Cybersecurity articles tagged #Cybercrime on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/mexicos-cybersecurity-plan-2025-2030-addressing-rising-threatshttps://runtimerebel.com/blog/mexicos-cybersecurity-plan-2025-2030-addressing-rising-threatsMexico's National Cybersecurity Plan 2025-2030 aims to strengthen defenses against ransomware, state-sponsored espionage, and cybercrime.Tue, 25 Aug 2026 16:30:54 GMTMexicoRansomwareState Sponsored EspionageCybercrimeLockBithttps://runtimerebel.com/blog/cybercrime-policing-roadblocks-funding-training-gapshttps://runtimerebel.com/blog/cybercrime-policing-roadblocks-funding-training-gapsLaw enforcement faces significant hurdles in combating cybercrime, primarily due to insufficient funding for training and a lack of strategic focus.Sun, 23 Aug 2026 08:20:50 GMTCybercrimeLaw EnforcementTrainingFundingCybersecurity Policyhttps://runtimerebel.com/blog/uat-10147-leverages-agentic-ai-for-edr-evasive-cybercrimehttps://runtimerebel.com/blog/uat-10147-leverages-agentic-ai-for-edr-evasive-cybercrimeTalos details UAT-10147, an AI-driven cybercrime group orchestrating sophisticated post-compromise operations and evading EDR with custom rootkits.Fri, 21 Aug 2026 00:46:37 GMTAgentic AICybercrimeEDR EvasionUAT 10147SPECTRE Implanthttps://runtimerebel.com/blog/kriminal-ai-platform-fuels-cybercrime-osint-social-engineeringhttps://runtimerebel.com/blog/kriminal-ai-platform-fuels-cybercrime-osint-social-engineeringThe 'Kriminal' AI platform, offering guardrail-free social engineering and OSINT, raises significant concerns about its potential to fuel cybercrime.Thu, 20 Aug 2026 00:40:40 GMTAICybercrimeSocial EngineeringOSINTThreat Intelligencehttps://runtimerebel.com/blog/cybercrime-s-coordination-gap-attackers-outpace-law-enforcementhttps://runtimerebel.com/blog/cybercrime-s-coordination-gap-attackers-outpace-law-enforcementAnalysis of the widening gap between agile cybercrime organizations and fragmented global law enforcement efforts, highlighting the impact on cybersecurity.Fri, 07 Aug 2026 02:11:05 GMTCybercrimeLaw EnforcementThreat ActorsInformation SharingGlobal Cooperationhttps://runtimerebel.com/blog/snowflake-hacker-pleads-guilty-analyzing-the-unc5537-data-breachhttps://runtimerebel.com/blog/snowflake-hacker-pleads-guilty-analyzing-the-unc5537-data-breachHacker pleads guilty in UNC5537 Snowflake data breach, compromising 165 organizations and millions of records via stolen credentials.Fri, 07 Aug 2026 02:09:26 GMTSnowflakeData BreachUNC5537Credential TheftCybercrimehttps://runtimerebel.com/blog/interpol-s-i-grip-system-curtails-fraudulent-payments-a-threat-intel-briefhttps://runtimerebel.com/blog/interpol-s-i-grip-system-curtails-fraudulent-payments-a-threat-intel-briefExplore Interpol's I-GRIP system, a global initiative enabling rapid freezing of fraudulent payments and enhancing international cooperation against cyber-enabled…Fri, 31 Jul 2026 14:11:22 GMTINTERPOLFinancial FraudCybercrimeI GRIPPayment FraudBECPhishinghttps://runtimerebel.com/blog/shinyhunters-breaches-brinks-home-threatens-data-leakhttps://runtimerebel.com/blog/shinyhunters-breaches-brinks-home-threatens-data-leakShinyHunters claims a breach of Brinks Home systems, threatening to leak stolen data. This analysis covers the threat actor, potential impact, and mitigation.Thu, 30 Jul 2026 17:31:04 GMTShinyHuntersBrinks HomeData BreachData LeakExtortionCybercrimehttps://runtimerebel.com/blog/tag-195-evolves-maas-ecosystem-with-modular-malwarehttps://runtimerebel.com/blog/tag-195-evolves-maas-ecosystem-with-modular-malwareInsikt Group identifies TAG-195's