<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0">
<channel>
<title>Computer Crime Research Center — News</title>
<link>https://www.crime-research.org/news/</link>
<description>Daily news about computer crime, internet fraud and cyber security.</description>
<language>en-us</language>
<item>
<title>Chinese National Extradited From Netherlands Over Cambodia-Based Crypto Investment Scam Laundering</title>
<link>https://www.crime-research.org/news/2026/10/chinese-national-extradited-cambodia-crypto-scam-laundering/</link>
<guid>https://www.crime-research.org/news/2026/10/chinese-national-extradited-cambodia-crypto-scam-laundering/</guid>
<pubDate>Mon, 26 Oct 2026 09:10:00 GMT</pubDate>
<description>Zheng Zhao was arraigned in California on a money laundering conspiracy charge tied to a scam network that defrauded 174 US victims of more than $36.9 million.</description>
</item>
<item>
<title>Microsoft Ties ConnectWise Cloud Backup Supply Chain Attack to China-Linked Storm-0940</title>
<link>https://www.crime-research.org/news/2026/10/china-linked-storm-0940-connectwise-cloud-backup-supply-chain-attack/</link>
<guid>https://www.crime-research.org/news/2026/10/china-linked-storm-0940-connectwise-cloud-backup-supply-chain-attack/</guid>
<pubDate>Mon, 26 Oct 2026 09:05:00 GMT</pubDate>
<description>Microsoft says a China-linked actor used an agentic AI pentest tool and stolen ConnectWise application credentials to target over 2,250 Microsoft 365 tenants.</description>
</item>
<item>
<title>CISA and FBI Warn SafePay Ransomware Has Hit Over 600 Critical Infrastructure Organizations</title>
<link>https://www.crime-research.org/news/2026/10/cisa-fbi-safepay-ransomware-600-critical-infrastructure-victims/</link>
<guid>https://www.crime-research.org/news/2026/10/cisa-fbi-safepay-ransomware-600-critical-infrastructure-victims/</guid>
<pubDate>Mon, 26 Oct 2026 09:00:00 GMT</pubDate>
<description>A joint US, German and UK advisory says the SafePay ransomware group has compromised at least 600 critical infrastructure victims since August 2024.</description>
</item>
<item>
<title>Burger King Japan Data Breach Exposes Personal Details of 11 Million App Members</title>
<link>https://www.crime-research.org/news/2026/10/burger-king-japan-data-breach-11-million-app-members/</link>
<guid>https://www.crime-research.org/news/2026/10/burger-king-japan-data-breach-11-million-app-members/</guid>
<pubDate>Mon, 19 Oct 2026 09:00:00 GMT</pubDate>
<description>Attackers accessed Burger King Japan's membership system in early October, exposing names, emails and phone numbers of about 11.18 million app users.</description>
</item>
<item>
<title>UK Sanctions Cryptomus and Three Payment Platforms Over Russia-Linked Crypto Flows</title>
<link>https://www.crime-research.org/news/2026/10/uk-sanctions-cryptomus-russia-crypto-payments/</link>
<guid>https://www.crime-research.org/news/2026/10/uk-sanctions-cryptomus-russia-crypto-payments/</guid>
<pubDate>Mon, 19 Oct 2026 09:00:00 GMT</pubDate>
<description>The UK has frozen the assets of crypto payment processor Cryptomus and listed related payment firms, citing support for the Russian government.</description>
</item>
<item>
<title>Microsoft Disrupts Chinese-Language Phishing Kit Ecosystem Behind Over a Billion Messages</title>
<link>https://www.crime-research.org/news/2026/10/microsoft-disrupts-chinese-language-phishing-kit-ecosystem/</link>
<guid>https://www.crime-research.org/news/2026/10/microsoft-disrupts-chinese-language-phishing-kit-ecosystem/</guid>
<pubDate>Fri, 16 Oct 2026 09:00:00 GMT</pubDate>
<description>Microsoft's Digital Crimes Unit and partners disrupted YAM Store and three phishing kits blamed for over one billion lures aimed at 75,000 organizations.</description>
</item>
<item>
<title>14 Indicted Over North Korean Remote IT Worker Scheme Hitting 70+ US Companies</title>
<link>https://www.crime-research.org/news/2026/10/north-korean-remote-it-worker-scheme-14-indicted/</link>
<guid>https://www.crime-research.org/news/2026/10/north-korean-remote-it-worker-scheme-14-indicted/</guid>
<pubDate>Fri, 16 Oct 2026 09:00:00 GMT</pubDate>
<description>US prosecutors unsealed an indictment against 14 people accused of helping North Korean workers get remote IT jobs through US-based laptop farms.</description>
</item>
<item>
