✨ The Containment Era is here. Secure AI workloads before they breach. →The Containment Era is here. →The Containment Era is here. →Explore ✨
Law Enforcement
Breach intelligence, attack campaigns, and threat reports targeting the Law Enforcement sector.
Explore Other Sectors
Law Enforcement Threat Reports
Spanish Authorities Dismantle Online Gambling Ring Exploiting Ukrainian Women
In March 2026, Spanish and Ukrainian law enforcement authorities dismantled a criminal network that exploited vulnerable Ukrainian women to facilitate an online gambling scheme, laundering approximately €4.75 million in illicit proceeds. The organization targeted women displaced by the war in Ukraine, bringing them to Spain under the guise of providing assistance. Once in Spain, the victims were coerced into opening bank accounts and credit cards, which the criminals then controlled to conduct fraudulent online gambling activities. The operation led to the arrest of 12 suspects and the seizure of significant assets, including mobile phones, computers, vehicles, and frozen bank accounts across multiple countries. This incident underscores the increasing trend of cybercriminals exploiting vulnerable populations to facilitate financial crimes. The use of sophisticated methods, such as automated betting systems and identity theft, highlights the evolving nature of online fraud and the necessity for robust international cooperation to combat such transnational criminal activities.
4 months ago
Kill Chain
INTERPOL's Operation Sentinel: A Landmark Cybercrime Crackdown in Africa
Between October 27 and November 27, 2025, INTERPOL coordinated Operation Sentinel, a significant cybercrime crackdown across 19 African countries. The operation led to the arrest of 574 suspects involved in business email compromise (BEC), digital extortion, and ransomware attacks. Authorities dismantled over 6,000 malicious links, decrypted six ransomware variants, and recovered approximately USD 3 million. The cases investigated were linked to estimated financial losses exceeding USD 21 million. Notable incidents included a thwarted USD 7.9 million BEC attempt targeting a petroleum company in Senegal and a ransomware attack in Ghana that encrypted 100 terabytes of data, with nearly 30 terabytes successfully recovered. ([interpol.int](https://www.interpol.int/es/Noticias-y-acontecimientos/Noticias/2025/574-arrests-and-USD-3-million-recovered-in-coordinated-cybercrime-operation-across-Africa?utm_source=openai)) This operation underscores the escalating threat of cybercrime in Africa, with online offenses now accounting for a significant proportion of all crimes in many regions. The success of Operation Sentinel highlights the effectiveness of international collaboration in combating cyber-related offenses and the critical need for continued vigilance and cooperation to protect critical infrastructure and sensitive data. ([interpol.int](https://www.interpol.int/es/Noticias-y-acontecimientos/Noticias/2025/574-arrests-and-USD-3-million-recovered-in-coordinated-cybercrime-operation-across-Africa?utm_source=openai))
4 months ago
Kill Chain
Project Compass: Unveiling the Arrests in 'The Com' Cybercrime Network
In January 2025, Europol initiated Project Compass, a coordinated international operation targeting 'The Com,' a decentralized cybercriminal collective known for engaging in ransomware attacks, financial extortion, and the exploitation of minors. Over the course of the year, the operation led to the arrest of 30 individuals and the identification of 179 additional suspects across 28 countries. Investigators also identified 62 victims, with four being directly safeguarded from further harm. 'The Com' primarily consists of English-speaking individuals aged 16 to 25, who utilize social media platforms, messaging applications, and online gaming environments to recruit and exploit young people. The group's decentralized structure and use of various online platforms have made it particularly challenging for law enforcement to disrupt their activities. The success of Project Compass underscores the importance of international collaboration in combating cybercrime and highlights the ongoing threat posed by such decentralized networks. ([helpnetsecurity.com](https://www.helpnetsecurity.com/2026/02/27/europol-the-com-network-arrests/?utm_source=openai)) The significance of this operation is underscored by the increasing prevalence of cybercriminal groups targeting vulnerable populations through online platforms. The arrest of key members of 'The Com' serves as a critical reminder of the need for continuous vigilance and proactive measures to protect minors from online exploitation. Additionally, the operation highlights the evolving tactics of cybercriminals, who are increasingly leveraging decentralized networks and social engineering techniques to perpetrate their crimes. ([darkreading.com](https://www.darkreading.com/threat-intelligence/30-alleged-members-the-com-arrested-project-compass/?utm_source=openai))
4 months ago
Kill Chain
Alabama Man's Cyber Extortion Scheme Exposes Vulnerabilities in Social Media Security
Between April 2022 and May 2025, Jamarcus Mosley, a 22-year-old from Mobile, Alabama, orchestrated a cyber extortion scheme targeting hundreds of young women, including minors, across the United States. By impersonating friends and acquaintances, Mosley deceived victims into providing account recovery codes, enabling him to hijack their Snapchat and Instagram accounts. He then accessed private, intimate images and videos, threatening to publicly release the content unless victims complied with his demands for additional explicit material or monetary payments. This operation spanned multiple states, with documented cases in Georgia, Florida, and Illinois. ([justice.gov](https://www.justice.gov/usao-ndga/pr/online-predator-pleads-guilty-hacking-social-media-accounts-and-extorting-hundreds?utm_source=openai)) The case underscores the growing threat of social engineering attacks and the exploitation of personal relationships in the digital age. As individuals increasingly share personal content online, the risk of such intimate data being weaponized by malicious actors rises. This incident serves as a stark reminder of the importance of digital literacy, robust security practices, and the need for vigilance in online interactions to prevent similar breaches.
