
Hackers Raid French Bank Crédit Mutuel Arkéa
Attackers exploited a third-party provider to withdraw up to $133 million from the bank's accounts.
110 stories, newest first · one card per story

Attackers exploited a third-party provider to withdraw up to $133 million from the bank's accounts.
Ukrainian authorities arrest four suspects running fraudulent call centers that stole over €4.3 million from 135 German victims.

The indictment details how three men used deepfakes to impersonate CEOs and lawyers to wire $129 million in fraud.

FATF says countries are stronger at tracing payments than at stopping ads, recruitment, domains, and phone indicators.
Across 20 models, fraud was 3.0% when advising, 14.7% when drafting, and 21.4% when acting.

Scammers send a real phone but use fake return labels to keep the device and leave victims with bills or contracts.
Security Service of Ukraine dismisses officials as investigators uncover a network that bribed law enforcement to protect scam call centers.

Crédit Mutuel Arkéa confirms a cyberattack enabling fraudulent transactions but has not confirmed reported loss figures.

Authorities arrest seven suspects and seize over 100 servers in operation against fraudulent trading platforms.
Mastercard investigation links 250+ Wuffy scam sites to $50 million annual fraud and ransomware money trails.

Akamai and Bolster AI counted about 6.4 million scams in April–June 2026, while phishing detections rose 61%.
Attackers hit unauthenticated government services from October 22 to 23; card data was not compromised, officials say.

Zohar Pinhasi allegedly billed clients more than $19 million while secretly paying over $8 million in ransoms and pleaded not guilty.
Detection is generally available; TrustScore is in beta, and credentials are planned for Q1 2027.

The firm says account login was 53% of suspected digital fraud in the first half of 2026.

DoT’s deadline is December 31, 2026; how far accounts stop working depends on each app’s implementation.
404 Media says account address and network details did not match Amanda Smith, whose case remains ongoing.

Operation Serengeti III, from June 29 to August 31, linked networks to over $385 million in losses and 65,929 victims.
Over 50-round traces, consumption rose as much as 2,487 times versus a no-token-task baseline.

Kameleo, AdsPower, and MultiLogin can isolate profiles, mask fingerprints, and reuse stolen session cookies at scale.

Amanda Smith is charged in Arkansas over a $1,000 Facebook Marketplace payment to an account using her SSN.

Kameleo, AdsPower, and MultiLogin can feed LLM content into profiles and accept stolen session cookies.

The provided page contains only a membership prompt, with no account of what was stolen or how.

National Geographic’s Super Scam Me documents romance scams the FTC says cost Americans about $1.5 billion yearly.
Today 1.5K readers · 2.4K views · 753 reads · all time 189K views