Collecting Cyber-News from over 60 sources

Tag: cybercrime

Analysis: Root Cause of Most Security Incidents Traced to Unpatched Firewalls

Feb 26, 2026 6:37 PM

Tags: access, cybercrime, exploit, firewall, network, ransomware, security-incident, software, vulnerability

An analysis of more than two trillion IT events collected during 2025 by Barracuda Networks finds 90% of ransomware incidents exploited firewalls via unpatched software or a vulnerable account that enables cybercriminals to gain access to an IT environment. Merium Khalid, director of offensive security for the security operations center (SOC) at Barracuda Networks, said..…
Analysis: Root Cause of Most Security Incidents Traced to Unpatched Firewalls

Feb 26, 2026 6:37 PM

Tags: access, cybercrime, exploit, firewall, network, ransomware, security-incident, software, vulnerability

An analysis of more than two trillion IT events collected during 2025 by Barracuda Networks finds 90% of ransomware incidents exploited firewalls via unpatched software or a vulnerable account that enables cybercriminals to gain access to an IT environment. Merium Khalid, director of offensive security for the security operations center (SOC) at Barracuda Networks, said..…
How to report suspicious activity to Spamhaus (with all the right info!)

Feb 26, 2026 3:36 PM

Tags: cybercrime, data, malicious, malware, phishing, spam, threat

Cybercriminals never rest but anyone can play a role in stopping them. Sharing malicious activity is one of the most important ways we can strengthen safety on the internet. Spamhaus Threat Intel Community brings individuals and organizations together to share threat data and block spam, phishing, and malware campaigns worldwide. Find out how you can…
Ransomware payments dropped in 2025 as attack numbers reached record levels: Chainalysis

Feb 26, 2026 3:36 PM

Tags: attack, cybercrime, ransomware

The rate at which ransomware victims paid cybercriminals fell last year while the overall number of attacks ballooned, Chainalysis found. First seen on therecord.media Jump to article: therecord.media/ransomware-payments-chainalysis-cybercrime
Phishing”‘Led Agent Tesla Campaign Uses Process Hollowing and Anti”‘Analysis to Evade Detection

Feb 26, 2026 3:36 PM

Tags: access, cyber, cybercrime, detection, malware, network, threat

Agent Tesla continues to cement its status as one of the most persistent remote access trojans (RATs) in the global threat landscape. Known for its data”‘stealing capabilities and extensive distribution network, this malware remains a weapon of choice for low”‘skilled cybercriminals seeking sophisticated results. The latest variant follows a multi”‘stage delivery sequence involving several fileless…
Hacker kompromittieren immer schneller

Feb 26, 2026 2:40 PM

Tags: access, ai, crowdstrike, cyberattack, cybercrime, hacker, LLM, malware, north-korea, threat, tool

Der Einsatz von KI-Tools macht Cyberangriffe nicht nur schneller, sondern erhöht auch die Taktzahl.Crowdstrike hat die aktuelle Ausgabe seines Global Threat Report veröffentlicht mit mehreren bemerkenswerten Erkenntnissen.So benötigte ein Angreifer im Jahr 2025 im Schnitt nur noch 29 Minuten, um sich vollständigen Zugriff auf ein Netzwerk zu verschaffen. Damit läuft die Kompromittierung rund 65 Prozent…
Wenn KI Cyberangriffe beschleunigt: Diese Maßnahmen sollten Unternehmen jetzt für mehr digitale Resilienz ergreifen

Feb 26, 2026 9:37 AM

Tags: ai, cyberattack, cybercrime, resilience

Mit der rasanten Entwicklung künstlicher Intelligenz (KI) erreicht auch die Cyberkriminalität eine neue Dimension. Was früher erheblichen technischen Aufwand und personelle Ressourcen erforderte, lässt sich heute mithilfe intelligenter Algorithmen automatisieren, skalieren und gezielt optimieren. Angriffe werden personalisierter, dynamischer und deutlich schwerer zu erkennen. Unternehmen sehen sich damit einer neuen Qualität digitaler Bedrohungen gegenüber, die klassische……
Steaelite RAT Drives Surge in Double Extortion Attacks on Enterprises

