Tag: accounttakeover
34 articles
630M Passwords Stolen: Exclusive Insight on Risk
630M passwords stolen — it’s a wake-up call: this massive leak fuels automated account takeovers and fraud, so now’s the time to detect compromises, force resets, adopt MFA, and stop password reuse.
New Android Albiriox Malware Exclusive: Dangerous Surge
Albiriox malware is being sold like a subscription, turning smartphones into turnkey crime tools that give even novice operators remote takeover, credential harvesting, and live‑fraud capabilities. That MaaS model lowers the bar for attackers and creates an industrialized path from infection to immediate theft that security teams and users now must reckon with.
Scattered Spider Exclusive: Dangerous Unified Collective
Imagine low‑tech social engineering and SIM swaps teaming up with mass data brokers — that’s Scattered Spider, ShinyHunters and LAPSUS$ fusing tactics to turn bulk theft into pinpoint extortion. Security teams and cloud customers now face a hybrid, high‑leverage threat targeting SaaS platforms like Salesforce.
Google Exclusive: Gmail Breach Claims Overblown
Headlines claiming 183 million Gmail accounts were hacked sparked panic, but Google says the scare is overblown. Security experts say the list is mostly recycled, aggregated credentials from older leaks—still risky for reused passwords, but not proof of a fresh Gmail-wide breach.
MuddyWater Exclusive Severe Breach Hits 100+ Gov Networks
MuddyWater used nothing fancier than a hijacked mailbox and a VPN to slip into over 100 government networks across the MENA region — proof that trusted tools and patient tradecraft can outsmart modern defenses. Learn how everyday cloud mail, SSO trust, and forwarding rules became the quiet engines of a widescale espionage campaign and what signs to watch for.
Iran’s MuddyWater Exclusive: Alarming Breach Hits 100+ Govt
Using one compromised mailbox and a rented VPN, MuddyWater quietly slipped into over 100 government networks across the Middle East and North Africa; its a sobering reminder that cheap, old-school tradecraft—phishing, account takeovers, and credential theft—still outsmarts defenders chasing flashy exploits.
WestJet Notifies Americans of Exclusive Data Breach Risk
WestJet told U.S. customers that a criminal intrusion discovered in June may have exposed personal and loyalty-account information—potentially affecting hundreds of thousands to over a million travelers—and has raised tough questions about who safeguards the sensitive travel data airlines collect. More than an operational headache, the breach highlights how legacy systems and third‑party connections can turn travel records into prime targets for phishing and identity fraud.
Jingle Thief Exclusive: Hackers Devastate Gift Cards
Exclusive: Hackers are turning gift cards into easy targets—our deep dive reveals how gift card fraud works, who’s at risk, and simple steps to protect your balance.
Iran-linked MuddyWater Breach Hits 100+ Government Networks
How did one compromised mailbox become a battering ram against more than 100 government networks? Researchers say Iran-linked MuddyWater used a hijacked account and its own VPN to send convincing phishing across the Middle East and North Africa, quietly stealing credentials and siphoning sensitive intelligence — a reminder that simple, trusted tools can inflict huge damage.
Feds Tie Scattered Spider Duo to $115M in Ransoms
U.S. prosecutors say 19‑year‑old Thalha Jubair helped power Scattered Spiders telecom‑focused extortion ring, allegedly netting at least $115 million through SIM‑swap scams, social engineering and account takeovers. The cross‑border indictment is a stark wake‑up call that human trust, lax recovery policies and reused credentials—not exotic malware—still fuel major ransoms.
SIM farm Stunning Takedown: Risky Fraud Network
Europol’s Operation SIMCARTEL dismantled a massive SIM farm tied to about 49 million fake accounts, arresting suspects and exposing how cheaply scammers can weaponize phone numbers to automate fraud. The takedown is a wake‑up call to ditch SMS as sole protection and push for stronger, phishing‑resistant authentication across services.
