Cybercrime news | The Register

REG AD

SECURITY > CYBERCRIME

Latest news on criminal online attacks and defense techniques

Disgraced US gov software contractor found guilty of database destruction

Twin brother still faces trial over broader cybercrime allegations

Four young people lie on green grass in colorful clothing, viewed from above, smiling and relaxing.

Hackers ate my homework: Educational SaaS Canvas down after cyberattack

ShinyHunters takes the credit and gives developer an F for security

Fake IT workers rented laptops to Nork scammers, got prison time

Matthew Isaac Knoot and Erick Ntekereze Prince will each do 18 months for hosting laptops used by North Korean IT workers to remotely infiltrate US companies

$250M crypto-robbing gang’s dirty work guy sentenced to 6.5 years behind bars

The then-teen was told to break in and steal what the keyboard warriors couldn’t

REG AD

State-backed hackers hammer Palo Alto firewall zero-day before patch lands

Internet-facing PAN-OS firewalls are once again doing impressions of initial access brokers

Three armed officers in tactical gear move through smoke in a dimly lit training scene.

Hungarian cops cuff suspected swatter after two-year FBI probe

20-year-old fessed up after investigators found video of crime in progress

Taiwan cops say student's radio kit brought bullet trains to a standstill

Investigators spent weeks unravelling enthusiast's bedroom project

Linux penguin

Attackers are cashing in on fresh 'CopyFail' Linux flaw

Researchers dropped a reliable root exploit and it didn’t sit idle for long

for sale

Real estate giant confirms vishing incident as ShinyHunters and Qilin both come knocking

Cushman & Wakefield activated incident response protocols after serial extortionists issued separate threats

influencer uploads video to Vimeo. image credit: Premreuthai / Shutterstock

ShinyHunters claims dump puts 119K Vimeo emails in the wild

Vimeo points finger at analytics supplier Anodot, says no logins or card data were touched

danger_romance_scam_sign_keyboard

Romance scammers turn sweet talk into £102M payday

Victims losing £280K a day to fake profiles and sob stories

bouncer

First reports come in of victims of critical cPanel vuln as 'millions' of sites potentially exposed

Exploitation was underway before patches landed, at least one victim reports ransomware demand

REG AD

Iran cyberattack keyhole

Pro-Iran crew turns DDoS into shakedown as Ubuntu.com stays down

313 Team tells Canonical: pay up or the packets keep coming

Computer worm photo via Shutterstock

The never-ending supply chain attacks worm into SAP npm packages, other dev tools

Mini Shai-Hulud caught spreading credential-stealing malware

hacker

FBI cyber boss: China's hacker-for-hire ecosystem 'out of control'

One alleged cyber contractor was extradited to the US over the weekend

The Eiffel Tower in Paris, France

French prosecutors link 15-year-old to mega-breach at state’s secure document agency

Two computer crime allegations follow up to 18M lines of data surfacing online

sign in phishing

Nearly half of UK businesses pwned last year as phishing keeps doing the job like it's 2005

Turns out the real problem is not AI but staff still clicking on dodgy emails from 'IT support'

China flag with code

What type of 'C2 on a sleep cycle' do they leave behind? Novel Chinese spy group found in critical networks in Poland, Asia

Just in time for the Trump-Xi summit

Russian bear

Microsoft's patch for a 0-day exploited by Russian spies fell short. Another Windows flaw is under attack

Second try's a charm?

