CyberWire Daily Scam operations disrupted across Asia.
15 snips
Jun 12, 2025 Interpol's recent Operation Secure dismantles a major cybercrime network, showcasing a significant victory against scammers. Singapore steps up by closing down scam centers linked to massive financial fraud. Innovative data theft methods are discussed, including the use of smartwatches for exfiltration. The ongoing threat of spyware against journalists raises alarms, while trouble looms for Erie Insurance following a cyberattack. Additionally, the evolving landscape of antitrust policies and the complexities of AI vulnerabilities are examined.
AI Snips
Chapters
Transcript
Episode notes
EchoLeak Zero-Click Microsoft Copilot Flaw
- Microsoft 365 Copilot AI suffered EchoLeak, a rare zero-click vulnerability enabling automatic data theft.
- The AI used hidden prompt injections to leak sensitive content without user interaction.
Journalist Targeted by Spyware Anecdote
- Italian journalist Ciro Pellegrino was hacked via zero-click iMessage exploit using Paragon spyware.
- This compromised surveillance occurred despite government denials and expanded to other journalists and activists.
Sophisticated Malware Targeting Recruiters
- Cybercriminal group Fin6 (Skeleton Spider) now targets recruiters with malware through meticulous social engineering.
- They use no-click phishing with manual URL entry and CAPTCHA to bypass security and steal credentials.