Tag: cybercrime
-
SonicWall SSLVPN Exploitation ‘Ongoing’ By Ransomware Group: Researchers
The Akira cybercriminal group is believed to be behind a resurgence in ransomware attacks exploiting a previously disclosed vulnerability impacting certain SonicWall firewalls, according to researchers at Rapid7. First seen on crn.com Jump to article: www.crn.com/news/security/2025/sonicwall-sslvpn-exploitation-ongoing-by-ransomware-group-researchers
-
Anthropic’s Claude AI Weaponized in $500K Cybercrime Spree
An unprecedented breach turned Claude into a cybercriminal, highlighting the risks of autonomous AI. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/anthropics-claude-ai-weaponized-in-500k-cybercrime-spree/
-
How the retail sector teams up to defend against cybercrime
The cyber-threat intel-sharing and collaboration group RH-ISAC is helping companies confront cyberattacks. But the challenge is delivering timely intelligence in a dynamic threat environment. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/retail-isac-lessons-learned-scattered-spider/758504/
-
Kosovo man pleads guilty to running online criminal marketplace BlackDB
Kosovo man Liridon Masurica pleaded guilty to running the cybercrime marketplace BlackDB. He was arrested in 2024. Kosovo citizen Liridon Masurica (33) of Gjilan, aka @blackdb, pleaded guilty to running the BlackDB cybercrime market. Kosovo police arrested Masurica on December 12, 2024 and he was extradited to the US. The online criminal marketplace BlackDB.cc has…
-
Chrome Extension Scam Exposed: Hackers Stealing Meta Accounts
Tags: ai, browser, business, chrome, credentials, cyber, cybercrime, data-breach, hacker, malicious, scam, service, toolA sophisticated campaign targeting Meta advertisers through fake AI-powered ad optimization tools has been uncovered, with cybercriminals deploying malicious Chrome extensions to steal credentials and hijack business accounts. Cybereason Security Services has identified an evolving malicious Chrome extension campaign that specifically targets Meta (Facebook/Instagram) advertisers through a deceptive platform called >>Madgicx Plus.
-
Apple slips up on ChillyHell macOS malware, lets it past security . . . for 4 years
‘We do believe that this was likely the creation of a cybercrime group,’ threat hunter tells The Reg First seen on theregister.com Jump to article: www.theregister.com/2025/09/10/chillyhell_modular_macos_malware/
-
Southeast Asian Scam Centers Face More Financial Sanctions
Firms cooperating with cybercrime syndicates in Burma and Cambodia face sanctions by the US government and enforcement actions by China, but the scams continue to grow. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/southeast-asian-scam-centers-financial-sanctions
-
Kosovo hacker pleads guilty to running BlackDB cybercrime marketplace
Kosovo national Liridon Masurica has pleaded guilty to running BlackDB.cc, a cybercrime marketplace that has been active since 2018. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/kosovo-hacker-pleads-guilty-to-running-blackdb-cybercrime-marketplace/
-
Salty2FA Takes Phishing Kits to Enterprise Level
Cybercriminal operations use the same strategy and planning as legitimate organizations as they arm adversarial phishing kits with advanced features. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/salty2fa-phishing-kits-enterprise-level
-
Salty2FA Phishing Kit Unveils New Level of Sophistication
Salty2FA phishing campaign showcases advanced techniques and professionalism of cybercrime operations First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/salty2fa-phishing-kit/
-
U.S. Cracks Down on Scam Networks in Southeast Asia Draining Billions
In a sweeping effort to curb transnational cybercrime and human rights abuses, the U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) today imposed sanctions on a sprawling network of scam centers operating in Southeast Asia. These centers, which exploit forced labor and violence, defrauded Americans of more than $10 billion in 2024.…
-
SpamGPT: New AI Email Attack Tool Fueling Massive Phishing Operations
A novel AI-driven email attack toolkit namedSpamGPThas surfaced on underground hacking forums, promising cybercriminals an all-in-one platform for launching large-scale phishing campaigns. Advertised as an “AI-powered spam-as-a-service” solution, SpamGPT automates compromise of email servers, bypasses major spam filters, and offers marketing-style campaign analytics. Security researchers warn that its user-friendly interface and AI-assisted content generation significantly…
-
SpamGPT: New AI Email Attack Tool Fueling Massive Phishing Operations
A novel AI-driven email attack toolkit namedSpamGPThas surfaced on underground hacking forums, promising cybercriminals an all-in-one platform for launching large-scale phishing campaigns. Advertised as an “AI-powered spam-as-a-service” solution, SpamGPT automates compromise of email servers, bypasses major spam filters, and offers marketing-style campaign analytics. Security researchers warn that its user-friendly interface and AI-assisted content generation significantly…
-
SpamGPT: New AI Email Attack Tool Fueling Massive Phishing Operations
A novel AI-driven email attack toolkit namedSpamGPThas surfaced on underground hacking forums, promising cybercriminals an all-in-one platform for launching large-scale phishing campaigns. Advertised as an “AI-powered spam-as-a-service” solution, SpamGPT automates compromise of email servers, bypasses major spam filters, and offers marketing-style campaign analytics. Security researchers warn that its user-friendly interface and AI-assisted content generation significantly…
-
Trend Micro veröffentlicht zentralen Überblick über den Cybercrime Underground
