Tag: nation state actors
128 articles
Hackers Disrupt French Supermarkets by Exploiting Refrigeration Controller Flaws
In a shocking sabotage, hackers jacked up temperatures in refrigeration controllers to as high as 122°F (50°C), causing widespread food spoilage and fires across nearly 700 French supermarkets. The brazen attack, carried out on a Sunday night, left a trail of destruction and disruption in its wake.
Microsoft Disrupts Phishing Kits Behind 1 Billion Scam Messages
Microsoft and its partners have struck a major blow against cybercrime, disrupting three notorious phishing kits responsible for over 1 billion scam messages sent to 75,000 organizations worldwide. This significant takedown targets the tools behind a massive phishing operation.
FBI Disrupts ShinyHunters Extortion Group with Latest Arrest
The FBI has struck another blow against the notorious ShinyHunters extortion group with the arrest of a key suspect, bringing the group one step closer to being held accountable for their malicious actions. A Canadian citizen, considered a primary co-conspirator, was apprehended in Pennsylvania, although authorities have not yet disclosed the individual's name or specific charges.
Ransomware Recovery CEO Charged in Alleged Secret Ransom Payments Scheme
A CEO's shocking scheme to profit from ransomware recovery has landed him in hot water, accused of secretly paying off ransomers while pretending to decrypt the malware for his clients, leaving them victimized twice over. The alleged scam, which ran from 2018 to 2023, could now cost him up to 20 years in prison.
Ransomware Affiliate Betrays Partners, Siphons Victim Funds
In a shocking betrayal, a rogue ransomware affiliate named Azazel secretly siphoned off victim funds and ran his own leak site, defying the standard rules of the ransomware-as-a-service partnership. This brazen move not only hurt his partners but also left victims vulnerable to further exploitation.
FBI Arrests Multiple Suspects Linked to ShinyHunters Hack
The FBI has scored a major win in the fight against cybercrime, arresting multiple suspects linked to the notorious ShinyHunters hack, and vowing to leave no stone unturned in bringing all responsible individuals to justice. The operation is ongoing, with the bureau working closely with law enforcement partners to crack down on the group.
AI Accelerates Cyber Attacks to Minutes, Microsoft Warns
Microsoft warns that AI is supercharging cyber attacks, condensing what once took days into mere minutes - putting defenders on the back foot and giving attackers a disturbing head start. This alarming acceleration is happening during the most critical phases of an attack, including credential discovery, lateral movement, and data exfiltration.
Dutch Police Apprehend Alleged ShinyHunters Leader
A major blow has been dealt to the notorious ShinyHunters cybercrime group with the arrest of a 24-year-old man in Amsterdam, accused of helping to orchestrate a string of high-profile extortion attacks that have netted at least $70 million since last year. The suspect has been ordered to be detained for 90 days in Rotterdam as authorities continue to crack down on the group's activities.
FBI Targets ShinyHunters with Takedown Warning
The FBI has issued a stark warning to the ShinyHunters gang: Brett Leatherman, assistant director for the Cyber Division, told members in a videotaped message that investigators are closing in and urged them to turn themselves in while they still can. The warning comes on the heels of a recent arrest by the Dutch National Police.
US Charges Vietnamese Man in $16 Million Crypto Scam
A Vietnamese man has been charged in the US for masterminding a crypto scam that raked in a staggering $16 million, with authorities seizing over $53 million in cryptocurrency assets from his wallets. He was arrested at Los Angeles International Airport after entering the US from Mexico and was set to flee to Taiwan.
ShinyHunters Exposes FBI Agents' Data in Escalating Confrontation
A disturbing data breach has exposed sensitive information about FBI agents, including personal contact details, family members, and job assignments, sparking serious concerns about counterintelligence and safety risks. The breach, attributed to ShinyHunters, has raised alarms among researchers and threat hunters who have seen samples of the stolen data.
ShinyHunters Exploits Grav CMS Flaw to Breach Clop Leak Site
The Grav CMS flaw, tracked as CVE-2026-42608, was exploited by ShinyHunters to breach the Clop gang's leak site, and the vulnerability has since been patched in Grav's 2.0 and 1.7 branches. Grav confirmed the legitimacy of the flaw and the threat actor's description, and has implemented a fix to prevent further attacks.
