Your new credit card arrives. Within 24 hours, your phone rings. A polite caller says he is from your bank. A "Credit Card Protection Plan" has been activated on your card, and you will be charged unless you cancel it today. He sends a link on WhatsApp so you can "deactivate" it. That one call is the front door of CyberDakait, an organised fraud operation that has compromised at least 17,960 Android phones in India and intercepted more than 7.6 million SMS messages, including

On July 24, 2026, a relatively obscure extortion group calling itself TripleX did something most ransomware crews don't bother with: they gave the data away for free. Roughly a terabyte of what the group claims is Bank of Baroda's customer and internal data appeared on a dark web forum, no payment wall, no negotiation thread. Three days later, the bank confirmed an incident — carefully, without confirming the scale. That gap between "1TB dumped publicly" and "an employee's em

According to Dragos, an industrial cybersecurity consultancy, the number of ransomware attacks on industrial enterprises increased significantly from the first to the second quarter of 2024. The number of ransomware groups targeting industrial enterprises increased from 22 in the first quarter to 29 in the second quarter, according to the company's Industrial Ransomware Analysis Report for Q2 2024. After law enforcement cracked down on big ransomware operations like BlackCat

The BackConnect (BC) module, which is utilized for post-compromise behavior on compromised computers, has been updated by threat actors connected to the malware loader known as IcedID, according to recent research from Team Cymru. In 2017, IcedID, also known as BokBot, a malware strain resembling Emotet and QakBot, began as a banking trojan before transitioning to the function of an initial access facilitator for additional payloads. In order to prioritize ransomware transmis

Given how popular generative artificial intelligence (AI) is right now, it may not come as a surprise that the technology has been repurposed by bad actors for their own gain, opening up new opportunities for faster crimes. A new generative AI cybercrime tool dubbed WormGPT has been offered on darknet forums as a mechanism for adversaries to carry out complex phishing and corporate email compromise (BEC) assaults, according to SlashNext findings. Security researcher Daniel Ke

In the first half of 2023, the number of cyberattacks using infected USB infection drives as an initial access vector increased by threefold. New research from Mandiant reveals two such campaigns, SOGU and SNOWYDRIVE, which target both public and private sector organizations globally. According to the Google-owned threat intelligence company, SOGU is the "most common USB-based cyber espionage attack using USB flash drives and one of the most aggressive cyber espionage campaig

The Tampa General Hospital (TGH) has promised to reach out to individuals whose information has been stolen by a ransomware group. In a cybersecurity notice, TGH said it noticed unusual activity on its computer systems on May 31, 2023. “Fortunately, TGH’s monitoring systems and experienced technology professionals effectively prevented encryption, which would have significantly interrupted the hospital’s ability to provide care for patients.” While that is good news from a he

The Norwegian Data Protection Authority has also been notified about the cyberattack, indicating that the hackers might have accessed and/or exfiltrated sensitive data from the ICT system, leading to a data breach. Despite the compromised platform's critical role in the government's daily operations, the recent cyberattack will not necessitate a halt in work activities. "DSS has initiated a number of security measures to protect the information on the affected ICT platform."