Over the past year, Microsoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected network of phishing kit operators, developers, and an illicit marketplace selling tools and infrastructure for large-scale phishing, enabling cybercriminal operations worldwide.
Threat actors purchased and used these tools and infrastructure, including phishing kits and access to compromised or fraudulent Microsoft or Google cloud environments and related credentials, to target organizations across the healthcare, financial services, wholesale distribution, and information technology (IT) sectors in Japan, the United States, Australia, and India. In collaboration with law enforcement agencies and other partners worldwide, Microsoft’s Digital Crimes Unit (DCU) facilitated a disruption of the ecosystem’s primary developers and infrastructure.
Read more…
Source: Microsoft
Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox
Related:
- Cyberattack targets French blood banks
November 4, 2026
A cyberattack on several French blood banks sought to raise temperatures to extremely high levels but was thwarted before it could do any damage to blood products or samples, authorities said. The incident comes after supermarkets in a number of European countries reported this week that their fridges and freezers warmed up after they were ...
- DOJ warns FBI data breach likely extends to Justice Department employees
November 4, 2026
A major data breach of FBI systems likely also affected staffers across the Justice Department, according to a memo obtained by POLITICO. FBI investigators determined in September that a hack of a bureau jobs portal was a “major” cyber incident, allowing hackers to steal personal information on thousands of FBI agents, including Social Security numbers, birth ...
- The most used lateral movement hacking tools across enterprise infrastructures
November 2, 2026
The statistics compiled from detection alerts* within Kaspersky Anti Targeted Attack (KATA) reveal the hacking tools most often used for lateral movement across enterprise infrastructures, highlighting the pressing need for reliable network security solutions to protect corporate environments. Recent investigations into cyber-espionage groups show that attackers increasingly avoid detectable malware, choosing instead to blend into legitimate ...
- AI-driven attacks on educational organizations in Latin America and Africa
November 2, 2026
Kaspersky Threat Research has uncovered attacks on educational organizations in Latin America and Africa in which attackers used artificial intelligence to help direct activity inside compromised networks. Researchers traced reconnaissance, credential theft, movement between computers and data collection, including activity that compromised highly privileged administrator accounts. The attackers used CyberStrikeAI, an open-source penetration-testing framework that combines ...
- A fresh wave of cyberattacks has hit Europe’s supermarket refrigerators, destroying food across countries
November 2, 2026
A second wave of cyberattacks is suspected to have hit supermarket refrigerators across Europe, causing fridges to increase temperatures and spoil food at dozens of stores across Belgium, Ireland, Luxembourg, and Sweden. Supermarket giants Ahold Delhaize and Colruyt confirmed the hacks overnight, with one Belgian company that operates Delhaize’s systems saying that the hackers had changed ...
- Ukraine and Russia report fake emergency alerts after cyberattack targets apps
November 2, 2026
Authorities in Ukraine and Russia say their emergency alert mobile apps were targeted by cyberattacks late Sunday, with users in Ukraine receiving false warnings of dangerously high radiation levels in the capital, Kyiv. In a Telegram post late Sunday, Ukraine’s air raid alert channel said “unauthorized parties” had interfered with the app’s operation and that the ...