Bouygues Telecom confirms data breach impacting 6.4 million customers

Bouygues Telecom warns it suffered a data breach after the personal information of 6.4 million customers was exposed in a cyberattack. The company is one of the largest telecommunication service providers in France, offering mobile, internet, and IPTV services. Bouygues Telecom has 14.5 million mobile subscribers, 9,000 employees, and an annual revenue of €56.8 billion ($66B). Bouygues Telecom confirmed […]

Wave of 150 crypto-draining extensions hits Firefox add-on store

A malicious campaign dubbed ‘GreedyBear’ has snuck onto the Mozilla add-ons store, targeting Firefox users with 150 malicious extensions and stealing an estimated $1,000,000 from unsuspecting victims. The campaign, discovered and documented by Koi Security, impersonates cryptocurrency wallet extensions from well-known platforms such as MetaMask, TronLink, and Rabby. These extensions are uploaded in a benign form […]

Cryptomixer founders pled guilty to laundering money for cybercriminals

The founders of the Samourai Wallet (Samourai) cryptocurrency mixer have pleaded guilty to laundering over $200 million for criminals. ​Samourai CEO Keonne Rodriguez and CTO William Lonergan Hill admitted to their involvement in the Samourai money laundering operation, pleading guilty to conspiracy for operating a money transmitting business that handled criminal proceeds, and are now […]

Massive IPTV piracy service with 28,000 channels taken offline

The Alliance for Creativity and Entertainment (ACE) announced the shutdown of Rare Breed TV, a major illegal IPTV service provider, after reaching a financial settlement with its operators. North Carolina-based Rare Breed TV was one of the world’s largest digital piracy operations, claiming to offer subscribers access to over 28,000 channels and more than 100,000 movies and […]

New Ghost Calls tactic abuses Zoom and Microsoft Teams for C2 operations

A new post-exploitation command-and-control (C2) evasion method called ‘Ghost Calls’ abuses TURN servers used by conferencing apps like Zoom and Microsoft Teams to tunnel traffic through trusted infrastructure. Ghost Calls uses legitimate credentials, WebRTC, and custom tooling to bypass most existing defenses and anti-abuse measures, without relying on an exploit. This new tactic was presented […]

MFA matters… But it isn’t enough on its own

Unprotected usernames and passwords offer little defense against account takeover attacks. Multi-factor authentication (MFA) has quite rightly become the de facto standard for strengthening access controls. There’s a reason almost all cybersecurity guidelines recommend it – Microsoft research suggests that enabling MFA can block over 99% of automated credential-stuffing and phishing attacks. Yet even the […]

National Bank of Canada online systems down due to ‘technical issue’

National Bank of Canada (Banque Nationale du Canada), the sixth largest commercial bank of Canada is currently experiencing a widespread service outage affecting its online banking and mobile app platforms. Social media reports suggest that the issues began earlier this morning, with customers encountering a “maintenance” message when attempting to access their accounts via online banking […]