Whisper 2FA: Exclusive Risky Phishing Threat
Think 2FA is foolproof? Researchers warn Whisper 2FA — a phishing‑as‑a‑service tool tied to roughly one million credential‑theft attempts since July 2025 — shows attackers can cheaply scale real‑time relay attacks, so phishing‑resistant authentication and layered defenses are now essential.
Digital fraud: Stunning Costly Threat to Revenue
Nearly one in every thirteen dollars disappears to digital fraud—TransUnion says it costs companies 7.7% of revenue (about $534 billion globally). That’s a hidden tax on growth, trust and margins that demands smarter defenses.
credential stuffing: Risky Scourge, Must-Have Defenses
Think one reused password can’t hurt? A £2.31m fine proves it can — credential stuffing uses recycled logins and bots to drain money, steal data and wreck trust, and regulators are now forcing companies to adopt MFA, breached-password checks and smarter anti-bot defenses.
payment diversion fraud: Must-Have Critical Alert
Worried that the bank details in that email really belong to your solicitor? The NCA warns house buyers are being hit by payment diversion fraud—sometimes losing over £80,000—so always independently verify payment instructions and use secure channels to protect your sale.
npm registry Must-Have Fixes Make It Safer
A recent wave of phishing and malware-laced npm packages has pushed GitHub to tighten registry security—introducing mandatory 2FA for popular maintainers, trusted publishing rules, and sweeping takedowns—to stop attackers from slipping malicious updates into countless JavaScript projects. These changes aim to make the ecosystem safer without losing the openness that powers modern development.
Scattered Spider: Shocking Arrests Spark Risky Fallout
Two teenagers have been arrested in the U.K. over last August’s Transport for London outages, with authorities linking them to the Scattered Spider hacking collective. The case highlights how young, tech‑savvy actors can trigger big disruptions—and why public systems, law enforcement and policy must adapt quickly.
RaccoonO365 Disrupted: Critical, Must-Have Security Win
Microsoft just dismantled RaccoonO365, seizing 338 fake login sites that had harvested at least 5,000 Microsoft credentials — a big win that cuts off a major phishing operation and a wake-up call to harden your accounts.
CVE-2025-54236: Must-Fix Critical Takeover Threat
If you run Adobe Commerce or Magento Open Source, treat CVE-2025-54236 (SessionReaper) as urgent—apply the vendor patch, rotate sessions and enforce MFA now to prevent account takeover. Customers should reset passwords and monitor accounts until sites confirm fixes.
npm packages Must-Have Defense Against Risky Attacks
Attackers briefly pushed trojanized npm releases that spread fast through the cloud, mined only pennies, and left security teams scrambling to contain and remediate. It’s a wake‑up call: package convenience comes with real supply‑chain risk, so tighten controls, pin dependencies, and treat dependencies as first‑class security assets.
unauthorized access incident: Stunning Risk — Act Now
Ugh — Plex warned of another password exposure. If you got notified, reset your password, enable MFA, and review connected devices right away.
SSL VPN Urgent: Must-Have Best Defenses
Imagine someone pounding on invisible locks: a massive brute‑force campaign recently blasted SSL VPNs and RDP hosts with relentless login attempts, showing how one weak credential can lead to ransomware or data theft. If you run remote access services, enable MFA, rate‑limit logins, and segment networks now to stop attackers before they get in.
WhatsApp zero-day: Critical Risk, Must-Have Fixes
This week’s wake‑up call — a WhatsApp zero‑day, a Docker escape bug, and reported Salesforce access — shows how small misconfigurations and stolen credentials chain together into big breaches. Patch promptly, enable MFA, and tighten container and identity hygiene before attackers stitch those gaps into a compromise.
Scattered Spider: Must-Have Defense for Risky Browser Attacks
The browser is now the workplace front door—and groups like Scattered Spider are exploiting it with social engineering and account-takeover tricks. Enterprises can keep cloud-first convenience without handing over the keys by layering phishing‑resistant MFA, locking down extensions and OAuth grants, and monitoring browser telemetry.