Cybercrime includes illegal digital activity such as hacking, fraud, and extortion, posing risks to data, systems, finances, and public safety.
Search across headline titles and summaries.
Background for this topic.
Cybercrime involves illegal activities conducted using computers or networks, such as hacking, identity theft, financial fraud, and distribution of malware. These crimes exploit vulnerabilities in software, hardware, or human behavior to gain unauthorized access, steal data, or disrupt services. Understanding the methods and motives behind cybercrime is essential for identifying relevant threats and attack vectors.
For security practitioners, cybercrime highlights the importance of protecting critical systems against exploitation through strong access controls, timely patching of vulnerabilities, and user awareness training to prevent social engineering attacks. Monitoring for indicators of compromise and analyzing threat intelligence related to cybercriminal tactics can improve detection and mitigation efforts. Effective defense requires a focus on both technical safeguards and operational readiness to respond to evolving criminal techniques.
The notorious cybercrime group known as FIN7 has been observed deploying Cl0p (aka Clop) ransomware, marking the threat actor's first ransomware campaign since late 2021
A cybercriminal tracked as the "Lemon Group" has been infecting millions of Android-based smartphones, watches, TVs, and TV boxes, with a malware strain named 'Guerilla.' [...]
A cybercrime enterprise known as Lemon Group is leveraging millions of pre-infected Android smartphones worldwide to carry out their malicious operations, posing significant supply chain risks
Cybercrime group that often uses smishing for initial access bypassed traditional OS targeting and evasion techniques to directly gain access to the cloud.
Elevated attack rate expected to remain during 2023 as cybercrime becomes more sophisticated and widespread.
Lemon Group's Guerrilla malware model an example of how threat actors are monetizing compromised Android devices, researchers say.
CISA urges small and midsized organizations as well as critical infrastructures to implement mitigations to shield from further attacks.