US Justice Department disrupts Myanmar-based scam operation.

Summary

By the CyberWire staff

US Justice Department disrupts Myanmar-based scam operation.

The US Justice Department has seized a web domain used by the Tai Chang scam compound in Myanmar, the Record reports. The website, tickmilleas[.]com, spoofed the legitimate forex platform TickMill to trick victims into depositing their funds.

The Justice Department stated, "According to the affidavit filed in support of the seizure, the tickmilleas.com domain directed users to download mobile applications linked to the scam from Google Play and the Apple App Store. The FBI notified Google and Apple of the fraudulent apps, and several of the applications have been voluntarily removed. Additionally, also announced today, based on information provided by the FBI about Tai Chang scam compound, Meta identified and voluntarily removed more than 2,000 accounts from their network of social media platforms."

Data secured, AI unlocked

New research from PwC shows AI models trained on tokenized patient data delivered nearly twice the data model accuracy compared to models using masked data. More accurate models can lead to better patient outcomes. Join the webinar to learn how.

OpenAI discloses Mixpanel breach.

OpenAI has shared details of a data breach affecting a third-party vendor, product analytics company Mixpanel. Mixpanel initially disclosed the security incident in a vague blog post the night before Thanksgiving, stating that the company executed its incident response processes after detecting a smishing campaign. The company added, "If you have not heard from us directly, you were not impacted."

OpenAI said in its own blog post, "The incident occurred within Mixpanel’s systems and involved limited analytics data related to some users of the API. Users of ChatGPT and other products were not impacted." The company has since removed Mixpanel from its production services.

The full scope of the breach is unclear. TechCrunch says Mixpanel hasn't responded to questions about the breach.

Universities confirm Oracle EBS compromises.

The University of Pennsylvania and the University of Phoenix both confirmed falling victim to a zero-day hacking campaign that targeted Oracle’s E-Business Suite (EBS), SecurityWeek reports. The University of Phoenix (UoPX) discovered the breach on November 21st after the Clop extortion gang listed the school on its leak site. UoPX found the attackers may have stolen names, contact details, dates of birth, Social Security numbers, and bank account information. Penn is notifying affected individuals directly, and hasn't publicly disclosed the types of information that were breached.

Notes.

Today's issue includes events affecting , and Myanmar the United States.

Attacks, Threats, and Vulnerabilities

Velociraptor Misuse, Pt. II: The Eye of the Storm (Huntress) Huntress reports an uptick in threat actors abusing the Velociraptor open-source DFIR tool, linked to incidents involving WSUS exploitation, VS Code tunnels, and more.

DIANNA Explains 4: Nimbus Manticore—Monstrous Malware (Deep Instinct) Join DIANNA, the only GenAI assistant designed to explain unknown, never-before-seen threats, in this breakdown of an Iran-backed attack that Deep Instinct caught on day one, even while it evaded other vendors for weeks, spread across networks, and accessed valuable data.

Legislation, Policy, and Regulation

Hassan and Cornyn bring in bipartisan bill to keep state and local cyber grant program alive (Industrial Cyber) Senators Hassan and Cornyn bring in a bipartisan bill to keep the state and local cyber grant program alive.

Litigation, Investigation, and Law Enforcement

Korea arrests suspects selling intimate videos from hacked IP cameras (BleepingComputer) The Korean National Police have arrested four individuals suspected of hacking over 120,000 IP cameras across the country and then selling stolen footage to a foreign adult site.

Industry Events

For a complete running list of events, please visit the Event Tracker.

Events

AWS re:Invent 2025 (Las Vegas, Nevada, USA, Dec 1 - 5, 2025) AWS re:Invent is a learning conference hosted by AWS for the global cloud computing community. The in-person event features keynote announcements, training and certification opportunities, access to more than 2,000 technical sessions, the Expo, after-hours events, and so much more.

TRUSTECH 2025 (Paris, France, Dec 2 - 4, 2025) This international event is the go-to place for all things payments, digital identity, cybersecurity, and fintech. With over 200 exhibitors, 100+ speakers, innovation awards, networking opportunities, and exclusive content, it’s the perfect place to discover what’s next in trusted technologies.

CyberMarketingCon 2025 (Austin, TX, USA, Dec 7 - 10, 2025) CyberMarketingCon will be held December 7-10 in bustling downtown Austin, Texas. Come to learn, network, and enjoy what this beautiful, unique city and your amazing fellow attendees have to offer.

Gartner Identity & Access Management Summit 2025 (Grapevine, Texas, USA, Dec 8 - 10, 2025) Join us at the premier conference for IAM leaders and architects to tackle priorities like IAM program management, automation, identity threat detection and response (ITDR), cybersecurity and privacy, and identity governance and administration (IGA) in an increasingly complex environment.

Sponsor & Support

Grow your brand, generate leads, and fill your funnel.

With the industry’s largest B2B podcast network, popular newsletters, and influential readers and listeners all over the world, companies trust the CyberWire to get the message out. Learn more.

Daily Briefing for 12.03.25

Top stories.

US Justice Department disrupts Myanmar-based scam operation.

OpenAI discloses Mixpanel breach.

Universities confirm Oracle EBS compromises.

Notes.

Attacks, Threats, and Vulnerabilities

Legislation, Policy, and Regulation

Litigation, Investigation, and Law Enforcement

Events