tldrdailynews.com logo
Tag

Cybercrime

All articles tagged with #cybercrime

European Police Dismantles First VPN, Unmasks Thousands of Criminals
technology3 days ago

European Police Dismantles First VPN, Unmasks Thousands of Criminals

European authorities led by France and the Netherlands, with Europol and Eurojust, dismantled the First VPN service used by cybercriminals for ransomware and data theft. Investigators infiltrated the service, seized 33 servers, and arrested its administrator, identifying about 506 users and producing 83 intelligence packages that supported 21 Europol-facilitated investigations. The operation underscored how VPNs marketed as ‘no-logs’ can mislead users who believe they are safe, even as criminal activity relies on such infrastructure.

via Ars Technica|
#cybercrime#europol#law-enforcement
Global raid shuts down ransomware-linked VPN First VPN and seizes its infrastructure
cybersecurity4 days ago

Global raid shuts down ransomware-linked VPN First VPN and seizes its infrastructure

An international operation led by France and the Netherlands, with Europol/Eurojust support, dismantled the ‘First VPN’ service used by ransomware and data-theft actors. Authorities seized 33 servers across 27 countries, shut down key domains, disrupted infrastructure, and arrested the administrator in Ukraine. Investigators infiltrated the VPN to recover data, with Europol reporting 506 identified users and 83 intelligence packages shared to aid ongoing investigations into ransomware and related crimes. While VPNs have legitimate uses, criminals leveraged this service to hide activity; all identified users have been notified and further legal action may follow.

via BleepingComputer|
#cybercrime#cybersecurity#europol
Stolen iPhones, Bigger Heists: The Underground Unlocking and Phishing Trade
technology12 days ago

Stolen iPhones, Bigger Heists: The Underground Unlocking and Phishing Trade

Researchers from Infoblox traced a thriving underground market that sells iPhone unlocking tools and phishing kits on Telegram and other services, linking dozens of groups to more than 10,000 phishing domains; unlocked stolen devices can fetch hundreds to thousands of dollars, incentivizing a supply chain that can let criminals access bank and crypto accounts via social engineering—even as Apple hardens Find My and other protections.

via WIRED|
#cybercrime#iphone#phishing
AI-enabled hacking erupts into industrial-scale threat, Google warns
technology13 days ago

AI-enabled hacking erupts into industrial-scale threat, Google warns

Google warns that AI-powered hacking has become an industrial-scale threat, with criminal and state-backed actors using commercial AI models (Gemini, Claude, OpenAI tools) to accelerate testing, scale attacks, and exploit near-zero-day flaws; the report notes related developments like OpenClaw experiments and references Mythos as a separate powerful model. Experts caution that AI could aid defense but productivity gains remain uncertain, underscoring the need for long-term, uncertainty-aware evaluation of AI's public-sector impact.

via The Guardian|
#ai#cybercrime#cybersecurity
Canvas owner reaches deal with hackers after data breach disrupts schools
education13 days ago

Canvas owner reaches deal with hackers after data breach disrupts schools

Instructure, which runs Canvas, says it has reached a deal with hackers who breached its systems, stole data from almost 9,000 schools and about 275 million people, and threatened to release it unless paid; the company did not disclose whether a ransom was paid but confirmed the stolen data has been returned and that exploited free-teacher accounts have been disabled, with steps ongoing to bolster security.

via The Washington Post|
#cybercrime#education#hacking
ShinyHunters hijack Penn Canvas, threaten data dump over ransom
technology18 days ago

ShinyHunters hijack Penn Canvas, threaten data dump over ransom

ShinyHunters took Penn’s Canvas offline, claiming a vulnerability in Instructure and demanding a settlement to prevent a data leak, with a May 12, 2026 deadline; the group says it has access to hundreds of millions of user records, including Penn emails, names, Penn IDs, and course enrollments, and Penn is investigating with Instructure and law enforcement while other institutions are affected.

via The Daily Pennsylvanian|
#canvas#cybercrime#penn
25 Convicted in $215 Million Global Business Email Compromise Scheme
crime25 days ago

25 Convicted in $215 Million Global Business Email Compromise Scheme

A federal jury convicted 25 defendants in a cross-border business email compromise scheme that hacked victim email accounts to steal about $215 million from more than 1,000 victims across 47 states and 19 countries. Notable convictions include Oluwafemi Awoyemi, Aruan Drake, and Peter Reed for wire fraud conspiracy, with Awoyemi and Drake also guilty of money laundering conspiracy. The case involved a network of Nigerian-linked fraud operations, laundered funds through shell accounts, and the illicit proceeds included cash, cryptocurrency, cashier’s checks, luxury items, and a Georgia residence. Investigations were led by the FBI, USPS, and Border Patrol; sentencing will occur after consideration of various factors for each defendant.

