Issue #150 - May 19, 2025
- Weekly INK
- May 19
- 2 min read
Police Operation and Microsoft Take Down Lumma Infostealer
Source: Data Breach Today
Law enforcement and Microsoft struck a blow against malware used to steal login credentials and financial data, seizing the central command structure and thousands of online domains used to control the Lumma Stealer.
Cellcom Service Disruption Caused by Cyberattack
Source: Security Week
Wisconsin telecommunications provider Cellcom has confirmed that a cyberattack is responsible for a service outage it has been dealing with for the past week. Both voice and text services have been down for the wireless carrier’s customers in Wisconsin and Upper Michigan, and the company has started to slowly restore some of them over the past couple of days.
Account Takeover Scams Are Bypassing Fraud Defenses
Source: Info Risk Today
Scammers are increasingly turning to account takeover fraud, as financial institutions ramp up their defenses. Instead of luring victims into making authorized transactions, cybercriminals are bypassing them altogether, hijacking their digital identities and draining accounts from within.
Coinbase Agents Bribed, Data of ~1% Users Leaked; $20M Extortion Attempt Fails
Source: The Hacker News
Cryptocurrency exchange Coinbase has disclosed that unknown cyber actors broke into its systems and stole account data for a small subset of its customers. "Criminals targeted our customer support agents overseas," the company said in a statement. "They used cash offers to convince a small group of insiders to copy data in our customer support tools for less than 1% of Coinbase monthly transacting users."
CISA: Russia's Fancy Bear Targeting Logistics, IT Firms
Source: Dark Reading
Fancy Bear (APT28), a state-backed hacking group tied to Russia's Main Intelligence Directorate (GRU), is ramping up attacks on logistics and IT firms, especially those aiding Ukraine, as part of a broader cyber-espionage campaign.