Threat Intelligence
Google Threat Intelligence Group Details Continued Disruption of Malicious Residential-Proxy Networks
Vendor-driven proxy-network disruption continues — defender teams review perimeter-detection posture this week.
Cybercrime
US Posts $10 Million Reward Over Russian-Intelligence Signal and WhatsApp Phishing
A coordinated US law-enforcement push against a Russian-intelligence messaging-app campaign pairs a Rewards for Justice bounty with an FBI advisory on Signal backup-recovery-key theft.
Data Breaches
Polymarket Discloses $3.1M User-Fund Theft After Vendor Compromise
A high-profile prediction-market disclosure of user-fund theft: a compromised third-party vendor injected a malicious script into Polymarket's frontend, draining roughly $3.1 million from eleven user wallets, with the platform pledging full refunds.
Cybercrime
Operation Endgame Coordinators Describe Multi-Year "Assembly Line" Disruption
A retrospective frame on the most consequential law-enforcement effort against cybercrime infrastructure, as Operation Endgame's coordinators recast a string of 2026 takedowns as one sustained assault on the criminal supply chain.
Cybercrime
Microsoft Files Racketeering Suit Linking Amadey and StealC Operators via AI
Microsoft's civil legal tooling now leans on AI-link analysis — a notable methodology disclosure in a public filing that frames two separate malware operations as a single racketeering conspiracy.
Cybercrime
Microsoft and Europol Disrupt Amadey and StealC Infrastructure in Operation Endgame Phase
Operation Endgame's latest phase takes out Amadey and StealC's shared infrastructure, with Europol and Microsoft reporting 326 servers actioned, 142 domains seized, and roughly 27 million stolen credentials recovered.
Cybercrime
Scattered Spider Members Jubair and Flowers Plead Guilty on Day One of TfL Trial
Another individual-conviction milestone in the Scattered Spider law-enforcement track: two alleged members admitted unauthorised access to Transport for London's network on the opening day of their trial, with sentencing set for July.
Cybercrime
Canada's Spy Agency Uses First-of-Its-Kind Warrant to Clean Botnet-Infected Devices
A Federal Court ruling lets Canada's intelligence service reach into infected routers and IoT gear to neutralize two foreign-run botnets — a new regulatory precedent for intelligence-agency-led botnet-cleanup operations.
Cybercrime
Authorities Disrupt SocGholish Servers in Operation Endgame Action
Operation Endgame's multi-month coordinated action takes down another major distribution backbone, seizing more than a hundred servers and remediating nearly 15,000 compromised WordPress sites worldwide.
Cybercrime
Spain Arrests a Suspect Over the Doxxing of Police, Prosecutors and INCIBE Cyber Officials
Spain's National Police arrested a suspect accused of publishing personal data of officials from its most sensitive bodies — including the cyber agency INCIBE, the police, Civil Guard and prosecutors — a doxxing campaign police say endangered both the individuals and their institutions.
Malware
WeedHack — A Free Minecraft Malware Service Has Infected 116,000 Systems, and Some Buyers Use It to Spy on Other Players
McAfee Labs says WeedHack, a free-to-start Minecraft malware-as-a-service, has infected over 116,000 systems since January via fake mods pushed on YouTube and through SEO poisoning — and some buyers are using its remote-access tools to spy on and harass other players.