new modular malware families, signalling a significant shift in the Malware-as-a-Service ecosystem and operator-driven tooling.Thu, 23 Jul 2026 17:28:53 GMTTAG 195MaaSMalware as a ServiceCybercrimeModular Malwarehttps://runtimerebel.com/blog/evolving-carding-tactics-residential-proxies-fraud-detection-evasionhttps://runtimerebel.com/blog/evolving-carding-tactics-residential-proxies-fraud-detection-evasionCybercriminals leverage "clean" residential proxies, browser fingerprints, and device profiles to bypass modern fraud detection systems, enhancing carding success.Fri, 17 Jul 2026 17:14:34 GMTCardingResidential ProxiesFraud DetectionBrowser FingerprintingCybercrimeIdentity Spoofinghttps://runtimerebel.com/blog/spanish-police-dismantle-eur140m-cyber-fraud-ring-bec-investment-schemeshttps://runtimerebel.com/blog/spanish-police-dismantle-eur140m-cyber-fraud-ring-bec-investment-schemesSpanish Police dismantle a sophisticated cybercrime organization responsible for €140 million in BEC and investment fraud, arresting four key individuals.Tue, 14 Jul 2026 21:02:39 GMTCybercrimeBECInvestment FraudMoney LaunderingSpainLaw EnforcementSocial Engineeringhttps://runtimerebel.com/blog/scambuster-ai-driven-phishing-engagement-for-threat-intelhttps://runtimerebel.com/blog/scambuster-ai-driven-phishing-engagement-for-threat-intelExplore ScamBuster, an open-source, AI-driven tool that actively engages phishing attackers to gather intelligence on their TTPs, aiding threat detection and law…Mon, 13 Jul 2026 14:43:59 GMTScamBusterPhishingSocial EngineeringThreat IntelligenceAIOpen SourceCybercrimehttps://runtimerebel.com/blog/odido-data-breach-analysis-dutch-police-suspect-local-hacker-involvementhttps://runtimerebel.com/blog/odido-data-breach-analysis-dutch-police-suspect-local-hacker-involvementDutch National Police identify strong indications of local hacker involvement in the February data breach at telecommunications provider Odido.Fri, 10 Jul 2026 21:07:51 GMTOdidoData BreachTelecommunicationsDutch PoliceCybercrimehttps://runtimerebel.com/blog/ryuk-ransomware-affiliate-pleads-guilty-to-us-hacking-chargeshttps://runtimerebel.com/blog/ryuk-ransomware-affiliate-pleads-guilty-to-us-hacking-chargesA 34-year-old Armenian national faces 15 years in prison for his role in the Ryuk ransomware operation, which targeted U.S. hospitals and businesses.Fri, 10 Jul 2026 21:07:31 GMTRyukRansomwareCybercrimeDepartment of JusticeTrickBothttps://runtimerebel.com/blog/insider-threat-security-expert-sentenced-for-blackcat-alphv-aidhttps://runtimerebel.com/blog/insider-threat-security-expert-sentenced-for-blackcat-alphv-aidFormer ransomware negotiator Angelo Martino received a 70-month prison sentence for aiding the BlackCat/Alphv ransomware group, highlighting insider threat risks.Fri, 10 Jul 2026 14:32:15 GMTBlackCatALPHVRansomwareInsider ThreatCybercrimeAngelo Martinohttps://runtimerebel.com/blog/cyber-financial-crime-convergence-proactive-payment-fraud-disruptionhttps://runtimerebel.com/blog/cyber-financial-crime-convergence-proactive-payment-fraud-disruptionExplore how the convergence of cyber and financial crime fuels payment fraud. Learn about proactive strategies for pre-monetization disruption and intelligence-driven…Fri, 10 Jul 2026 07:48:56 GMTPayment FraudFinancial CrimeCybercrimeThreat IntelligenceProactive DefenseMastercardRecorded Futurehttps://runtimerebel.com/blog/global-cybercrime-crackdown-operation-haechi-iv-disrupts-fraudhttps://runtimerebel.com/blog/global-cybercrime-crackdown-operation-haechi-iv-disrupts-fraudOperation HAECHI IV, a global anti-fraud initiative, resulted