Hackread.com reports that the DOJ has charged MonsterCloud CEO Zohar Pinhasi with wire fraud and conspiracy to commit wire fraud. Prosecutors say he claimed the company could recover encrypted files without paying a ransom, but instead paid attackers for decryption keys and charged victims much higher fees. The FBI and CISA advise against paying ransoms, since payment does not guarantee files will be recovered or stolen data will not be leaked.
Source: hackread.com
…
KnowBe4 says attackers are abusing trusted services like DocuSign, SharePoint, Adobe Sign, Dropbox and Google Drive to send phishing emails that look legitimate. In its analysis of 544,000 threat emails between June and August 2026, LOTS techniques accounted for 53,000 emails, with DocuSign and QuickBooks making up nearly two-thirds of that volume. The post says these emails can bypass security gateways because they come from real platforms. Windows users and small offices should be careful with document-share and payment messages, even when the sender looks trustworthy.
Source: blog.knowbe4.com
The CyberScoop reports that authorities have indicted MonsterCloud owner Zohar Pinhasi, accusing him of charging ransomware victims inflated fees while claiming to use proprietary recovery tools that did not exist. Prosecutors say he paid cybercriminals to recover data without telling clients, and that the company drew in hundreds of clients with false promises. Windows users and small offices hit by ransomware should be careful about who they trust for recovery and verify any claims before paying.
Source: cyberscoop.com
Graham Cluley reports that UK losses from hacked email and social media accounts have risen by 417%, with scammers posing as your friends to sell tickets to gigs that do not exist. The post says this is part of a big rise in cyber scams stealing social media accounts. Home users should be careful with messages from friends that ask for money or tickets, and check requests through another channel before paying.
Source: grahamcluley.com