ShinyHunters Breach FBI, Exposes Agent and Applicant Data
The notorious cyber extortion group ShinyHunters has brazenly claimed to have breached the FBI's systems, compromising sensitive data on nearly all FBI agents and job applicants. This shocking breach puts the personal information of current and former employees, as well as aspiring agents, at risk.
ShinyHunters Breach FBI Systems with Oracle PeopleSoft Zero-Day
Meet the hackers who just pulled off a massive heist: ShinyHunters claims to have stolen 2-3TB of sensitive data from FBI systems by exploiting a previously unknown flaw in Oracle PeopleSoft. The breach reportedly exposed personal info of current and former FBI employees, as well as applicant data.
ShinyHunters Breaches FBI, Exposes Employee Data in Dispute Over Gang's Tactics
In a shocking move, ShinyHunters breached FBI systems, exposing sensitive employee data, to pressure the agency to correct its public statements about the group's tactics. The hackers' surprising motive: not financial gain, but a demand for the FBI to retract its claims.
RatHat Malware Exploits AI to Automate Android Device Control
Meet RatHat, a sneaky new Android malware that uses AI to take control of your device, navigating and interacting with it in real-time - making it a formidable foe for security software. This clever malware is spread through cleverly disguised ads, texts, and fake websites, and may even have ties to Chinese threat actors.
Swiss Court Sentences Ukrainian Ransomware Developer to 13 Years
A Swiss court has dealt a significant blow to cybercrime, sentencing a 52-year-old Ukrainian ransomware developer to nearly 13 years in prison. This landmark ruling sets a strong precedent for those who wreak havoc with malicious software.
Ransomware gangs exploit VMware flaw
Ransomware gangs are actively exploiting a critical VMware flaw, CVE-2026-59310, that was patched just two weeks ago, putting organizations at risk of devastating attacks. The US Cybersecurity and Infrastructure Security Agency has warned of the vulnerability, which allows unauthenticated attackers to execute arbitrary code.
Revolut Breach Exposes Sensitive Data of Customers Worldwide
A cunning email scam has led to a massive data breach at Revolut, exposing sensitive information of customers globally, with the scammer posing as a legitimate government agency to trick the fintech firm into sharing customer data. Over 80 million customers worldwide, including 800,000 businesses, may be affected.
Threat Actors Exploit Trusted AI Platforms to Deliver Malware
Beware: hackers are exploiting trusted AI platforms by turning their helpful features against you, using tactics like shareable AI content and sponsored search results to deliver malware and hold your files hostage. Your trusted tools can quickly become a vulnerability, as threat actors find new ways to abuse the very features you rely on.
Ukrainian Lawyer Turned Conti Coder Gets 4-Year Sentence
Meet Oleksii Oleksiyovych Lytvynenko, a Ukrainian lawyer-turned-ransomware coder who traded in his law books for a life of cybercrime as a key player in the notorious Conti operation, and ultimately paid the price with a four-year prison sentence. He was caught funneling thousands of dollars in cryptocurrency to his co-conspirators, including a $25,042 transfer that sealed his fate.
AI Agents Fuel Rapid PaperCut Attacks on 395 Organizations
In a stunning display of speed, hackers used AI agents to exploit PaperCut vulnerabilities, compromising at least 11 organizations in just 26 seconds and gaining domain admin access in a mere two hours. This rapid, automated campaign hit 395 organizations across 48 countries, leaving a trail of destruction in its wake.
Gigabud Trojan Exploits Android Work Profiles to Evade Banking App Malware Checks
The sneaky Gigabud Trojan is exploiting Android work profiles to slip past banking app security checks, allowing it to secretly tamper with transactions and drain accounts. By creating a separate work profile, Gigabud can hide in plain sight and facilitate fraudulent payments that appear legitimate.
MantaxOtax Malware Targets Android Devices with Ransomware and Spyware
Meet MantaxOtax, a sneaky malware that's putting Android users on high alert with its potent mix of ransomware and spyware, allowing hackers to hold your device hostage and snoop on your personal life. This hybrid threat can encrypt your files, track your location, and even siphon off sensitive info like contacts, call logs, and gallery content.