In one of the largest-ever breaches of a US telecom giant, AT&T revealed this week that “nearly all” its customer phone and text records were stolen after hackers accessed its account on a third-party cloud service. That cloud service, Snowflake, has been linked to several recent breaches, including those of Ticketmaster, banking firm Santander, and a subsidiary of LendingTree. Approximately 165 companies may have been targeted in the attacks against Snowflake accounts, potentially making it one of the largest collective breaches in history.
Researchers at crypto-tracing firm Elliptic revealed this week that an online marketplace, Huione Guarantee, is facilitating billions of dollars in financial scams frequently known as “pig butchering.” The offerings discovered on Houine Guarantee—a company reportedly linked to Cambodia’s ruling family—range from lists of potential targets to electric shock collars used to imprison human trafficking victims who are forced to work in scam labor camps in Southeast Asia.
Elsewhere in the crypto-tracing world, a US lawmaker this week introduced a resolution calling on the White House to classify former IRS investigator Tigran Gambaryan as a hostage due to his current imprisonment in Nigeria. Now employed as a crypto crime investigator at cryptocurrency exchange Binance after pioneering the practice for the IRS, Gambaryan was detained alongside a colleague in mid-March on the grounds that Binance had devalued the country’s fiat currency and enabled the “illicit” transfer of funds. While his colleague was able to escape, Gambaryan remains imprisoned on financial crimes charges—even as a growing number of US lawmakers pressure the Biden administration to facilitate his release.
One of the FBI’s most-wanted cybercriminals is finally headed to prison. Vyacheslav Igorevich Penchukov—who went by “Tank” online—received two nine-year sentences in US prison on Thursday and is ordered to fork over around $75 million. For years, Penchukov served as the lead hacker in cybercriminal group Jabber Zeus, which operated the Zeus malware. The group used its malware to access people’s bank accounts and siphon off tens of millions of dollars. Several of Penchukov’s alleged hacker colleagues remain at large, with multimillion-dollar bounties on their heads.
Google this week rolled out passkeys to users of its Advanced Protection Program. While passkeys—the cryptographic tech that promises to kill passwords once and for all—have been widely available to users of Google’s products for more than a year, APP users require greater security due to being at higher risk of targeted attacks, and it took the company more time to find a solution that would securely replace physical authentication keys as an added protection for logging in.
Finally, we got into the nitty gritty of the Pentagon’s long-running mission to equip special operation forces with AI superpowers. The “Hyper Enabled Operator” program started with the goal of creating a kind of Iron Man suit but has evolved in recent years to focus on instant situational awareness that would give soldiers the ability to assess risks faster than any mere human mind.
But that’s not all. Each week, we round up the security news we didn’t cover in depth ourselves. Click on the headlines to read the full stories. And stay safe out there.
Spyware Users Exposed in Major Data Breach
For the third time since 2010, spyware vendor mSpy has suffered a substantial data breach, this time exposing millions of customers and prospective users around the globe, many of whom appear to have used the software to snoop on others. The leaked trove, published by transparency group Distributed Denial of Secrets, contains potentially terabytes of data apparently stolen from mSpy’s customer support system, Zendesk. It reveals names, email addresses, customer support tickets and documentation, and more.
