Fraudsters Turn Open Banking Links Into a Free Stolen-Card Checking Service
Group-IB uncovered a scheme in which criminals abused a spend-management platform's open-banking integration to silently verify stolen card and bank credentials, while the platform unknowingly footed the bill....
ASOS Investigates Breach After Hackers Hijack App Notifications to Issue Public Ransom Threat
Online fashion retailer ASOS is investigating an incident after attackers abused a third-party customer communication platform to push a fake "ASOS HACKED" push notification claiming access to its...
Alleged 160-Million-Record Decathlon Customer Database Surfaces on Cybercrime Forum
A threat actor is advertising what they claim is a Decathlon customer database of roughly 160 million records on an underground forum, seeking cryptocurrency payment. Decathlon has not...
FortiBleed: Over 73,000 Fortinet Firewalls Compromised Across 194 Countries in Massive Credential Attack
A devastating cyber espionage campaign dubbed 'FortiBleed' has silently compromised over 73,932 unique Fortinet firewall URLs spanning 194 countries. Discovered by security researcher Volodymyr Diachenko and analyzed by...