Cybercrime Cybersecurity News

Help TDS Tied to Hotejka: 20,000+ Cloudflare Pages Domains Host Tech Support Scams

RedSide Security October 15, 2026 Cybercrime 31 views

A long-running traffic distribution system called Help TDS has been tied to a Russian affiliate program, Hotejka, with over 20,000 Cloudflare Pages domains serving tech support scams.

FBI Arrests Second Suspected ShinyHunters Co-Conspirator After Jobs Portal Breach

RedSide Security October 09, 2026 Cybercrime 79 views

The FBI has arrested another suspected ShinyHunters co-conspirator following the group's claimed breach of the agency's jobs portal, but the suspect remains unnamed and no charges have been filed.

Fake AI Ad Portals Target Business Accounts, Steal Credentials and MFA Codes

RedSide Security October 06, 2026 Cybercrime 52 views

A human-operated phishing platform is impersonating advertising products for ChatGPT, Gemini, Claude, and other AI chatbots to harvest business credentials and MFA codes.

ZachXBT Claims to Infiltrate Crypto Laundering Network Linked to Lazarus Group After $1.5 Billion Bybit Hack

RedSide Security October 06, 2026 Cybercrime 70 views

Blockchain investigator ZachXBT says he infiltrated a Chinese cryptocurrency laundering network allegedly linked to North Korea's Lazarus Group and traced more than $1 billion in stolen assets following the $1.5 billion Bybit hack, helping identify wallet clusters and freeze cryptocurrency connected to the operation.

Palo Alto PAN-OS Authentication Bypass Exploited to Deploy Qilin Ransomware

RedSide Security July 21, 2026 Cybercrime 228 views

Threat actors are exploiting CVE-2026-0257 in Palo Alto PAN-OS GlobalProtect to bypass authentication, gain VPN access, steal Active Directory credentials, and deploy Qilin ransomware. Security teams should patch immediately and rotate credentials if compromise is suspected.

Russian Tourist Detained in Armenia Over U.S. REvil Extradition Request Claims Mistaken Identity

RedSide Security July 19, 2026 Cybercrime 146 views

Armenia has detained a Russian citizen named Aleksandr Ermakov following a U.S. extradition request tied to alleged REvil ransomware activity. His lawyers claim authorities arrested the wrong person, arguing the detainee is a former prison-service lawyer and not the sanctioned cybercrime suspect sought by the United States.

New "Spirals" Ransomware Encrypts Enterprise Network in Under 24 Hours

RedSide Security July 18, 2026 Cybercrime 183 views

A newly discovered ransomware family named Spirals encrypted an enterprise network in less than 24 hours after compromising an internet-facing IIS server. The Rust-based ransomware used web shells, Cloudflare tunnels, credential dumping, WMI, and PsExec to achieve rapid domain-wide deployment before encrypting systems and threatening data leaks.

FIFA World Cup 2026 Fans Targeted by Massive Wave of Ticket Scams, Malware, and Phishing Attacks

RedSide Security June 05, 2026 Cybercrime 240 views

Cybercriminals are aggressively targeting FIFA World Cup 2026 fans through thousands of fake websites, phishing campaigns, malicious streaming applications, and banking malware. Security researchers warn that ticket fraud, account takeovers, identity theft, and financial scams are expected to surge as the tournament approaches.

Fake Call History Apps Stole Payments From Users After 7.3 Million Play Store Downloads

RedSide Security May 10, 2026 Cybercrime 179 views

Researchers uncovered 28 fraudulent Android apps on the Google Play Store that falsely claimed to provide access to call histories and WhatsApp logs for any phone number. The apps amassed over 7.3 million downloads before removal and tricked victims into paying subscriptions for completely fabricated data.

LeakBase Admin Arrested in Russia Over Massive Stolen Credential Marketplace

RedSide Security March 26, 2026 Cybercrime 197 views