In Other News: Cloudflare Abuse, UK and EU Cybersecurity Reports, FBI Gen-AI Alert

December 6, 2024 at 08:36AM SecurityWeek’s summary highlights key cybersecurity stories, including a major US organization hacked by Chinese actors, FBI warnings about generative AI fraud, Stoli USA’s bankruptcy post-ransomware attack, UK and EU cybersecurity reports, Cloudflare service abuse, WAF configuration issues, new CISA resources, and spyware on a Russian programmer’s phone. ### Meeting Takeaways … Read more

Interpol Cyber-Fraud Action Nets More Than 5K Arrests

December 2, 2024 at 04:07PM Operation HAECHI V, involving law enforcement from 40 countries, led to the arrest of over 5,500 suspects and the seizure of $400 million in virtual assets, targeting various cyber frauds. Notably, a voice-phishing syndicate linked to $1.1 billion in losses was dismantled. Interpol emphasized the importance of international cooperation in … Read more

8 Million Android Users Hit by SpyLoan Malware in Loan Apps on Google Play

December 2, 2024 at 05:45AM A report from McAfee Labs identifies over a dozen malicious Android apps on the Google Play Store, collectively downloaded over 8 million times, which contain SpyLoan malware. These apps deceive users into sharing sensitive information under the guise of providing quick loans, leading to financial exploitation and privacy violations. ### … Read more

INTERPOL Arrests 5,500 in Global Cybercrime Crackdown, Seizes Over $400 Million

December 2, 2024 at 03:09AM A global law enforcement operation, Operation HAECHI-V, arrested over 5,500 suspects tied to financial crimes and seized $400 million in virtual assets. Conducted by authorities from 40 regions between July and November 2024, the coordinated effort highlights the critical need for international police cooperation to combat cybercrime effectively. **Meeting Takeaways … Read more

SpyLoan Android malware on Google play installed 8 million times

November 30, 2024 at 02:01PM McAfee identified 15 malicious SpyLoan apps targeting users in South America, Southeast Asia, and Africa, accumulating over 8 million downloads on Google Play. Deceptively marketed as loan services, these apps extort sensitive data and harass users post-installation. Despite removal efforts, SpyLoan risks persist, highlighting ongoing security challenges for app stores. … Read more

Interpol Clamps Down on Cybercrime and Arrests Over 1,000 Suspects in Africa

November 26, 2024 at 03:43PM Interpol’s two-month operation, Serengeti, arrested 1,006 suspects across 19 African countries, targeting cybercrime linked to 35,000 victims and nearly $193 million in losses. The collaboration with Afripol emphasized enhancing law enforcement capabilities and addressing emerging threats like AI-driven malware and advanced cyberattacks, marking significant progress in combating cybercrime. ### Meeting … Read more

Crook breaks into AI biz, points $250K wire payment at their own account

November 19, 2024 at 07:35AM Maryland AI company iLearningEngines reported a $250,000 loss from a wire transfer fraud linked to a business email compromise scheme. Following the incident, the company activated its cybersecurity response plan and engaged external experts. Despite containing the situation, iLearningEngines faces potential legal scrutiny and adverse impacts on operations and stock … Read more

New FakeCall Malware Variant Hijacks Android Devices for Fraudulent Banking Calls

November 4, 2024 at 01:45AM Researchers have identified a new version of the Android malware FakeCall, which employs voice phishing to deceive users into sharing personal information. It gains control of devices, intercepts calls, and manipulates users into contacting fraudulent numbers. Enhanced security measures and Google’s initiatives aim to combat this sophisticated threat. ### Meeting … Read more

Alleged Bitcoin crook faces 5 years after SEC’s X account pwned

October 18, 2024 at 08:39AM An Alabama man, Eric Council Jr, faces five years in prison for allegedly manipulating Bitcoin prices by hacking the SEC’s social media account. A false post about Bitcoin ETF approval caused Bitcoin’s price to spike, followed by a significant drop after the SEC retracted it. He is charged with conspiracy … Read more

North Korea Hackers Get Cash Fast in Linux Cyber Heists

October 15, 2024 at 05:31PM North Korean threat actors are leveraging a Linux variant of the FASTCash malware to conduct a financial cyber campaign, targeting banks and interbank processors. Originally aimed at Windows systems, the malware manipulates transaction messages to authorize unauthorized withdrawals. Researchers recommend enhanced security measures, including chip and PIN requirements for debit … Read more