FBI: Hackers making millions from stolen cargo – losses ‘surged’ to nearly $725 million in 2025


The FBI has warned cybercriminals are increasingly targeting cargo shipments with hacking and impersonation tactics – and making a hefty profit doing so.

With incidents rising 18% in 2025 and the average value per theft up around 36% (to $273,990) due to criminals targeting high-value goods, losses in the US and Canada alone hit around $725 million over the year, a significant 60% year-over-year increase. As for the nature of the attacks, it demonstrates the merging of digital and physical as attackers combine cyber and fraud techniques in what the FBI calls “cyber-enabled strategic cargo thefts.”

Read more…
Source: TechRadar News


Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox


Related:

  • Vidar Stealer Unmasked: Code Signing Abuse, Go Loaders and File Inflation

    July 7, 2026

    In April 2026, Unit 42 researchers identified a financially motivated campaign delivering Vidar stealer and the XMRig cryptocurrency miner to consumer and small- and medium-sized business victims worldwide. Attackers lure victims via malvertising to pages for downloading files that impersonate cracked versions of copyright-protected software. Upon execution, the loader drops and runs both Vidar stealer and ...

  • CAI cloud worm gives competitors’ malware the boot, then steals secrets and mines for coin

    July 7, 2026

    There’s no honor among thieves as a new worm steals from other infectious software. It pilfers “multiple” victims’ credentials and mines for cryptocurrency while killing competitors’ processes, including similar secret-harvesting malware. It’s called Cloud AI Infrastructure Attack Framework (CAI), and it’s a centralized botnet that targets cloud-native developer tools like Docker, Kubernetes, Redis, etcd, Kubelet, and ...

  • Fake Netflix, Coca-Cola, and FIFA job scams target marketers

    July 7, 2026

    Attackers are impersonating major companies and recruiters to target marketing professionals, using trusted services and browser tricks to make the scam look legitimate. A BleepingComputer article detailing the campaign found at least 34 domains impersonating high-value companies, including Netflix, Coca-Cola, Adidas, and FIFA. The lure is a fake job interview or scheduling request from a “recruiter” representing one of ...

  • Hacktivists call out Trump by hacking and defacing US Army websites

    July 7, 2026

    The U.S. Army has reportedly fixed two of its websites that had been defaced to display pro-Kurdish messages and to call out President Donald Trump, the latest case of hackers compromising systems run by the federal government in recent months. Security researcher Ronald Lovelace told Cyberscoop, which first reported the defacements, that error pages were modified on two U.S. Army ...

  • When checking the URL isn’t enough: a Device Code Phishing attack via a Microsoft website

    July 6, 2026

    One of the most common pieces of anti-phishing advice is to double-check the website’s domain name before providing your credentials. Typically, a fraudulent domain stands out to the trained eye, differing from the official URL by at least a few characters. Recently, however, Kaspersky encountered a campaign where attackers instruct victims to input data directly ...

  • Canadian spy agency says it hacked drug traffickers, extremists, and a ransomware gang last year

    July 6, 2026

    Offering a rare glimpse at the priorities of a top spy organization, Canada’s Communications Security Establishment (CSE) said it conducted a handful of state-authorized hacks last year in order to disrupt the operations of drug traffickers, violent extremists, and a ransomware gang. The disclosures in the Canadian intelligence agency’s annual report underscore some of the main national security ...