Cybercrime includes illegal digital activity such as hacking, fraud, and extortion, posing risks to data, systems, finances, and public safety.
Search across headline titles and summaries.
Background for this topic.
Cybercrime involves illegal activities conducted using computers or networks, such as hacking, identity theft, financial fraud, and distribution of malware. These crimes exploit vulnerabilities in software, hardware, or human behavior to gain unauthorized access, steal data, or disrupt services. Understanding the methods and motives behind cybercrime is essential for identifying relevant threats and attack vectors.
For security practitioners, cybercrime highlights the importance of protecting critical systems against exploitation through strong access controls, timely patching of vulnerabilities, and user awareness training to prevent social engineering attacks. Monitoring for indicators of compromise and analyzing threat intelligence related to cybercriminal tactics can improve detection and mitigation efforts. Effective defense requires a focus on both technical safeguards and operational readiness to respond to evolving criminal techniques.
The Russian cybercrime community, one of the most active and prolific in the world, is turning to alternative money-laundering methods due to sanctions on Russia and law enforcement actions against dark web markets. [...]
KrebsOnSecurity recently reviewed a copy of the private chat messages between members of the LAPSUS$ cybercrime group in the week leading up to the arrest of its most active members last month. The logs show LAPSUS$ breached T-Mobile multiple times in March, stealing source code for a range of company projects. T-Mobile says no customer or government information was stolen in the intrusion. LAPSUS$ is known for stealing data and then demanding a ransom not to publish or sell it. But the leaked chats indicate this mercenary activity was of little interest to the tyrannical teenage leader of LAPSUS$, whose obsession with stealing and leaking proprietary computer source code from the world’s largest tech companies ultimately led to the group’s undoing.
UN North Korea expert says cybercrime pays for country’s banned missile and nuclear programs
Alert lists cybercrime and state-backed groups’ TTPs
An 18-month-long analysis of the PYSA ransomware operation has revealed that the cybercrime cartel followed a five-stage software development cycle from August 2020, with the malware authors prioritizing features to improve the efficiency of its workflows