in 5,811 arrests and seized $293M, highlighting international efforts against cyber-enabled financial crime.Thu, 09 Jul 2026 11:02:50 GMTCybercrimeFraudLaw EnforcementFinancial CrimeHAECHI IVSocial Engineeringhttps://runtimerebel.com/blog/google-sues-outsider-enterprise-over-gemini-powered-phishing-as-a-servicehttps://runtimerebel.com/blog/google-sues-outsider-enterprise-over-gemini-powered-phishing-as-a-serviceGoogle takes legal action against Outsider Enterprise, a Chinese cybercrime network using Gemini AI to automate sophisticated phishing campaigns against global users.Tue, 07 Jul 2026 11:11:04 GMTOutsider EnterprisePhishing as a ServiceGemini AIGoogleScamsCybercrimehttps://runtimerebel.com/blog/google-disrupts-netnut-malicious-residential-proxy-networkhttps://runtimerebel.com/blog/google-disrupts-netnut-malicious-residential-proxy-networkGoogle, in coordination with the FBI and Lumen, has significantly disrupted the NetNut residential proxy network, impacting millions of compromised devices.Fri, 03 Jul 2026 07:31:53 GMTNetNutResidential ProxyBotnetC2Google Play ProtectMalwareIPIDEACybercrimeEspionagehttps://runtimerebel.com/blog/cybercrime-risk-shift-australian-smbs-under-increased-pressurehttps://runtimerebel.com/blog/cybercrime-risk-shift-australian-smbs-under-increased-pressureAnalysis of shifting cybercrime landscape in Australia, detailing how institutional safeguards impact SMBs and necessitate updated defense strategies for small…Fri, 03 Jul 2026 07:30:37 GMTAustraliaSMBsCybercrimeThreat LandscapeRegulatory Impacthttps://runtimerebel.com/blog/fbi-seizes-netnut-proxy-platform-popa-botnet-operationshttps://runtimerebel.com/blog/fbi-seizes-netnut-proxy-platform-popa-botnet-operationsThe FBI, in partnership, seized NetNut residential proxy platform and disrupted the Popa botnet, which compromised millions of devices.Fri, 03 Jul 2026 07:30:12 GMTNetNutPopa BotnetFBIAlarum TechnologiesResidential ProxyCybercrimeLaw Enforcement Actionhttps://runtimerebel.com/blog/alleged-scattered-spider-hacker-extradited-mitigating-social-engineeringhttps://runtimerebel.com/blog/alleged-scattered-spider-hacker-extradited-mitigating-social-engineeringAn alleged Scattered Spider member's extradition highlights ongoing efforts against sophisticated social engineering and identity-based attacks impacting major…Thu, 02 Jul 2026 10:45:17 GMTScattered SpiderSocial EngineeringMFA BypassRansomwareCybercrimeExtraditionUNC39440ktapushttps://runtimerebel.com/blog/doj-seizes-400-illegal-fifa-world-cup-streaming-domainshttps://runtimerebel.com/blog/doj-seizes-400-illegal-fifa-world-cup-streaming-domainsThe U.S. Justice Department seized nearly 400 domains illegally streaming FIFA World Cup matches, disrupting copyright infringement and protecting users from associated…Mon, 29 Jun 2026 13:39:14 GMTDomain SeizureIllegal StreamingFIFA World CupCopyright InfringementCybercrimeDOJhttps://runtimerebel.com/blog/sim-swapping-ring-busted-millions-in-crypto-theft-via-telecom-hackshttps://runtimerebel.com/blog/sim-swapping-ring-busted-millions-in-crypto-theft-via-telecom-hacksPolish authorities dismantle a sophisticated SIM-swapping ring that hijacked telecom partners and email accounts to steal millions in cryptocurrency.Fri, 26 Jun 2026 01:02:30 GMTSIM SwappingCryptocurrency TheftTelecommunications SecurityAccount TakeoverCybercrimePolandhttps://runtimerebel.com/blog/amadey-stealc-malware-infrastructure-disrupted-27m-credentials-stolenhttps://runtimerebel.com/blog/amadey-stealc-malware-infrastructure-disrupted-27m-credentials-stolenLaw enforcement and private sector dismantled infrastructure