cybercrime

What the Latest ShinyHunters Breaches Reveal About Modern Cyberattacks

What the Latest ShinyHunters Breaches Reveal About Modern Cyberattacks 2026-06-22 at 13:30 By Torsten George Groups like ShinyHunters are demonstrating that attackers do not necessarily need malware or zero-day exploits to cause massive damage. The post What the Latest ShinyHunters Breaches Reveal About Modern Cyberattacks appeared first on SecurityWeek. This article is an excerpt from […]

What the Latest ShinyHunters Breaches Reveal About Modern Cyberattacks Read More »

Cybercriminals abused GitHub, YouTube and VirusTotal to push crypto-stealing malware

Cybercriminals abused GitHub, YouTube and VirusTotal to push crypto-stealing malware 2026-06-19 at 15:11 By Sinisa Markovic A cryptocurrency-stealing malware campaign used inflated GitHub activity, software reviews, YouTube tutorials and favorable VirusTotal comments to make malicious trading and gambling tools appear trustworthy, Check Point researchers found. According to the researchers, the attackers packaged the malware as

Cybercriminals abused GitHub, YouTube and VirusTotal to push crypto-stealing malware Read More »

Malware attacks strip Roblox developers of entire games

Malware attacks strip Roblox developers of entire games 2026-06-18 at 15:41 By Sinisa Markovic Hackers who once focused on stealing valuable Roblox items are now taking over entire games. Although Roblox operates the service, users can create and publish their own games on it. Successful games can generate substantial revenue through in-game purchases. Some developers

Malware attacks strip Roblox developers of entire games Read More »

GentleKiller targets more than 400 security processes across 48 products

GentleKiller targets more than 400 security processes across 48 products 2026-06-18 at 12:00 By Anamarija Pogorelec Most ransomware operations leave the work of disabling endpoint security software to their affiliates. The ransomware-as-a-service gang Gentlemen runs a different model. Its operators develop and maintain a set of tools for shutting down endpoint detection and response (EDR)

GentleKiller targets more than 400 security processes across 48 products Read More »

Another healthcare firm attacked days after Novo Nordisk breach

Another healthcare firm attacked days after Novo Nordisk breach 2026-06-17 at 17:51 By Sinisa Markovic Medical technology company iRhythm Holdings disclosed a cyberattack involving certain third-party-hosted business applications that resulted in the theft of patient protected health information, proprietary data, and other personal data. The company discovered unauthorized activity on June 8, 2026, and launched

Another healthcare firm attacked days after Novo Nordisk breach Read More »

Rokarolla Android trojan targets banking and crypto users, enables device takeover

Rokarolla Android trojan targets banking and crypto users, enables device takeover 2026-06-17 at 16:23 By Sinisa Markovic A newly discovered Android banking trojan, dubbed Rokarolla, targets 217 banking and cryptocurrency applications and can execute 137 commands on infected devices, according to researchers at Zimperium. Named after its command-and-control (C2) infrastructure, Rokarolla is primarily distributed through

Rokarolla Android trojan targets banking and crypto users, enables device takeover Read More »

Cybercriminals mask malicious communications through Microsoft Teams relays

Cybercriminals mask malicious communications through Microsoft Teams relays 2026-06-16 at 17:22 By Sinisa Markovic The DragonForce ransomware group used a custom malware called Backdoor.Turn to hide command-and-control traffic inside Microsoft Teams relay infrastructure during an intrusion at a U.S. services company, according to Symantec. DragonForce is a ransomware-as-a-service operation that has been active since 2023.

Cybercriminals mask malicious communications through Microsoft Teams relays Read More »

Ukrainian Man Pleads Guilty in US to Conti Ransomware Charges

Ukrainian Man Pleads Guilty in US to Conti Ransomware Charges 2026-06-15 at 14:33 By Ionut Arghire Oleksii Oleksiyovych Lytvynenko admitted to working on the development of a loader for the Conti gang. The post Ukrainian Man Pleads Guilty in US to Conti Ransomware Charges appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

Ukrainian Man Pleads Guilty in US to Conti Ransomware Charges Read More »

Google sues China-based scammers over Gemini AI abuse

Google sues China-based scammers over Gemini AI abuse 2026-06-12 at 15:43 By Sinisa Markovic Google has filed a lawsuit against Outsider Enterprise, a China-based cybercrime network for using AI tools, including Gemini, to build phishing websites and scam infrastructure. The company said the operation has affected “hundreds of thousands of victims,” with losses estimated in

Google sues China-based scammers over Gemini AI abuse Read More »

Cybercriminals are moving away from mass phishing campaigns

Cybercriminals are moving away from mass phishing campaigns 2026-06-12 at 13:47 By Sinisa Markovic Phishing activity declined by roughly 20% in both 2024 and 2025, according to research from Zscaler’s ThreatLabz team. The drop followed years of growth that pushed phishing activity above 2 billion hits in 2023. “Phishing volume measured by blocked emails is

Cybercriminals are moving away from mass phishing campaigns Read More »

