The DOJ unsealed charges against four foreign nationals and the FBI seized domains for the Anyproxy and 5socks botnets, used to hijack routers globally.
Cybercrime
German authorities shut down the crypto-swapping platform eXch, a hub for laundering illicit funds, and seized €34 million in cryptocurrencies after tracing stolen Bybit funds.
Polish authorities arrested four individuals running a global DDoS-for-hire network, disrupting thousands of cyberattacks. Part of Europol's Operation PowerOFF.
UNC3944 resurfaces as Scattered Spider, linked to DragonForce and RansomHub in new retail attacks. Mandiant warns of social engineering escalation.
mnemonic exposes Darcula, a global phishing-as-a-service network using the Magic Cat toolkit to target mobile users with encrypted, real-time scam dashboards.
The DOJ has indicted Yemeni national Rami Khaled Ahmed for allegedly masterminding the Black Kingdom ransomware attacks on US hospitals, schools, and businesses.
Recorded Future analysis exposes MintsLoader, a stealthy malware loader using advanced evasion to target industrial, legal, and energy sectors.
Infoblox uncovers $5.7B lost to investment scams in 2024, driven by RDGAs, DNS abuse, and fake profit platforms run by sophisticated threat actors.
Cyfirma uncovers a Python-based RAT using Discord for command and control. It can lock screens, simulate BSOD, move the mouse, and steal data.
Discover SessionShark, a sophisticated phishing toolkit designed to bypass Microsoft Office 365 multi-factor authentication by stealing session tokens.
Report details how North Korean operatives use AI to create fake personas and infiltrate tech companies, funneling funds to the DPRK regime.
Trend Micro reveals how Russian IP networks support North Korea’s cybercrime—from crypto theft to malware-laced fake job interviews and potential espionage.
Resecurity uncovers massive NFC fraud wave using Ghost Tap attacks, with Chinese cybercriminals targeting global payment systems and loyalty programs.
Cisco Talos reveals a new VIP version of XorDDoS with centralized control, enabling global DDoS attacks. U.S. targeted in over 70% of observed campaigns.
LummaStealer evolves into a sophisticated Malware-as-a-Service, using stealth and advanced techniques to steal data.
A widespread smishing campaign targeting toll road users across multiple U.S. states is stealing payment credentials. Learn how scammers are impersonating E-ZPass and other toll systems to trick victims
Silent Push reveals Smishing Triad's widespread SMS phishing campaigns targeting 121+ countries. The group uses sophisticated kits to steal credentials and financial data.
A Trend Micro report explores the evolving tactics of the Russian-speaking cybercriminal underground, including phishing innovations, Web3 scams, the role of ransomware, and the convergence of cyber and physical crime
Discover the alarming rise of cybercrime in North Korea. Learn about the growing number of cyber specialists and the threats they pose.