Europe Leads Global Effort to Dismantle Phishing Service and Halt Cyberattacks

International investigators coordinated a takedown of the phishing‑as‑a‑service platform “Kratos”, shutting down more than 200 servers and arresting the alleged developer in Indonesia. The operation, involving German, U.S. and other law‑enforcement agencies, identified roughly 850 victims across 35 countries.

A German insurer experienced a data breach when a misconfigured server exposed customer names, addresses and contract details for several hours. An AI‑driven web crawler accessed the open server, prompting an immediate internal response and notification of data‑protection authorities.

Travelers using Booking.com have been targeted with fraud messages that mimic legitimate hotel payment requests. The scammers exploit stolen booking data to create convincing payment pages that harvest credit‑card information.

A large sextortion campaign, driven by stolen data from prior breaches and augmented with AI‑generated images, has focused on teenage boys, demanding cryptocurrency payments under threat of publishing fabricated intimate content. The scheme has affected millions of email addresses from companies such as Amtrak and Panera Bread.

Security researchers at ReliaQuest uncovered a DNS‑hijacking attack on hotel and conference‑center Wi‑Fi networks in the United States, India and Saudi Arabia. The manipulation redirects users to counterfeit Microsoft‑365 login pages, enabling credential theft and bypass of multi‑factor authentication.