Hey team! 👋 It's been a bit quiet on the news front over the last 24 hours, but we've still got some important updates on a major cybercrime takedown, ongoing infostealer campaigns, and a significant data privacy fine. Let's dive in:
Europol Disrupts Massive SIM Farm Network 🛡️
- Europol, in 'Operation SIMCARTEL', has dismantled a sophisticated cybercrime-as-a-service (CaaS) platform operating SIM farms globally.
- The operation led to seven arrests, seizure of 1,200 SIM box devices containing 40,000 active SIM cards, five servers, and significant financial assets.
- This network enabled the creation of over 49 million fake online accounts, facilitating phishing, smishing, investment fraud, and other crimes across more than 80 countries.
📰 The Hacker News | https://thehackernews.com/2025/10/europol-dismantles-sim-farm-network.html
TikTok Videos Push Infostealers via ClickFix Attacks ⚠️
- Cybercriminals are actively using TikTok videos, disguised as free activation guides for popular software like Windows and Spotify, to spread information-stealing malware.
- The campaign leverages a "ClickFix" social engineering technique, tricking users into executing malicious PowerShell commands as an administrator.
- This script downloads Aura Stealer, which then exfiltrates sensitive data including browser credentials, authentication cookies, and cryptocurrency wallet information.
🤖 Bleeping Computer | https://www.bleepingcomputer.com/news/security/tiktok-videos-continue-to-push-infostealers-in-clickfix-attacks/
Experian Fined for Mass Data Collection Violations 🔒
- Experian Netherlands has been hit with a EUR 2.7 million ($3.2 million) fine by the Dutch Data Protection Authority (AP) for multiple GDPR violations.
- The company unlawfully collected personal data from various public and private sources, including the Chamber of Commerce and telecom/energy companies, without informing individuals or obtaining consent.
- This data was used to generate credit scores, which adversely affected individuals' ability to secure services or pay installments, highlighting critical data privacy breaches.
🤖 Bleeping Computer | https://www.bleepingcomputer.com/news/legal/experian-fined-32-million-for-mass-collecting-personal-data/
#CyberSecurity #ThreatIntelligence #Cybercrime #Europol #SIMFarm #Malware #Infostealer #TikTok #SocialEngineering #DataPrivacy #GDPR #Experian #InfoSec