Cybercrime

Cybercriminals upgrade Tycoon 2FA phishing kit as Phaas attacks surge

Cybercriminals have increased phishing-as-a-service (Phaas) attempts in the first months of this year, making their attacks more complex and evasive.
Read more about Cybercriminals upgrade Tycoon 2FA phishing kit as Phaas attacks surge

Hackers exploit fake audio issues to spread malware in virtual meetings

Don’t switch conference rooms during your meetings via Zoom or Google Meet, an expert advises.
Read more about Hackers exploit fake audio issues to spread malware in virtual meetings

LockBit ransomware developer extradited to the US

Rostislav Panev, a 51-year-old Russian and Israeli national, has been extradited to the United States. He is suspected of being a developer for LockBit.
Read more about LockBit ransomware developer extradited to the US

Dutch EncroChat phone reseller faces 4 years in prison

The Dutch Public Prosecution Service has demanded a four-year prison sentence against a 28-year-old woman from Den Bosch for preparing and trading EncroChat phones.
Read more about Dutch EncroChat phone reseller faces 4 years in prison

New Android spyware serves your data to North Korean hackers on a silver platter

Android spyware KoSpy, attributed to North Korean hackers ScarCruft, can monitor SMS, calls, location, files, and screenshots via dynamically loaded plugins.
Read more about New Android spyware serves your data to North Korean hackers on a silver platter

PlayPraetor trojan spreads through fake Play Store pages to steal user data

A new trojan, PlayPraetor, is targeting users via fraudulent Google Play pages that prompt them to download a malicious APK app.
Read more about PlayPraetor trojan spreads through fake Play Store pages to steal user data

Medusa ransomware cases surge as Spearwing hackers expand attacks

Medusa ransomware, operated as ransomware-as-a-service by a group of hackers called Spearwing, is increasingly finding its way onto victims’ PCs.
Read more about Medusa ransomware cases surge as Spearwing hackers expand attacks

Chinese espionage group Silk Typhoon shifts focus to supply chain attacks

Silk Typhoon, an espionage-focused Chinese hacker group previously known as Hafnium, is changing its tactics and focusing on supply chain attacks.
Read more about Chinese espionage group Silk Typhoon shifts focus to supply chain attacks

Data hostage crisis hits Airbus and Ford tech supplier

Tata Technologies, a multinational tech firm serving Airbus, Honda, Jaguar, and Ford, has allegedly suffered a ransomware attack.
Read more about Data hostage crisis hits Airbus and Ford tech supplier

AI still more of a buzzword than a real tool in cybercriminal underground

Cybercrooks are obviously interested in utilizing AI in their campaigns, but researchers have yet to see them unlock the technology’s power at scale.
Read more about AI still more of a buzzword than a real tool in cybercriminal underground

Scammer posing as Elon Musk awards one lucky Facebook user $3.7M: “I can finally retire now!”

Tesla CEO Elon Musk and US president Donald Trump are supposedly giving lucky users 50 Bitcoin ($3.7 million). Instead, they're not and scammers are impersonating them to defraud victims.
Read more about Scammer posing as Elon Musk awards one lucky Facebook user $3.7M: “I can finally retire now!”

How hackers attacked an entire country

Through a sophisticated multi-pronged attack, hackers were able to paralyze an entire country, marking the first known case of cyber warfare.
Read more about How hackers attacked an entire country

Man who used coffee shop Wi-Fi to advertise child abuse material jailed for life

The manager of four dark web sites dedicated to sharing child sexual abuse material (CSAM) has been sentenced for his crimes and will most likely never get out of prison.
Read more about Man who used coffee shop Wi-Fi to advertise child abuse material jailed for life

Duolingo post mortem: scammers use Duo’s death to swindle victims

After the death of Duo, Duolingo’s beloved mascot, cybercriminals capitalized on the event to scam unsuspecting victims.
Read more about Duolingo post mortem: scammers use Duo’s death to swindle victims

New Ghostwriter campaign targets Belarusian opposition and Ukraine

SentinelLABS, a cybersecurity laboratory, has detected a new Ghostwriter campaign targeting opposition activists in Belarus as well as Ukrainian military and government organizations.
Read more about New Ghostwriter campaign targets Belarusian opposition and Ukraine

The largest-ever crypto hack: everything we know so far

A few reports offer an early glimpse into the largest-ever crypto hack, even though the exact details remain unclear.
Read more about The largest-ever crypto hack: everything we know so far

Extortionist behind massive Instagram scheme busted via OnlyFans

The alleged “mastermind” behind a service that could circumvent actions of social media platforms like Instagram, is being sued by Meta for violating its terms of service.
Read more about Extortionist behind massive Instagram scheme busted via OnlyFans

Experts warn of risks as Darcula DIY kit simplifies phishing

New phishing tools enable bad actors to launch phishing attacks with minimal or no technical skills, cybersecurity experts warn.
Read more about Experts warn of risks as Darcula DIY kit simplifies phishing

Europol urges vigilance as sinister online cults prey on children

Europol has issued a stark warning about the rise of “extremely violent” online cults that exploit and manipulate children, luring them into abuse, criminal acts, and even self-harm.
Read more about Europol urges vigilance as sinister online cults prey on children

Major VC fund with cybersecurity investments confirms falling for social engineering

A third party has accessed the systems of venture capital firm Insight Partners, which has invested in over 500 companies.
Read more about Major VC fund with cybersecurity investments confirms falling for social engineering