Security & cybercrime blog
Google Sues to Disrupt Chinese SMS Phishing Triad
13 November 2025 @ 2:47 pm
Google is suing more than two dozen unnamed individuals allegedly involved in peddling a popular China-based mobile phishing service that helps scammers impersonate hundreds of trusted brands, blast out text message lures, and convert phished payment card data into mobile wallets from Apple and Google.
Drilling Down on Uncle Sam’s Proposed TP-Link Ban
9 November 2025 @ 6:14 pm
The U.S. government is reportedly preparing to ban the sale of wireless routers and other networking gear from TP-Link Systems, a tech company that currently enjoys an estimated 50% market share among home users and small businesses. Experts say while the proposed ban may have more to do with TP-Link's ties to China than any specific technical threats, much of the rest of the industry serving this market also sources hardware from China and ships products that are insecure fresh out of the box.
Cloudflare Scrubs Aisuru Botnet from Top Domains List
6 November 2025 @ 2:04 am
For the past week, domains associated with the massive Aisuru botnet have repeatedly usurped Amazon, Apple, Google and Microsoft in Cloudflare's public ranking of the most frequently requested websites. Cloudflare responded by redacting Aisuru domain names from their top websites list. The chief executive at Cloudflare says Aisuru's overlords are using the botnet to boost their malicious domain rankings, while simultaneously attacking the company's domain name system (DNS) service.
Alleged Jabber Zeus Coder ‘MrICQ’ in U.S. Custody
2 November 2025 @ 8:37 pm
A Ukrainian man indicted in 2012 for conspiring with a prolific hacking group to steal tens of millions of dollars from U.S. businesses was arrested in Italy and is now in custody in the United States, KrebsOnSecurity has learned.
Sources close to the investigation say Yuriy Igorevich Rybtsov, a 41-year-old from the Russia-controlled city of Donetsk, Ukraine, was previously referenced in U.S. federal charging documents only by his online handle "MrICQ." According to a 13-year-old indictment filed by prosecutors in Nebraska, MrICQ was a developer for a cybercrime group known as "Jabber Zeus."
Aisuru Botnet Shifts from DDoS to Residential Proxies
29 October 2025 @ 12:51 am
Aisuru, the botnet responsible for a series of record-smashing distributed denial-of-service (DDoS) attacks this year, recently was overhauled to support a more low-key, lucrative and sustainable business: Renting hundreds of thousands of infected Internet of Things (IoT) devices to proxy services that help cybercriminals anonymize their traffic. Experts says a glut of proxies from Aisuru and other sources is fueling large-scale data harvesting efforts tied to various artificial intelligence (AI) projects, helping content scrapers evade detection by routing their traffic through residential connections that appear to be regular Internet users.
Canada Fines Cybercrime Friendly Cryptomus $176M
22 October 2025 @ 5:21 pm
Financial regulators in Canada this week levied $176 million in fines against Cryptomus, a digital payments platform that supports dozens of Russian cryptocurrency exchanges and websites hawking cybercrime services. The penalties for violating Canada's anti money-laundering laws come ten months after KrebsOnSecurity noted that Cryptomus's Vancouver street address was home to dozens of foreign currency dealers, money transfer businesses, and cryptocurrency exchanges — none of which were physically located there.
Email Bombs Exploit Lax Authentication in Zendesk
17 October 2025 @ 11:26 am
Cybercriminals are abusing a widespread lack of authentication in the customer service platform Zendesk to flood targeted email inboxes with menacing messages that come from hundreds of Zendesk corporate customers simultaneously.
Patch Tuesday, October 2025 ‘End of 10’ Edition
14 October 2025 @ 10:57 pm
Microsoft today released software updates to plug a whopping 172 security holes in its Windows operating systems, including at least three vulnerabilities that are already being actively exploited. October's Patch Tuesday also marks the final month that Microsoft will ship security updates for Windows 10 systems. If you're running a Windows 10 PC and you're unable or unwilling to migrate to Windows 11, read on for other options.
DDoS Botnet Aisuru Blankets US ISPs in Record DDoS
10 October 2025 @ 4:10 pm
The world's largest and most disruptive botnet is now drawing a majority of its firepower from compromised Internet-of-Things (IoT) devices hosted on U.S. Internet providers like AT&T, Comcast and Verizon, new evidence suggests. Experts say the heavy concentration of infected devices at U.S. providers is complicating efforts to limit collateral damage from the botnet's attacks, which shattered previous records this week with a brief traffic flood that clocked in at nearly 30 trillion bits of data per second.
ShinyHunters Wage Broad Corporate Extortion Spree
7 October 2025 @ 10:45 pm
A cybercriminal group that used voice phishing attacks to siphon more than a billion records from Salesforce customers earlier this year has launched a website that threatens to publish data stolen from dozens of Fortune 500 firms if they refuse to pay a ransom. The group also claimed responsibility for a recent breach involving Discord user data, and for stealing terabytes of sensitive files from thousands of customers of the enterprise software maker Red Hat.
