Cybercrime-as-a-Service stories
AI has made stolen credentials and careless copy-paste habits a bigger risk than password strength, with scams and breaches accelerating.
Ransomware attacks are spreading faster as AI helps criminals exploit flaws within 24 to 48 hours, the report says.
Proxy networks built from compromised home devices are helping attackers hide in plain sight across Asia Pacific, Lumen says.
A 1,151% jump in iOS injection attacks in late 2025 has put mobile identity checks under fresh pressure, iProov says.
Rising cloud adoption is leaving Australian and New Zealand firms exposed to credential abuse, misconfigurations and costly automated attacks.
HPE Threat Labs warns cybercrime now runs like big business, as AI-fuelled, industrial-scale attacks hammer government and finance.
Google's latest Mandiant report warns cyberattacks are faster and stealthier as AI-powered tools narrow defenders' response times to seconds.
US authorities say they have crippled four vast IoT botnets behind record 30Tbps DDoS attacks, in a major cross-border operation.
Police and tech firms have dismantled Tycoon 2FA, a phishing service used to bypass MFA and hijack cloud accounts at industrial scale.
Russian-run Diesel Vortex phishing service raided freight and logistics portals in the US and Europe, stealing over 1,600 login credentials.
LummaStealer roars back after domain takedown, using fake CAPTCHA ClickFix tricks and CastleLoader to spread via routine user actions.
Google flags surging attempts to steal AI models as state-backed hackers weaponise Gemini for phishing, intel gathering and malware support.
Phishing-as-a-Service fuels 389% jump in account breaches as attackers target Microsoft 365 and Business Email Compromise scams.
Phishing-as-a-service kits doubled in 2025, now powering 90% of attacks as cyber gangs race to outsmart multifactor checks and filters.
Criminals are using Kubernetes and cloud-native tools to rapidly scale phishing-as-a-service, targeting Gmail, Facebook and Microsoft O365.
HP reports a surge in convincing fake software updates and staged prompts that trick users into installing stealthy, rapidly evolving malware.
AI-driven fraud, deepfakes and synthetic IDs are redefining 2026 risk, forcing firms to ditch reactive tools for layered, intelligent defence.
Agentic AI networks could let cybercriminals automate attacks at relentless scale, forcing security teams into a new AI-driven arms race.
Vietnam-based fake account farms are fuelling a growing global cybercrime market, flogging cheap logins, bot tools and disposable email tricks.
Ransomware hits record 7,458 named victims in 2025 as 124 gangs crowd dark web leak sites and new “supergroup” alliances emerge.