News · via Dark Reading
Germany Busts 'Crime-as-a-Service' Investment Fraud Outfit
German police led a multinational probe that exposed an alleged crime-as-a-service provider supplying fraudulent trading platforms to investment scammers.
Fraud
Coverage tagged "Fraud".
News · via CyberScoop
Oklahoma man charged with mailing threats, substances to election officials nationwide
An Oklahoma man has been charged with mailing suspicious white substances to election officials across the country. Robin Patrick Martin faces charges of conveying false or misleading information and…
News · via CyberScoop
Europol dismantles investment scheme that impacted potential victims in 50 countries
Authorities arrested seven people allegedly involved in an investment fraud scheme that claimed potential victims in more than 50 countries, Europol said Tuesday. Officials said the operation caused…
News · via Help Net Security
Police seize over 100 servers linked to investment fraud with more than €4 million in losses
Seven people have been arrested and more than 100 servers seized in a coordinated law enforcement action against an investment fraud network that started unravelling after a complaint from a German…
News · via Europol
Investment scams with potential victims in at least 50 countries: over 100 servers seized
An international operation involving authorities in Albania, Cyprus, Finland, Germany, Kosovo* and North Macedonia, supported by Europol and Eurojust, has struck at the infrastructure of an…
News · via Security Affairs
Inside XCPE, the botnet that turned set-top boxes into proxy servers
Google dismantled a 1.3 million-device botnet allegedly built by Android TV box maker Videostrong to enable ad fraud and proxy abuse. Google and its partners dismantled a backdoor called XCPE that…
News · via arXiv cs.CR
The Long Con on the Web: Earn-then-Exploit Fraud Attacks against Coding Agents
arXiv:2611.00725v1 Announce Type: new Abstract: Coding agents increasingly operate with web access and high privileges, creating a new attack surface where web fraud can directly target autonomous…
News · via Flashpoint
Inside the Retail Fraud Underground: The Schemes Targeting Retailers Ahead of the Holiday Season
Table Of ContentsTable of ContentsRefund Fraud: Exploiting Retail Policies and Shipping ProcessesCustomer Service as a Target for Social EngineeringGift Card Fraud and the Monetization of Stolen…
News · via The Hacker News
Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access
A botnet of more than 1.3 million Android devices, mostly TV set-top boxes, lost control of its servers in late October in a takedown led by Google. Google says it is highly confident that device…
News · via Google Threat Intelligence Group
Shutting the Door on the XCPE Botnet
Introduction Last week, Google and industry partners dismantled the XCPE backdoor which enrolled more than 1.3 million set-top boxes into a botnet. We assess with high confidence that the backdoor…
News · via CyberScoop
California officials confirm grand jury subpoenas as states, civil groups brace to protect elections from federal encroachment
The Trump administration is taking direct aim at California state election officials, issuing grand jury subpoenas to election offices statewide ahead of the final day of voting on Nov. 3. The…
News · via Help Net Security
Scammers rebuild fake shopping sites within hours of a takedown
One retail scam used more than 1,200 look-alike .shop domains sharing a single IP address. The sites reused HTML, JavaScript and payment-page designs intended to harvest card numbers, expiry dates…
News · via Group-IB
Deepfake Fraud Prevention: Why Detection Alone Fails
Deepfake fraud kits sell for $5. Learn how it reaches enterprises, real cases Group-IB investigated, and why detection alone can’t stop it.
News · via HIPAA Journal
GoodRx & Criteo Revised $32 Million Data Privacy Settlement Gets First Approval
A revised $32 million settlement has received first approval from the court to resolve class action data breach litigation against GoodRx and Criteo related to the use of website tracking tools on…
News · via Security Affairs
ENGIE Data Breach Exposes Customer Details and Energy Contracts
ENGIE says attackers accessed French customers’ contact and energy contract data through a partner sales tool. Banking data was not affected. French multinational energy company ENGIE warned…
News · via Security Affairs
Virtualine Domain Seized, but Allegedly Abusive Website Remains Online
The FBI seized Virtualine, a hosting service accused of supporting criminal sites, ignoring abuse reports and helping launder money from illegal activities The FBI seized the website of Virtualine, a…
News · via Recorded Future
Prediction Markets Emerge as a New Vertical for Traffer Teams
Executive Summary Since the spring of 2026, Insikt Group has observed multiple Russian-language traffer teams that have quickly adapted affiliate-fraud models to capitalize on growing public interest…
News · via Security Affairs
Hive and Nefilim Ransomware Affiliate Gets 70 Months In Jail
Artem Stryzhak gets 70 months in prison for Hive and Nefilim ransomware attacks, while the FBI offers $11 million for his alleged co-conspirator. A federal court in Brooklyn has sentenced Artem…
News · via Help Net Security
Ukrainian ransomware hacker sentenced, $11 million reward offered for co-conspirator
A Ukrainian national who participated in ransomware attacks targeting hospitals, government entities, law firms, and other businesses was sentenced to five years and 10 months in prison. Artem…
News · via DataBreaches.net
Ukrainian National Sentenced for Role in Hacking Hospitals, Businesses, and Governments as Part of Ransomware Conspiracies Causing Over $100 Million in Losses
A press release from the U.S. Department of Justice: Artem Stryzhak, 36, a Ukrainian national, was sentenced today to 70 months in prison for conspiracy to commit computer fraud in connection with a…