Fraud & Scams

Report: Ransomware Attacks Involving Data Theft Are Surging

Ransomware attacks involving data theft have surged by 275% in 2026, according to a new report from Zscaler. Attackers exfiltrated…

CyberheistNews Vol 16 #41 [Heads Up] Attackers Trick Your Employees to Share Fake Calendar Invites

Grindr users’ sensitive data shared through ad auctions without valid consent

Advertising company Xandr has been fined $9.6 million over data sharing that could reveal Grindr users’ sexual orientation.

FTC Sues Operator of Sextortion Relief Scheme for Misleading Consumers into Believing it Would Identify Criminals and End Sextortion Attacks

A federal court has granted the Federal Trade Commission’s request to temporarily halt the activities of Digital Forensics Corpora…

Hackers heat up supermarket fridges, spoiling food across France

A cyberattack on supermarket temperature-control systems in France left spoiled food, empty shelves, and reports of fires.

Your “Who’s this?” reply is exactly what text scammers want

Every reply tells scammers your number is active, which makes it worth more on the dark web and a better target for fraud.

[Cybersecurity Awareness Month] Trust, but Verify: Navigating the Era of AI Deepfakes

The digital landscape faces a new and complex challenge: the rise of generative AI. While these tools offer incredible potential f…

How “123456” became the key to almost 9 million personal records

A series of security failures, including a very weak password, exposed almost 9 million people’s personal information.

Phishing emails are baiting your AI assistant

If you use an AI assistant to summarize your inbox, hidden instructions could turn a phishing email you wisely ignored into your n…

A week in security (October 5 – October 11)

A list of topics we covered in the week of October 5 to October 11 of 2026

The Rise of Legitimate-Service Phishing: 1 in 10 Phishing Emails Now Comes From a Platform You Trust

Lead Analysts: Karthikeyan D, Prabhakaran Ravichandhiran, Jeewan Singh Jalal

ASOS breach update: Hackers stole customer details and shopping searches

Stolen ASOS data includes shopping searches as well as personal details, so customers should watch out for convincing phishing mes…

Two Systems, One Truth: Unifying Training Records Across SAT and LMS

Somewhere in your security and compliance stack, there are records that prove your employees completed their security awareness tr…

Attackers hijack country-code domains to impersonate Google and other services

Cybercriminals compromised three country-code namespaces to get certificates that could help them impersonate trusted sites.

Amazon has an uncomfortably personal profile on you

Amazon thinks it knows your body, your family, and your life. You didn't sign up for it, and we couldn't find a way to opt-out.

FTC Returns More than $15.8 Million to Consumers Misled by Cash Advance App Company Cleo AI

The Federal Trade Commission is sending more than $15.8 million to consumers impacted by cash advance app company Cleo AI’s decept…

FTC Secures Settlement with Auto Dealership Group in Price Transparency Win for Consumers

The Federal Trade Commission today announced Greenway Auto Group has agreed that its price advertisements will prominently include…

Meta’s Muse AI files away your friendships, arguments, and secrets

Meta’s Muse AI builds personal dossiers that would make the FBI jealous. Even people who never signed up can get caught in its fil…

Google issues Android security updates: who can get them and how

Google has new Android updates, but many users will not be able to get patched immediately.

Warning: Attackers Are Tricking Employees Into Sharing Malicious Calendar Invites

Researchers at Fortra are tracking a new variant of calendar phishing in which threat actors trick employees into sharing meeting…

AI-powered phishkit arms criminals with account-hijacking tools in 10 minutes

BlueKit puts account-hijacking tools in more criminals’ hands, making it easier to target you with convincing fake login pages and…

Update Chrome and ChromeOS to fix critical security issues

Google has released a new update for the Chrome browser and ChromeOS. There are a lot of security fixes in them so don't delay.

Another ShinyHunters suspect arrested

The net is tightening around the Shiny Hunters cybercrime group following the reported arrest of a second member.

New Phishing Campaign Uses Claude-Themed Lures

A phishing campaign is targeting Google accounts with lures that promise free subscriptions to Anthropic’s Claude Max AI model, Ma…

Warning: Tech Support Scams Are Abusing Google Ads

Researchers at Netskope are tracking a phishing kit that hijacks users’ browser windows to display fake security alerts. The malic…

ASOS “hackers” send push notifications to customers

ASOS customers received a push notification regarding a breach of the company. Here's what we know so far.

CyberheistNews Vol 16 #40 Why Microsoft’s Latest Defense-in-Depth Email Benchmark Is So Surprising

The Price of a Deal: How Scammers are Hijacking Amazon Prime Day

Lead Analysts: Lucy Gee and Emily Hanlon As millions of shoppers prepare their wishlists and await discounts for Amazon’s Prime…

Facebook Marketplace scam uses your name and number

Facebook users are reporting receiving a message with a fake Facebook Marketplace listing that has their name as the seller.

FTC Issues Redress Payments to Consumers Impacted by GOAT’s Deceptive Shipping, Refund Policies

The Federal Trade Commission announced it is sending more than $100,000 in redress payments to consumers deceived by online market…