27-year-old Cameron Curry was found guilty in March of stealing sensitive company data and using it to threaten his employer. Curry had worked for the company for six months before learning that his contract would not be extended.

Après la fin de son contrat le 10 décembre 2023, Curry a envoyé des e-mails aux employés de l’entreprise sous le nom «Loot». Il a menacé de divulguer les informations volées à moins que l’entreprise ne verse 2,5 millions de dollars en cryptomonnaie. Les données volées comprenaient les noms des employés, leurs dates de naissance, leurs adresses de domicile et des informations sur leurs salaires. Curry a également menacé de signaler l’entreprise à la Securities and Exchange Commission concernant la brèche.

The victim company eventually paid Curry $7,540 in Bitcoin. It then reported the incident to law enforcement. The FBI searched Curry’s home on January 24, 2024, and seized electronic devices containing evidence connected to the extortion scheme. Curry was later arrested and prosecuted.

In addition to the sentence, Curry was ordered to serve one year of supervised release and to pay a money judgment of little over $7,540.

Quatre personnes arrêtées pour un vol de 30 M€ chez des clients de banques allemandes

German and Brazilian authorities have arrested four suspected cybercriminals and identified three others in Europe over the theft of more than €30 million from German bank customers.

The theft took place over four days in November 2023. Authorities say the group exploited a vulnerability at a financial service provider caused by a faulty software update. The attackers then made numerous unauthorized withdrawals from German online banking accounts. Most of the stolen money was transferred to Brazil, while smaller amounts were withdrawn in several European countries.

Police say the group used bank accounts, companies, payment services, virtual asset platforms and payment cards to hide the source of the money.

As part of “Operation Klonen” launched by Brazilian authorities on August 16, police carried out 21 search warrants across seven cities. Four suspects were arrested in Rio de Janeiro, Guarulhos, Goiânia and Carapicuíba. Three other suspects were identified in Europe and are expected to face prosecution in Spain and Bulgaria.

Brazilian authorities also confiscated assets, vehicles and property worth up to 106 million Brazilian reais, or about €22 million. One suspect allegedly used some of the stolen money to support a political campaign in 2024.

Les suspects sont poursuivis notamment pour fraude électronique aggravée, participation à une organisation criminelle et blanchiment d’argent.

A hacker arrested over alleged malware attacks on dozens of Israeli companies

Israeli police have reportedly arrested a man from Ashkelon on suspicion of planting malware on computers at dozens of companies and stealing sensitive information.

Le suspect a été arrêté par des enquêteurs de l’unité cyber de Lahav 433 à l’issue d’une enquête de plusieurs mois. La police a indiqué que l’enquête avait débuté après que plusieurs entreprises ont signalé le piratage de leurs ordinateurs et le vol d’informations.

Law enforcement officers later found evidence of attacks on additional companies. Police believe the suspect acted alone and was not connected to a criminal group. His motive and the full amount of information allegedly stolen are still unclear. Authorities said there was no indication that he used the information to blackmail the companies.

La police a perquisitionné le domicile du suspect et saisi du matériel informatique. Elle a également perquisitionné plusieurs entreprises dans le cadre de l'enquête. Le suspect fait face à des poursuites au titre de la loi israélienne sur l'informatique, ainsi que des soupçons d'écoutes téléphoniques, d'atteinte à la vie privée et de fraude.

Police have not released the names of the companies involved or the full extent of the alleged data theft.

US charges 17 Iranians over alleged large-scale cybertheft campaign

US authorities have charged 17 Iranians over an alleged cybertheft campaign carried out on behalf of the Iranian government.

The US Justice Department said the group targeted universities, government agencies and companies between 2013 and 2017. The new indictment expands on a 2018 case and names additional defendants.

Prosecutors said the hackers targeted more than 100,000 professors’ email accounts around the world. Threat actors allegedly gained access to about 8,000 accounts at 144 US universities and 178 universities in other countries.

À l’aide d’identifiants de connexion volés, le groupe aurait dérobé des revues académiques, des articles de recherche, des thèses et d’autres documents. Les autorités estiment qu’au moins 31,5 téraoctets de données académiques et de propriété intellectuelle ont été volés. Une partie des informations volées a ensuite été vendue via des sites web au service de clients en Iran.

Le groupe a également ciblé au moins cinq agences gouvernementales américaines, 42 entreprises américaines et 11 entreprises étrangères, dont HBO. Les 17 accusés font l'objet de 14 chefs d'accusation, passibles de peines de prison allant de deux à 20 ans par infraction. La plupart des accusés ne sont toujours pas détenus aux États-Unis.

Par ailleurs, le Département d’État américain offre jusqu’à 10 millions de dollars pour toute information susceptible d’aider à localiser cinq des accusés.

Obtenir une démonstration

ImmuniWeb peut vous aider à prévenir les violations de données et à respecter les exigences réglementaires.

L’Arménie démantèle le gang à l’origine d’un présumé schéma de vol de cargaisons aux US

The Armenian cyberpolice has dismantled a criminal operation that allegedly used specialized computers and software to carry out freight theft.

Selon les autorités, les suspects se faisaient passer pour des employés de transporteurs américains et gagnaient la confiance des entreprises organisant des services de transport. Ils auraient détourné les envois au lieu de les livrer à leurs destinations prévues, puis vendu les marchandises.

Authorities said the proceeds were transferred to accounts controlled by members of the group and later converted into crypto assets.

Police seized evidence during the search and identified the suspected roles of members of the organization. Officials described the alleged thefts as involving “particularly large amounts,” but did not provide a total loss.

Authorities have not disclosed the types or number of shipments involved, the identities of the carriers or victims, or details about arrests and the cryptocurrencies allegedly used.