InfoSecBulletin Cybersecurity for mankind
The U.S. government has taken control of the ‘web3adspanels.org’ domain and the database used by cybercriminals to store stolen bank login information.
Cybercriminals stole credentials from American citizens through phishing campaigns using fake ads on Google and Bing that directed users to bogus banking sites.
Hackers deploy Casbaneiro Trojan that activates on bank websites
German police read Signal, Telegram, WhatsApp messages without breaking encryption
Urgent Patch! cPanel, GitLab Flaws Expose Users to RCE, File and Credential Theft
Palo Alto PAN-OS Flaw Enables Root Arbitrary Code Execution
Critical Check Point VPN flaws allow remote code execution attacks
Cisco confirms CVE-2026-20079 flaw in Secure FMC is exploited in attacks
Hackers exploit PaperCut flaws using hundreds of AI agents, compromising 440 servers globally
CISA Says Chinese Firms Extracted Billions of Tokens From Frontier AI Models
Nightmare Eclipse Drops New Microsoft Defender ‘ShieldCrash’ zero-day
cPanel Flaw Lets Hosting Accounts With Mail Privileges Execute Code as Root
The confirmed financial loss is estimated at $14.6 million, while the FBI estimates attempted losses at about $28 million.
“To date, the FBI has identified at least 19 victims throughout the United States, including two companies in the Northern District of Georgia, whose bank accounts have been compromised through this account takeover scheme, resulting in attempted losses of approximately $28 million dollars and actual losses of approximately $14.6 million dollars,” the Department of Justice says.
“The seized domain hosted a server that contained the stolen login credentials of thousands of victims, including the credentials of the victims mentioned above.”
The FBI found that the seized domain hosted a backend server that was used as recently as November. The seizure involved Estonian law enforcement and international partners. The domain now displays a banner stating it is under authority control.
Since January, the FBI’s Internet Crime Complaint Center has logged over 5,100 bank account takeover complaints, totaling over $262 million in losses.
Online banking users should bookmark official portals instead of using Google or Bing, or use ad blockers to hide ads.