via Department of Justice (.gov)|
#business-email-compromise#crime#cybercrime
OPSEC Playbook Reveals How Threat Actors Stay Hidden at Scale
technology26 days ago

OPSEC Playbook Reveals How Threat Actors Stay Hidden at Scale

Flare researchers analyze a threat actor’s OPSEC playbook for high-volume fraud, detailing a three-tier architecture (public, operational, extraction) designed to separate exposure, execution, and monetization, along with common mistakes like identity reuse, weak fingerprinting evasion, and poor stage separation. The attacker also describes resilience techniques (time-delayed triggers, behavioral randomization, distributed verification, dead-man’s switches) to extend operational longevity. Defenders are advised to focus on cross-platform identity correlation, advanced behavioral analytics, end-to-end monitoring of the attack chain, metadata analysis, and preparing for resilient adversaries.

via BleepingComputer|
#cybercrime#fingerprinting#monetization
Five things you should never tell your AI about your money
personal-finance1 month ago

Five things you should never tell your AI about your money

The Washington Post warns that while AI chatbots make financial advice more accessible, they pose privacy risks. Surveys cited note that many users share sensitive data with AI—29% of global AI users entered personal information in chats and 84% fear data exposure—while research shows major AI firms train on user data. To protect your finances, avoid sharing sensitive information (bank details, login credentials, Social Security numbers, investment specifics) with AI chatbots and stay mindful of how data may be used.

via The Washington Post|
#artificial-intelligence#cybercrime#information-security
Global PowerOFF crackdown nets 75k DDoS users, shuts 53 domains across 21 countries
technology1 month ago

Global PowerOFF crackdown nets 75k DDoS users, shuts 53 domains across 21 countries

An international law enforcement sweep called Operation PowerOFF, coordinated by Europol across 21 countries, has identified more than 75,000 DDoS-for-hire users, shut down 53 domains, and arrested four people, as part of an ongoing effort to disrupt booter services and raise awareness about illegality; previous phases have seized infrastructure and databases with more than 3 million criminal accounts, and the operation is now shifting toward prevention with awareness campaigns, search-engine removals of illegal content, and on-chain warnings tied to illicit payments.

via BleepingComputer|
#booter-services#cybercrime#ddos
Ohio Man Becomes First Convicted Under Take It Down Act For AI-Generated Explicit Content
technology1 month ago

Ohio Man Becomes First Convicted Under Take It Down Act For AI-Generated Explicit Content

An Ohio man, James Strahler II, pleaded guilty to cyberstalking and producing obscene AI-generated and real sexually explicit images, and publishing digital forgeries, becoming the first person convicted under the Take It Down Act, which bans non-consensual publication of intimate images and AI forgeries and requires removal within 48 hours; prosecutors say he harassed several women with nude AI imagery, distributed AI-generated material including child sexual content, and created more than 700 images.

via The Guardian|
#ai#cybercrime#deepfake
First Conviction Under Federal Take It Down Act Targets AI Deepfakes
technology1 month ago

First Conviction Under Federal Take It Down Act Targets AI Deepfakes

An Ohio man, James Strahler II, became the first person convicted under the Take It Down Act for using AI to create nonconsensual intimate imagery, including child sexual abuse material. He pleaded guilty to cyberstalking, producing obscene visuals, and publishing digital forgeries after distributing hundreds of AI-generated images; the law criminalizes nonconsensual deepfakes and requires platforms to remove reported material within 48 hours, with penalties up to two years in prison for adult victims and up to three years for minor victims.

via NBC News|
#ai#childexploitation#cybercrime
US DOJ Strikes Iranian Cyber Propaganda Network with Four Domain Seizures
national-security2 months ago

US DOJ Strikes Iranian Cyber Propaganda Network with Four Domain Seizures

The Justice Department announced the seizure of four domains tied to Iran’s Ministry of Intelligence and Security used to wage cyber-enabled psychological operations, doxxing dissidents, and threaten journalists and Israeli targets; the FBI and the U.S. Attorney’s Office for Maryland are prosecuting, with the operation linking domains by shared leak sites and a common playbook for destructive hacks and faketivist campaigns, part of broader efforts to disrupt Iran’s cyberwarfare infrastructure.

via Department of Justice (.gov)|
#cybercrime#domain-seizure#iran