Cedric Pernet

⚠️📢 Microsoft and Health-ISAC seized domains linked to YAM Store, CoGUI and Iron Man, services blamed for over 1 billion malicious messages targeting 75,000+ organizations. Listen/Read: hackread.com/microsoft-se... #Microsoft #Phishing #Cybercrime #Scam #Fraud

“Microsoft、中国系国際サイバー犯罪ビジネスを解体　警察庁などと連携” htn.to/2Si9jyPeCY

Un milliard de mails et de SMS piégés : Microsoft neutralise un empire chinois des arnaques en ligne www.01net.com/actualites/p...

The CoGUI phishing kit has made Japan one of the most targeted countries in our data based on campaign volume. Threat actors use it to impersonate well-known Japanese and international companies, stealing usernames, passwords, and payment data.

Microsoft and Proofpoint executed a CoGUI phishing kit takedown, seizing domains from YAM Store and Iron Man after 1B scam messages hit 75,000 firms. #CoGUIPhishingKit #YAMStore #IronMan #Microsoft #Proofpoint #Cybercrime #Phishing

Microsoft and Japan's Police Begin Takedown of Scam Marketplace Services Microsoft's Digital Crimes Unit calls the marketplace YAM Store, CoGUI, and Iron Man; the volume is the point.

Microsoft démantèle trois kits de phishing derrière plus d'un milliard de messages frauduleux #cybersecurite #Microsoft #phishing

Paragon says its spyware "system is rendered ineffective in about 12 hours" without updates, and I immediately think of how Russian authorities still found a way to use Cellebrite against an activist after the company cancelled the contract. www.wired.com/story/the-se...

De l'efficacité de la coopération internationale : sur enquête initiée par les autorités 🇫🇷 le #FBI vient de mettre hors d'état de nuire les sites de la mouvance #NudeLeaksTeens 2 administrateurs interpellés en 🇫🇷 Les victimes invitées à se signaler

#SaveTheDate 🚨🚨 If you're also wondering when the next #PIVOTcon27 is, remember: we're pivoting back to Málaga on 5–7 May 2027 🇪🇸🏖️ Registration opens soon! #CTI #ThreatIntel #ThreatResearch

With student demonstrations sweeping across France, NewsGuard identified 4 false claims based on misrepresented videos to exaggerate the scale and violence of the protest movement. www.newsguardrealitycheck.com/p/in-france-...

In July 2026, a China-aligned threat actor, TA419, ran credential-phishing campaigns impersonating prominent economists and AI policymakers, including a former White House Office of Science & Technology Policy leader. More info: www.proofpoint.com/us/blog/thre...

"Domain parking in 2026: what changed and what to do now" snapshot.internetx.com/en/domain-pa...

Je vous parle dans cet article pour @pixelsfr.bsky.social de l'histoire incroyable de ce jeune Français devenu, par amour pour un influenceur TikTok, l’indispensable petite main des arnaqueurs au « refund » www.lemonde.fr/pixels/artic...

NEW: A politician investigating Pegasus spyware… had their phone hacked with Pegasus multiple times. The compromises came days ahead of key meetings of the spyware inquiry Story with @lhn.bsky.social

Adint ⤵️ www.sekoia.com/blog/sold-to...

APT28 ⤵️ blog.sekoia.io/apt28-an-evo...

Definitely worth a read : Don't Fear the Repo: UNK_DeadDrop #Phishing Campaign Targets #Developers to Steal #Cryptocurrency www.proofpoint.com/us/blog/thre... #proofpoint #cybercrime #datatheft #northkorea

Mon caissier est un esclave : 43 travailleurs nigérians sans-papiers ont été exploités sans rémunération dans des Franprix, Super U, G20 de Paris et de la région parisienne. Une enquête préliminaire pour traite d’êtres humains a été ouverte. Une info @liberation.fr www.liberation.fr/societe/des-...

Web history disappears when it can’t be preserved. Today, many publishers are blocking the Wayback Machine from archiving parts of the public web, putting decades of digital history at risk. Tell publishers: don’t block the #WaybackMachine Sign the petition ➡️ www.savethearchive.com/newsleaders/

Derrière les fuites de données, une cyberdélinquance française, jeune et en quête d’« affirmation de soi »

New, by me: Scammers are abusing a legitimate internal Microsoft account, used for sending critical account alerts and MFA codes to users logging in, to send spam and scam emails. We first saw a flood of these emails last week, but anti-spam project Spamhaus says this has been going on for months.

