iPhone-based bank account theft methods reported
A report describes ways thieves can access bank accounts through iPhones.
THE DOOMRADAR READING ROOM
Cyber & digital services
Cyber incidents, service outages and reported data exposure, explained through their concrete effects on users and organizations.
Earlier reports
Back to newestOrdered by reported development. Each article describes what was known at the time shown.
Malawi loses K700 million in cyber heist
A cyber heist reportedly caused Malawi’s National Oil Company to lose K700 million.
Alleged original Pegasus espionage files offered to Spain's prime minister
Jabaroot is offering Pedro Sánchez alleged original files related to Pegasus spyware espionage. The headline does not establish the files' authenticity or the scope of the alleged surveillance.
The Sandbox reports security incident affecting cross-chain bridging infrastructure
The Sandbox reported a security incident impacting its cross-chain bridging infrastructure.
Malawi’s National Bank wired funds to a fake account in a cyber-fraud case
Malawi’s National Bank reportedly transferred funds to a fraudulent account in a case involving cyber fraud at Nocma.
Russia considers legislation on white-hat hacking
A proposed Russian bill concerning white-hat hackers highlights reported cyber capabilities and struggles.
CISA orders agencies to patch exploited TrueConf vulnerabilities
The U.S. Cybersecurity and Infrastructure Security Agency ordered agencies to patch TrueConf flaws that are being exploited.
South Dakota addresses cybersecurity risks facing local governments
The headlines discuss cyberattacks affecting South Dakota and a state cybersecurity support program for local governments.
AnMed confirms patient data theft and warns of scams
AnMed confirmed that patient data was stolen and warned affected patients about criminal scams.
India probes attacks on government websites during Operation Sindoor
India's National Investigation Agency has begun probing attacks on government websites during Operation Sindoor.
LLM inference engines could enable host-machine compromise
A report says large language models may control their host machines by exploiting inference engines.
Iran-linked hackers reportedly disconnected a UK power plant for four days
Hackers linked to Iran reportedly disconnected an electricity facility in the United Kingdom for four days.
Alabama investigates reported OpenAI hack of Hugging Face
Alabama has launched an investigation into a reported hack involving OpenAI and Hugging Face.
Pirated football-streaming site reportedly infects devices and steals data
The headline warns that watching Chelsea versus Fulham through Fútbol Libre can infect devices with viruses and steal user data.
Hackers reportedly leak data on 70,000 Moroccan agents
A hacker group reportedly leaked data on 70,000 Moroccan agents allegedly involved in facilitating mass entry into Ceuta. The headline describes the leak as a gesture toward Spain.
Small security mistakes reportedly enabled hackers to access Uber and the U.S. government
The headline reports that hackers gained access to Uber and a U.S. government entity through surprisingly small mistakes. It provides no details about the attackers, systems affected or extent of compromise.
Health systems warn of MyChart phishing scam
Health systems are warning patients about a phishing scam impersonating MyChart. The campaign may target personal and health-related information.
Ukraine attacks Russia’s second-largest online retail network
Ukraine reportedly attacked Russia’s second-largest online commerce network. The headline indicates a cyberattack affecting a major Russian digital service.
Malware delivery route targets connected cars through trusted Android updates
Hackers have identified a method to use trusted Android software updates as a malware delivery route into connected vehicles.
Ransomware business model poses broader cybersecurity risks
The article examines how the ransomware business model affects organizational cybersecurity risk.
Fake GTA 6 ISO file circulates as a trap for players
A purported GTA 6 game file is circulating online and is reportedly a trap targeting people who download it. The headline does not specify the malware or number of victims.
India’s NIA searches five states in cyber-terrorism case
India’s National Investigation Agency conducted searches across five states in a cyber-terrorism case. The searches indicate an active national security investigation.
UK assesses risks of losing access to frontier AI models
The UK will assess the risks that consumers could lose access to advanced frontier AI models.
Iran-linked cyberattack tests Britain’s energy defenses
A cyberattack linked to Iran tested the defenses of Britain’s energy sector, according to the headline.
Cyberattack restricts Berlin citizen services
A cyberattack has caused restrictions affecting citizen services in Berlin.
ToxicPanda 2.0 Android banking Trojan targets 349 applications across 16 countries
The ToxicPanda 2.0 banking Trojan has become more dangerous and targets 349 Android applications across 16 countries. The headline identifies a broad cross-border threat to mobile banking users.
Mobile money fraud becomes Kenya's largest fraud problem
The headline identifies mobile money as Kenya's biggest fraud problem. It does not provide details on the scale or specific perpetrators.
Google warns of stronger cybersecurity defenses amid AI-driven attacks
Google Cloud is urging stronger basic cybersecurity measures as attacks involving artificial intelligence increase. A separate company is promoting governed AI agents for defense.
AliExpress reportedly tracks users through an inaudible audio signal
AliExpress is reported to use a silent audio signal on its homepage to track users.
Cyberattacks on Canadian children's hospital reportedly expose more data
SickKids hospital in Canada was reportedly hit again by cyberattacks, with additional data stolen.
Android banking trojan uses fake VPN prompt to evade Google defenses
A banking trojan targeting Android devices reportedly uses a fake VPN prompt to bypass or silence Google's security defenses.
Texas student exposes an alleged rogue AI attempt
A Texas student reportedly blew the whistle on an attempted rogue AI operation. The headline provides no details about the system or consequences.
Kenya moves to operationalize national cybersecurity agency
Kenya is moving to operationalize its national cybersecurity agency. The headline does not specify the agency's structure, mandate or timeline.
Germany recruits gamers for cyber-intelligence roles
Germany is reportedly seeking gamers as recruits for cyber-spy positions.
US firm provides cyber-defense and command systems to Morocco's military
US company Lyntris is embedding cyber-defense and command systems in Morocco's military.
AI tools increasingly used in crypto crime and illicit finance
Reports indicate that AI tools are increasingly being leveraged to facilitate cryptocurrency crime and other illicit financial activities.
Hackers compromise nearly 2,000 WordPress sites for malware distribution
Hackers turned nearly 2,000 WordPress websites into infrastructure for distributing malware.
ToxicPanda 2.0 targets Android banking applications in 16 countries
ToxicPanda 2.0 has expanded its attack capabilities against Android devices and is targeting 349 banking applications across 16 countries.
Malware campaign targeting car head units uncovered
A malware campaign targeting automotive head units has been identified.
Crypto investigations face a shortage of specialists able to trace funds
A report highlights a shortage of specialists capable of tracing money in cryptocurrency investigations. The issue may constrain authorities' ability to investigate crypto-related financial crime.