Five months after takedown, LockBit is a shadow of its former self

July 31, 2024 at 10:23AM LockBit’s ransomware operation, led by leader LockbitSupp, suffered a significant blow following Operation Cronos. Despite efforts to rebuild and operate, LockBit’s reputation and impact have dwindled. With the mass exodus of affiliates and diminishing operations, the future of LockBit and its leader remains uncertain amidst changing dynamics in the ransomware … Read more

Company Paid Record-Breaking $75 Million to Ransomware Group: Report

July 31, 2024 at 06:36AM Zscaler’s ThreatLabz 2024 Ransomware Report reveals a company paid a record $75 million ransom to Dark Angels in early 2024, nearly double the highest known payment. An 18% increase in ransomware attacks was reported from April 2023 to April 2024. The report advises against paying ransom and highlights Dark Angels’ … Read more

AI-Powered Deepfake Tools Becoming More Accessible Than Ever

July 30, 2024 at 03:08PM Trend Micro’s research reveals the rapid evolution of AI-powered hacking services, posing increased threats to cybersecurity. The availability and sophistication of deepfake technology in the cybercrime underground are growing, providing opportunities for mass exploitation. Additionally, defunct criminal services are re-emerging with new functionalities, emphasizing the need for proactive cybersecurity measures. … Read more

Cyber Threat Intelligence: Illuminating the Deep, Dark Cybercriminal Underground

July 30, 2024 at 07:24AM Cybersixgill’s experts provide insights into dark web threats, emphasizing the importance of understanding the cybercriminal underground. Their State of the Underground 2024 report analyzes cybercrime trends, including compromised credit cards and ransomware markets. Additionally, they offer webinars detailing hacker mindsets and the role of wholesale access markets in facilitating ransomware … Read more

‘Zeus’ Hacker Group Strikes Israeli Olympic Athletes in Data Leak

July 29, 2024 at 02:22PM Sensitive data of Israeli athletes at the Paris Olympic Games, including blood test results and login credentials, was allegedly leaked by a hacking group called “Zeus.” Israel’s Foreign Minister expressed concern, prompting extra protection for Israeli and Palestinian delegations due to the Gaza conflict. French troops and police, as well … Read more

Russian ransomware gangs account for 69% of all ransom proceeds

July 26, 2024 at 10:30AM Russian-speaking threat actors accounted for over two-thirds, surpassing $500 million, of all ransomware crypto proceeds in the previous year, according to TRM Labs. North Korea leads in cryptocurrency theft, with Asia leading in scams and fraud. Russians dominate in malicious crypto activities, encompassing cybercrime, illicit exchanges, and darknet markets. From … Read more

This AI-Powered Cybercrime Service Bundles Phishing Kits with Malicious Android Apps

July 26, 2024 at 09:36AM The GXC Team, a Spanish-speaking cybercrime group, has bundled phishing kits with malicious Android apps, creating a sophisticated phishing-as-a-service platform. They target users of Spanish banks and institutions worldwide, using smishing and social engineering techniques. The threat also involves AI-infused voice calling tools, AI-powered voice cloning, and adversaries-in-the-middle capabilities in … Read more

Beware of fake CrowdStrike domains pumping out Lumma infostealing malware

July 25, 2024 at 06:42PM CrowdStrike’s threat intel team warns of a new scam using the Lumma infostealing malware, targeting Windows users. The malware extracts sensitive data for criminal use, such as online banking and cryptocurrency credentials. The scam leverages a fake CrowdStrike domain, posing as a recovery tool for a previous faulty sensor update. … Read more

North Korean Charged in Ransomware Attacks on American Hospitals

July 25, 2024 at 03:51PM Rim Jong Hyok, linked to a North Korean military intelligence agency, faces indictment for allegedly leading cyber attacks on American health care providers, NASA, and military bases. He used money laundering to finance the attacks, disrupting patient treatment and stealing unclassified data from NASA. A reward of up to $10 … Read more

Meta nukes massive Instagram sextortion network of 63,000 accounts

July 25, 2024 at 12:56PM Meta has removed 63,000 Instagram accounts from Nigeria due to sextortion scams, including a network of 2,500 accounts linked to 20 individuals targeting adult men in the United States. These scams are linked to the ‘Yahoo Boys’ cybercrime group. Meta has also deleted Facebook accounts, pages, and groups associated with … Read more