Since the beginning of 2026, at least four landslides are reported to have killed hundreds of people at the Rubaya mines in the Democratic Republic of Congo (DRC), a major global source of coltan. Coltan is widely used in smartphones, laptops and e-vehicles. www.youtube.com/shorts/RZ_PH...

Poland’s domestic intelligence service said attackers breached water treatment facilities in five towns in 2025, in some cases gaining access to industrial control systems that could have disrupted water supplies.

Just heard @cloudflare.social kicked 1100 people out. A 20% layoff. Fxxxk !

All German .de domains went down on Tuesday due to a DNSSEC failure at the country's domain registrar status.denic.de/pages/incide...

@crowdstrike.bsky.social extends Falcon OverWatch to @microsoft.com #Endpoint Customers - ittech-pulse.com/news/crowdst... #crowdstrike #microsoft #detection #DFIR

If you're going to extort millions from major retailers, maybe don't pose for Snapchat in a diamond-encrusted "HACK THE PLANET" necklace. A 19-year-old accused of being part of the Scattered Spider cybercrime gang has been arrested at Helsinki Airport. He now faces extradition to the USA.

'What to do if your child is being sextorted: A therapist’s guide for parents' new on Bitdefender www.bitdefender.com/en-us/blog/h... #sextortion #cybersecurity #parenting @gate15.bsky.social

Such a good news ! Made my day ! #cybercrime #europol #bust #fraud #financialfraud #cryptocurrency #cryptocurrencies www.europol.europa.eu/media-press/...

QAnthropic restreint le lancement de son dernier modèle d’IA pour prévenir les risques de cyberattaques www.lemonde.fr/pixels/artic...

Notepad ++ hijacked by state sponsored group, updates mechanism hijacked to spread fake update to a very specific set of selected targets notepad-plus-plus.org/news/hijacke...

For those who read our piece about crypto scam compound whistleblower Red Bull, I've verified that this is his real Bluesky account below. Thank for your incredible courage and all your work to achieve justice, @mohammadmuzahir02.bsky.social.

Can’t stop, won’t stop: TA584 innovates initial access www.proofpoint.com/us/blog/thre... #ClickFix #cybercrime #TA584 #ThreatActor #SocialEngineering #EMail #Tsundere #IAB

Fell on this nice #malware analysis and noticed I did not know about "anti-termination signal handling", so super interesting for me - evilcel3ri.github.io/2026/01/16/s... #threatintel #CTI #cybercrime

Cet article est un must-read qui nous éclaire sur les problématiques liées à l' #AdInt

FBI FLASH: North Korean Kimsuky Actors Leverage Malicious QR Codes in Spearphishing Campaigns Targeting U.S. Entities www.ic3.gov/CSA/2026/260... #cybersecurity @gate15.bsky.social

404 Media has obtained material that explains how two surveillance systems ICE recently purchased, work. One can track phones without a warrant and follow their owners home or to their employer. @evystadium.bsky.social has more. Scoop by @josephcox.bsky.social: www.404media.co/inside-ices-...

"Among the government bodies listed on documents seen by Intelligence Online are 🇵🇰Pakistan and its defence ministry, 🇮🇩Indonesia's State Intelligence Agency, the 🇲🇲Myanmar Police Force, 🇲🇽Mexico's army and navy and 🇻🇪Venezuela's defence ministry." www.intelligenceonline.com/americas/202...

Common mistake for some CTI people: flagging a web provider's parking IP addresses as malicious. Please check carefully. This can lead to total nonsense attribution/pivots when unverified. #fail #ThreatIntelligence

Brian Krebs identified the real-world identity of Rey, a key administrator of Scattered Lapsus$ Hunters, a hacking group blamed for dozens of high profile hacks. The hacker, identified as a Jordanian teenager, agreed to be interviewed after Krebs tracked him down and contacted his father.

NEW: Myanmar has made a big show of destroying the notorious KK Park scam compound—even publishing a video of a steamroller driving over thousands of phones But new images show buildings are only destroyed in one area. Hundreds are left untouched and experts say the crackdown is mostly propaganda

Le géant de l’informatique HP annonce la suppression de 4 000 à 6 000 emplois d’ici 2028 du fait de l’IA

Charming Kitten exposed: spy unit led Iran’s surveillance for deadly plots - content.iranintl.com/secret-spy-u...

Incroyable histoire dévoilé par @theguardian.com : "Rise of the ‘porno-trolls’: how one porn platform made millions suing its viewers" www.theguardian.com/society/ng-i...

My thought of the day: all registrars should rethink their registration processes, so that automatic registration cannot be done that easily by cybercriminals. Some of them register hundreds of domains every day... #fightautomation #cybercrime