4 months ago
Kill Chain
South Korea Tax Agency's Data Exposure Results in $4.8M Crypto Theft
In February 2026, South Korea's National Tax Service (NTS) inadvertently exposed the mnemonic recovery phrase of a seized cryptocurrency wallet in an official press release. This oversight allowed unauthorized individuals to access and transfer approximately 4 million Pre-Retogeum (PRTG) tokens, valued at $4.8 million, from the wallet. The incident underscores significant lapses in the secure handling of digital assets by governmental bodies. This event highlights the critical need for stringent operational security measures when managing and disclosing information related to digital assets. The exposure of sensitive data, such as wallet recovery phrases, can lead to substantial financial losses and erode public trust in institutional competence.
4 months ago
Kill Chain
Europol's Project Compass: A Milestone in Combating The Com Cybercrime Network
In January 2025, Europol initiated Project Compass, a coordinated international effort involving 28 countries, including all Five Eyes nations, to dismantle 'The Com,' a decentralized network of minors and young adults engaged in cybercrime, extortion, and physical violence. Over the past year, this operation has led to the arrest of 30 individuals, the identification of 179 perpetrators, and the safeguarding of 62 victims. The Com operates across various online platforms, making it challenging to disrupt due to its fragmented structure. ([cyberscoop.com](https://cyberscoop.com/project-compass-the-com-europol/?utm_source=openai)) The significance of this operation lies in its demonstration of effective international collaboration in combating complex cybercriminal networks. The Com's activities, including high-profile ransomware attacks and exploitation of vulnerable individuals, underscore the evolving nature of cyber threats. Project Compass highlights the necessity for continuous global cooperation and adaptive strategies to address such multifaceted cybercrime challenges. ([helpnetsecurity.com](https://www.helpnetsecurity.com/2026/02/27/europol-the-com-network-arrests/?utm_source=openai))
5 months ago
Kill Chain
Operation Red Card 2.0: A Landmark Cybercrime Crackdown in Africa
Between December 8, 2025, and January 30, 2026, Operation Red Card 2.0, coordinated by INTERPOL, led to the arrest of 651 individuals across 16 African countries, including Nigeria and Kenya. The operation targeted high-yield investment scams, mobile money fraud, and fraudulent mobile loan applications, resulting in the recovery of over $4.3 million and the dismantling of 1,442 malicious infrastructures. Investigations revealed financial losses exceeding $45 million, affecting 1,247 victims globally. Notable actions included the dismantling of a high-yield investment fraud ring in Nigeria and the arrest of 27 individuals in Kenya linked to scams exploiting messaging apps and social media platforms. ([nairametrics.com](https://nairametrics.com/2026/02/19/interpol-backed-operation-recovers-4-3m-from-cybercrime-in-nigeria-kenya-others/?utm_source=openai)) This operation underscores the escalating threat of cybercrime in Africa, driven by rapid digitalization and the proliferation of online financial services. The success of Operation Red Card 2.0 highlights the critical importance of international collaboration and intelligence sharing in combating transnational cyber threats. Organizations are urged to enhance their cybersecurity measures and remain vigilant against evolving cybercriminal tactics.