for Amadey and StealC malware, leading to 27M stolen credentials recovery. Learn impact & defense.Wed, 24 Jun 2026 20:39:48 GMTAmadeyStealCMalwareTakedownCredentialsCybercrimehttps://runtimerebel.com/blog/amadey-stealc-malware-c2-infrastructure-disruptedhttps://runtimerebel.com/blog/amadey-stealc-malware-c2-infrastructure-disruptedMicrosoft and global allies dismantle the shared C2 infrastructure of Amadey botnet and StealC info-stealer malware, disrupting ongoing cybercrime operations.Wed, 24 Jun 2026 16:52:14 GMTAmadeyStealCMalwareBotnetInfostealerCybercrimeC2 TakedownMicrosofthttps://runtimerebel.com/blog/amadey-stealc-malware-operations-disrupted-by-operation-endgamehttps://runtimerebel.com/blog/amadey-stealc-malware-operations-disrupted-by-operation-endgameOperation Endgame, led by Europol and Microsoft, has disrupted infrastructure supporting Amadey and StealC info-stealer malware, impacting cybercriminal services.Wed, 24 Jun 2026 16:51:44 GMTAmadeyStealCOperation EndgameMalwareInfostealerCybercrimeLaw Enforcementhttps://runtimerebel.com/blog/scattered-spider-members-plead-guilty-in-tfl-infrastructure-attackhttps://runtimerebel.com/blog/scattered-spider-members-plead-guilty-in-tfl-infrastructure-attackTwo members of the Scattered Spider threat group plead guilty to the 2024 Transport for London hack, exposing risks of identity-based social engineering.Tue, 23 Jun 2026 16:54:58 GMTScattered SpiderUNC3944Transport for LondonSocial EngineeringCybercrimehttps://runtimerebel.com/blog/audia6-crypto-laundering-service-dismantled-impact-on-ransomwarehttps://runtimerebel.com/blog/audia6-crypto-laundering-service-dismantled-impact-on-ransomwareLaw enforcement dismantled AudiA6, a major crypto-laundering service used by ransomware groups and cybercriminals to process over $380 million.Thu, 11 Jun 2026 17:24:04 GMTAudiA6Crypto LaunderingRansomwareCybercrimeLaw EnforcementFinancial Crimehttps://runtimerebel.com/blog/identifying-the-gentlemen-ransomware-operations-and-tacticshttps://runtimerebel.com/blog/identifying-the-gentlemen-ransomware-operations-and-tacticsAnalysis of The Gentlemen ransomware group, its aggressive 90% affiliate payout model, and investigations into the identity of its primary administrator.Thu, 11 Jun 2026 09:40:19 GMTThe GentlemenRansomwareCybercrimeRaaSAffiliate Marketinghttps://runtimerebel.com/blog/infostealers-millions-of-devices-compromised-for-credential-thefthttps://runtimerebel.com/blog/infostealers-millions-of-devices-compromised-for-credential-theftInfostealers are increasingly enabling ransomware and cybercrime operations by compromising millions of devices to harvest credentials and sensitive data.Thu, 11 Jun 2026 05:41:49 GMTInfostealersCredential TheftRansomwareCybercrimeMalwarehttps://runtimerebel.com/blog/ta4922-expands-global-cybercrime-analysis-of-diverse-ttpshttps://runtimerebel.com/blog/ta4922-expands-global-cybercrime-analysis-of-diverse-ttpsRuntime Rebel analyzes TA4922's expanding global cybercrime operations, detailing diverse TTPs and providing actionable mitigation strategies for security professionals.Fri, 05 Jun 2026 05:37:51 GMTTA4922CybercrimeChinaPhishingMalware Distributionhttps://runtimerebel.com/blog/fbis-2025-internet-crime-report-trends-and-outlookhttps://runtimerebel.com/blog/fbis-2025-internet-crime-report-trends-and-outlookThe FBI's 2025 Internet Crime Report highlights evolving cybercrime trends, victim impact, and reporting significance for US security professionals.Wed, 27 May 2026 17:14:55 GMTFBIInternet Crime