At a glance.
- Ingram Micro confirms ransomware attack.
- Spanish police shut down investment scam operation.
- Brazil arrests suspect in $140 million bank hack.
Ingram Micro confirms ransomware attack.
California-based IT giant Ingram Micro has confirmed that it sustained a ransomware attack that disrupted its ability to process and ship orders. BleepingComputer reports that the attack occurred last Thursday and involved the SafePay ransomware. The publication cites sources as saying the company was breached through its GlobalProtect VPN platform.
The SafePay ransomware gang has claimed more than 220 victims since its emergence in November 2024. BleepingComputer notes that the group "has been previously observed breaching corporate networks through VPN gateways using compromised credentials and password spray attacks."
Spanish police shut down investment scam operation.
Spanish law enforcement agencies have shut down a criminal network that was launching investment scams from call centers in Barcelona. The police arrested 21 suspects as part of the operation. The crooks allegedly made more than €10 million (US$11.7 million) over several years.
The Spanish National Police said in a press release, "The criminal group used psychological manipulation techniques to lure their victims into a spiral of financial contributions, taking advantage of their emotional weaknesses. First, they established what the criminal group called an 'emotional bond,' through which they gained the victim's trust and gradually encouraged them to make larger financial transfers, in a process they called 'burning their accounts.'"
Brazil arrests suspect in $140 million bank hack.
Brazilian police have arrested a suspect in a hack that led to the theft of $140 million from several banks last week, SecurityWeek reports. The hackers targeted financial technology software provider C&M, which connects financial institutions to Brazil’s central bank to enable the country's PIX payment infrastructure. The arrested suspect is a C&M employee who allegedly sold his credentials to the hackers, then took an additional payment to execute commands within C&M's systems.
