Cybercrime Archives • Daily CyberSecurity

Cisco Talos Exposes UAT-10147 Agentic AI Attacks Diagram showing UAT-10147 agentic AI attacks and automated intrusion workflows

Cisco Talos Exposes UAT-10147 Agentic AI Attacks

Do Son August 21, 2026

At a glance Factor Details Actor UAT-10147 (Suspected Chinese-speaking cybercrime threat group) Activity Type Search engine optimization...

Canadian Man Pleads Guilty to Cloud Hacking Extortion Scheme That Hit 165 Companies Cloud hacking extortion guilty plea over the Snowflake data breach affecting 165 companies

Cloud hacking extortion guilty plea over the Snowflake data breach affecting 165 companies

Canadian Man Pleads Guilty to Cloud Hacking Extortion Scheme That Hit 165 Companies

Do Son August 7, 2026

At a glance Actor Connor Riley Moucka, 26, of Kitchener, Ontario Activity type Cloud account intrusion, data...

DOJ Indicts Chinese National Over Gift Card Fraud Scheme in New Hampshire Gift card fraud conspiracy indictment tied to a wire fraud conspiracy charge and a New Hampshire electronics warehouse

Gift card fraud conspiracy indictment tied to a wire fraud conspiracy charge and a New Hampshire electronics warehouse

DOJ Indicts Chinese National Over Gift Card Fraud Scheme in New Hampshire

Do Son July 24, 2026

At a glance Actor Jinbin Ren, 38, a Chinese national who lived in Lynnfield, Massachusetts; co-conspirators unnamed...

GST Phishing Campaign Distributes Remcos RAT Malware DPRK IT Workers, APT38 Crypto Forfeiture

GST Phishing Campaign Distributes Remcos RAT Malware

Do Son July 23, 2026

Seqrite Labs recently identified a malware distribution campaign that abused the credibility of government institutions to increase...

Mycelium Framework: First AI-as-a-Service Botnet TanStack Typosquatting npm Supply Chain Attack Axios Supply Chain Attack npm Poisoning eScan Supply Chain Attack Antivirus Compromise APT-36, NCERT WhatsApp Advisory FBI alert, Salesforce Salt Typhoon, APT group ConnectWise ScreenConnect hack Nation-state cyberattack FortiGate Leak - zkLend vulnerability - TRIPLESTRENGTH Threat Actor Group Dark Storm

TanStack Typosquatting npm Supply Chain Attack Axios Supply Chain Attack npm Poisoning eScan Supply Chain Attack Antivirus Compromise APT-36, NCERT WhatsApp Advisory FBI alert, Salesforce Salt Typhoon, APT group ConnectWise ScreenConnect hack Nation-state cyberattack FortiGate Leak - zkLend vulnerability - TRIPLESTRENGTH Threat Actor Group Dark Storm

Mycelium Framework: First AI-as-a-Service Botnet

Do Son July 13, 2026

At a Glance Malware Family: Mycelium Framework Threat Actor: Unknown (suspected underground developer) Targets or Victims: Enterprise...

Scattered Spider Arrest: Teen Extradited in $100M Scheme Scattered Spider arrest suspect Peter Stokes extradition

Scattered Spider Arrest: Teen Extradited in $100M Scheme

Do Son July 2, 2026

At a glance Actor or Group: Scattered Spider (Octo Tempest, UNC3944, 0ktapus) Activity Type: Data extortion, computer...

Cloud DNS Takeover Powers Thai Gambling Campaign hacking

Cloud DNS Takeover Powers Thai Gambling Campaign

Do Son June 23, 2026

At a Glance Actor: Suspected single Chinese operator Activity Type: Cloud DNS takeover, SEO poisoning Targets: 163...

Conti Ransomware Guilty Plea Marks Major Victory Against Cybercrime Conti ransomware guilty plea, ransomware attacks Deniss Zolotarjovs Sentencing Karakurt Ransomware Leader

Conti ransomware guilty plea, ransomware attacks Deniss Zolotarjovs Sentencing Karakurt Ransomware Leader

Conti Ransomware Guilty Plea Marks Major Victory Against Cybercrime

Do Son June 12, 2026

Recently, a major breakthrough occurred in the fight against global digital extortion. Following his extradition from Ireland,...

