Coordinated DDoS Waves Knock North Korea’s State Websites Offline for Over a Day
Traffic analysis firm Kentik says repeated waves of distributed denial-of-service traffic — originating from Vietnam, the Philippines, Venezuela, and other countries — knocked more than 40 North Korean...
New Extortion Gang ScarlettGroup Puts Countdown Timers on Alleged Corporate Breaches
Researchers at Foresiet have identified a previously unseen extortion operation, dubbed ScarlettGroup, that lists alleged corporate victims on a dark web site complete with countdown timers pressuring them...
Criminals Lean on AI-Enhanced ‘Antidetect’ Browsers to Run Armies of Fake Accounts
Check Point Research has documented how commercially sold antidetect browsers such as Kameleo, AdsPower, and MultiLogin are being used by criminal groups to disguise thousands of fake accounts...
Ransomware Negotiator Allegedly Ran Extortion Site for ShinyHunters, FBI Probe Finds
Federal investigators suspect an executive at a major U.S. consulting firm helped ShinyHunters run a pressure site that pushed nearly 100 breached companies toward paying extortion demands. The...
AI Agents Turn $5,000 Into More Than 100 Website Breaches
A Chinese-language operator used coordinated AI agents to target more than 1,200 websites and reportedly compromise over 100 of them for an estimated $5,000 in token costs. Exposed...
Inside Help TDS: The Scam Network Turning 20,000 Cloudflare Pages Into Fake Microsoft Alerts
A tech-support scam operation dubbed Help TDS has cycled through more than 20,000 disposable Cloudflare Pages domains over six months, using fake Microsoft lockout warnings to funnel victims...
AI-Assisted Campaign Compromises 440 PaperCut Servers Worldwide
An automated campaign compromised at least 440 PaperCut servers across 48 countries and used some footholds to reach internal networks. Defenders should patch urgently, restrict exposed management services,...
Stolen ConnectWise Secret Opens 173 Microsoft 365 Tenants
An active supply-chain attack abused a compromised ConnectWise Cloud Backup credential to enter 173 Microsoft 365 partner and customer tenants. Defenders need to inspect service-principal sign-ins and newly...