Federal Bureau of Investigation (FBI) Archives

FBI Warns Russian Hackers Target Signal, WhatsApp in Mass Phishing Attacks

23Mar

By RBNo Comments

News

FBI Warns Russian Hackers Target Signal, WhatsApp in Mass Phishing Attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and Federal Bureau of Investigation (FBI) reported on Friday that threat actors connected to Russian Intelligence Services are running phishing campaigns to breach commercial messaging applications (CMAs) like WhatsApp and Signal in order to take control of accounts belonging to people with high intelligence value. FBI Director Kash Patel stated in a post on X that the effort targets people of high intelligence value, including as current and former U.S. government officials, military personnel, political figures, and journalists. This endeavor has led to thousands of individual accounts being accessed without authorization worldwide. The actors can send messages as the victim, check messages and contact lists, and ca...

FBI Reports $262M in ATO Fraud as Researchers Cite Growing AI Phishing and Holiday Scams

26Nov

By RBNo Comments

News

FBI Reports $262M in ATO Fraud as Researchers Cite Growing AI Phishing and Holiday Scams

The Federal Bureau of Investigation (FBI) in the United States has issued a warning about cybercriminals posing as financial institutions in order to steal money or sensitive data in order to support account takeover (ATO) fraud operations. According to the agency, the activity targets people, companies, and organizations of all sizes and in all industries. Since the beginning of the year, the fraudulent schemes have resulted in losses of over $262 million. Over 5,100 complaints have been filed, according to the FBI. Attacks that allow threat actors to acquire unauthorized access to an online financial institution, payroll system, or health savings account in order to steal information and money for their own benefit are sometimes referred to as ATO fraud. The access is frequently g...

Bybit Hack Traced to Safe{Wallet} Supply Chain Attack Exploited by North Korean Hackers

27Feb

By RBNo Comments

News

Bybit Hack Traced to Safe{Wallet} Supply Chain Attack Exploited by North Korean Hackers

North Korean threat actors were officially implicated by the U.S. Federal Bureau of Investigation (FBI) in the historic $1.5 billion Bybit breach, while Ben Zhou, CEO of the business, announced a "war against Lazarus." The CIA blamed the theft of the virtual assets from the bitcoin exchange on the Democratic People's Republic of Korea (North Korea), linking it to a particular cluster it tracks called TraderTraitor, which is also tracked as Slow Pisces, Jade Sleet, and UNC4899. Some of the stolen funds have been converted to Bitcoin and other virtual assets spread across thousands of addresses on several blockchains by TraderTraitor actors who are moving quickly read more about Bybit Hack Traced to Safe{Wallet} Supply Chain Attack Exploited by North Korean Hackers. Get up to date ...

DoJ Indicts Three Russians for Operating Crypto Mixers Used in Cybercrime Laundering

13Jan

By RBNo Comments

News

DoJ Indicts Three Russians for Operating Crypto Mixers Used in Cybercrime Laundering

Three Russian nationals were charged by the U.S. Department of Justice (DoJ) on Friday for allegedly running the cryptocurrency mixing sites Blender.io and Sinbad.io. In collaboration with the U.S. Federal Bureau of Investigation (FBI), Finland's National Bureau of Investigation, and the Netherlands' Financial Intelligence and Investigative Service, Roman Vitalyevich Ostapenko and Alexander Evgenievich Oleynik were taken into custody on December 1, 2024. The location of their capture was not disclosed. Anton Vyachlavovich Tarasov, the third person, is still on the loose. As a means for state-sponsored hacking groups and cybercriminals to make money off of their nefarious activities, the defendants are accused of running cryptocurrency mixers, also known as tumblers, that acted as...

FBI Seizes BreachForums Again, Urges Users to Report Criminal Activity

16May

By RBNo Comments

News

FBI Seizes BreachForums Again, Urges Users to Report Criminal Activity

For the second time in less than a year, law enforcement agencies have taken official control of the notorious BreachForums website, an online marketplace known for selling stolen data. The website "breachforums[.]st" has been replaced with a seizure banner indicating that the U.S. Federal Bureau of Investigation (FBI) is in charge of the clearnet cybercrime forum. Authorities from Australia, Iceland, New Zealand, Switzerland, the U.K., the U.S., and Ukraine worked together to create the operation. Additionally, the FBI has taken over the Telegram channel run by Baphomet, who took over as forum administrator when Conor Brian Fitzpatrick, better known as Pompompurin read more FBI Seizes BreachForums Again Urges Users to Report Criminal Activity. Get up to date on the latest cyb...

NSA and FBI Alert on North Korean Hackers Spoofing Emails from Trusted Sources

3May

By RBNo Comments

News

NSA and FBI Alert on North Korean Hackers Spoofing Emails from Trusted Sources

On Thursday, the U.S. government released a fresh cybersecurity advise alerting readers to North Korean threat actors' attempts to send emails that appear to be from reliable and authentic sources. The Department of State, the Federal Bureau of Investigation (FBI), and the National Security Agency (NSA) jointly released the bulletin. By obtaining unauthorized access to targets' private documents, research, and communications, the DPRK [Democratic People's Republic of Korea] uses these spear-phishing campaigns to gather intelligence on geopolitical events, adversary foreign policy strategies, and any information affecting DPRK interests, according to the NSA. In particular, the method involves hiding social engineering attempts by taking use of DNS Domain-based Message Authenticat...

FBI Warns U.S. Healthcare Sector of Targeted BlackCat Ransomware Attacks

29Feb

By RBNo Comments

News

FBI Warns U.S. Healthcare Sector of Targeted BlackCat Ransomware Attacks

As recently as this month, the U.S. government issued a warning regarding the reappearance of BlackCat (also known as ALPHV) ransomware assaults that target the healthcare industry. The authorities added in an updated advisory that since mid-December 2023, the healthcare sector has been the most frequently victimized out of the roughly 70 victims who have been exposed. This is probably a reaction to a statement made by the ALPHV/BlackCat administrator, who encouraged its affiliates to target hospitals following the group's and its infrastructure's operational activity in early December 2023. The Department of Health and Human Services (HHS), the Cybersecurity and Infrastructure Security Agency (CISA), and the Federal Bureau of Investigation (FBI) are the organizations that provid...