Cybercrime

A top Democratic senator has warned that Chinese intelligence is still inside U.S. telecommunications networks as part of a sweeping cyber campaign known as “Salt Typhoon,” saying the operation gives Beijing access to the unencrypted communications of almost anyone in America, the Financial Times reported.

Fugitive former Wirecard executive Jan Marsalek has been linked to a sprawling, multibillion-dollar money laundering network that British investigators say connects street-level drug dealers in the UK to sanctioned Russian oligarchs and the Kremlin’s security services, the Financial Times reported.

The United States, Britain and Australia have imposed coordinated sanctions on Russian technology companies and individuals accused of providing key online infrastructure for ransomware and other cyberattacks, Reuters reported. 

The U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) sanctioned eight individuals and two entities allegedly tied to laundering illicit proceeds from DPRK cybercrime and overseas IT work. 

A former director at Trenchant, an L3Harris Technologies subsidiary that develops offensive cyber tools, pleaded guilty Wednesday to stealing and reselling trade secrets worth $35 million to a Russian broker whose clients include the Russian government, Bloomberg reported.

A new legal filing alleges that a cryptocurrency promoted in January by U.S. First Lady Melania Trump was part of a sophisticated scheme that used celebrity association to lend legitimacy to token launches, according to Wired. 

Nation-state hackers gained “long-term, persistent access” to systems at cybersecurity vendor F5 Inc., stealing portions of BIG-IP source code, internal vulnerability information, and limited customer configuration data, Bloomberg reported, citing regulatory filings. 

U.S. and UK authorities seized roughly $15 billion in Bitcoin and multiple London properties allegedly linked to a sprawling online fraud scheme based in Cambodia.

Microsoft is warning organizations about an active campaign dubbed “Payroll Pirate” that hijacks employee accounts on cloud HR platforms and diverts direct-deposit paychecks, Ars Technica reported.

North Korea’s government-backed IT workers are quietly infiltrating global tech firms and contractor platforms, earning steady crypto salaries that are laundered through a sprawling network of intermediaries to fund the regime’s weapons programs, according to new analysis from Chainalysis.