<title>FBI Disrupts Chinese Flax Typhoon Hacking Tools Used Against Critical Infrastructure</title>
<link>https://www.crime-research.org/news/2026/10/fbi-disrupts-flax-typhoon-hacking-tools/</link>
<guid>https://www.crime-research.org/news/2026/10/fbi-disrupts-flax-typhoon-hacking-tools/</guid>
<pubDate>Mon, 12 Oct 2026 09:00:00 GMT</pubDate>
<description>The FBI seized seven domains supporting hacking tools tied to the China-linked Flax Typhoon group, as CISA set a short patch deadline for federal agencies.</description>
</item>
<item>
<title>Alleged Core Qilin Ransomware Member Arrested After Extradition to Germany</title>
<link>https://www.crime-research.org/news/2026/10/qilin-ransomware-member-arrested-extradited-germany/</link>
<guid>https://www.crime-research.org/news/2026/10/qilin-ransomware-member-arrested-extradited-germany/</guid>
<pubDate>Mon, 12 Oct 2026 09:00:00 GMT</pubDate>
<description>German authorities took custody of a Russian national suspected of being a senior Qilin ransomware operative following his extradition from Japan.</description>
</item>
<item>
<title>Alleged ShinyHunters Hacker 'Rey' Detained in Jordan, Reportedly Cooperating With FBI</title>
<link>https://www.crime-research.org/news/05.10.2026/shinyhunters-suspect-rey-detained-jordan-fbi/</link>
<guid>https://www.crime-research.org/news/05.10.2026/shinyhunters-suspect-rey-detained-jordan-fbi/</guid>
<pubDate>Mon, 05 Oct 2026 09:10:00 GMT</pubDate>
<description>A suspect tied to the ShinyHunters extortion collective was detained in Jordan and is reportedly helping the FBI identify other members.</description>
</item>
<item>
<title>Warlock Ransomware Group Expands SharePoint Attacks on Critical Infrastructure Across Latin America and Iberia</title>
<link>https://www.crime-research.org/news/05.10.2026/warlock-ransomware-sharepoint-critical-infrastructure/</link>
<guid>https://www.crime-research.org/news/05.10.2026/warlock-ransomware-sharepoint-critical-infrastructure/</guid>
<pubDate>Mon, 05 Oct 2026 09:05:00 GMT</pubDate>
<description>A China-based ransomware group is exploiting Microsoft SharePoint flaws to hit water, telecom and government networks across Latin America and Iberia.</description>
</item>
<item>
<title>Teenage Ransomware Leader Among Three Arrested as Police Dismantle KillSec in Operation KillSwitch</title>
<link>https://www.crime-research.org/news/05.10.2026/killsec-ransomware-teen-leader-arrested-operation-killswitch/</link>
<guid>https://www.crime-research.org/news/05.10.2026/killsec-ransomware-teen-leader-arrested-operation-killswitch/</guid>
<pubDate>Mon, 05 Oct 2026 09:00:00 GMT</pubDate>
<description>International police seized KillSec's leak site and servers and arrested a 16-year-old alleged ringleader plus two other suspected members.</description>
</item>
<item>
<title>U.S. Army Soldier Sentenced to Nearly 6 Years for Hacking AT&amp;T, Verizon in Extortion Scheme</title>
<link>https://www.crime-research.org/news/28.09.2026/us-soldier-sentenced-att-verizon-extortion/</link>
<guid>https://www.crime-research.org/news/28.09.2026/us-soldier-sentenced-att-verizon-extortion/</guid>
<pubDate>Mon, 28 Sep 2026 09:10:00 GMT</pubDate>
<description>Cameron Wagenius, known online as 'Kiberphant0m,' was sentenced for stealing call records from over 100 million AT&amp;T customers and extorting telecom firms.</description>
</item>
<item>
<title>Microsoft Dismantles EvilTokens, an AI-Powered Phishing Service Tied to 12,000 Compromised Inboxes</title>
<link>https://www.crime-research.org/news/28.09.2026/microsoft-takes-down-eviltokens-phishing-service/</link>
<guid>https://www.crime-research.org/news/28.09.2026/microsoft-takes-down-eviltokens-phishing-service/</guid>
<pubDate>Mon, 28 Sep 2026 09:05:00 GMT</pubDate>
<description>A court-authorized takedown disrupted the EvilTokens device-code phishing platform, which used AI throughout its attack chain against organizations worldwide.</description>
</item>
<item>
<title>Bitget Says Suspected North Korean Hackers Stole Over $350 Million in Exchange Hack</title>
<link>https://www.crime-research.org/news/28.09.2026/bitget-hack-north-korean-hackers-steal-350-million/</link>
<guid>https://www.crime-research.org/news/28.09.2026/bitget-hack-north-korean-hackers-steal-350-million/</guid>
<pubDate>Mon, 28 Sep 2026 09:00:00 GMT</pubDate>
