Spanish law enforcement arrested five individuals linked to an international cryptocurrency fraud scheme that allegedly defrauded victims of more than $542 million. Spain Nabs Five Crypto suspects in coordination with Europol, following a large-scale investigation led by the Guardia Civil targeting a network that promoted fake investment platforms. Authorities said the suspects orchestrated a sophisticated […]
An Iranian hacker has pleaded guilty in the U.S. to involvement in a wide-ranging ransomware and extortion operation that inflicted $19 million in damages on the city of Baltimore. The defendant, identified as Sina Gholinejad, also known as Sina Ghaaf, 37, admitted to participating in a scheme that used Robbinhood ransomware to infiltrate and encrypt […]
Europol has identified and targeted over 2,000 online items linked to extremist groups that exploit minors in digital spaces. The coordinated action focused on content promoting radical ideologies while using children for propaganda or grooming purposes. According to a report from Hackread, the operation involved the identification and flagging of materials hosted on various platforms, […]
Google’s Threat Analysis Group has identified a zero-day vulnerability in the Chrome web browser that may have been exploited by commercial spyware vendors. The flaw, which was discovered recently, has raised concerns about the potential misuse of browser vulnerabilities by surveillance software developers. While technical details about the vulnerability have not been disclosed, the incident […]
A newly discovered variant of the Mirai botnet is exploiting a critical vulnerability, CVE-2024-3721, in TBK DVR-4104 and DVR-4216 digital video recorders, according to researchers from cybersecurity firm Kaspersky. The malware uses a direct infection method, bypassing architecture detection by deploying an ARM32 binary—tailored to the devices’ specifications—via a malicious POST request. Unlike earlier Mirai […]
A misconfigured database has exposed the personal information of approximately 3.6 million creators using Passion.io, a platform that helps users build custom mobile apps. The unsecured database, left accessible without authentication, reportedly contained sensitive user data, including names, email addresses, and other identifiable information. The breach was discovered by security researchers who found that the […]
A newly discovered cyberattack method, known as “SmartAttack,” leverages smartwatches to exfiltrate sensitive data from air-gapped systems, according to findings reported this week. The technique employs the built-in sensors of smartwatches to receive covert ultrasonic signals emitted by compromised devices within isolated environments. These air-gapped systems, typically disconnected from external networks for enhanced security, are […]
A Russian court has released four convicted members of the notorious REvil ransomware group after ruling that their prison time already served satisfied their sentences. The decision came after the court found them guilty of computer-related crimes, concluding a rare prosecution of cybercriminals inside Russia. The case drew attention as Russia frees convicted REvil members […]
A British citizen known online as IntelBroker has been charged by U.S. authorities for a series of cyberattacks that allegedly resulted in $25 million in damages. The individual reportedly stole and sold sensitive data from dozens of victims, targeting both private entities and public organizations. British hacker IntelBroker charged in connection with these breaches is […]
French authorities have arrested a business student interning at Société Générale for allegedly assisting cybercriminals in a SIM-swapping scheme that targeted 50 bank clients. The Société Générale intern aided scammers by providing confidential customer data, enabling the attackers to hijack victims’ mobile phone numbers and gain unauthorized access to their bank accounts. The scam involved […]
A cybercrime group known as “Dark Partner” is orchestrating widespread cryptocurrency thefts by leveraging a global network of fake software download sites, according to cybersecurity researchers. The fraud operation uses deceptive platforms that appear to offer artificial intelligence tools, virtual private networks (VPNs), and crypto-related applications to lure unsuspecting users. Once downloaded, the malicious software […]
Microsoft and CrowdStrike are spearheading a new initiative to standardize threat actor naming conventions across the cybersecurity industry. The joint project, which includes support from Google and Palo Alto Networks, seeks to map and align the disparate labels currently used by different organizations to identify the same cyber threat groups. The lack of standardized naming […]