Cybersecurity — May 10, 2025

### Major Stories: **FakeUpdates Malware Campaigns Escalate** A sophisticated, multi-stage malware campaign involving the FakeUpdates malware is dominating the global threat landscape. It combines familiar malware strains like Agent Tesla and XLoader with advanced evasion techniques. FakeUpdates remains the most prevalent malware, affecting 6% of organizations globally, with the education sector being the hardest hit. This campaign begins with phishing emails containing malicious attachments to deliver a powerful assault chain. [Read more](https://blog.checkpoint.com/research/april-2025-malware-spotlight-fakeupdates-dominates-as-multi-stage-campaigns-blend-commodity-malware-with-stealth/) **LockBit Ransomware Group Breached** The LockBit Ransomware-as-a-Service group has been hacked, resulting in the exposure of sensitive data. This includes private communications, Bitcoin addresses, and detailed information about the group's operations. The group has attempted to downplay the breach, but it remains a significant incident revealing the group's internal workings. [Read more](https://www.helpnetsecurity.com/2025/05/09/lockbit-hacked-data-leaked/) **US and Netherlands Dismantle Major Botnets** In a joint operation, the US and Netherlands law enforcement have dismantled Anyproxy and 5Socks, botnets exploited by hackers for residential proxies. This operation included charges against Russian and Kazakhstani nationals associated with these botnets, showcasing international collaboration in cyber law enforcement. [Read more](https://therecord.media/5socks-anyproxy-botnets-takedown-russians-kazakhstani-charged) **Google Chrome Uses AI for Scam Protection** Google has announced the integration of AI-driven methods within Chrome to block tech support scam websites. Utilizing the Gemini Nano AI model, Chrome will offer real-time detection and prevention capabilities, enhancing user protection against fraud. [Read more](https://www.malwarebytes.com/blog/news/2025/05/google-chrome-will-use-ai-to-block-tech-support-scam-websites) **eXch Cryptocurrency Mixer Shutdown** German authorities have shut down the eXch cryptocurrency mixing service, allegedly involved with laundering over $1.9 billion. This operation underscores significant law enforcement actions against crypto-enabled financial crimes. [Read more](https://therecord.media/exch-cryptocurrency-mixer-germany-takedown) ### You May Also Be Interested In... - **Quantum Encryption's Slow Adoption**: Despite the looming threat of quantum computers, only 5% of businesses have adopted quantum encryption. [Read more](https://www.scworld.com/brief/quantum-encryption-adoption-still-severely-lacking) - **CVE-2025-31324**: Chinese hackers exploit a critical SAP NetWeaver vulnerability. [Read more](https://securityaffairs.com/177656/hacking/a-cyber-attack-briefly-disrupted-south-african-airways-operations.html) - **Florida Bill on Encryption Backdoors Fails**: The state rejected a bill wanting encryption backdoors in social media. [Read more](https://techcrunch.com/2025/05/09/florida-bill-requiring-encryption-backdoors-for-social-media-accounts-has-failed/) - **CISA Highlights IoT Vulnerabilities**: Updated Known Exploited Vulnerabilities catalog includes several GeoVision IoT bugs. [Read more](https://www.scworld.com/brief/updated-cisa-vulnerabilities-catalog-includes-geovision-iot-bugs) Stay informed about these developments as they might impact your organization's cybersecurity posture.

A clearer view of today.

Your briefing

A clearer view of today.

Your briefing

Make room for a smarter morning.