The assembly line behind 1.5 million malicious domains

The assembly line behind 1.5 million malicious domains 2026-06-12 at 11:07 By Anamarija Pogorelec Attackers registered roughly 1.5 million malicious domains during the first five months of 2026. The registration patterns resemble industrial output. Most of the domains were created by attackers, put to use within weeks, and concentrated among a small set of registrars,

The assembly line behind 1.5 million malicious domains Read More »

Authorities dismantle crypto laundering service that moved €336 million for cybercriminals

Authorities dismantle crypto laundering service that moved €336 million for cybercriminals 2026-06-12 at 10:58 By Sinisa Markovic An international law enforcement operation has dismantled a cryptocurrency laundering service linked to ransomware groups and other cybercriminals that processed more than €336 million in illicit funds. The domain seizure notice (Source: Europol) Europol said the service, known

Authorities dismantle crypto laundering service that moved €336 million for cybercriminals Read More »

Google Confirms Exploitation of Oracle PeopleSoft Zero-Day by ShinyHunters

Google Confirms Exploitation of Oracle PeopleSoft Zero-Day by ShinyHunters 2026-06-12 at 09:44 By Eduard Kovacs Oracle has mitigated CVE-2026-35273, but it has not publicly confirmed the vulnerability’s in-the-wild exploitation. The post Google Confirms Exploitation of Oracle PeopleSoft Zero-Day by ShinyHunters appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Google Confirms Exploitation of Oracle PeopleSoft Zero-Day by ShinyHunters Read More »

Fake Spotify Premium tutorials on TikTok and Instagram Reels spread malware

Fake Spotify Premium tutorials on TikTok and Instagram Reels spread malware 2026-06-11 at 16:51 By Sinisa Markovic Cybercriminals are using TikTok and Instagram Reels videos to spread Vidar, an infostealer malware, through fake downloads for popular paid software, according to ReversingLabs. The researchers uncovered two campaigns behind the activity, each using a different approach to

Fake Spotify Premium tutorials on TikTok and Instagram Reels spread malware Read More »

OnyxC2 Stealer Offers Cybercriminals Enterprise-Grade Theft for $250 a Month

OnyxC2 Stealer Offers Cybercriminals Enterprise-Grade Theft for $250 a Month 2026-06-11 at 16:00 By Kevin Townsend Researchers say the OnyxC2 malware targets more than 200 applications and extensions while evading detection through encrypted payloads, DLL sideloading, and in-memory execution techniques. The post OnyxC2 Stealer Offers Cybercriminals Enterprise-Grade Theft for $250 a Month appeared first on

OnyxC2 Stealer Offers Cybercriminals Enterprise-Grade Theft for $250 a Month Read More »

Identity theft is turning into a chain reaction for victims

Identity theft is turning into a chain reaction for victims 2026-06-10 at 18:17 By Sinisa Markovic For a growing number of victims, identity theft no longer ends with a fraudulent charge or a compromised account. More than one in four people who contacted the Identity Theft Resource Center during the reporting period were dealing with

Identity theft is turning into a chain reaction for victims Read More »

New Browser-in-the-Browser phishing uses fake login popups to steal Microsoft 365 credentials

New Browser-in-the-Browser phishing uses fake login popups to steal Microsoft 365 credentials 2026-06-10 at 17:24 By Sinisa Markovic A new Browser-in-the-Browser (BitB) phishing campaign is targeting Microsoft 365 users with fake login popups designed to closely mimic legitimate browser authentication windows, according to Palo Alto Networks Unit 42. The attack relies on a fake browser

New Browser-in-the-Browser phishing uses fake login popups to steal Microsoft 365 credentials Read More »

C-Suite Impersonation in the Gulf: How Threat Actors Are Targeting UAE & Saudi Executives in 2026

C-Suite Impersonation in the Gulf: How Threat Actors Are Targeting UAE & Saudi Executives in 2026 2026-06-05 at 15:21 By Ashish Khaitan When a senior executive at a Dubai-based energy conglomerate receives a WhatsApp message that appears to come directly from their CEO — complete with the right profile photo, a familiar tone, and an

C-Suite Impersonation in the Gulf: How Threat Actors Are Targeting UAE & Saudi Executives in 2026 Read More »

AI is helping low-skill hackers pull off advanced cyberattacks

AI is helping low-skill hackers pull off advanced cyberattacks 2026-06-05 at 11:34 By Sinisa Markovic Anthropic has published an analysis of cyber-related misuse of its AI systems, examining 832 accounts that were banned for malicious cyber activity between March 2025 and March 2026. The company mapped the observed behavior to the MITRE ATT&CK framework, which

AI is helping low-skill hackers pull off advanced cyberattacks Read More »

Chinese Cybercrime Group in Spotlight for Record Campaign Pace

Chinese Cybercrime Group in Spotlight for Record Campaign Pace 2026-06-04 at 16:06 By Ionut Arghire Relying on social engineering, the hacking group engages in credential phishing, malware distribution, and fraud activities. The post Chinese Cybercrime Group in Spotlight for Record Campaign Pace appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

Chinese Cybercrime Group in Spotlight for Record Campaign Pace Read More »

Scroll to Top