Liat Berry
Product Manager
Charlotte Liang
Software Engineer
Ibrahim Ulukaya
Developer Advocate
A few decades ago, when I was raising funding for a startup, I made a lasting impression on an investor by not only talking about how successful we would be, but also highlighting what would happen if we weren’t. Later, in an informal setting, I asked him what had persuaded him to invest in us. He told me that during the pitch, I had said, “And if all our predictions and expectations are wrong, we will use the last of our funding for a magnificent farewell dinner for all our investors. You’ll have lost your money, but at least you’ll…This story continues at The Next Web
E-waste has become a global problem. Unfortunately, the majority of discarded used technology, known as e-waste, is dumped or processed in unsafe conditions. Around 78% of electronic products aren’t properly recycled — and the garbage pile keeps growing. In 2024, the world churned out 1.22 billion smartphones. Add this to the billions of TVs, laptops, and computers, and what we have is a saturated market that fuels a throwaway cycle. A United Nations report forecasts that e-waste will grow to 80 million tonnes by 2030. “That’s enough to fill 1.5 million 40-ton trucks, which could circle the planet,” says Eric…
Startup wisdom is a new TNW series offering practical lessons from experts who’ve helped build great companies. This week, Dainius Kavoliūnas, head of no-code platform Hostinger Horizons, shares his tips on vibe coding. Vibe coding has become an indispensable tool, especially for entrepreneurial thinkers building apps and platforms for solving everyday problems, streamlining business processes, or enhancing digital experiences. It represents a paradigm shift in software development. Instead of writing lines of code, you can now describe your requirement and have AI bring it to life. Vibe coding is fast, intuitive and opens up a new realm of possibilities where code…
The global battery market is experiencing unprecedented growth, with projections showing the sector will reach $400bn by 2030. Yet European entrepreneurs often feel locked out, watching Chinese giants like CATL dominate headlines with record-breaking IPOs while homegrown champions like Northvolt file for bankruptcy, exposing the harsh realities of competing against established Asian supply chains. Still, Europe will never be entirely independent in green energy and will want to cooperate with Asia. Yet the continent has strong demand for on-shoring supply, including green power and critical manufacturing. There are also genuine competitive advantages available to European green battery startups: proximity to…
On July 16, the European Commission proposed a €2tn seven-year budget – the largest in the EU’s history – to boost autonomy, competitiveness, and resilience. The spending plan addresses cybersecurity, innovation, and other key digital pillars, but omits a crucial component: open source. Open source software – built and maintained by communities rather than private companies alone, and free to edit and modify – is the foundation of today’s digital infrastructure. Since the 1990s, it has been ever-present in the digital infrastructure that European industry and public sector institutions depend on, creating huge dependencies on open source applications and libraries. From…
Europe’s AI startups are losing ground to the US — and their own investors are to blame. Only 5% of global venture capital is raised in the EU, according to the European Commission. The US, by contrast, attracts more than half, while China takes 40%. Yet Europe isn’t capital-poor: households save €1.4tn a year, nearly twice as much as in America. Still, very little of that money finds its way into startups, despite a plethora of incentives like the UK’s EIS tax relief for business angels. Even when funding is available, Europe’s venture capital firms are slow and cautious. Funds…
Venture capital investment surged to a 10-quarter high of €108.3bn in Q1 2025, fuelled by artificial intelligence, which accounted for over €44.6bn raised. In recent years, AI has felt like a money-printing machine. Investors, eager to avoid missing out on the next big thing, were quick to back almost any startup that mentioned AI in their pitch deck. The idea didn’t need to be particularly well-implemented or useful. In some cases, even the illusion of innovation was enough to earn a unicorn valuation. But investors are now wising up to AI-washing. As the CEO of Gradient Labs — an AI…
The full-scale war has reshaped priorities for Ukraine’s tech sector. Innovative military technologies and advanced defence solutions are not only essential for the country’s security — they’re also among the most promising vectors for business growth. Ukrainian defence tech is tested directly on the battlefield, under the most challenging conditions. These circumstances allow products to prove their effectiveness, attracting interest from international partners, investors, and allied countries looking to strengthen their own defence capabilities. From my position at the heart of Ukraine’s tech ecosystem, I’ve seen how quickly the sector has shifted towards defence — and how global attention is now…
Startup wisdom is a new TNW series offering practical lessons from experts who’ve helped build great companies. This week, global traction strategist Nina Aziz Justin — founder of The Resilience Mentor — shares her approach to building resilience. In the startup world, we’re taught to obsess over metrics. Burn rate, CAC, MRR — they dominate the dashboards and drive the decisions. And yes, data matters. But there’s something quietly more essential that rarely gets the same spotlight: resilience. This piece offers a balanced perspective — one that holds space for both sides. While execution metrics are essential for traction and…
Left unchecked, Europe’s narrow focus on AI investment will come at the health of half its population. As venture capital floods disproportionately into the AI sector, women’s health innovation — the definition of essential infrastructure — is once again left fighting for scraps. In 2021, global femtech investment peaked at €1.89bn before plunging to just €1.1bn the next year, amid a tech funding apocalypse and capital making a headlong dash towards AI. Several factors contributed to this decline — broader market conditions, withering investor risk appetite, and natural sector maturation. But the surge in AI funding coinciding with a plunge…