Spain’s National Police and US Secret Service Take Down an International Cybercrime Phishing Group
Read also: Russian cybercriminal convicted in $90M hack-and-trade scheme, US and UK slap sanctions on 7 Russians tied to TrickBot cybercrime gang, and more.
Spanish police disrupt international phishing gang that defrauded hundreds of victims
A joint law enforcement operation carried out by Spain’s National Police together with the US Secret Service has resulted in the takedown of an international cybercrime group that in less than a year stole over 5 million euros from more than 200 victims, including individuals and North American companies.
ESXiArgs ransomware hits over 500 European orgs
More than 500 organizations in Europe have become fresh targets of the ESXiArgs ransomware that has been infecting VMware ESXi servers worldwide since at least February 2023. It is believed that ESXiArgs is hitting ESXi servers unpatched against the CVE-2021–21974 remote code execution flaw.
Microsoft, Apple patch Windows, Webkit zero-days
Microsoft has released security updates spanning a wide range of its software that fix more than 75 security vulnerabilities, including three actively exploited zero-day bugs. Apple also rolled out security updates for macOS, iOS and Safari to patch a likely exploited Webkit vulnerability tracked as CVE-2023–23529.
Russian cybercriminal convicted in $90M hack-and-trade scheme
Russian national Vladislav Klyushin, the owner of the Moscow-based cybersecurity firm M-13, was found guilty by the US court for his role in a sophisticated insider trading scheme that involved breaching into US enterprise networks and stealing non-public financial data, which was then used to trade illegally in the shares of hundreds of publicly traded firms.
US, UK sanction seven Russians linked to TrickBot cybercrime gang
In a first-ever coordinated action of its kind the US and UK authorities imposed sanctions on seven Russian nationals believed to have ties with the notorious TrickBot cybercrime group that both countries accuse of targeting critical infrastructure, including hospitals and medical facilities during the global COVID-19 pandemic.