FBI: Hackers making millions from stolen cargo – losses ‘surged’ to nearly $725 million in 2025


The FBI has warned cybercriminals are increasingly targeting cargo shipments with hacking and impersonation tactics – and making a hefty profit doing so.

With incidents rising 18% in 2025 and the average value per theft up around 36% (to $273,990) due to criminals targeting high-value goods, losses in the US and Canada alone hit around $725 million over the year, a significant 60% year-over-year increase. As for the nature of the attacks, it demonstrates the merging of digital and physical as attackers combine cyber and fraud techniques in what the FBI calls “cyber-enabled strategic cargo thefts.”

Read more…
Source: TechRadar News


Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox


Related:

  • Mitigating large-scale credential attacks

    August 18, 2026

    Identity has effectively become the new perimeter, where cybercriminals are increasingly choosing to log in rather than break in. To accomplish this, attackers frequently gather previously leaked username and password pairs. Gathering these credentials can then allow them to pivot to password spraying against services exposed to the internet, gaining credentials for other products and ...

  • Hunting MacSync Stealer infrastructure through behavioral pivots

    August 18, 2026

    MacSync Stealer is a macOS-focused information stealer that relies on changing infrastructure to deliver payloads, communicate with compromised devices, and exfiltrate data. Earlier reporting by RST Cloud identified the threat through a limited set of domains and documented rapid command-and-control (C2) replacement after public disclosure. Microsoft Defender Experts expanded that view by correlating recurring endpoints and network behaviors ...

  • ‘Unprecedented’ number of Apple users received recent spyware alert, say investigators

    August 17, 2026

    An unprecedented number of Apple customers have reported receiving a recent threat notification alerting them to suspected spyware attacks targeting their devices, according to experts who investigate these types of incidents. Several people publicly and privately reported receiving Apple’s spyware alerts over the weekend, after Apple sent out a new wave of notifications on Friday alerting customers in ...

  • Operation ASTERIX: Anatomy of a Crypto Fraud Pipeline

    August 17, 2026

    Rapid7 researchers identified an exposed web directory on infrastructure used to support a cryptocurrency fraud operation. The server contained raw phone-number datasets, account-validation tools, enriched lead records, phishing panels, voice-dialing scripts, fake wallet applications, persistence mechanisms, and Telegram exfiltration code. Among the artifacts was evidence that the operator relied on AI coding assistants throughout the ...

  • McDonald’s, Vodafone, TCS, Kyndryl, and others named as researchers point to compromised credentials

    August 17, 2026

    A cybercrook claims to have siphoned millions of employee records from the Microsoft Azure environments of major companies including McDonald’s, Vodafone, Kyndryl, and Tata Consultancy Services. The alleged haul spans nine organizations and is being advertised for sale by a threat actor using the name “TheHatman,” according to research published by Hudson Rock. McDonald’s accounts for the largest ...

  • ChainDrop worm crawls into npm supply chain, evades standard defenses

    August 15, 2026

    A new variant of the Shai-Hulud npm worm has poisoned hundreds of packages while adding propagation techniques that can leave little trace in the corresponding source repositories. In Frank Herbert’s Dune, Shai-Hulud was the name of the giant self-sustaining desert sandworms that moved silently beneath the surface of the planet Arrakis. So it made sense that when ...