27-year-old Cameron Curry was found guilty in March of stealing sensitive company data and using it to threaten his employer. Curry had worked for the company for six months before learning that his contract would not be extended.

After his contract ended on December 10, 2023, Curry sent emails to the company’s employees using the name “Loot.” He threatened to release stolen information unless the company paid $2.5 million in cryptocurrency. The stolen data included employees’ names, dates of birth, home addresses and salary information. Curry also threatened to report the company to the US Securities and Exchange Commission over the breach.

The victim company eventually paid Curry $7,540 in Bitcoin. It then reported the incident to law enforcement. The FBI searched Curry’s home on January 24, 2024, and seized electronic devices containing evidence connected to the extortion scheme. Curry was later arrested and prosecuted.

In addition to the sentence, Curry was ordered to serve one year of supervised release and to pay a money judgment of little over $7,540.

Four arrested over €30M theft from German bank customers

German and Brazilian authorities have arrested four suspected cybercriminals and identified three others in Europe over the theft of more than €30 million from German bank customers.

The theft took place over four days in November 2023. Authorities say the group exploited a vulnerability at a financial service provider caused by a faulty software update. The attackers then made numerous unauthorized withdrawals from German online banking accounts. Most of the stolen money was transferred to Brazil, while smaller amounts were withdrawn in several European countries.

Police say the group used bank accounts, companies, payment services, virtual asset platforms and payment cards to hide the source of the money.

As part of “Operation Klonen” launched by Brazilian authorities on August 16, police carried out 21 search warrants across seven cities. Four suspects were arrested in Rio de Janeiro, Guarulhos, Goiânia and Carapicuíba. Three other suspects were identified in Europe and are expected to face prosecution in Spain and Bulgaria.

Brazilian authorities also confiscated assets, vehicles and property worth up to 106 million Brazilian reais, or about €22 million. One suspect allegedly used some of the stolen money to support a political campaign in 2024.

The suspects face charges, including aggravated electronic fraud, participation in a criminal organization and money laundering.

A hacker arrested over alleged malware attacks on dozens of Israeli companies

Israeli police have reportedly arrested a man from Ashkelon on suspicion of planting malware on computers at dozens of companies and stealing sensitive information.

The suspect was arrested by detectives from the cyber unit of Lahav 433 after a months-long investigation. Police said the investigation began after several companies reported hacked computers and stolen information.

Law enforcement officers later found evidence of attacks on additional companies. Police believe the suspect acted alone and was not connected to a criminal group. His motive and the full amount of information allegedly stolen are still unclear. Authorities said there was no indication that he used the information to blackmail the companies.

Police searched the suspect's home and seized computer equipment. They also searched several companies as part of the investigation. The suspect faces charges under Israel's Computer Law, as well as suspected wiretapping, invasion of privacy and fraud offenses.

Police have not released the names of the companies involved or the full extent of the alleged data theft.

US charges 17 Iranians over alleged large-scale cybertheft campaign

US authorities have charged 17 Iranians over an alleged cybertheft campaign carried out on behalf of the Iranian government.

The US Justice Department said the group targeted universities, government agencies and companies between 2013 and 2017. The new indictment expands on a 2018 case and names additional defendants.

Prosecutors said the hackers targeted more than 100,000 professors’ email accounts around the world. Threat actors allegedly gained access to about 8,000 accounts at 144 US universities and 178 universities in other countries.

Using stolen login details, the group allegedly took academic journals, research papers, dissertations and other materials. Authorities estimate that at least 31.5 terabytes of academic data and intellectual property were stolen. Some of the stolen information was later sold via websites serving customers in Iran.

The group also targeted at least five US government agencies, 42 US companies and 11 foreign companies, including HBO. The 17 defendants face 14 charges, with possible prison sentences ranging from two to 20 years for individual offenses. Most of the defendants are still outside US custody.

Also, the US State Department is offering up to $10 million for information that could help locate five of the accused.

Obtener una demo

ImmuniWeb puede ayudarle a prevenir brechas de datos y cumplir con los requisitos normativos.

Armenia busts a gang behind a suspected US freight theft scheme

The Armenian cyberpolice has dismantled a criminal operation that allegedly used specialized computers and software to carry out freight theft.

According to authorities, the suspects posed as employees of US freight carriers and gained the trust of businesses arranging transportation services. They allegedly redirected shipments instead of delivering them to their intended destinations, then sold the goods.

Authorities said the proceeds were transferred to accounts controlled by members of the group and later converted into crypto assets.

Police seized evidence during the search and identified the suspected roles of members of the organization. Officials described the alleged thefts as involving “particularly large amounts,” but did not provide a total loss.

Authorities have not disclosed the types or number of shipments involved, the identities of the carriers or victims, or details about arrests and the cryptocurrencies allegedly used.