Europol, Microsoft Hit Malware Network Behind 27M Stolen Logins, 140,000 Infected Computers

Civilians behind international police probe into Russian cybercriminals

An international joint operation targeted SocGholish malware which exploited thousands of WordPress sites with the aim of gaining unauthorized access to computer systems.

A Brazilian banking trojan is targeting Santander and BBVA customers with fake PDF lures

A Brazilian banking trojan called Ousaban is going after Windows users who bank in Spain and Portugal, using fake PDFs, geofencing, and a payload hidden inside an image to steal credentials without triggering security tools. Fortinet’s FortiGuard Labs identified the campaign in May and published its analysis this week. The attack starts with a phishing [] This story continues at The Next Web

Hong Kong, mainland police smash HK$16.8 million cross-border phishing syndicate

Hong Kong police and mainland authorities have smashed a cross-border phishing syndicate that swindled victims out of HK16.8 million (US2.14 million) by impersonating the Water Supplies Department, resulting in 15 arrests between March and June. The joint enforcement action, code-named Operation Boldhawk, targeted a criminal chain that sent malicious text messages to residents in the city, Superintendent Hui Yee-wai of the police cyber security and technology crime bureau said on Friday. “This...

VEIL#DROP Malware Chain Uses Blogger Platform to Deliver PureLogs Stealer

Cybersecurity researchers have flagged a new multi-stage malware delivery attack chain that uses social engineering and Blogger pages to deliver an information stealer called PureLogs. The activity has been codenamed VEILDROP by Securonix. It's suspected that the initial payloads are distributed either via spear-phishing or a drive-by compromise, which occurs when an unsuspecting user lands on

Another Company Identified in Latvijas valsts meži Cyberattack Investigation

The cybercriminal responsible for the attack on Latvijas valsts meži (LVM) also compromised a server belonging to pharmaceutical manufacturer Olpha, Latvia’s national cybersecurity incident response institution Cert.lv informed the LETA news agency. According to Cert.lv, investigators discovered the breach of Olpha’s server while analysing the cyberattack against Latvijas valsts meži. The institution stressed that the [] The post Another Company Identified in Latvijas valsts meži Cyberattack Investigation appeared first on Baltic News Network.

Hackers Steal Funds From Polymarket Users, Potentially Millions

We're contacting impacted users refunding them in full.

LARS GUMEDE | SA must take cybersecurity seriously

Eskom says it has more than 1-billion cyberattacks a month and deepfake scams are up 1,200 in two years, writes Lars Gumede

Polymarket to Refund Users After Scammers Swipe Millions in Website Exploit

Hackers infiltrated Polymarket’s website via a compromised third-party vendor, the company said, swiping millions in crypto from users.

Only $1.75m cyber contract money paid to supplier – EOCO witness

An investigator with the Economic and Organised Crime Office (EOCO), Mr Frank Marshall Cromwell, yesterday told the High Court in Accra that only 1.75 million out of a 7 million payment for cyber security equipment was transferred to the Israeli supplier under the contract. Mr Cromwell, who testified as a prosecution witness, said bank records The post Only 1.75m cyber contract money paid to supplier – EOCO witness appeared first on Ghanaian Times.

Klue hack results in data breach at several cybersecurity firms

Huntress, HackerOne, Jamf, Recorded Future, and Tanium are among the cybersecurity companies that had data stolen following an earlier breach at market research firm Klue.

Hackers Breach Sensitive Government Network Used for World Cup and Major U.S. Event Security

The platform is unclassified. The information inside it may not be.

SpaceX (NASDAQ: SPCX) Goes Public: What A $1,000 Investment Actually Buys You

Space Exploration Technologies (NASDAQ: SPCX), better known as SpaceX, has been publicly traded for more than half a month following one of the most hyped initial public offerings in recent memory. At SpaceX’s closing price earlier this week, a 1,000 investment would buy an investor six shares of the company, with a small amount of [] The post SpaceX (NASDAQ: SPCX) Goes Public: What A 1,000 Investment Actually Buys You appeared first on Foreign Policy Journal.

Seeking Stamina Boosters, Thousands Fall Into Cyber Extortion Trap

Operating through sophisticated call centers, the gang exploited personal vulnerabilities by selling fake stamina-enhancing medicines online and then extorted the buyers by posing as law enforcement...