Feb 26, 2026 7:37 AM

Tags: access, attack, cyber, cybercrime, extortion, malware, network, rat, strategy

A newly surfaced Remote Access Trojan (RAT) named Stealer is rapidly gaining traction across cybercrime networks, fueling a fresh wave of double-extortion incidents against enterprise targets. It offers features such as HVNC (Hidden Virtual Network Computing) monitoring and banking application bypass capabilities once reserved for advanced, custom-built malware teams. Steaelite’s marketing strategy mirrors that of commercial malware projects. The developer has actively…
Steaelite RAT combines data theft and ransomware management capability in one tool

Feb 26, 2026 5:37 AM

Tags: access, android, attack, authentication, awareness, business, corporate, credentials, crypto, cybercrime, data, ddos, defense, encryption, endpoint, extortion, infection, infosec, malware, mobile, monitoring, password, phishing, ransomware, rat, remote-code-execution, theft, threat, tool, training, windows

CSO that this isn’t the most sophisticated RAT he’s seen. “The novel aspect here,” he said, “is the convergence. Steaelite bundles remote access, credential harvesting, data exfiltration, and ransomware (currently in development) in a single package.” Traditionally, he explained, these capabilities have occupied different parts of the cybercrime toolchain, but Steaelite unifies the functions, giving…
Ransomware hammers manufacturing sector

Feb 25, 2026 11:37 PM

Tags: attack, cybercrime, ransomware, risk

Ransomware attacks on manufacturers are skyrocketing. For cybercriminals, the sector sits at a sweet spot on the risk-reward continuum. First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366639452/Ransomware-hammers-manufacturing-sector
SLH Offers $500$1,000 Per Call to Recruit Women for IT Help Desk Vishing Attacks

Feb 25, 2026 5:37 PM

Tags: attack, cybercrime, finance, group, jobs, phishing, social-engineering, threat

The notorious cybercrime collective known as Scattered LAPSUS$ Hunters (SLH) has been observed offering financial incentives to recruit women to pull off social engineering attacks.The idea is to hire them for voice phishing campaigns targeting IT help desks, Dataminr said in a new threat brief. The group is said to be offering anywhere between $500…
Cybercriminals Exploit Fake Avast Website to Steal Users Credit Card Information

Feb 25, 2026 10:37 AM

Tags: credit-card, cyber, cybercrime, exploit, phishing

Cybercriminals have launched a convincing phishing operation by building a fake Avast website designed to steal credit card information from unsuspecting visitors. The fraudulent page mimics Avast’s official portal almost perfectly, complete with the genuine Avast logo pulled directly from the company’s content delivery network. It displays regular navigation links like “Home,” “My Account,” and…
Operation Red Card 2.0 Leads to 651 Arrests in Africa

Feb 25, 2026 9:37 AM

Tags: cybercrime, cybersecurity, group, interpol, law

In the latest operation targeting cybercrime groups, African law enforcement agencies cooperated with Interpol and cybersecurity firms to recover more than USD 4.3 million. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/operation-red-card-2-0-leads-to-651-arrests-in-africa
Cyber defense: From reactive to proactive

Feb 24, 2026 9:02 PM

Tags: access, ai, attack, automation, business, cloud, control, corporate, cyber, cybercrime, cybersecurity, data, deep-fake, defense, detection, endpoint, google, infrastructure, intelligence, malware, microsoft, monitoring, phishing, ransomware, resilience, risk, service, social-engineering, threat

“It’s a cat-and-mouse situation. AI is changing the speed and sophistication of attacks, and AI is making phishing and social engineering attacks, thanks to deep fakes, harder to detect,” said Kevin McCall, director, cybersecurity, risk, and regulatory at PwC US, speaking during a webcast titled, “From Risk to Resilience: Building a Smarter Cloud Security Strategy.”McCall…
Threat groups move at record speeds, as AI helps scale attacks

Feb 24, 2026 7:02 PM

Tags: ai, attack, crowdstrike, cybercrime, group, threat

A report by CrowdStrike shows cybercrime groups are outpacing security teams and increasingly abusing legitimate tools. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/threat-groups-record-speeds-ai-attacks/812965/
Threat groups moving at record speeds, as AI helps scale attacks

