October 1, 2024 at 03:45AM Over 140,000 phishing websites linked to Sniper Dz, a phishing-as-a-service platform, have been discovered. It offers free services, drawing in cybercriminals, while also collecting stolen credentials. Aspiring threat actors can easily mount phishing attacks through PhaaS platforms, such as Sniper Dz. The platform operates openly and has been observed targeting … Read more
September 30, 2024 at 06:05PM The U.S. SEC charged U.K. citizen Robert B. Westbrook with hacking into the computer systems of five U.S. public companies, accessing confidential earnings information, and conducting insider trading. Westbrook made illegal profits of approximately $3,750,000 from 14 trades. He now faces civil and criminal charges, which may result in prison … Read more
September 30, 2024 at 08:00AM Microsoft warns of cybercriminal gang Storm-0501 targeting US organizations’ hybrid cloud environments with ransomware deployments. Active since 2021, the financially motivated group employs various ransomware families and exploits weak credentials and known vulnerabilities to gain control of networks, compromise devices, and deploy ransomware, posing a threat across multiple sectors. Based … Read more
September 28, 2024 at 06:24AM A malicious Android app discovered in the Google Play Store masqueraded as a legitimate WalletConnect protocol to deceive users and steal $70,000 in cryptocurrency. It achieved over 10,000 downloads through fake reviews and consistent branding, impacting over 150 users. The app prompted users to sign transactions, enabling attackers to drain … Read more
September 27, 2024 at 05:51PM Three Iranians have been charged by the US Department of Justice for their involvement in a wide-ranging hacking campaign, including stealing and leaking materials from Donald Trump’s 2024 presidential campaign. The indictment accuses the individuals of wire fraud, identity theft, and targeting US government officials and media members. The FBI … Read more
September 27, 2024 at 02:01PM The U.S. Department of Justice has charged two Russian nationals, Sergey Ivanov and Timur Shakhmametov, for money laundering and cybercrimes, including operating carding markets and cryptocurrency exchanges involving billions of dollars. Authorities also targeted Cryptex and seized servers hosting PM2BTC, leading to rewards for information on the individuals’ whereabouts. Additionally, … Read more
September 27, 2024 at 08:45AM The US government has offered rewards of up to $10 million for information leading to the arrest of two Russian nationals involved in operating and laundering proceeds from carding websites. Joker’s Stash, a marketplace for stolen payment card data, is estimated to have generated illegal profits in the range of … Read more
September 27, 2024 at 05:42AM Russian-speaking users are being targeted in a new cybercrime campaign using a commodity trojan called DCRat distributed through HTML smuggling. The technique involves embedding or retrieving the payload within HTML files, which are then propagated via bogus sites or malspam campaigns. Organizations are advised to monitor HTTP and HTTPS traffic … Read more
September 27, 2024 at 04:42AM The U.S. government sanctioned cryptocurrency exchanges Cryptex and PM2BTC and unsealed an indictment against a Russian national for money laundering services to cybercriminals. The action, part of Operation Endgame, led to the seizure of €7 million ($7.8 million) worth of cryptocurrency. Rewards were announced for information leading to the arrests … Read more
September 26, 2024 at 11:52AM The U.S. Treasury Department sanctioned Cryptex and PM2BTC, accusing them of laundering funds for Russian ransomware groups and cybercrime. The exchanges allegedly facilitated transactions for threat actors and failed to maintain anti-money laundering measures. These actions are part of a broader international effort to disrupt Russian cybercrime networks. U.S. citizens … Read more