ReportCybercrimeIC3Trends2025https://runtimerebel.com/blog/fiod-seizes-800-servers-disruption-of-bulletproof-hostinghttps://runtimerebel.com/blog/fiod-seizes-800-servers-disruption-of-bulletproof-hostingDutch authorities seize 800 servers from a bulletproof hosting provider, disrupting infrastructure for cyberattacks, disinformation, and interference campaigns.Fri, 22 May 2026 20:37:48 GMTBulletproof HostingCybercrimeFIODNetherlandsServer SeizureDisinformationLaw Enforcement Actionhttps://runtimerebel.com/blog/dismantling-first-vpn-global-takedown-of-ransomware-infrastructurehttps://runtimerebel.com/blog/dismantling-first-vpn-global-takedown-of-ransomware-infrastructureAuthorities dismantle First VPN Service, a critical infrastructure hub used by 25 ransomware groups for masking data theft and DDoS attacks.Fri, 22 May 2026 20:37:05 GMTFirst VPN ServiceRansomware InfrastructureLaw Enforcement TakedownCybercrimeNetwork Securityhttps://runtimerebel.com/blog/kimwolf-botnet-operator-jacob-butler-arrested-in-ddos-for-hire-casehttps://runtimerebel.com/blog/kimwolf-botnet-operator-jacob-butler-arrested-in-ddos-for-hire-caseDOJ arrests Canadian operator of the Kimwolf botnet, a variant of the AISURU malware, used in large-scale DDoS-for-hire attacks against global targets.Fri, 22 May 2026 09:12:55 GMTKimwolfAISURUDDoS for HireJacob ButlerCybercrimeDOJhttps://runtimerebel.com/blog/apple-s-app-store-fraud-prevention-over-11b-blockedhttps://runtimerebel.com/blog/apple-s-app-store-fraud-prevention-over-11b-blockedRuntime Rebel analyzes Apple's disclosure of blocking $11B in App Store fraud over six years, detailing the ongoing fight against malicious apps.Thu, 21 May 2026 20:41:16 GMTAppleApp StoreFraudCybercrimeMobile SecurityPayment Fraudhttps://runtimerebel.com/blog/interpol-operation-ramz-strengthening-mena-region-cyber-defensehttps://runtimerebel.com/blog/interpol-operation-ramz-strengthening-mena-region-cyber-defenseInterpol's Operation Ramz highlights increased law enforcement collaboration in the Middle East to dismantle phishing and ransomware infrastructure.Wed, 20 May 2026 09:16:43 GMTINTERPOLOperation RamzMENA RegionCybercrimePhishinghttps://runtimerebel.com/blog/github-investigates-claimed-teampcp-breach-of-4000-internal-reposhttps://runtimerebel.com/blog/github-investigates-claimed-teampcp-breach-of-4000-internal-reposGitHub is investigating a potential breach of 4,000 internal repositories claimed by TeamPCP, highlighting the risk of source code leaks for enterprises.Wed, 20 May 2026 05:27:11 GMTGitHubTeamPCPSource Code LeakData BreachCybercrimehttps://runtimerebel.com/blog/ai-developed-zero-day-2fa-bypass-analyzing-google-s-disclosurehttps://runtimerebel.com/blog/ai-developed-zero-day-2fa-bypass-analyzing-google-s-disclosureGoogle identifies the first in-the-wild zero-day exploit for 2FA bypass developed using AI, signaling a shift in cybercriminal vulnerability discovery.Mon, 11 May 2026 16:59:10 GMTAI Threats2FA BypassZero-DayGoogle Security DisclosureCybercrimehttps://runtimerebel.com/blog/crimenetwork-marketplace-takedown-impact-on-underground-cybercrimehttps://runtimerebel.com/blog/crimenetwork-marketplace-takedown-impact-on-underground-cybercrimeGerman authorities dismantled the Crimenetwork marketplace reboot, arresting its operator and seizing infrastructure used for global illicit digital trade.Sun, 10 May 2026 16:23:20 GMTCrimenetworkDark WebTakedownCybercrimeLaw Enforcementhttps://runtimerebel.com/blog/gavril-sandu-extradited-to-us-for-historical-phishing-schemehttps://runtimerebel.com/blog/gavril-sandu-extradited-to-us-for-historical-phishing-schemeGavril Sandu, a Romanian national, faces US charges for a 2007-2008 phishing