
Bluesky blocks links to leaked DHS employee data amid takedowns
A hacker obtained more than 40,000 Homeland Security login records with work phones and emails; DHS calls it a potential breach.
26 stories, newest first · one card per story

A hacker obtained more than 40,000 Homeland Security login records with work phones and emails; DHS calls it a potential breach.
Fake-recruiter trojan distributed via taikotalent.xyz has been taken down after the registrar placed the domain on clientHold on October 10.

Microsoft and police disrupted a phishing marketplace and kits behind more than a billion malicious messages.
A US-led coalition seized Flax Typhoon tools Microscan and FishHub operated by China's Integrity Tech.

FBI and French authorities seized NudeLeaksTeens and arrested two suspects over stolen intimate images of 17,000 victims.

European police seized KillSec infrastructure and arrested suspects, including a 16-year-old alleged ringleader.

Europol's Operation KillSwitch dismantled KillSec ransomware after about 500 confirmed attacks and seized 110 terabytes.

Spanish police arrested a suspected 16-year-old KillSec administrator; joint operation seized the ransomware group's leak site, 110 TB of data and five servers.
Spanish police arrested KillSec's suspected 16-year-old leader and seized the ransomware gang's leak site, five servers, and infrastructure across Europe.

Nine-country operation arrests three KillSec ransomware members, including a suspected 16-year-old leader, and seizes five servers plus 110TB of stolen data.

Europol-led Operation KillSwitch dismantled KillSec ransomware, seizing its leak site and 110TB of stolen data; a 16-year-old alleged leader was identified.

GitHub left a malware-flagged Easy Data Transform imitation online for weeks, removing it after Hacker News attention.

Microsoft disrupted EvilTokens, an AI-powered phishing platform that compromised 12,000+ email accounts across 10,000+ organizations.

Law enforcement takes down EvilTokens PhaaS kit that compromised 12,000 inboxes using AI-powered device-code phishing to bypass MFA.

Recorded Future launches Malicious Site Monitoring in Digital Risk Protection, showcasing ClickFix brand-impersonation detection with AI triage.

Microsoft seized EvilTokens infrastructure after the AI phishing service compromised about 12,000 Microsoft 365 inboxes.
Microsoft's court-authorized takedown of the EvilTokens AI phishing platform led to two UK arrests; the service had access to 12,000+ compromised inboxes.

Court-ordered seizure of 50 EvilTokens websites disables an AI-driven PhaaS tied to 12,000 compromised Microsoft inboxes and $1.7M reported losses.

FBI seized NightmareStresser DDoS-for-hire domains in Operation PowerOFF; the booter had nearly 1 million users and launched hundreds of thousands of attacks since 2022.

FBI and RCMP seized NightmareStresser DDoS-for-hire domains under Operation PowerOFF; the service enabled hundreds of thousands of attacks since at least 2022.

US-led international operation with Europol, CrowdStrike, and Shadowserver sinkholed the 20-year-old Sality P2P botnet, once exceeding one million infected machines.

Law enforcement, CrowdStrike and Shadowserver dismantled the 23-year-old Sality P2P botnet that infected more than 11 million devices.

US and European authorities, with CrowdStrike and Shadowserver, disrupted the 20-year-old Sality peer-to-peer botnet, severing 15,000+ infected machines from operators.

US and European authorities with CrowdStrike dismantled the two-decade-old Sality P2P botnet using peer-list manipulation, blocking payload delivery to infected hosts.
Today 1.6K readers · 2.4K views · 775 reads · all time 189K views