FlashFeed

Full text

DeepSeek connected a theoretical browser flaw to a working attack chain

The ransomware sample targets Android's photo folder through a fake permission prompt

Check Point classified 1,383 DeepSeek-linked files as malicious or dangerous

A Chinese AI model accidentally stumbled into a working ransomware technique while trying to satisfy an unrealistic, broad prompt.

New findings from Check Point Research say the DeepSeek-generated sample connected a theoretical browser risk to a functioning attack method, requiring no exploit, no app installation, and no real technical skill from the attacker.

It targets Android's photo storage through a legitimate browser feature called the File System Access API, disguised as a simple AI photo-enhancing tool.

How the attack actually works

The technique abuses Android's DCIM folder, which typically holds years of personal photos, scanned identification documents, and banking screenshots.

Victims grant access through a single permission prompt disguised as an AI-powered photo enhancer, unaware they are handing over control of an entire directory.

Check Point's dataset included nearly 3,000 files attributed to DeepSeek, and researchers classified 1,383 of them as malicious or dangerous using VirusTotal and static analysis methods.

The team found a sample implementing a dangerous browser-native technique which has never been observed before in real-world attacks.

The sample, nicknamed InfernoGrabber 9000, was incomplete, yet testing showed it required little additional effort to become fully functional.

“Very little effort is needed. Low-level expertise is sufficient. You don't need to be a sophisticated cybercriminal or advanced persistent threat group,” said Pedro Drimel Neto, malware analysis team leader at Check Point

“In fact, we've already observed evidence of actual threat actors attempting this attack using straightforward LLM prompts.”

Why this marks a turning point

"What we are witnessing is a fundamental shift in how novel cyber attacks are born. For the first time, we have evidence that an AI model can independently reason across legitimate platform features," said Eli Smadja, Head of Research at Check Point

This represents a major shift in how novel cyber-attacks are discovered and developed.

However, the underlying browser risk is not entirely new. A 2023 USENIX Security paper examined how the File System Access API could theoretically enable ransomware .

What changed, according to Check Point, is that DeepSeek connected these previously theoretical ideas into a realistic, working attack chain without human guidance.

When researchers tested the same concept using the latest DeepSeek V4 model, it refused direct ransomware requests but complied once explicit terms were removed.

Comparable testing against other LLMs produced only refusals or heavily constrained, browser-safe implementations lacking the same file-access capability.

Check Point ultimately built a working proof of concept, successfully encrypting photos on Android devices running Chrome 148, confirming the danger extends well beyond a single flawed sample.

Organizations embedding AI into their workflows must now treat every browser permission prompt as a genuine security decision rather than a routine click.

Full text

Toyota has added a 20-liter AdBlue tank to ensure compliance with emissions regs.

The system injects urea into the powertrain’s exhaust stream to cut emissions.

Toyota has yet to recommence sales of models with the five-speed manual.

Roughly a year after Toyota stopped taking orders for the 70 Series Land Cruiser in Australia , the popular off-roader is back on the market after some powertrain updates. As before, Aussies can expect to flock to the model, despite it dating back to the 1980s.

var adpushup = window.adpushup = window.adpushup || {que:[]};

adpushup.que.push(function() {

if (adpushup.config.platform !== "DESKTOP"){

adpushup.triggerAd("0f7e3106-c4d6-4db4-8135-c508879a76f8");

} else {

adpushup.triggerAd("82503191-e1d1-435a-874f-9c78a2a54a2f");

}

});

The most significant change is on the engine front. To ensure the 2.8-liter turbo-diesel engine complies with the Euro 6d emissions standard used in Australia, Toyota has added a 20-liter AdBlue tank. It injects urea into the powertrain’s exhaust stream to help reduce nitrogen oxide emissions and has its own refueling flap on the front left fender in double cab-chassis models and between the cab and rear wheels in single cab-chassis versions.

Read: The Land Cruiser 70 Was Built For The Outback, Toyota Just Made One For The City

Power figures from the 2.8-liter remain unchanged. As such, the tweaked 70 Series continues to produce 201 hp (150 kW) between 3000 and 3,400 rpm and 369 lb-ft (500 Nm) of torque from 1,600 to 2,800 rpm.

var adpushup = window.adpushup = window.adpushup || {que:[]};

adpushup.que.push(function() {

if (adpushup.config.platform === "DESKTOP"){

adpushup.triggerAd("ea4d4b5a-f8e5-4d5d-9d9a-53a3b956b6cd");

} else{

adpushup.triggerAd("44c0a4dc-e25b-4ba5-ac64-2c510461b92a");

}

});

Interestingly, the Land Cruiser has so far only been re-introduced with the six-speed automatic transmission. As per the company’s Australian division, 78 Series, 79 Series double-cab chassis, and 76 Series GXL versions with the old five-speed manual transmission remain “unavailable for the time being.” The lack of confirmation that the manual has been axed leads us to believe it still has some life left, even though it’s unclear when it could be re-introduced.

Old, But Popular

Toyota Australia

The only other noteworthy change has been to the 78-Series Troopcarrier model, whose fuel tank has been reduced from 180 liters (47.5 gallons) to 130 liters (34.3 gallons), matching all other 70 Series models.

“After pausing orders for certain LandCruiser 70 Series in 2025 to manage customer expectations around vehicle supply challenges, we are excited to say that order books are now back open,” Toyota Australia vice president of sales, marketing, and franchise operations, John Pappas said.

The model’s current 2.8-liter turbodiesel four-cylinder engine is borrowed from the Hilux and replaces the 4.5-liter turbodiesel V8, which had been available until mid-2024.

var adpushup = window.adpushup = window.adpushup || {que:[]};

adpushup.que.push(function() {

if (adpushup.config.platform !== "DESKTOP"){

adpushup.triggerAd("bb7964e9-07de-4b06-a83e-ead35079d53c");

} else {

adpushup.triggerAd("9b1169d9-7a89-4971-a77f-1397f7588751");

}

});

Photos Toyota