ZCyberNews
中文

#cybercrime

19 articles

Financial services bore the brunt of a concentrated wave of cybercrime between April 13 and May 1, 2026, with 24 articles documenting 17 high-severity incidents. LockBit, Black Axe, and Chinese Transnational Organized Crime were among the threat actors observed targeting government, cybersecurity services, e-commerce, and gaming sectors. The impact was felt globally, with notable activity in the Caribbean, Germany, Latin America, and Southeast Asia.

Ex-Incident Responders Sentenced to 4 Years for Ransomware AttacksHIGH
Industry News

Ex-Incident Responders Sentenced to 4 Years for Ransomware Attacks

Two cybersecurity incident responders who abused client access to deploy ransomware were sentenced to 4 years in prison — a rare case of responders turning attackers.

2 min read
Brazilian DDoS Firm Behind Botnet Attacks on ISPsHIGH
Industry News

Brazilian DDoS Firm Behind Botnet Attacks on ISPs

Brazilian anti-DDoS firm's infrastructure used to launch massive botnet attacks against rival ISPs. CEO claims breach by competitor caused the abuse.

2 min read
Swiss Police Arrest 10 Suspected Black Axe Cybercrime MembersHIGH
Industry News

Swiss Police Arrest 10 Suspected Black Axe Cybercrime Members

Swiss and German police arrested 10 suspects tied to the Nigeria-linked Black Axe network, including a regional leader overseeing Southern Europe operations.

2 min readBlack Axe
ShinyHunters Breaches Medtronic, Steals 9M RecordsHIGH
Industry News

ShinyHunters Breaches Medtronic, Steals 9M Records

ShinyHunters claims to have stolen 9 million records from medical device maker Medtronic, including personal information. The group threatens to leak the data.

2 min readShinyHunters
Ukraine Police Arrest Hackers Behind Roblox Account Theft RingMEDIUM
Industry News

Ukraine Police Arrest Hackers Behind Roblox Account Theft Ring

Ukrainian police detained hackers suspected of stealing thousands of Roblox accounts containing valuable digital items and in-game currency purchased with real money from players…

2 min read
US Charges 19-Year-Old Scattered Spider Hacker Arrested in FinlandHIGH
Threat Intel

US Charges 19-Year-Old Scattered Spider Hacker Arrested in Finland

A 19-year-old US-Estonian dual citizen arrested in Finland faces federal charges as a prolific Scattered Spider member linked to ransomware attacks on MGM Resorts and Caesars.

2 min readScattered Spider
Crypto Launderer Gets 5 Years for $260M Cyber Theft RoleMEDIUM
Industry News

Crypto Launderer Gets 5 Years for $260M Cyber Theft Role

A California man received a 63-month prison sentence for laundering cryptocurrency stolen by a cybercriminal ring that defrauded victims of approximately $260 million.

2 min read
US Sanctions Cambodian Senator in Southeast Asia Cyberscam CrackdownHIGH
Industry News

US Sanctions Cambodian Senator in Southeast Asia Cyberscam Crackdown

U.S. Treasury sanctioned Cambodian Senator Ly Yong Phat over alleged ties to human trafficking and cyberscam compounds.

2 min readChinese Transnational Organized Crime
LAC Cybercrime Ecosystem Matures with RaaS, Crypto Fraud SurgeHIGH
Threat Intel

LAC Cybercrime Ecosystem Matures with RaaS, Crypto Fraud Surge

Recorded Future's Insikt Group maps a maturing Latin American cybercrime ecosystem: RaaS affiliates, crypto fraud rings, and targeted phishing against financial and government…

2 min readLockBit
Recorded Future Maps Latin America's Maturing Cybercrime EcosystemMEDIUM
Threat Intel

Recorded Future Maps Latin America's Maturing Cybercrime Ecosystem

Insikt Group report details how LAC cybercrime evolved in 2025: RaaS adoption, crypto fraud, and phishing-as-a-service expand across the region.

2 min read
Chinese-Language Telegram Guarantee Markets Thrive Post-HuioneHIGH
Threat Intel

Chinese-Language Telegram Guarantee Markets Thrive Post-Huione

Recorded Future finds Chinese-language Telegram guarantee marketplaces proliferating after Huione Guarantee's 2025 shutdown, enabling fraud, money laundering, and cybercrime…

2 min read
Germany Identifies REvil, GandCrab Ransomware Leader 'UNKN'HIGH
Threat Intel

Germany Identifies REvil, GandCrab Ransomware Leader 'UNKN'

German authorities name 31-year-old Russian Daniil Maksimovich Shchukin as 'UNKN,' the operator behind REvil and GandCrab ransomware groups linked to 130+ extortion attacks.

2 min readREvil
French Police Arrest Hacker Behind Dozens of Data BreachesHIGH
Industry News

French Police Arrest Hacker Behind Dozens of Data Breaches

French authorities arrested a 20-year-old suspected of 48 data breaches targeting public institutions, sports federations, and private companies, seizing equipment and…

2 min read
Ransomware Attackers Operate Like Businesses, ESET Research RevealsHIGH
Threat Intel

Ransomware Attackers Operate Like Businesses, ESET Research Reveals

ESET analysis of 100+ ransomware attacks shows threat actors run business operations with defined roles, KPIs, and supply chains, not just technical attacks.

3 min readLockBit
IPQS Combines Identity, Device, and Network Signals for Frictionless FraudINFORMATIONAL
Industry News

IPQS Combines Identity, Device, and Network Signals for Frictionless Fraud

IPQS details a 3-layer fraud detection strategy using identity, device, and network signals to block 99.5% of automated attacks without adding user friction for legitimate customers.

3 min read
Tycoon 2FA Phishing Kit Disruption Fuels Surge in Copycat AttacksHIGH
Threat Intel

Tycoon 2FA Phishing Kit Disruption Fuels Surge in Copycat Attacks

The disruption of the Tycoon 2FA phishing-as-a-service platform has led to a surge in copycat attacks, as threat actors reuse its tools and techniques in other kits, increasing the overall volume of multi-factor authentication bypass attempts.

4 min read
FBI Dismantles W3LL Phishing Kit, a $500 Service Behind $20M in FraudHIGH
Threat Intel

FBI Dismantles W3LL Phishing Kit, a $500 Service Behind $20M in Fraud

The FBI and Indonesian authorities dismantled the W3LL phishing-as-a-service platform, a $500 kit used to steal credentials and linked to over $20 million in attempted fraud.

3 min readW3LL Team
Triad Nexus Cybercrime Operation Evades Sanctions via Major Cloud ProvidersHIGH
Threat Intel

Triad Nexus Cybercrime Operation Evades Sanctions via Major Cloud Providers

The Triad Nexus cybercrime syndicate leverages major cloud and hosting providers to obscure its infrastructure, evade sanctions, and facilitate ransomware, data theft, and financial fraud.

4 min readTriad Nexus
MITRE F3 Framework Bridges Cybersecurity and Fraud AnalysisINFORMATIONAL
Tools & Techniques

MITRE F3 Framework Bridges Cybersecurity and Fraud Analysis

MITRE released the Fight Fraud Framework (F3), a unified knowledge base mapping the intersection of cyber attack tactics and financial fraud, aiming to close the operational gap between security and fraud teams.

3 min read

Stay Updated

Get the latest cybersecurity news delivered to your inbox.