<description>Cryptocurrency exchange Bitget says attackers linked to North Korea's TraderTraitor group breached backend wallet infrastructure to steal hundreds of millions in crypto.</description>
</item>
<item>
<title>Screenshot Service Gyazo Confirms Breach Exposing 23.6 Million User Records</title>
<link>https://www.crime-research.org/news/22.09.2026/gyazo-data-breach-23-million-records/</link>
<guid>https://www.crime-research.org/news/22.09.2026/gyazo-data-breach-23-million-records/</guid>
<pubDate>Tue, 22 Sep 2026 09:10:00 GMT</pubDate>
<description>Gyazo, a widely used screenshot-sharing platform, took its service offline after attackers exploited a server flaw to steal tens of millions of records.</description>
</item>
<item>
<title>FBI Seizes NightmareStresser, One of the Longest-Running DDoS-for-Hire Platforms</title>
<link>https://www.crime-research.org/news/22.09.2026/fbi-seizes-nightmarestresser-ddos-for-hire/</link>
<guid>https://www.crime-research.org/news/22.09.2026/fbi-seizes-nightmarestresser-ddos-for-hire/</guid>
<pubDate>Tue, 22 Sep 2026 09:05:00 GMT</pubDate>
<description>US authorities took down the NightmareStresser booter service, used since 2022 to launch hundreds of thousands of DDoS attacks worldwide.</description>
</item>
<item>
<title>Joint Advisory Ties North Korean 'WaterPlum' Group to 30,000 Infected Devices and $10.7M Crypto Theft</title>
<link>https://www.crime-research.org/news/22.09.2026/north-korea-waterplum-30000-devices-crypto-theft/</link>
<guid>https://www.crime-research.org/news/22.09.2026/north-korea-waterplum-30000-devices-crypto-theft/</guid>
<pubDate>Tue, 22 Sep 2026 09:00:00 GMT</pubDate>
<description>US, Japanese, Australian, and German authorities detail how North Korea's WaterPlum hackers used fake job interviews to steal cryptocurrency worldwide.</description>
</item>
<item>
<title>CISA Warns Ransomware Gangs Are Now Exploiting Critical VMware vCenter Flaw</title>
<link>https://www.crime-research.org/news/17.09.2026/vmware-vcenter-flaw-exploited-ransomware-gangs/</link>
<guid>https://www.crime-research.org/news/17.09.2026/vmware-vcenter-flaw-exploited-ransomware-gangs/</guid>
<pubDate>Thu, 17 Sep 2026 09:10:00 GMT</pubDate>
<description>CISA updates its exploited-vulnerabilities catalog to flag a critical VMware vCenter bug, patched in July, as now abused in ransomware attacks.</description>
</item>
<item>
<title>CenterPoint Energy Confirms Breach After Attacker Claims 7.49 Million Records Stolen</title>
<link>https://www.crime-research.org/news/17.09.2026/centerpoint-energy-data-breach-7-million-records/</link>
<guid>https://www.crime-research.org/news/17.09.2026/centerpoint-energy-data-breach-7-million-records/</guid>
<pubDate>Thu, 17 Sep 2026 09:05:00 GMT</pubDate>
<description>Texas utility CenterPoint Energy confirms customer data was stolen after a threat actor leaked records it says were pulled from an unprotected API.</description>
</item>
<item>
<title>Five Alleged Black Axe Syndicate Leaders Extradited to US on Fraud Charges</title>
<link>https://www.crime-research.org/news/17.09.2026/black-axe-leaders-extradited-to-us-cybercrime-charges/</link>
<guid>https://www.crime-research.org/news/17.09.2026/black-axe-leaders-extradited-to-us-cybercrime-charges/</guid>
<pubDate>Thu, 17 Sep 2026 09:00:00 GMT</pubDate>
<description>US prosecutors charge five suspected Black Axe leaders extradited from South Africa over a decade-long romance scam and money-laundering scheme.</description>
</item>
<item>
<title>Cybercriminals Use Blockchain Smart Contracts to Run ClickFix Malware Campaign Across 5,400+ Hacked Websites</title>
<link>https://www.crime-research.org/news/07.09.2026/blockchain-clickfix-campaign-5400-hacked-websites/</link>
<guid>https://www.crime-research.org/news/07.09.2026/blockchain-clickfix-campaign-5400-hacked-websites/</guid>
<pubDate>Mon, 07 Sep 2026 09:30:00 GMT</pubDate>
<description>Researchers found over 5,400 compromised sites serving ClickFix malware payloads hidden in BNB Smart Chain smart contracts, resisting takedown efforts.</description>
</item>
<item>
<title>Thomson Reuters Discloses Breach of Court Case-Management Platform, Risking Exposure of SSNs and Sealed Records</title>
<link>https://www.crime-research.org/news/07.09.2026/thomson-reuters-court-software-breach-exposes-sealed-records/</link>