Tags: cybercrimeDie Reihe enthält das einzigartige, gesammelte Wissen der führenden Bedrohungsforscher von Trend Micro, deren Erfahrung und Expertise eine nützliche Ressource für alle darstellt, die sich mit der Bekämpfung von Cyberkriminalität in den kommenden Jahren befassen. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/trend-micro-veroeffentlicht-zentralen-ueberblick-zur-cybercrime-underground-serie/a41934/
-
Trend Micro veröffentlicht zentralen Überblick über den Cybercrime Underground
Tags: cybercrimeDie Reihe enthält das einzigartige, gesammelte Wissen der führenden Bedrohungsforscher von Trend Micro, deren Erfahrung und Expertise eine nützliche Ressource für alle darstellt, die sich mit der Bekämpfung von Cyberkriminalität in den kommenden Jahren befassen. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/trend-micro-veroeffentlicht-zentralen-ueberblick-zur-cybercrime-underground-serie/a41934/
-
Treasury Department targets Southeast Asia scam hubs with sanctions
Cybercrime hubs in Southeast Asia scammed Americans out of at least $10 billion last year, a 66% increase from 2023, officials said. First seen on cyberscoop.com Jump to article: cyberscoop.com/southeast-asia-scam-hubs-sanctions/
-
NY Blood Center Says Data Was Stolen in January Attack
Nonprofit Is Among Several Blood Suppliers Hit by Cybercriminals Over the Past Year. New York Blood Center Enterprises said an undisclosed number of patients, employees and other individuals are potentially affected by a January cyberattack that compromised personal and health related information. The hack was among several attacks on blood suppliers over the past year.…
-
Hackers Promote Gambling Websites With SEO Poisoning
GhostRedirector Compromising Windows Servers in Brazil, Thailand and Vietnam. A suspected Chinese cybercrime group is deploying custom malware to compromise Windows servers in Brazil, Thailand, Portugal and Vietnam as part of search engine optimization fraud to promote gambling websites. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/hackers-promote-gambling-websites-seo-poisoning-a-29389
-
NY Blood Center Says Data Was Stolen in January Attack
Nonprofit Is Among Several Blood Suppliers Hit by Cybercriminals Over the Past Year. New York Blood Center Enterprises said an undisclosed number of patients, employees and other individuals are potentially affected by a January cyberattack that compromised personal and health related information. The hack was among several attacks on blood suppliers over the past year.…
-
Georgia Hospital Notifying 163,000 of 2024 Ransomware Hack
Cybercrime Gang Monti Listed 84-Bed Rural Hospital Among Its Victims Last Summer. A public Georgia community hospital is notifying more than 163,000 individuals that their sensitive health information was compromised in a June 2024 ransomware attack. The cybercriminal gang Monti on its dark website last summer claimed Wayne Memorial Hospital as one of its victims.…
-
Hackers Exploit Amazon SES to Blast Over 50,000 Malicious Emails Daily
Tags: cloud, credentials, cyber, cyberattack, cybercrime, email, exploit, hacker, malicious, phishing, service, threatA sophisticated cyberattack campaign where threat actors exploited compromised AWS credentials to hijack Amazon’s Simple Email Service (SES), launching large-scale phishing operations capable of sending over 50,000 malicious emails daily. The Wiz Research team identified this alarming SES abuse campaign in May 2025, highlighting a concerning trend where cybercriminals are weaponizing legitimate cloud services to…
-
macOS Under Attack: Atomic Stealer Hidden in Pirated Software
The cybersecurity landscape for macOS users has taken a dangerous turn as cybercriminals increasingly target Apple’s ecosystem with sophisticated malware campaigns. Atomic macOS Stealer (AMOS), a specialized data-theft malware, has emerged as one of the most significant threats to Mac users, particularly those seeking cracked software applications. While macOS has historically maintained a reputation as…
-
Australian Authorities Expose Ransomware Gangs and Their Hidden Careers
Groundbreaking research reveals the inner workings of cybercriminal networks targeting Australia and allied nations. Australian researchers have completed a comprehensive analysis of ransomware criminal groups, providing unprecedented insights into one of the most damaging cybercrime threats of the modern era. The study, conducted by the Australian Institute of Criminology, examined 865 ransomware attacks across Australia,…
-
Hackers Exploit Fake Microsoft Teams Site to Spread Odyssey macOS Stealer
Cybercriminals have escalated their attacks against macOS users by deploying a sophisticated new campaign that leverages a fraudulent Microsoft Teams download site to distribute the dangerous Odyssey stealer malware. This development represents a significant evolution from earlier attacks that primarily targeted users through fake trading platforms. The malicious campaign first came to light in early…
-
CISA Alerts on WhatsApp 0-Day Vulnerability Actively Exploited in Attacks
Tags: attack, cisa, cve, cyber, cybercrime, exploit, flaw, ransomware, risk, vulnerability, zero-dayCISA has issued an urgent warning about a newly discovered zero-day vulnerability in WhatsApp that is already being exploited in active attacks. The flaw, tracked as CVE-2025-55177, poses a significant risk to users worldwide, particularly as ransomware operators and other cybercriminals seek to take advantage of the weakness in device synchronization processes. On September 2,…
-
Cybercriminals ‘Grok’ Their Way Past X’s Defenses to Spread Malware
Hackers exploit X’s Grok AI to spread malware via promoted ads, exposing millions to malicious links in a scheme researchers call “Grokking.” First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-grok-ai-malware-grokking/
-
Cybercriminals ‘Grok’ Their Way Past X’s Defenses to Spread Malware
Hackers exploit X’s Grok AI to spread malware via promoted ads, exposing millions to malicious links in a scheme researchers call “Grokking.” First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-grok-ai-malware-grokking/