Top Tech Headlines for September 20, 2025

From crypto busts to AI-powered malware, today’s top tech stories highlight a rising tide of digital deception. Whether you're worried about fake apps or sneaky zero-click flaws, we’ve got you covered with the critical updates you need — and a little help from our Ultimate USBs.

Canada Dismantles TradeOgre Exchange, Seizes $40 Million in Crypto

The Royal Canadian Mounted Police have shut down TradeOgre, a controversial cryptocurrency exchange, and seized over $40 million allegedly tied to criminal activities. Authorities suggest TradeOgre may have been facilitating large-scale laundering operations linked to dark web transactions.

This marks a growing trend of governments cracking down on “anonymous” crypto platforms — reinforcing the need for secure and transparent alternatives when moving digital assets.

LastPass Warns of Fake Repositories Infecting macOS with Atomic Infostealer

LastPass is sounding the alarm on new macOS-targeting malware that comes from spoofed GitHub repositories. Attackers are using fake versions of popular apps like LastPass and Dropbox to distribute Atomic Stealer, a tool designed to swipe passwords, wallets, and sensitive user data.

It’s a reminder to always verify the source of your downloads — especially when installing tools from open-source platforms.

GPT-4-Powered 'MalTerminal' Malware Can Create Ransomware and Reverse Shells

Researchers have revealed a new class of threats with MalTerminal, a tool powered by GPT-4 that can automate the creation of ransomware, reverse shells, and more. Developed before November 2023, this LLM-based malware marks one of the earliest examples of AI being weaponized for hands-free, code-savvy attacks.

As AI becomes more powerful, threat actors are finding new ways to let machines do the dirty work — making endpoint protection and air-gapped recovery strategies even more essential.

ShadowLeak Zero-Click Flaw Exposes Gmail via ChatGPT Deep Research Agent

A newly disclosed ShadowLeak exploit shows how zero-click vulnerabilities can steal Gmail data using OpenAI’s ChatGPT Deep Research agent. By embedding hidden HTML commands, attackers can trick the AI into leaking sensitive email information — all without any user interaction.

This flaw underscores how even trusted AI platforms can become threat vectors when integrated with cloud services. Vigilance and layered security are more important than ever in an AI-first world.

Want to stay ready for anything? From data recovery to bootable OS installs, our Ultimate USBs have your back. Check out our tools today.