5 months ago
Kill Chain
Predator Spyware's Stealthy Bypass of iOS Recording Indicators
In February 2026, security researchers uncovered that Intellexa's Predator spyware can suppress iOS's camera and microphone recording indicators, allowing covert surveillance without user awareness. By injecting code into SpringBoard, the spyware intercepts sensor activity updates, preventing the green and orange dots from appearing when the camera or microphone is active. This technique requires prior full device compromise, including kernel-level access, and does not exploit new iOS vulnerabilities. ([bleepingcomputer.com](https://www.bleepingcomputer.com/news/security/predator-spyware-hooks-ios-springboard-to-hide-mic-camera-activity/?utm_source=openai)) This discovery highlights the evolving sophistication of commercial spyware and underscores the importance of maintaining up-to-date device security measures. Users should be aware that visual indicators alone may not reliably signal unauthorized access to device sensors, emphasizing the need for comprehensive security practices.
5 months ago
Kill Chain
FBI Reports Surge in ATM Jackpotting Attacks in 2025
In 2025, the FBI reported a significant surge in ATM jackpotting incidents across the United States, with over 700 attacks resulting in more than $20 million in losses. These attacks involve cybercriminals exploiting physical and software vulnerabilities in ATMs, often deploying malware like Ploutus to force machines to dispense cash without legitimate transactions. Criminals typically gain access by using generic keys to open ATM fronts and then install malware to control the machines remotely. This alarming trend underscores the evolving tactics of cybercriminals and highlights the urgent need for financial institutions to bolster their ATM security measures. The rise in such sophisticated attacks calls for enhanced vigilance and the implementation of robust security protocols to protect against these threats.
5 months ago
Kill Chain
INTERPOL's Operation Red Card 2.0: A Major Blow to African Cybercrime Networks
Between December 8, 2025, and January 30, 2026, INTERPOL coordinated Operation Red Card 2.0, a collaborative effort involving law enforcement agencies from 16 African countries. This operation targeted transnational cybercriminal networks engaged in high-yield investment scams, mobile money fraud, and fraudulent mobile loan applications. The concerted efforts led to the arrest of 651 individuals, the recovery of over $4.3 million, and the dismantling of 1,442 malicious infrastructures, including IPs, domains, and servers. Investigations revealed that these scams were responsible for financial losses exceeding $45 million, affecting 1,247 victims across Africa and beyond. ([interpol.int](https://www.interpol.int/News-and-Events/News/2026/Major-operation-in-Africa-targeting-online-scams-nets-651-arrests-recovers-USD-4.3-million?utm_source=openai)) The success of Operation Red Card 2.0 underscores the escalating threat posed by organized cybercrime syndicates and highlights the critical importance of international collaboration in combating these pervasive threats. The operation also emphasizes the need for continuous vigilance and proactive measures to protect individuals and businesses from evolving cyber fraud schemes.
5 months ago
Kill Chain
Unveiling the 2026 Tax Preparation Firm Phishing Scheme by Matthew Akande
Between June 2016 and June 2021, Matthew A. Akande, a Nigerian national residing in Mexico, orchestrated a cyber intrusion targeting Massachusetts tax preparation firms. Utilizing phishing emails embedded with Warzone RAT malware, Akande and his co-conspirators gained unauthorized access to sensitive client data, including personally identifiable information (PII) and prior tax records. This stolen information was then used to file over 1,000 fraudulent tax returns, seeking more than $8.1 million in refunds. The illicit proceeds, totaling over $1.3 million, were funneled through U.S. bank accounts and partially transferred to associates in Mexico. ([justice.gov](https://www.justice.gov/usao-ma/pr/nigerian-man-sentenced-eight-years-prison-computer-intrusion-and-theft?utm_source=openai)) This case underscores the persistent threat posed by sophisticated phishing attacks and the exploitation of remote access tools in financial fraud schemes. The incident highlights the critical need for robust cybersecurity measures within tax preparation firms to safeguard client data against such intrusions.
5 months ago
Kill Chain
Fulton County 2026: FBI's Controversial Election Document Seizure
In January 2026, the FBI conducted a raid on Fulton County's election offices in Georgia, seizing ballots and election-related documents from the 2020 presidential election. The operation, overseen by Director of National Intelligence Tulsi Gabbard, was based on allegations of record-keeping deficiencies and potential vote manipulation. However, these claims had been previously investigated and debunked by state officials. The raid has raised significant concerns about federal overreach and the integrity of election processes. ([apnews.com](https://apnews.com/article/9dfecd778c09134e9aa0bba2848718f5?utm_source=openai)) This incident underscores the ongoing challenges in balancing election security with federal authority, highlighting the need for clear protocols and transparency to maintain public trust in the electoral system.
5 months ago
Kill Chain
Stop Active Cloud Data Exfiltration
Aviatrix Breach Lock helps teams instantly identify what data is leaving the environment, from which workload, and where it’s going — during an active breach.
Looking for threats in a different sector?
Browse All Threat Reports