Feb 24, 2026 6:00 PM

Tags: ai, attack, crowdstrike, cybercrime, group, threat

A report by CrowdStrike shows cybercrime groups are outpacing security teams and increasingly abusing legitimate tools. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/threat-groups-record-speeds-ai-attacks/812965/
Cybercriminals Exploit Windows Management Instrumentation WMI to Maintain Stealthy Access and Silent Control

Feb 24, 2026 2:02 PM

Tags: access, control, cyber, cybercrime, exploit, infrastructure, malware, startup, strategy, windows

Windows Management Instrumentation (WMI) is a critical utility built into the Windows operating system designed to help administrators monitor status and automate routine tasks. However, cybercriminals have increasingly weaponized this legitimate infrastructure to maintain persistent access to compromised networks. Unlike traditional malware strategies that rely on visible startup folders or registry run keys, WMI abuse…
AI Arms Race Shrinks Breakout Time to 29 Minutes as Adversaries Turn GenAI on the Enterprise

Feb 24, 2026 12:00 PM

Tags: ai, attack, crowdstrike, cybercrime, identity, intelligence, threat

Artificial intelligence is no longer just a defensive tool; it is now a core accelerant for cybercriminals and nation-state actors alike. That is the central message from CrowdStrike’s newly released 2026 Global Threat Report, which paints 2025 as the “year of the evasive adversary”, defined by speed, identity abuse and direct attacks on AI systems…
Romanian Cybercriminal Admits Guilt in Scheme Selling Oregon State Government Network Access

Feb 24, 2026 12:00 PM

Tags: access, credentials, cyber, cybercrime, government, network, office, unauthorized

A Romanian national has pleaded guilty to charges related to unauthorized access and sale of network credentials belonging to an Oregon state government office and multiple other U.S. victims, the U.S. Department of Justice announced on February 20, 2026. Catalin Dragomir, 45, formerly of Constanta, Romania, admitted to breaking into the Oregon state government office’s…
Odido Faces Alleged Data Breach as ShinyHunters Claims 21M Records Exposed

Feb 24, 2026 8:01 AM

Tags: breach, cyber, cybercrime, data, data-breach, group

A notorious cybercriminal group, ShinyHunters, has claimed responsibility for a massive data breach involving Odido and BEN, exposing millions of customer records. The group asserts that Odido, a Dutch telecommunications provider, was not truthful in its initial disclosure of the incident. This development suggests the breach may be significantly larger and more severe than initially…
AWS says more than 600 FortiGate firewalls hit in AI-augmented campaign

Feb 23, 2026 1:01 PM

Tags: ai, cybercrime, firewall, group, russia, tool

Off-the-shelf tools helped Russian-speaking cybercrime group run riot First seen on theregister.com Jump to article: www.theregister.com/2026/02/23/aws_fortigate_firewalls/
AI-powered campaign compromises 600 FortiGate systems worldwide

Feb 23, 2026 1:01 PM

Tags: ai, cybercrime, intelligence, russia, service, threat, tool

A Russian-speaking cybercriminal used commercial generative AI tools to hack over 600 FortiGate devices across 55 countries. Amazon Threat Intelligence reports that a Russian-speaking, financially motivated threat actor used commercial generative AI services to compromise more than 600 FortiGate devices in 55 countries. The activity, observed between January 11 and February 18, 2026, highlights how…
Police seize 100,000 stolen Facebook credentials in cybercrime raid

Feb 23, 2026 12:01 PM

Tags: breach, credentials, cybercrime, group, organized, phishing

Officers from Poland’s Central Bureau for Combating Cybercrime (CBZC) dismantled an organized group that used phishing to seize Facebook accounts and extract BLIK payment … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/02/23/poland-cybercrime-facebook-phishing-ring/
13 ways attackers use generative AI to exploit your systems

