CyberWire Daily

Just another day of scamming and jamming.

Dec 3, 2025
The DOJ dismantles a scam operation in Myanmar, revealing troubling ties to fraudulent investment apps. A Mixpanel breach impacts OpenAI, raising data security concerns. Phishing schemes targeting executives are on the rise, employing clever tactics for credential theft. India's airports face GPS jamming issues, while Kaiser Permanente settles a lawsuit over data tracking. An international effort is underway to establish guidelines for commercial spyware, highlighting evolving security challenges in the digital age.
Ask episode
AI Snips
Chapters
Transcript
Episode notes
INSIGHT

Law Enforcement Disrupts Myanmar Scam Domain

  • The DOJ seized a domain tied to a Myanmar scam center that spoofed a trading platform to steal cryptocurrency and funds.
  • Law enforcement placed a notice on the site as part of broader operations against Southeast Asian scam compounds.
INSIGHT

Analytics Firms Are Valuable Attack Targets

  • Mixpanel disclosed an incident with few details and OpenAI revealed customer developer-site data was stolen via Mixpanel.
  • The case highlights analytics vendors as high-value targets due to extensive user data collection.
INSIGHT

Executive-Focused Phishing Uses Multi-Stage Tricks

  • A phishing campaign faked a Cartier award, used password-protected ZIPs and a fake webmail page to steal creds and deliver malware.
  • Attackers then used an SVG-based click-fix chain to install Stealerium InfoStealer and exfiltrate browser and wallet data.
Get the Snipd Podcast app to discover more snips from this episode
Get the app