Sophisticated TA4922 Cybercrime Operations Expand Globally Kali365 phishing platform EmEditor Supply Chain Attack, WALSHAM INVESTMENTS LIMITED EggStreme, fileless malware North Korea Cybercrime, Remote IT Job Fraud RedDelta APT

Kali365 phishing platform EmEditor Supply Chain Attack, WALSHAM INVESTMENTS LIMITED EggStreme, fileless malware North Korea Cybercrime, Remote IT Job Fraud RedDelta APT

Sophisticated TA4922 Cybercrime Operations Expand Globally

Do Son June 9, 2026

The Rising Threat of TA4922 A prominent cybersecurity research group recently exposed a highly active threat cluster...

Romanian Hacker Sentenced to Prison Following Government Cyberattacks Romanian hacker sentenced identity theft conviction Pig-Butchering Crackdown Operation Level Up Oleksandr Didenko North Korean IT Workers Coinbase TaskUs insider breach, Hyderabad police Coinbase arrest Scattered Spider, Cybercrime Scattered Spider group

Romanian hacker sentenced identity theft conviction Pig-Butchering Crackdown Operation Level Up Oleksandr Didenko North Korean IT Workers Coinbase TaskUs insider breach, Hyderabad police Coinbase arrest Scattered Spider, Cybercrime Scattered Spider group

Romanian Hacker Sentenced to Prison Following Government Cyberattacks

Do Son May 29, 2026

A federal judge handed down a stiff prison term to an international cybercriminal yesterday. Specifically, a Romanian...

Operation Saffron: Authorities Smash ‘First VPN’ Cybercrime Network First VPN service takedown

Operation Saffron: Authorities Smash ‘First VPN’ Cybercrime Network

Do Son May 24, 2026

International law enforcement agencies have achieved a massive victory against underground ransomware networks. Specifically, authorities completely dismantled...

PamDOORa Backdoor Targets Linux PAM Stack to Steal Passwords and Wipe Logs PamDOORa Linux Backdoor PAM Stack Credential Harvesting

PamDOORa Backdoor Targets Linux PAM Stack to Steal Passwords and Wipe Logs

Do Son May 12, 2026

In the enterprise world, Linux servers are the bedrock of cloud environments and critical infrastructure. To protect...

The “JobStealer” Trojan Hijacking Crypto Wallets via Fake Meetings JobStealer Trojan Crypto Wallet Theft

The “JobStealer” Trojan Hijacking Crypto Wallets via Fake Meetings

Do Son May 11, 2026

The job market is tough enough without a scheduled interview turning into a devastating cyber heist. According...

“AccountDumpling” Hijacked Google Infrastructure to Steal 30,000 Facebook Accounts AccountDumpling Phishing Google AppSheet Abuse AI-Generated Malware PureRAT Campaign RondoDoX Botnet, Next.js React2Shell EchoGather, Paper Werewolf Salt Typhoon, Telecom Espionage BreachForums, Conor Fitzpatrick Ransomware Negotiation, DOJ Investigation MirrorFace group - Earth Kasha Emperor Dragonfly

AccountDumpling Phishing Google AppSheet Abuse AI-Generated Malware PureRAT Campaign RondoDoX Botnet, Next.js React2Shell EchoGather, Paper Werewolf Salt Typhoon, Telecom Espionage BreachForums, Conor Fitzpatrick Ransomware Negotiation, DOJ Investigation MirrorFace group - Earth Kasha Emperor Dragonfly

“AccountDumpling” Hijacked Google Infrastructure to Steal 30,000 Facebook Accounts

Do Son May 6, 2026

In a sophisticated display of “trust inversion,” a Vietnamese-linked cybercriminal operation has turned Google’s own infrastructure against...

Cybersecurity Pros Sentenced for Running ALPHV BlackCat Ransomware ALPHV BlackCat Affiliates Ransomware Insider Threat

Cybersecurity Pros Sentenced for Running ALPHV BlackCat Ransomware

Do Son May 2, 2026

Two American cybersecurity professionals were sentenced today to four years each in federal prison. Leveraging the very...