Feb 23, 2026 9:01 AM

Tags: access, ai, attack, authentication, awareness, breach, captcha, ceo, chatgpt, ciso, cloud, credentials, crypto, cyber, cyberattack, cybercrime, cybersecurity, dark-web, data, deep-fake, defense, detection, email, espionage, exploit, extortion, finance, flaw, framework, fraud, google, government, group, hacker, identity, infrastructure, intelligence, law, LLM, login, malicious, malware, marketplace, network, open-source, password, phishing, privacy, ransomware, resilience, risk, saas, scam, service, social-engineering, startup, supply-chain, tactics, technology, theft, threat, tool, vulnerability, zero-day

Facilitating malware development: AI can also be used to generate more sophisticated, or less labour-intensive, malware.For example, cybercriminals are using gen AI to create malicious HTML documents. The XWorm attack, initiated by HTML smuggling, which contains malicious code that downloads and runs the malware, bears the hallmarks of development via AI.”The loader’s detailed line-by-line description…
13 ways attackers use generative AI to exploit your systems

Feb 23, 2026 9:01 AM

Tags: access, ai, attack, authentication, awareness, breach, captcha, ceo, chatgpt, ciso, cloud, credentials, crypto, cyber, cyberattack, cybercrime, cybersecurity, dark-web, data, deep-fake, defense, detection, email, espionage, exploit, extortion, finance, flaw, framework, fraud, google, government, group, hacker, identity, infrastructure, intelligence, law, LLM, login, malicious, malware, marketplace, network, open-source, password, phishing, privacy, ransomware, resilience, risk, saas, scam, service, social-engineering, startup, supply-chain, tactics, technology, theft, threat, tool, vulnerability, zero-day

Facilitating malware development: AI can also be used to generate more sophisticated, or less labour-intensive, malware.For example, cybercriminals are using gen AI to create malicious HTML documents. The XWorm attack, initiated by HTML smuggling, which contains malicious code that downloads and runs the malware, bears the hallmarks of development via AI.”The loader’s detailed line-by-line description…
Attacker Breached 600 FortiGate Appliances in AI-Assisted Campaign: Amazon

Feb 23, 2026 7:02 AM

Tags: ai, cybercrime, fortinet, technology, threat, tool

An single threat actor used AI tools to create and run a campaign that compromised more then 600 Fortinet FortiGate appliances around the world over five weeks, according to Amazon threat researchers, the latest example of how cybercriminals are using the technology in their attacks. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/02/attacker-breached-600-fortigate-appliances-in-ai-assisted-campaign-amazon/
Mississippi Healthcare System Shuts Down Clinics After Ransomware Attack

Feb 22, 2026 11:02 PM

Tags: attack, cybercrime, data, healthcare, intelligence, ransomware

The University of Mississippi Medical Center shut down operations at its 35 medical clinics around the state following a ransomware attack. Healthcare facilities are top targets for cybercriminals, who look to steal the sensitive data they hold for both money and intelligence gathering. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/02/mississippi-healthcare-system-shuts-down-clinics-after-ransomware-attack/
ISMG Editors: No Honor Among Ransomware Thieves

Feb 20, 2026 8:02 PM

Tags: ai, cybercrime, identity, ransomware, resilience, risk, technology

Also: AI, Machine Identity Risks; Europe’s Digital Sovereignty Push. In this week’s panel, four ISMG editors examined how cybercriminals may be turning on each other, what security leaders are really saying about machine identities and AI risk, and how shifting U.S.-Europe dynamics are reshaping technology resilience and digital sovereignty. First seen on govinfosecurity.com Jump to…
Criminals create business website to sell RAT disguised as RMM tool

Feb 20, 2026 3:01 PM

Tags: business, cybercrime, monitoring, rat, service, software, tool

A RAT masquerading as legitimate remote monitoring and management (RMM) software is being sold to cybercriminals as a service, Proofpoint researchers recently discovered. The … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/02/20/trustconnect-docconnect-fake-rmm/
651 arrested, $4.3 million recovered in African cybercrime sweep

Feb 20, 2026 10:01 AM

Tags: cybercrime, interpol, law

Operation Red Card 2.0, supported by INTERPOL and involving law enforcement agencies from 16 African countries, led to 651 arrests and the recovery of more than $4.3 million … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/02/20/interpol-operation-red-card-2-0-africa-cybercrime/