<guid>https://www.crime-research.org/news/07.09.2026/thomson-reuters-court-software-breach-exposes-sealed-records/</guid>
<pubDate>Mon, 07 Sep 2026 09:15:00 GMT</pubDate>
<description>A breach at Thomson Reuters' C-Track court software may have exposed Social Security numbers and sealed case data across 11 U.S. states and Canada.</description>
</item>
<item>
<title>FBI Investigates Dark-Web Sale of 153 Million U.S. and Canadian Driver's Licenses Tied to IDScan Breach</title>
<link>https://www.crime-research.org/news/07.09.2026/idscan-breach-153-million-drivers-licenses-fbi-investigation/</link>
<guid>https://www.crime-research.org/news/07.09.2026/idscan-breach-153-million-drivers-licenses-fbi-investigation/</guid>
<pubDate>Mon, 07 Sep 2026 09:00:00 GMT</pubDate>
<description>A dark-web service called Nexus advertised scans of 153M+ driver's licenses traced to identity-verification firm IDScan, prompting an FBI probe and lawsuits.</description>
</item>
<item>
<title>Berlin State Government Refuses Ransom After Data Theft From Administrative Network</title>
<link>https://www.crime-research.org/news/31.08.2026/berlin-refuses-to-pay-hackers-state-network-extortion/</link>
<guid>https://www.crime-research.org/news/31.08.2026/berlin-refuses-to-pay-hackers-state-network-extortion/</guid>
<pubDate>Mon, 31 Aug 2026 09:10:00 GMT</pubDate>
<description>Berlin confirmed an extortion attempt tied to an August breach of its state administrative network and said it will not pay the attackers' demand.</description>
</item>
<item>
<title>Australian Police Arrest Two Alleged Members of TeamPCP Hacking Group</title>
<link>https://www.crime-research.org/news/31.08.2026/two-alleged-teampcp-hackers-arrested-in-australia/</link>
<guid>https://www.crime-research.org/news/31.08.2026/two-alleged-teampcp-hackers-arrested-in-australia/</guid>
<pubDate>Mon, 31 Aug 2026 09:05:00 GMT</pubDate>
<description>The Australian Federal Police arrested two Perth men accused of running the TeamPCP software supply-chain extortion operation tied to the Shai-Hulud worm.</description>
</item>
<item>
<title>McKesson Discloses Data Breach Amid ShinyHunters Extortion Claim</title>
<link>https://www.crime-research.org/news/31.08.2026/mckesson-breach-shinyhunters-284-million-patient-records/</link>
<guid>https://www.crime-research.org/news/31.08.2026/mckesson-breach-shinyhunters-284-million-patient-records/</guid>
<pubDate>Mon, 31 Aug 2026 09:00:00 GMT</pubDate>
<description>Healthcare distributor McKesson confirms a cybersecurity incident after the ShinyHunters group claimed to have stolen roughly 284 million patient-related data records.</description>
</item>
<item>
<title>Over 9,300 Leaked AWS Access Keys Found Still Active, Giving Full Control of Corporate Accounts</title>
<link>https://www.crime-research.org/news/24.08.2026/9300-leaked-aws-keys-corporate-accounts/</link>
<guid>https://www.crime-research.org/news/24.08.2026/9300-leaked-aws-keys-corporate-accounts/</guid>
<pubDate>Mon, 24 Aug 2026 09:30:00 GMT</pubDate>
<description>Truffle Security found thousands of exposed AWS keys, many years old and never rotated, still granting administrator access to company cloud accounts.</description>
</item>
<item>
<title>US Agencies Warn of AI-Generated Exploit Scripts Targeting Siemens S7 PLCs in Critical Infrastructure</title>
<link>https://www.crime-research.org/news/24.08.2026/ai-generated-exploits-siemens-s7-plc-critical-infrastructure/</link>
<guid>https://www.crime-research.org/news/24.08.2026/ai-generated-exploits-siemens-s7-plc-critical-infrastructure/</guid>
<pubDate>Mon, 24 Aug 2026 09:15:00 GMT</pubDate>
<description>CISA, NSA, FBI and DOE warn of an active campaign using AI-generated scripts to probe and manipulate Siemens S7 industrial controllers.</description>
</item>
<item>
<title>TikTok and ByteDance Agree to $400 Million Settlement Over Children's Privacy Violations</title>
<link>https://www.crime-research.org/news/24.08.2026/tiktok-400-million-doj-settlement-child-privacy/</link>
<guid>https://www.crime-research.org/news/24.08.2026/tiktok-400-million-doj-settlement-child-privacy/</guid>
<pubDate>Mon, 24 Aug 2026 09:00:00 GMT</pubDate>
<description>DOJ settlement resolves claims TikTok let millions of children under 13 use adult accounts and collected their data without parental consent.</description>
</item>
</channel>
</rss>
