A user may enter the correct password, complete MFA verification, and still lose their Microsoft 365 account. The phishing platform BigBear 2.0 intercepts the authenticated session after the second factor and delivers the attacker...
Cybercriminals have transformed ScreenConnect into a weaponized mechanism capable of infecting other ScreenConnect systems during standard connections. The modified client automatically detects a new session, dispatches malicious scripts via the native file transfer feature,...
Germany is poised to consolidate its defenses against hackers, rogue drones, and saboteurs into a singular, cohesive military logic. Following the alarming attack at Leipzig/Halle Airport, the national authorities are formulating a comprehensive package...
Ukrainian law enforcement agencies dismantled a sophisticated network of fraudulent cryptocurrency platforms in Kyiv. These illicit operations systematically siphoned assets from users spanning more than twenty nations. Investigators have definitively identified sixty-two victims thus...
A routine software search recently transformed into a critical entry point for severe malware infections. Microsoft recently exposed a sophisticated counterfeit installer campaign. Participants in this operation meticulously cloned the websites of renowned software...
The United States successfully seized the domains of two prominent hacking platforms. The Department of Justice and the FBI allege the Chinese state-sponsored group QTFY operated these platforms. The group utilized these domains to...
A South Korean court has sentenced to 20 years in prison one of the leaders of a hacking group that hunted the fortunes of wealthy Koreans and reached the assets of BTS’s Jungkook. The...
Israeli authorities recently arrested an information security specialist. Investigators allege this individual spent his free time intentionally infecting the very corporate networks he was trained to protect. Police suspect the Ashkelon resident, a man...
For the first time, the United States has struck with counterterrorism sanctions at the Italian hacktivist collective Autistici/Inventati, which for more than 25 years has provided activists with email, hosting, and tools for anonymous...
An attacker turned the comparatively small market for the MAMO token into a source of multimillion-dollar loans. Within a few hours, the assailant inflated the value of collateral in Moonwell, borrowed $11 million in...
A cyberattack on one of Australia’s largest book distributors has been disrupting deliveries across the country for roughly six weeks. After intruders breached the systems of Alliance Distribution Services, bookshops are receiving less stock,...
The Iranian group Tortoiseshell continues to broaden both its toolset and the geography of its operations. Group-IB specialists have uncovered previously unknown malware samples and additional server infrastructure tied to the group. Among the...
