Cushman & Wakefield Hit by ShinyHunters Vishing Attack — 50GB Salesforce Data Dumped
ShinyHunters compromised global real estate giant Cushman & Wakefield through a vishing attack that convinced an employee to hand over Salesforce cred...
Scam Alerts & Articles
739 articles on scam awareness, fraud prevention, and consumer protection.
ShinyHunters Breaches Carnival Corporation, Leaks 8.7 Million Cruise Loyalty Records
ShinyHunters claimed the theft of 8.7 million Carnival Corporation records in April 2026, exposing Holland America Mariner Society loyalty members' pe...
Iran's MuddyWater Used Microsoft Teams Screen-Sharing to Run a False-Flag Ransomware Espionage Campaign
Rapid7 has attributed a sophisticated false-flag campaign to MuddyWater, the Iranian state APT linked to the Ministry of Intelligence and Security, in...
US Unseals Federal Charges Against Scattered Spider's 'Bouquet' — Extradition from Finland Now Pending
Federal prosecutors in Chicago have unsealed a six-count complaint against Peter Stokes, 19, aka 'Bouquet,' the British national arrested in Finland i...
ShinyHunters Breaches Instructure: 275 Million Students' Canvas Data Stolen, 3.65TB at Risk
ShinyHunters has claimed responsibility for a breach of Instructure, the parent company of Canvas LMS, alleging theft of 3.65 terabytes of data coveri...
Operation Tri-Force Sentinel: FBI, Dubai, and China MPS Arrest 276 in Largest Pig-Butchering Crackdown in History
The FBI, Dubai Police, and China's Ministry of Public Security jointly dismantled nine pig-butchering crypto scam compounds, arresting 276 people and ...
Four Years Each: Goldberg and Martin Sentenced for Deploying ALPHV Ransomware on Their Own IR Clients
Ryan Clifford Goldberg and Kevin Tyler Martin — the incident response manager and ransomware negotiator who pleaded guilty to deploying ALPHV/BlackCat...
ShinyHunters Claims 9 Million Medtronic Medical Records — Company Confirms Breach via SEC Filing
ShinyHunters listed Medtronic on its dark web leak site in mid-April 2026, claiming over 9 million stolen medical records including names, Social Secu...
The Fixers Who Became the Problem: How Three Ransomware Negotiators Allegedly Deployed the Attacks They Were Paid to Stop
Kevin Tyler Martin, Ryan Clifford Goldberg, and Angelo Martino were hired to negotiate ransomware payments on behalf of victim companies. Federal pros...
75,000 Users Just Got a Letter From Law Enforcement: Operation PowerOFF's April 2026 Phase Is a New Kind of DDoS Crackdown
On April 13, 2026, Europol and 21 countries executed the largest coordinated action yet against DDoS-for-hire platforms — seizing 53 domains, arrestin...
74 Warrants, a Luxury Bangkok Condo, and a DDoS Empire: The Arrest of Fluxstress Operator Noah Christopher
Thai cyber police found Noah Christopher, a 27-year-old German national wanted under 74 arrest warrants across Germany and the EU, living comfortably ...
Sabotage-for-Hire on Telegram: How Iran's Intelligence Service Is Recruiting British Teenagers and Petty Criminals to Attack the UK
Two recent UK investigations expose Iran's playbook for hybrid warfare on British soil — open Telegram channels, automated recruitment bots, crypto pa...