US seizes 400 sites illegally streaming World Cup matches

​The United States Government has ​seized hundreds of internet domains that were engaged in the unauthorized streaming of matches in the ​2026 FIFA World Cup in violation of U.S. copyright law. ​The Department of Justice ​said the ​approximately 400 ​sites ​affected used their domains for profit, to disrupt the international networks that profit from the [] US seizes 400 sites illegally streaming World Cup matches

Libyan Authorities Smash Cyber-Fraud Ring

The Financial Crimes, Anti-Money Laundering, and Counter-Terrorism Financing Agency has dismantled a major cyber-fraud network that targeted citizens by impersonating local Libyan banks, officials announced. The criminal ring utilised fraudulent social media technical support pages to launch sophisticated phishing attacks against banking clients. Two key suspects have been arrested and referred to the Partial Anti-Corruption [] The post Libyan Authorities Smash Cyber-Fraud Ring appeared first on Libyan Express.

The hidden abuse networks CNN exposed are facing a major crackdown

European investigators say they've identified more than 150 suspects and victims and uncovered more than 270 new leads after launching a cross-border operation targeting online networks linked to drug-facilitated sexual assault following CNN’s investigation. Saskya Vandoorne reports.

Trump admin moves to dismantle overseas scam operations targeting Americans

The department's Office of Foreign Assets Control sanctioned nine individuals and 26 entities linked to the group, including its leadership, investors in scam compounds, and front companies.

QNET calls for intensified action against organised fraud and trafficking in West Africa

The Chief Communications Officer of the QI Group, Ramya Chandrasekaran, has emphasised the growing sophistication of criminal networks exploiting vulnerable communities across West and Central Africa, while reaffirming QNET’s commitment to public education, victim support and strengthened cooperation with law enforcement agencies.

Smooth AI criminal drives 'first' end-to-end agentic ransomware attack

Don't count on the LLM to return your data - even if you pay up

Polymarket: Hackers stole users funds

Hackers gained access to Polymarket funds via a third party vendor, moving potentially millions out of user accounts.

Trump admin moves to dismantle overseas scam operations targeting Americans

The Treasury Department on Tuesday sanctioned individuals linked to the Prince Group Transnational Criminal Organization, which has allegedly attempted to scam Americans. The department’s Office of Foreign Assets Control sanctioned nine individuals and 26 entities linked to the group, including its leadership, investors in scam compounds, and front companies. The office labeled Prince Group as []...Click to read more

Kaji hukuman sebat kepada scammer, pampasan mangsa jenayah siber

PUTRAJAYA: Kerajaan sedang mengkaji mekanisme perundangan bagi membolehkan mangsa jenayah siber, khususnya penipuan dalam talian, menerima pampasan atau mendapatkan semula wang yang hilang akibat diperdaya sindiket penipuan dalam talian atau ‘scammer’. Menteri di Jabatan Perdana Menteri (Undang-Undang dan Reformasi Institusi), Datuk Seri Azalina Othman Said berkata, kajian itu sedang dilaksanakan oleh Bahagian Hal Ehwal Undang-Undang ... Read more The post Kaji hukuman sebat kepada scammer, pampasan mangsa jenayah siber appeared first on Utusan Malaysia.

Europol report finds 76% of criminal networks disrupted, 198 remain high threat in EU

Europol report finds 76% of criminal networks disrupted, 198 remain high threat in EU

Ethereum’s Most Notorious Sandwich Bot Loses $7.5 Million in Stunning Counter-Honeypot Attack

One of Ethereum’s most infamous maximal extractable value (MEV) operators has suffered a dramatic reversal of fortune after losing more than 7.5 million in what security researchers describe as a sophisticated counter-honeypot exploit. The victim, Jaredfromsubway.eth, is widely regarded as the largest sandwich bot operator on Ethereum and has generated enormous profits by exploiting decentralized exchange trades through front-running and back-running strategies. According to blockchain security firm Blockaid, the bot was manipulated into approving attacker-controlled contracts that were later used to drain its treasury holdings. The incident has quickly become one of the most talked-about stories in the crypto industry,

India’s Tata Electronics hit by cyber breach claiming to expose Apple, Tesla trade secrets

The breach highlights the vulnerability of global businesses to increasingly sophisticated cyber and ransom attacks