Cyber CrimeSeasonalInvite: The RMM Trap in eCards
A sophisticated six-month phishing campaign is exploiting legitimate RMM software via fake greeting cards to compromise systems.
Cyber Crime
Data breaches, ransomware payouts, and phishing operations rarely make the news until the damage is already done. This is where Xploitwire tracks the attackers — who they are, how they got in, and what it means for the organizations and people caught in the blast radius.
Cyber Crime
Cyber CrimeTreasury Targets VPN Infrastructure
The US has sanctioned a VPN administrator and a cryptor vendor, escalating a crackdown on the ransomware supply chain.
Cyber CrimeSpanish Authorities Bust Fraud Syndicate
Spanish police dismantle a sophisticated international network linked to over $160 million in investment and BEC-related fraud.
Cyber CrimeDoxbin Admin Jailed for Swatting Role
A Welsh man received a prison sentence for coordinating global swatting campaigns and creating propaganda to incite further attacks.
Cyber CrimeRussia's Escalation Targets Power Grids
UK and EU officials link the December 2025 attack on Poland's power grid to Russian state operatives, prompting new sanctions.
Cyber CrimeGitHub Malware Campaign Hits 292 Repos
A malicious campaign using hundreds of fake repositories is actively deploying the BoryptGrab infostealer to compromised machines.
Cyber CrimeCrashStealer Malware Leverages Apple Developer IDs to Bypass Security
A sophisticated new macOS threat masquerades as system crash reporting tools to siphon credentials through a notarized infection chain.
U.S. Sanctions Infrastructure Providers
Treasury sanctions VPN and cryptor suppliers to disrupt the underlying network that supports global ransomware operations.
Cyber CrimeLidl Breach Highlights Perils of Third-Party Data Dependencies
A breach at a third-party IT vendor has exposed personal data of Lidl customers, forcing a security alert across multiple countries.
Cyber CrimeForg365 and the Industrialization of Account Takeover Tactics
A Telegram-based phishing service is lowering barriers to entry for M365 attacks by automating complex bypass and exfiltration workflows.
Cyber CrimeLondon Prosecution Exposes Industrialized Scale of Russian Coms Platform
Five individuals are facing charges in connection with a sophisticated vishing operation that facilitated millions of fraudulent calls.
Cyber CrimeSupply Chain Breach Hits Jscrambler NPM Package Integrity
Compromised publishing credentials allowed attackers to inject malicious binaries into widely used Jscrambler NPM versions.
Cyber CrimeU.S. Targets VPN Infrastructure Enabling Global Ransomware Campaigns
Federal authorities have sanctioned a specialized VPN provider and a malware cryptor vendor to disrupt ransomware supply chains.
Cyber CrimeUS Targets Russian Hacking Groups With Massive $10 Million Bounty
Federal authorities are hunting two state-linked cyber groups behind a persistent, large-scale campaign targeting Signal and WhatsApp.
Cyber CrimeUnmasking the Administrator Behind The Gentlemen Ransomware Gang
A deep dive into the operational identity and recruitment tactics driving one of the fastest-growing ransomware-as-a-service groups.
Cyber CrimeDutch Server Raids Expose Infrastructure Ties to Russian Operations
Authorities seized 800 servers in a probe targeting individuals accused of facilitating cyberattacks through sanctioned networks.
Cyber CrimeAI Gateways Face New Threats as Attackers Pivot to Cryptomining
Researchers have identified a new vector where cloud-hosted AI infrastructure is being hijacked for illicit cryptocurrency operations.
Cyber CrimeTravel Sector Under Siege as TA558 Pivots Toward Stealthy Payloads
Threat actors are weaponizing reservation-themed emails with container files to bypass modern Microsoft Office security protections.
Cyber CrimeFragmented Threats: From State-Level Ops to Emerging Software Risks
A wide-ranging breakdown of recent cybersecurity disruptions, from intelligence agency offensives to critical enterprise data leaks.
Cyber CrimeLidl Breach Highlights Supply Chain Vulnerability in Retail Sector
A third-party security failure exposed customer data, forcing the retail giant to warn users about the heightened risk of phishing attacks.