operation that targeted financial institutions and thousands of victims.Wed, 06 May 2026 12:48:13 GMTGavril SanduPhishingIdentity TheftExtraditionCybercrimeFinancial Fraudhttps://runtimerebel.com/blog/ai-assisted-attacks-lessons-from-the-kaikatsu-club-data-breachhttps://runtimerebel.com/blog/ai-assisted-attacks-lessons-from-the-kaikatsu-club-data-breachAnalyze the 2025 Kaikatsu Club breach where AI-assisted malicious code allowed a teenager to steal 7 million user records, signaling a new era of cyber threats.Mon, 04 May 2026 12:41:59 GMTAI Assisted AttacksKaikatsu ClubData BreachJapanCybercrimehttps://runtimerebel.com/blog/north-korea-dominates-crypto-heists-76-of-stolen-funds-by-2026https://runtimerebel.com/blog/north-korea-dominates-crypto-heists-76-of-stolen-funds-by-2026North Korean threat actors are projected to be responsible for 76% of all cryptocurrency stolen by 2026, utilizing sophisticated methods for large-scale heists.Sat, 02 May 2026 00:49:12 GMTNorth KoreaCryptocurrency TheftLazarus GroupCybercrimeFinancial CrimeNation State APThttps://runtimerebel.com/blog/french-ants-agency-data-breach-teen-suspect-detainedhttps://runtimerebel.com/blog/french-ants-agency-data-breach-teen-suspect-detainedFrench authorities detain a 15-year-old suspected of orchestrating a data breach at ANTS, the national agency for administrative documents, impacting citizen data…Fri, 01 May 2026 20:23:14 GMTANTSFrance TitresData BreachGovernment AgencyCybercrimeTeen Hackerhttps://runtimerebel.com/blog/blackcat-ransomware-cybersecurity-pros-sentenced-for-2023-attackshttps://runtimerebel.com/blog/blackcat-ransomware-cybersecurity-pros-sentenced-for-2023-attacksTwo cybersecurity professionals receive four-year prison sentences for their roles in facilitating BlackCat (ALPHV) ransomware attacks against U.S. victims.Fri, 01 May 2026 12:28:05 GMTBlackCatALPHVRansomwareInsider ThreatDepartment of JusticeCybercrimehttps://runtimerebel.com/blog/global-authorities-dismantle-9-crypto-scam-centers-276-arrestedhttps://runtimerebel.com/blog/global-authorities-dismantle-9-crypto-scam-centers-276-arrestedInternational law enforcement dismantles nine crypto scam centers and arrests 276 suspects, disrupting a massive pig butchering network targeting global victims.Thu, 30 Apr 2026 12:41:31 GMTCrypto FraudPig ButcheringCybercrimeLaw Enforcementhttps://runtimerebel.com/blog/roblox-account-hijacking-610000-accounts-compromised-and-soldhttps://runtimerebel.com/blog/roblox-account-hijacking-610000-accounts-compromised-and-soldUkrainian police arrested a group for hijacking 610,000 Roblox accounts and generating $225,000 in profits through illegal sales of user data.Wed, 29 Apr 2026 20:30:38 GMTRobloxAccount TakeoverCredential StuffingCybercrimeIdentity Thefthttps://runtimerebel.com/blog/lofygang-targets-minecraft-players-with-lofystealer-malwarehttps://runtimerebel.com/blog/lofygang-targets-minecraft-players-with-lofystealer-malwareBrazilian cybercrime group LofyGang resurfaces after three years, deploying LofyStealer (GrabBot) disguised as a Minecraft 'Slinky' hack to steal player credentials.Tue, 28 Apr 2026 20:34:56 GMTLofyGangLofyStealerGrabBotMinecraftInfostealerCybercrimehttps://runtimerebel.com/blog/adt-confirms-data-breach-amid-shinyhunters-extortion-threathttps://runtimerebel.com/blog/adt-confirms-data-breach-amid-shinyhunters-extortion-threatADT confirms a data breach following a ShinyHunters extortion attempt. Customer data is at risk; security professionals must advise enhanced vigilance.Sat, 25 Apr 2026 00:43:18 GMTADTShinyHuntersData BreachExtortionCybercrimeThreat Intelligence