INTERPOL recovers over $40 million stolen in a BEC attack

August 6, 2024 at 02:43PM INTERPOL’s global stop-payment mechanism recovered over $40 million stolen in a BEC attack on a Singaporean company, demonstrating its success in combating cybercrime. Based on the meeting notes, it can be summarized that INTERPOL’s global stop-payment mechanism effectively retrieved over $40 million that was stolen in a Business Email Compromise … Read more

U.S. Sentences 31-Year-Old to 10 Years for Laundering $4.5M in Email Scams

May 29, 2024 at 08:24AM The U.S. Department of Justice sentenced Malachi Mullings to 10 years for laundering $4.5 million through BEC and romance scams. He opened fake bank accounts and used the proceeds for luxury items. Meanwhile, Russian citizen Evgeniy Doroshenko has been indicted for selling access to corporate networks on cybercrime forums. Both … Read more

Microsoft: OAuth apps used to automate BEC and cryptomining attacks

December 12, 2023 at 06:54PM Threat actors are leveraging OAuth applications to automate BEC and phishing attacks, push spam, and deploy VMs for cryptomining. Microsoft recommends using multi-factor authentication (MFA) and implementing security measures like conditional access policies and continuous access evaluation to defend against these malicious activities. Security teams should also prioritize enabling MFA … Read more