Tag: group
-
FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested
The U.S. Department of Justice (DoJ) has disrupted the Famous Chollima threat group’s operations by arresting two suspects, charging 14 individuals, and seizing nearly 187 laptops used in North Korean remote IT worker schemes. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fbi-raids-dprk-it-worker-laptop-farms-in-texas-us-nationals-arrested/
-
Congressional probe faults Match Group for failing to rein in dating app scams
The Joint Economic Committee on Tuesday released the results of a year-long investigation into Tinder, Hinge, Match, Plenty of Fish and several other dating sites owned by Match Group. First seen on therecord.media Jump to article: therecord.media/congressional-probe-faults-match-group-for-failing-to-stop-dating-app-scams
-
Meta Removes 3.7 Million Scam Accounts as 28 Arrested in Global Crackdown
Meta removed more than 3.7 million Facebook and Instagram accounts, Pages, and Groups during an international crackdown on West African scam networks that resulted in 28 arrests and the rescue of 117 trafficking victims. Announced October 13, the operation combined platform enforcement, financial tracing, and physical raids against fraud infrastructure targeting victims worldwide. Meta and…
-
South African clothing retailer Foschini Group investigating cyberattack on British fashion brands
The South African retail giant The Foschini Group (TFG) disclosed a cyberattack that disrupted IT systems at three of its British fashion brands, leaving some services unavailable. First seen on therecord.media Jump to article: therecord.media/foschini-group-south-africa-cyber
-
Kimsuky Uses Fake Zoom Installers and Malicious LNK Files to Deploy Malware
Tags: cyber, espionage, group, international, korea, malicious, malware, north-korea, phishing, powershell, spear-phishing, ukraine, windowsNorth Korea-linked cyber espionage group Kimsuky has expanded its Operation GitPower campaign by using fake Zoom installers and malicious Windows shortcut files to target Ukrainian experts working in diplomacy, security, and international policy. Researchers at Genians Security Center found that the campaign combines reply-baiting spear phishing, PDF-themed LNK files, public code-hosting platforms, hidden PowerShell execution,…
-
FBI Arrests Canadian Cybersecurity Executive in ShinyHunters-Linked Cybercrime Investigation
Federal Bureau of Investigation (FBI) agents arrested Canadian cybersecurity executive Edward Dubrovsky in Pennsylvania on October 8, 2026. This arrest is part of an investigation into alleged assistance to the ShinyHunters cybercrime group, according to KrebsOnSecurity. The case involves accusations of cyber extortion and conspiracy; however, the complaint remains largely sealed, so the specific allegations…
-
Nippon Columbia Malware Infection Puts 8.72 Million Daiichikosho Customer Records at Risk
Japanese karaoke operator Daiichi Kosho has issued a warning about a malware infection at its outsourcing partner, Nippon Columbia Group (NCG), that may have exposed about 8.72 million personal records. This potential data exposure includes both customer and employee information, not just customer records. As of now, neither data theft nor misuse has been confirmed,…
-
FBI Arrests Canadian Cybersecurity Executive in ShinyHunters-Linked Cybercrime Investigation
Federal Bureau of Investigation (FBI) agents arrested Canadian cybersecurity executive Edward Dubrovsky in Pennsylvania on October 8, 2026. This arrest is part of an investigation into alleged assistance to the ShinyHunters cybercrime group, according to KrebsOnSecurity. The case involves accusations of cyber extortion and conspiracy; however, the complaint remains largely sealed, so the specific allegations…
-
Months-Old Palo Alto VPN Vulnerability Remains a Target for Ransomware Groups
ReliaQuest confirmed that the Qilin and Settra ransomware groups are actively exploiting a Palo Alto vulnerability patched in May First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/palo-alto-vpn-vulnerability-target/
-
Security Affairs newsletter Round 599 by Pierluigi Paganini INTERNATIONAL EDITION
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. Anthropic Restricts Live Internet Access After Claude Evaluation Failures Silent Ransom Group Allegedly Extorted $207 Million Without…
-
Suspected ShinyHunters Extortion Hacker Arrested by FBI
FBI Vows to Dismantle Hacking Group After It Stole FBI Personnel Data. The FBI announced Friday the arrest of a suspected hacker behind the breach of a bureau HR system, marking the second recent detention of an alleged member of the ShunyHunters extortion group. The suspect, arrested earlier week in Pennsylvania, is a Canadian citizen.…
-
FBI arrests another suspected ShinyHunters hacker after agency breach
The FBI has arrested another suspected member of the ShinyHunters extortion group believed to be involved in the recent breach of FBI systems, Director Kash Patel announced Friday. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fbi-arrests-another-suspected-shinyhunters-hacker-after-agency-breach/
-
FBI touts another ShinyHunters arrest in response to data breach
“We will continue to work closely with our partners to disrupt what’s left of the ShinyHunters group and their associates, no matter where they operate,” FBI Director Kash Patel said. First seen on therecord.media Jump to article: therecord.media/shinyhunters-arrest-fbi-data-breach-investigation
-
Germany arrests alleged core Qilin ransomware member after extradition
Germany has arrested a Russian national suspected of being a leading member of the Qilin ransomware group following extradition from Japan earlier this month. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/germany-arrests-alleged-core-qilin-ransomware-member-after-extradition/
