InfoSecBulletin Cybersecurity for mankind
The U.S. government has taken control of the ‘web3adspanels.org’ domain and the database used by cybercriminals to store stolen bank login information.
Cybercriminals stole credentials from American citizens through phishing campaigns using fake ads on Google and Bing that directed users to bogus banking sites.
Apple iOS 27.2 Released Fixes 163 Flaws, Including Critical WebKit RCE
CISA adds PHP2Shell to KEV, PHP Releases New Security Updates to Fix Critical HTTP2Shell flaw
Cloudflare Unveils Emergency WAF Ruleset Update on Brotli flaw
Daily Cyber security update for 26.10. 2026
The Washington Post report
Ex-DOGE AI startup Cathedral Breaches Anthropic Internal Systems within 12 Hours
Daily Cyber security update for 25. 10. 2026
Daily Cyber security update for 24. 10. 2026
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
The confirmed financial loss is estimated at $14.6 million, while the FBI estimates attempted losses at about $28 million.
“To date, the FBI has identified at least 19 victims throughout the United States, including two companies in the Northern District of Georgia, whose bank accounts have been compromised through this account takeover scheme, resulting in attempted losses of approximately $28 million dollars and actual losses of approximately $14.6 million dollars,” the Department of Justice says.
“The seized domain hosted a server that contained the stolen login credentials of thousands of victims, including the credentials of the victims mentioned above.”
The FBI found that the seized domain hosted a backend server that was used as recently as November. The seizure involved Estonian law enforcement and international partners. The domain now displays a banner stating it is under authority control.
Since January, the FBI’s Internet Crime Complaint Center has logged over 5,100 bank account takeover complaints, totaling over $262 million in losses.
Online banking users should bookmark official portals instead of using Google or Bing, or use ad blockers to hide ads.
