SIM-Swapper, Scattered Spider Hacker Gets 10 Years

Credit to Author: BrianKrebs| Date: Thu, 21 Aug 2025 01:47:22 +0000

A 21-year-old Florida man at the center of a prolific cybercrime group known as “Scattered Spider” was sentenced to 10 years in federal prison today, and ordered to pay roughly $13 million in restitution to victims. Noah Michael Urban of Palm Coast, Fla. pleaded guilty in April 2025 to charges of wire fraud and conspiracy. Florida prosecutors alleged Urban conspired with others to steal at least $800,000 from five victims via SIM-swapping attacks that diverted their mobile phone calls and text messages to devices controlled by Urban and his co-conspirators.

Read more

Oregon Man Charged in ‘Rapper Bot’ DDoS Service

Credit to Author: BrianKrebs| Date: Tue, 19 Aug 2025 20:51:06 +0000

A 22-year-old Oregon man has been arrested on suspicion of operating “Rapper Bot,” a massive botnet used to power a service for launching distributed denial-of-service (DDoS) attacks against targets — including a March 2025 DDoS that knocked Twitter/X offline. The Justice Department asserts the suspect and an unidentified co-conspirator rented out the botnet to online extortionists, and tried to stay off the radar of law enforcement by ensuring that their botnet was never pointed at KrebsOnSecurity.

Read more

Mobile Phishers Target Brokerage Accounts in ‘Ramp and Dump’ Cashout Scheme

Credit to Author: BrianKrebs| Date: Fri, 15 Aug 2025 18:27:05 +0000

Cybercriminal groups peddling sophisticated phishing kits that convert stolen card data into mobile wallets have recently shifted their focus to targeting customers of brokerage services, new research shows. Undeterred by security controls at these trading platforms that block users from wiring funds directly out of accounts, the phishers have pivoted to using multiple compromised brokerage accounts in unison to manipulate the prices of foreign stocks.

Read more

KrebsOnSecurity in New ‘Most Wanted’ HBO Max Series

Credit to Author: BrianKrebs| Date: Fri, 08 Aug 2025 21:38:01 +0000

A new documentary series about cybercrime airing next month on HBO Max features interviews with Yours Truly. The four-part series follows the exploits of Julius Kivimäki, a prolific Finnish hacker recently convicted of leaking tens of thousands of patient records from an online psychotherapy practice while attempting to extort the clinic and its patients.

Read more

Who Got Arrested in the Raid on the XSS Crime Forum?

Credit to Author: BrianKrebs| Date: Wed, 06 Aug 2025 12:12:37 +0000

On July 22, 2025, the European police agency Europol said a long-running investigation led by the French Police resulted in the arrest of a 38-year-old administrator of XSS, a Russian-language cybercrime forum with more than 50,000 members. The action has triggered an ongoing frenzy of speculation and panic among XSS denizens about the identity of the unnamed suspect, but the consensus is that he is a pivotal figure in the crime forum scene who goes by the hacker handle “Toha.” Here’s a deep dive on what’s knowable about Toha, and a short stab at who got nabbed.

Read more

Phishers Target Aviation Execs to Scam Customers

Credit to Author: BrianKrebs| Date: Thu, 24 Jul 2025 17:57:06 +0000

KrebsOnSecurity recently heard from a reader whose boss’s email account got phished and was used to trick one of the company’s customers into sending a large payment to scammers. An investigation into the attacker’s infrastructure points to a long-running Nigerian cybercrime group that is actively targeting established companies in the transportation and aviation industries.

Read more

UK Arrests Four in ‘Scattered Spider’ Ransom Group

Credit to Author: BrianKrebs| Date: Thu, 10 Jul 2025 17:31:10 +0000

Authorities in the United Kingdom this week arrested four alleged members of “Scattered Spider,” a prolific data theft and extortion group whose recent victims include multiple airlines and the U.K. retail chain Marks & Spencer.

Read more

Big Tech’s Mixed Response to U.S. Treasury Sanctions

Credit to Author: BrianKrebs| Date: Thu, 03 Jul 2025 16:06:05 +0000

In May 2025, the U.S. government sanctioned a Chinese national for operating a cloud provider linked to the majority of virtual currency investment scam websites reported to the FBI. But more than a month later, the accused continues to openly operate accounts at a slew of American tech companies, including Facebook, Github, LinkedIn, PayPal and Twitter/X.

Read more

Inside a Dark Adtech Empire Fed by Fake CAPTCHAs

Credit to Author: BrianKrebs| Date: Thu, 12 Jun 2025 22:14:00 +0000

Late last year, security researchers made a startling discovery: Kremlin-backed disinformation campaigns were bypassing moderation on social media platforms by leveraging the same malicious advertising technology that powers a sprawling ecosystem of online hucksters and website hackers. A new report on the fallout from that investigation finds this dark ad tech industry is far more resilient and incestuous than previously known.

Read more

Alleged Co-Founder of Garantex Arrested in India

Credit to Author: BrianKrebs| Date: Tue, 11 Mar 2025 16:49:02 +0000

Authorities in India today arrested the alleged co-founder of Garantex, a cryptocurrency exchange sanctioned by the U.S. government in 2022 for facilitating tens of billions of dollars in money laundering by transnational criminal and cybercriminal organizations. Sources close to the investigation told KrebsOnSecurity the Lithuanian national Aleksej Besciokov, 46, was apprehended while vacationing on the coast of India with his family.

Read more