This week saw major cybersecurity incidents, including the shutdown of a fake crypto exchange in Ukraine and rising threats reported by the FBI.
This week has seen notable events in cybersecurity, particularly concerning fraudulent activities and cyber threats.
- Ukrainian authorities have shut down the fake cryptocurrency exchange Money 24/7, confiscating over 20 million hryvnias.
- The FBI has reported a rise in hacking incidents aimed at stealing intimate content and cyberbullying, particularly targeting student-athletes.
- Hackers from DEF CON executed a cyberattack on a Delta Air Lines flight, disrupting the onboard Wi-Fi.
- Chinese hackers have been linked to both government espionage and cryptocurrency fraud.
Ukrainian Authorities Dismantle Fake Crypto Exchange Money 24/7
Ukrainian law enforcement has arrested the leader of a fraudulent network masquerading as Money 24/7, a crypto exchange. The country’s cyber police reported that the operation had been designed to lure victims with a facade of legitimacy.
The scam involved:
- Deceptive Appearance: The criminals created professional-looking websites and maintained a Telegram channel while operating a physical office that resembled a cash exchange.
- In-Person Scams: Victims were invited to the office to exchange cash for cryptocurrency, but no actual transactions occurred.
- Delaying Tactics: Scammers provided small amounts of cryptocurrency to delay victims from reporting the fraud.
Authorities conducted over 20 raids across seven regions, seizing computers, phones, and the cash haul of over 20 million hryvnias. The organizer could face up to 12 years in prison with asset forfeiture.
FBI Issues Warning on Cyberattacks Targeting Intimate Content
The FBI has alerted the public to an increase in cyberattacks aimed at stealing intimate photos and videos from social media. These attacks often begin with fraudulent communications, leading victims to believe they need to reset their passwords.
Once hackers access accounts, they threaten to release the stolen content unless a ransom is paid. Even when victims comply, the stolen material often ends up on the dark web for sale.
Cyberattack on Delta Air Lines Passengers by DEF CON Hackers
A cyber incident occurred on Delta Flight 591, which was carrying attendees from the DEF CON 34 conference. Reports indicate that hackers disrupted the onboard Wi-Fi by sending fake data packets, forcing passengers’ devices to disconnect from the legitimate network.
They set up a rogue network named Delta WiFi Fast, which led users to a phishing page designed to harvest personal information. Delta confirmed that there was no threat to flight safety, and law enforcement responded upon landing.
Chinese Hackers Engage in Espionage and Crypto Fraud
Symantec has reported that a group known as Jewelbug is involved in both cyber espionage and cryptocurrency theft. Their sophisticated tactics have targeted government entities in various regions, employing malware to gain access to sensitive information.
Analysts suggest these hackers operate in conjunction with a legitimate Chinese company, possibly as hired hands for espionage.
Polish Power Plant Cyberattack Disrupts Operations
A cyberattack on a Polish power plant has been revealed, where hackers accessed critical infrastructure through a cellular network. This breach, which occurred in December 2025, involved exploiting vulnerabilities in the system's authentication methods.
The attackers were able to shut down a steam turbine and disrupt service to around 50,000 residents. Prompt action by plant personnel allowed for a restoration of operations.
DeadLock Ransomware Group Adopts Decentralized Infrastructure
The DeadLock ransomware group has shifted to using decentralized solutions to enhance their operational resilience. This transition allows them to evade law enforcement effectively, utilizing blockchain technology for their ransom notes and communication with victims.
Microsoft has highlighted the unique encryption methods and operational strategies employed by DeadLock to evade detection and maintain control over their ransomware activities.
As cyber threats continue to evolve, these incidents underscore the need for heightened vigilance and proactive measures in cybersecurity.
