdoor, Steal Credentials

36:03 Destructive malware available in NPM repo went unnoticed for 2 years

48:10 Sam & Jony introduce io

58:23 Discussion: how risky are local admin rights?

Authorities Carry Out Elaborate Global Takedown of Infostealer Heavily Used by Cybercriminals

In May 2025, an international coalition led by Microsoft, the U.S. Department of Justice, Europol, and Japan's Cybercrime Control Center dismantled the Lumma Stealer malware operatio ...