IN THE NEWS

Infoblox Threat Intel has uncovered a sophisticated cybercriminal operation, dubbed Lurking Lizard, that uses fake 7-Zip software downloads to build a global network of compromised residential proxies. The research reveals that what initially appeared to be a single malware campaign is part of a much larger criminal infrastructure spanning more than 230 malicious domains.

If you've spent any time on Meta's Threads app in the last year, then you've likely seen what I like to call "the Mr Beast reply guys:" A spam account replies to a popular post with a nonsensical phrase and a low-quality screenshot of the British newspaper The Times featuring a fictitious story about Mr Beast.

Every phone call once went through a human operator: trusted, essential, and an obvious single point of failure. DNS, or the Domain Name System, is the internet’s switchboard equivalent. In Singapore and across Asia-Pacific, it facilitates web traffic. Every device asks DNS for directions before connecting to anything. Without it, nothing works. With it compromised, nothing is safe.

DCloud Uni-App scam infrastructure is driving a new wave of cyber fraud that is increasingly affecting businesses, according to new research from Infoblox Threat Intel. The findings reveal that a Chinese app framework has been used to create hundreds of thousands of scam websites, extending the impact of consumer fraud into enterprise environments.

Cybercriminals are capitalizing on football fever by pushing illegal streaming platforms and uncertified TV boxes that promise “free, unlimited access” to every match.

Joint cyber operations are increasingly becoming the preferred response to sprawling malware ecosystems, as governments and private firms pool intelligence, infrastructure, and enforcement power to disrupt criminal supply chains at multiple points at once.

Europol announced Wednesday the recovery of approximately 27 million stolen login credentials and the seizure of more than €41 million (roughly $47 million) in criminal cryptocurrency as part of the latest phase of Operation Endgame, the two-year multinational campaign to dismantle the malware infrastructure behind the world's ransomware economy.

Microsoft, Europol, and international partners have disrupted infrastructure used by the Amadey and StealC malware operations as part of Operation Endgame, which targets cybercriminal services and ransomware gangs.

Operation Endgame has entered a new phase, with multinational law enforcement agencies targeting infrastructure linked to the SocGholish malware operation, also known as FakeUpdates. The coordinated effort resulted in the remediation of nearly 15,000 compromised websites and the disruption of critical criminal infrastructure used to distribute malware and facilitate cybercrime.

Dutch law enforcement authorities, along with counterparts from Canada , Germany, and the U.S., have disrupted malicious infrastructure associated with SocGholish and cleaned up nearly 15,000 infected WordPress websites.