-
$10 million bounty offered for Chinese Hafnium hacker accused of Microsoft Exchange Server mega-attack
The US State Department is offering up to US $10 million for information about the whereabouts of Zhang Yu, a 44-year-old Chinese national who is accused of being a key figure in China’s state-sponsored hacking group, Hafnium. First seen on bitdefender.com Jump to article: www.bitdefender.com/en-us/blog/hotforsecurity/10-million-bounty-chinese-hafnium-hacker-microsoft-exchange-server-mega-attack
-
Ransomware-Gruppe Luna Moth betreibt Datenerpressung wie ein Geschäftsmodell
Sicherheitsforscher von Check Point haben einen Blick auf die am 5. Oktober 2026 geleakten ‘The Luna Moth Files”, internes Material der Silent Ransom Group (SRG) geworfen. Das offengelegte Paket der auch unter den Namen Luna Moth und UNC3753 bekannten Gruppe enthält Chat-Protokolle, ein Vishing-Dokument, Screenshots und einen angeblich gefälschten Lebenslauf eines Mitarbeiters. Bislang weiß niemand,…
-
UK and Allies Warn of Cyber Threat from China’s Integrity Technology Group
The UK, US and allies have issued an alert detailing malicious activity linked to China’s Integrity Technology Group First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/uk-allies-threat-china-integrity/
-
FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions
The U.S. Federal Bureau of Investigation (FBI) and Department of Justice (DoJ) have announced the disruption of malicious tools used by a China-linked advanced persistent threat group known as Flax Typhoon.To that end, the agencies seized several domains and blocked access to platforms that were used to scan, and in some cases infiltrate, U.S. critical…
-
FBI Warns Chinese Hackers Use Automated Tools and Botnets to Steal Sensitive Data
Tags: advisory, botnet, china, cyber, cybersecurity, data, exploit, government, group, hacker, healthcare, infrastructure, international, technology, tool, vulnerabilityThe FBI and international cybersecurity agencies have warned about hackers linked to the Chinese government who use automated vulnerability scanning, large-scale botnets, and hands-on exploitation to steal sensitive information worldwide. A joint advisory released on October 8, 2026, identified China-based Integrity Technology Group as a facilitator of operations targeting critical infrastructure, government agencies, healthcare systems,…
-
FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails
Tags: access, breach, china, cybersecurity, email, flaw, government, group, hacker, healthcare, law, technology, toolHackers tied to a Chinese cybersecurity company stole email from government organizations, law enforcement agencies, healthcare systems, and religious institutions in Southeast Asia, the FBI and agencies in 6 other countries said on October 8.The company, Integrity Technology Group, has been sanctioned by the U.S. and the UK. The hackers scanned websites for flaws using…
-
Hunt.io Finds New Infrastructure Of BraZetsu Access Broker Months Before Disclosure
Hunt.io traced BraZetsu ‘s infrastructure and found that hosting patterns and certificate data remained useful after published IOCs became outdated. Group-IB researchers published a detailed writeup on BraZetsu back on August 31, naming it a Python framework compiled with Nuitka and tying it to a Brazilian actor called Exilware with high confidence. Hunt.io checked whether…
-
Filigran announces speakers for first THREAD event
Filigran has announced the speaker line-up for THREAD, its first annual event for the cyber defence and threat intelligence community, taking place in Paris on 15 October. The free, one-day gathering at Les Jardins de Saint-Dominique will feature speakers from Accenture, Centrica, Thales Group and the FBI. Its programme combines strategic discussions with practical sessions…
-
Sandworm-Linked Group Sharpens Matchboil Downloader
Malware Has Hit Ukrainian Transport, Energy and Manufacturing Firms. Eset says Russia-aligned UAC-0099 has spent since at least 2024 refining Matchboil, a downloader used against Ukrainian organizations that now supports recurring command-and-control traffic, stronger evasion and delivery of the Matchwok backdoor. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/sandworm-linked-group-sharpens-matchboil-downloader-a-33037
-
What is MATCHBOIL? The Russia-aligned malware that installs a spying backdoor
ESET researchers traced almost two years of changes to MATCHBOIL, a downloader that the Russia-aligned group UAC-0099 uses to plant a second program on Windows machines in … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/08/matchboil-malware-uac-0099/
-
The Man Behind a West Bank Telegram Channel Trying to Keep Palestinian Drivers Safe
With no accurate Big Tech mapping app to help him, Anas Hattab launched a Telegram group to get himself home at night. Now nearly 350,000 Palestinians rely on it to navigate the occupied West Bank. First seen on wired.com Jump to article: www.wired.com/story/the-man-behind-a-west-bank-telegram-channel-trying-to-keep-palestinian-drivers-safe/
-
FBI warns that FortiBleed credential-harvesting attacks are locking out firewall users
An initial access broker is working with various ransomware groups in a global campaign. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/fbi-fortibleed-credential-harvesting-attacks/832366/
-
FBI warns that FortiBleed credential-harvesting attacks are locking out firewall users
An initial access broker is working with various ransomware groups in a global campaign. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/fbi-fortibleed-credential-harvesting-attacks/832366/