InfoSecBulletin Cybersecurity for mankind
The U.S. government has taken control of the ‘web3adspanels.org’ domain and the database used by cybercriminals to store stolen bank login information.
Cybercriminals stole credentials from American citizens through phishing campaigns using fake ads on Google and Bing that directed users to bogus banking sites.
Citrix NetScaler SAML 0-Day Flaw Under Attack
Major Danish university breached, 200,000 users at risk
Microsoft’s X account hijacked to promote Clippy crypto scam
Critical cPanel, GitLab AI Gateway and Dell CSM Flaws Enable RCE And Admin Hijacking
Nearly 100,000 email addresses exposed in first AI-related data breach in Singapore
Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws
Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws
CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
The confirmed financial loss is estimated at $14.6 million, while the FBI estimates attempted losses at about $28 million.
“To date, the FBI has identified at least 19 victims throughout the United States, including two companies in the Northern District of Georgia, whose bank accounts have been compromised through this account takeover scheme, resulting in attempted losses of approximately $28 million dollars and actual losses of approximately $14.6 million dollars,” the Department of Justice says.
“The seized domain hosted a server that contained the stolen login credentials of thousands of victims, including the credentials of the victims mentioned above.”
The FBI found that the seized domain hosted a backend server that was used as recently as November. The seizure involved Estonian law enforcement and international partners. The domain now displays a banner stating it is under authority control.
Since January, the FBI’s Internet Crime Complaint Center has logged over 5,100 bank account takeover complaints, totaling over $262 million in losses.
Online banking users should bookmark official portals instead of using Google or Bing, or use ad blockers to hide ads.
