Rapid7 Quarterly Threat Landscape Report: Zero-clicks, geopolitical tensions, and some wins for law enforcement

The first quarter of 2026 reinforced that attackers are moving faster, operating with greater coordination, and exploiting weaknesses before most organizations can respond effectively. From escalating geopolitical tensions to increasingly aggressive ransomware operations, the latest quarterly...

Ukraine Police Arrest Suspect Linked to LockBit and Conti Ransomware Groups

The Cyber Police of Ukraine has announced the arrest of a local man who is suspected to have offered their services to LockBit and Conti ransomware groups. The unnamed 28-year-old native of the Kharkiv region allegedly specialized in the development of crypters to encrypt and obfuscate malicious...

Thinking of Hiring or Running a Booter Service? Think Again.

Most people who operate DDoS-for-hire businesses attempt to hide their true identities and location. Proprietors of these so-called "booter" or "stresser" services -- designed to knock websites and users offline -- have long operated in a legally murky area of cybercrime law. But until recently,...

Meta Ousts 7 Surveillance-for-Hire Operations From Its Platforms

While NSO Group gets most of the attention, the takedowns underscore how insidious the industry has become...

Feds Dismantled the Dark-Web Drug Trade—but It's Already Rebuilding

After recent high-profile dark-web drug market takedowns, new vendors are already filling the void...

The BEC List: Helping Thwart Business Email Compromise through Collaboration

Today, the Messaging, Malware and Mobile Anti-Abuse Working Group M3AAWG gave the JD Falk Award to the Business Email Compromise BEC List. The BEC List comprises cybersecurity firms, researchers and internet infrastructure companies that help deal with cybercriminal activities and schemes. The JD...

Google Report Outlines Dependencies in the For-Profit Cybercrime Food Chain

Security specialists need to change the game and shift gears, researchers argue – instead of focusing on protecting their users and systems, they should narrow their sights on trying to shake up cybercrime’s seedy underbelly. At least that’s how Kurt Thomas and Elie Bursztein, researchers at...

Ramnit Botnet Shut Down

The Ramnit botnet, a favorite among thieves dabbling in financial fraud for its frequent updates, has been shut down in a joint effort spearheaded by Europol’s European Cybercrime Centre EC3. In a statement today, EC3 said investigators from across Europe, along with Microsoft, AnubisNetworks and...

Jose Nazario on Botnet Takedowns, Cybercrime and Whether We Can Ever Win

Dennis Fisher talks with botnet researcher Jose Nazario about whether botnet takedowns are worth the effort, the evolution of attack techniques and whether we can ever get the upper hand on attackers. Download: digitalunderground100 Podcast audio courtesy of sykboy65 Subscribe to the Digital...

Twitter Transparency Report Shows Huge Interest From U.S. Law Enforcement

Privacy advocates and security experts often warn users about the consequences of handing over so much of their personal data to Web sites or social networks, saying that they never know how it’s going to be used or sold. But it’s rare that users ever see examples of that in action. Twitter is...

Why Takedowns Don't Reduce Online Crime

The last year has seen a string of takedowns of botnet command-and-control servers, malware drop zones, spam operations and other pieces of the crimeware infrastructure, each of which made a dent in one way or another. But the question of whether the takedowns have had any lasting effect on the...

Report Alleges Bredolab-Spamit Connections

Law enforcement crackdowns in recent weeks have targeted two major contributors to worldwide spam: Spamit.com and the Bredolab botnet. Now a new report suggests that the two cases may be related. A report on Krebsonsecurity.com claims that the recent arrest of a 27 year-old man, identified as Geo...