China-backed threat group used agentic AI pentesting tool to compromise 140 sensitive targets in 11 days

Vapor Panda targeted more than 200 organizations spanning at least 14 countries, according to CrowdStrike. The ongoing campaign is remarkably successful and operating at shocking speed.

The post China-backed threat group used agentic AI pentesting tool to compromise 140 sensitive targets in 11 days appeared first on CyberScoop.

Continue reading China-backed threat group used agentic AI pentesting tool to compromise 140 sensitive targets in 11 days→

Defense contractor pleads guilty to aiding North Korean remote worker scheme

The 62-year-old allowed co-conspirators to use his identity and top secret security clearance to apply for almost 100 jobs last year. The scheme’s success rate was limited.

The post Defense contractor pleads guilty to aiding North Korean remote worker scheme appeared first on CyberScoop.

Continue reading Defense contractor pleads guilty to aiding North Korean remote worker scheme→

Officials seize domain of top bulletproof hosting provider Virtualine

The Russian-speaking cybercrime storefront was among the most active bulletproof hosting providers this year to date, receiving almost one-fifth of all illicit-attributed inflow tracked by researchers.

The post Officials seize domain of top bulletproof hosting provider Virtualine appeared first on CyberScoop.

Continue reading Officials seize domain of top bulletproof hosting provider Virtualine→

Researchers uncover Volt Typhoon’s covert, ephemeral network

The China-linked threat group has used the “Silent Train” framework, built on a series of rapidly rotating compromised devices, to infiltrate hundreds of critical infrastructure networks.

The post Researchers uncover Volt Typhoon’s covert, ephemeral network appeared first on CyberScoop.

Continue reading Researchers uncover Volt Typhoon’s covert, ephemeral network→

Prolific Hive and Nefilim ransomware affiliate sentenced to 70 months in prison

Artem Stryzhak participated in a series of ransomware attacks on hospitals, government entities and law firms from the middle of 2018 to late 2021.

The post Prolific Hive and Nefilim ransomware affiliate sentenced to 70 months in prison appeared first on CyberScoop.

Continue reading Prolific Hive and Nefilim ransomware affiliate sentenced to 70 months in prison→

Experts temper emergency-level alarms over critical Brotli defect

The defect in a widely distributed open-source library provoked an emergency response, yet exploitation hasn’t been observed in the wild.

The post Experts temper emergency-level alarms over critical Brotli defect appeared first on CyberScoop.

Continue reading Experts temper emergency-level alarms over critical Brotli defect→

Authorities extradite Chinese national for alleged $37M investment scam

Zheng Zhao and his co-conspirators allegedly deceived 174 U.S. residents into sending funds to a globally coordinated fake investment operation with ties to Cambodia.

The post Authorities extradite Chinese national for alleged $37M investment scam appeared first on CyberScoop.

Continue reading Authorities extradite Chinese national for alleged $37M investment scam→

Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group

Storm-0940 used the agentic AI penetration testing framework to automate attacks and “reach more than 2,250 tenants at 2,900 sign-in attempts per minute,” Microsoft researchers said.

The post Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group appeared first on CyberScoop.

Continue reading Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group→

Philippines-based American pleads guilty to running expansive fraud scheme targeting US servicemembers

Robert Wayne Boling Jr. was the mastermind of an identity theft conspiracy that victimized thousands of military members and veterans. He faces up to 40 years in prison.

The post Philippines-based American pleads guilty to running expansive fraud scheme targeting US servicemembers appeared first on CyberScoop.

Continue reading Philippines-based American pleads guilty to running expansive fraud scheme targeting US servicemembers→

Nigerian sentenced to 8 years for long-running tax business hacking and fraud scheme

Chukwuemeka Victor Amachukwu hacked tax preparation businesses, filed false tax returns and enticed victims to send him money for investment schemes.

The post Nigerian sentenced to 8 years for long-running tax business hacking and fraud scheme appeared first on CyberScoop.

Continue reading Nigerian sentenced to 8 years for long-running tax business hacking and fraud scheme→