Cybercrime-as-a-Service Stories

Global Stories

Cybercrime-as-a-Service stories

AI-driven cybercrime surges at scale, Flashpoint warns

Stolen credentials and AI-generated phishing are accelerating attacks, as Flashpoint tracked 22 million illicit discussions and 7.4 million infected hosts.

By Joseph Gabriel Lagonsin • 5 min read • This month

Network Security

Infoblox warns cybercrime is becoming industrialised

Nearly 25 per cent of newly observed domains were high-risk, underscoring how AI and rented infrastructure are making attacks harder to detect.

By Mark Tarre • 4 min read • This month

Network Security

MedusaHVNC malware hijacks live browser sessions on Windows

Windows users face session theft risk as MedusaHVNC lets attackers operate in hidden browser desktops using existing cookies and log-ins.

By Sean Mitchell • 4 min read • Last month

Malware

Felk warns AI is fuelling attacks on smaller firms

Smaller firms face faster and costlier breaches as AI cuts the time hackers need to exploit software flaws from weeks to hours.

By Sean Mitchell • 4 min read • Last month

Ransomware

Why 'strong passwords' can't save you from AI

AI has made stolen credentials and careless copy-paste habits a bigger risk than password strength, with scams and breaches accelerating.

By Raymond Schippers • 4 min read • Wed, 6th May 2026

Malware

Fortinet warns ransomware victims rise 389% amid AI

Ransomware attacks are spreading faster as AI helps criminals exploit flaws within 24 to 48 hours, the report says.

By Joseph Gabriel Lagonsin • 4 min read • Fri, 1st May 2026

Firewalls

Lumen warns of malware-backed proxy networks in APAC

Proxy networks built from compromised home devices are helping attackers hide in plain sight across Asia Pacific, Lumen says.

By Shannon Williams • 4 min read • Fri, 10th Apr 2026

Unified Communications

iProov report warns of soaring iOS injection attacks

A 1,151% jump in iOS injection attacks in late 2025 has put mobile identity checks under fresh pressure, iProov says.

By Shannon Williams • 4 min read • Thu, 9th Apr 2026

Storage

Cloud security day warns of human & identity risks

Rising cloud adoption is leaving Australian and New Zealand firms exposed to credential abuse, misconfigurations and costly automated attacks.

By Joseph Gabriel Lagonsin • 7 min read • Wed, 1st Apr 2026

Malware

HPE Threat Labs spot industrialised cybercrime surge

HPE Threat Labs warns cybercrime now runs like big business, as AI-fuelled, industrial-scale attacks hammer government and finance.

By Mark Tarre • 4 min read • Tue, 24th Mar 2026

Virtualisation

Google Mandiant report spots faster, stealthier cyberattacks

Google's latest Mandiant report warns cyberattacks are faster and stealthier as AI-powered tools narrow defenders' response times to seconds.

By Sean Mitchell • 5 min read • Tue, 24th Mar 2026

Firewalls

US disrupts four IoT botnets in record DDoS attacks

US authorities say they have crippled four vast IoT botnets behind record 30Tbps DDoS attacks, in a major cross-border operation.

By Sofiah Nichole Salivio • 3 min read • Mon, 23rd Mar 2026

Ransomware

Tycoon 2FA phishing service disrupted in major sting

Police and tech firms have dismantled Tycoon 2FA, a phishing service used to bypass MFA and hijack cloud accounts at industrial scale.

By Mark Tarre • 4 min read • Mon, 9th Mar 2026

Multi-factor authentication

Russian phishing service targets freight & logistics

Russian-run Diesel Vortex phishing service raided freight and logistics portals in the US and Europe, stealing over 1,600 login credentials.

By Sean Mitchell • 4 min read • Fri, 27th Feb 2026

Multi-factor authentication

LummaStealer returns post-takedown with ClickFix ruse

LummaStealer roars back after domain takedown, using fake CAPTCHA ClickFix tricks and CastleLoader to spread via routine user actions.

By Karen Joy Bacudo • 4 min read • Fri, 13th Feb 2026

Malware

Google warns of AI model theft & state-backed misuse

Google flags surging attempts to steal AI models as state-backed hackers weaponise Gemini for phishing, intel gathering and malware support.

By Sean Mitchell • 6 min read • Thu, 12th Feb 2026

Malware

Phishing services drive 389% surge in account breaches

Phishing-as-a-Service fuels 389% jump in account breaches as attackers target Microsoft 365 and Business Email Compromise scams.

By Mark Tarre • 5 min read • Fri, 16th Jan 2026

Stories from Other Regions

Cybercrime-as-a-Service stories

Ransomware

Why cybercriminals are targeting MSPs first

Supply chain attacks are pushing cyber risk upstream, putting managed service providers under pressure from customers and regulators over shared access.

By Christoph Brecht • 5 min read • Last month