A blowtorch burning a computer board

Don't pay Vect a ransom - your data's likely already wiped out

'Full recovery is impossible for anyone, including the attacker'

Email leak

Have I Been Pwned claims Pitney Bowes hit by 8.2M email address leak

Names, phone numbers, physical addresses also included in Shiny Hunters alleged data dump

online attack

Ongoing supply-chain attack 'explicitly targeting' security, dev tools

Vendor confirms repo data exposure after Lapsus$ claims source code, secrets dump

hacked

Medical and utility tech companies admit digital breakins

Itron, Medtronic disclose breaches in Friday filings

burglar

Burglar alarm biz burgled: ADT confirms cyber intrusion after ShinyHunters extortion attempt

Security giant says attackers grabbed 'limited set' of data. Crooks claim 10 million records

teams

Crime crew impersonates help desk, abuses Microsoft Teams to steal your data

Coming in cold with custom Snow malware

Carnival cruise ships docked in Cozumel, Mexico Pic credit: CathyRL / Shutterstock

ShinyHunters claim they have cruise giant Carnival's booty as 7.5M emails surface

Leak-site bragging meets breach hunters as Have I Been Pwned flags millions of records

US Marshals perform rooftop surveillance (editorial Use Only.) Pic credit: Elliott Cowand Jr / Shutterstock

Governments on high alert after CISA snuffs out Firestarter backdoor on fed network

Latest in long-running pwning of Cisco kit found in mystery Fed agency

confused developer

Dev targeted by sophisticated job scam: 'I let my guard down, and ran the freaking code'

Legit-looking website, camera-on interviews, jokes about backdoors ... it worked

china

Chinese attackers are pwning your infrastructure to use in attacks, 10 countries warn

All the Typhoons, everywhere, all at once

studiostoks http://www.shutterstock.com/gallery-2892448p1.html

Medical data of 500k Biobank volunteers listed for sale on Alibaba, UK minister reveals

World's largest biomedical dataset lifted and shifted on Chinese mega marketplace

REG AD

Another npm supply chain worm is tearing through dev environments

Plus, the payload references 'TeamPCP/LiteLLM method'

Man holds French passport on the street Krakenimages.com / shutterstock

France's 'Secure' ID agency probes breach as crooks claim 19M records

Gov admits 'incident' as forum sellers boast of fresh haul covering up to a third of the population

cynthia_kaiser_us_house_hearing

Murder, she wrote: Ex-FBI chief wants some ransomware crims charged with homicide

Lawmakers decry CISA cuts: 'We are shooting ourselves in the foot'

REG AD

Cisco

More Cisco SD-WAN bugs battered in attacks

CISA gives federal agencies 4 days to patch

macOS ClickFix attacks deliver AppleScript stealers to snarf credentials, wallets

Data from browsers, cryptocurrency wallets, 200+ extensions hoovered up

Men in suits on opposite side of a table angrily pointing at each other

Yet another ex-ransomware negotiator admits turning rogue after payoff from crimelords

Plus: Court papers reveal nonprofit paid a ransom worth nearly $26.8 million

AI-assisted intruders pwned Vercel via OAuth abuse and a pilfered employee account

CEO suspects silicon sidekick behind 'surprising velocity' breach - cyber crims shop stolen data for $2M

security chap watches footage of multiple cctv feeds

Crook claims to leak 'video surveillance footage' of companies

Mexican IT services firm admits it was hacked, but says client operations weren't affected

Adaptavist Group breach spawns imposter emails as ransomware crew claims mega-haul

Fake emails already doing the rounds as ransomware crew boasts about what it allegedly stole

spider

Scot becomes second Scattered Spider-linked crook to plead guilty in US

Tyler Buchanan admits role in scheme that stole at least $8 million in virtual currency

North Korea targets macOS users in latest heist

Social engineering: 'low-cost, hard to patch, and scales well'

Textbooks

Textbook titan McGraw Hill on ransomware crew's reading list after 13.5M records exposed

Publisher claims misconfigured Salesforce-hosted page leaked data

cars

Automotive data biz Autovista blames ransomware for service disruption

Some customer orgs tell staff to block inbound email from the provider

crook_breaking_entering

French cops free mother and son after 20-hour crypto kidnap ordeal

Latest in a string of cases that have earned France an unfortunate title

Kangaroos fighting

No honor among thieves as 0APT threatens rival ransomware gang Krybit

Honey, the skids are fighting again

Image composite: Microsoft and StudioLondon http://www.shutterstock.com/gallery-893620p1.html