The Fall of Versus: Dark Web Mastermind Extradited to the US to Face Life Behind Bars Versus Project Dark Web Extradition

The Fall of Versus: Dark Web Mastermind Extradited to the US to Face Life Behind Bars

Do Son May 2, 2026

A German national has been extradited from Colombia to the United States to face charges for owning...

The Global Takedown: FBI and International Allies Dismantle Billion-Dollar Pig-Butchering Empires Romanian hacker sentenced identity theft conviction Pig-Butchering Crackdown Operation Level Up Oleksandr Didenko North Korean IT Workers Coinbase TaskUs insider breach, Hyderabad police Coinbase arrest Scattered Spider, Cybercrime Scattered Spider group

The Global Takedown: FBI and International Allies Dismantle Billion-Dollar Pig-Butchering Empires

Do Son April 29, 2026

An unprecedented cooperation between the FBI, Dubai Police, and the Chinese Ministry of Public Security has resulted...

The Negotiator Turned Traitor: Insider Betrayal in the BlackCat Ransomware Ring NATS-as-C2 Sysdig CVE-2026-33017 Langflow RCE Microsoft Phone Link Hijack CloudZ Pheno Plugin Insider Threat BlackCat (ALPHV) OFAC Sanctions DPRK IT Workers Transparent Tribe APT36 React2Shell, EtherRAT SideWinder Espionage, Netlify Phishing DDNS Abuse, C2 Infrastructure Hacking Health Club

NATS-as-C2 Sysdig CVE-2026-33017 Langflow RCE Microsoft Phone Link Hijack CloudZ Pheno Plugin Insider Threat BlackCat (ALPHV) OFAC Sanctions DPRK IT Workers Transparent Tribe APT36 React2Shell, EtherRAT SideWinder Espionage, Netlify Phishing DDNS Abuse, C2 Infrastructure Hacking Health Club

The Negotiator Turned Traitor: Insider Betrayal in the BlackCat Ransomware Ring

Do Son April 21, 2026

A Florida man has admitted to playing both sides of the ransomware fence. Angelo Martino, 41, a...

Scotland Man Pleads Guilty in Massive $8 Million Crypto-Heist and Phishing Campaign Seedworm Espionage Campaign 2026 ChromElevator Stealer DLL Sideloading SIM Swapping Crypto Theft Lazarus Comebacker, Aerospace Espionage Delete PlugX Malware

Seedworm Espionage Campaign 2026 ChromElevator Stealer DLL Sideloading SIM Swapping Crypto Theft Lazarus Comebacker, Aerospace Espionage Delete PlugX Malware

Scotland Man Pleads Guilty in Massive $8 Million Crypto-Heist and Phishing Campaign

Do Son April 21, 2026

A 24-year-old Dundee man has admitted his role in a sophisticated international cybercrime ring that utilized SMS...

RedLine Infostealer Kingpin Extradited to U.S. to Face Federal Charges RedLine Infostealer Operation Magnus

RedLine Infostealer Kingpin Extradited to U.S. to Face Federal Charges

Do Son March 27, 2026

The global dragnet closing in on the world’s most prolific malware developers has secured a major victory....

Operation Takedown: DOJ and Global Allies Smash 30-Terabit IoT Botnet Empire P2P cryptominer malware threat Ollama endpoint attacks IoT Botnets DDoS Attacks

P2P cryptominer malware threat Ollama endpoint attacks IoT Botnets DDoS Attacks

Operation Takedown: DOJ and Global Allies Smash 30-Terabit IoT Botnet Empire

Do Son March 20, 2026

In a massive display of international cooperation, the U.S. Justice Department has joined forces with law enforcement...

Ghost in the Browser: Advanced ‘GoPix’ Trojan Unveils Unprecedented MitM Attacks GoPix Trojan Brazilian Banking Malware

Ghost in the Browser: Advanced ‘GoPix’ Trojan Unveils Unprecedented MitM Attacks

Do Son March 19, 2026

A sophisticated new threat has emerged from the Brazilian cybercrime underground, signaling a dangerous shift toward APT-level...

Critical Alert 1 Active Exploit Detected Today