Zombie Microsoft bugs rise from the dead, pave way for crims and ransomware scum

One was patched almost 14 years ago

slack

Fake Linux leader using Slack to con devs into giving up their secrets

Google Sites lure leads to bogus root certificate

REG AD

Man opens hotel room with key card

Booking.com warns reservation data may have checked out with intruders

Travel giant says names, contact details, dates, and hotel messages potentially exposed

Adobe reader, Shutterstock

Adobe finally patches PDF pest after months of abuse

Reader and Acrobat flaw let booby-trapped documents profile targets and hijack machines

Gym training

Gym giant Basic-Fit confirms data on a million members stolen in cyberattack

Names, addresses, dates of birth, and bank details accessed, though not passwords

Someone playing Grand Theft Auto on a screen

Rockstar Games gets a taste of grand theft data

ShinyHunters claims it accessed Snowflake metrics via third-party tool

crypto_scam_seizure

Crypto? Huh. Good gawd y'all, what is it good for? $45M in this case

Cops bust latest scam, return $12m to bilked victims

Someone wearing a raccoon mask while typing at a keyboard against a yellow background

'Several dozen' high-value corporations hit by new extortion crew in helpdesk phishing spree

Possible link to Mr. Raccoon's claimed Adobe break-in

Scared looking office consultant hides under desk

Months-old Adobe Reader zero-day uses PDFs to size up targets

Malicious PDFs abuse legit features to harvest system data and decide which victims get a 2nd-stage payload

hacker

Zephyr Energy loses £700K in cyber hit that rerouted contractor payment

Attackers slipped into the process and redirected funds, leaving the company scrambling to recover the cash

hospital

Dutch healthcare software vendor goes dark after ransomware attack

ChipSoft's website remains down but emails are functioning

water

Iran cyber actors disrupting US water, energy facilities, FBI warns

Your PLCs aren't internet-connected, right? Right?!

microsoft

Hundreds of orgs compromised daily in Microsoft device code phishing attacks

Who needs MFA when you've got EvilTokens?

US cybercrime losses pass $20B for first time as AI boosts online fraud

Bots are now firmly in the toolbox, helping crooks scale old scams

bear

Russia's Fancy Bear still attacking routers to boost fake sites, NCSC warns

200 orgs and 5,000 devices compromised so far in Vlad's latest intelligence grab, Microsoft reckons

roof fire

Attackers exploited this critical FortiClient EMS bug as a 0-day

CISA added the flaw to KEV after Fortinet confirmed exploitation in the wild

John_Fokker

Researchers didn’t want to glamorize cybercrims. So they roasted them

True-crime tales of criminals making fools of themselves

Cybersecurity stress

They thought they were downloading Claude Code source. They got a nasty dose of malware instead

Source code with a side of Vidar stealer and GhostSocks

Broken chain graphic

AI recruiting biz Mercor says it was 'one of thousands' hit in LiteLLM supply-chain attack

First public downstream victim, but won't be the last

Factory crane

UK manufacturers under cyber fire with 80% reporting attacks

ESET says factory outages, lost revenue, and supply chain disruption are becoming routine

whatsapp

Don't open that WhatsApp message, Microsoft warns

How to avoid social engineering attacks? Employee training tops the list

Iran cyberattack keyhole

Iran targets M365 accounts with password-spraying attacks

Researchers say some targets correlate with cities hit by Iranian missile strikes

chain

Telnyx joins LiteLLM in latest PyPI package poisoning tied to Trivy breach

Also, EU probes Snapchat, RedLine suspect extradited, AstraZeneca leak claim surfaces, and more

European commission photo via Shutterstock

European Commission admits attackers broke into public web systems, but says little else

Brussels notifying 'Union entities' whose data may've been snatched in websites breach

Football goes into the net/ photo by shutterstock

AFC Ajax drops ball as flaws let hackers play admin with tickets and bans

Vulns in Dutch football club's systems didn't just expose data – they let outsiders play with accounts, and even lift stadium bans