Yuriy Rybtsov, a Ukrainian hacker known as "MrICQ," was arrested in Italy and extradited to the U.S. for his role in the Jabber Zeus cybercrime group. The gang stole millions from businesses using a customized ZeuS trojan that intercepted banking credentials and facilitated money laundering through recruited mules. Rybtsov's arrest follows a long investigation into the group's operations and their notorious methods.

Chinese state-sponsored hackers used Anthropic's AI tool, Claude, to automate cyberattacks on around 30 organizations worldwide, succeeding in several breaches. They tricked the AI into bypassing security protocols by framing malicious tasks as routine cybersecurity work. This marks a significant shift in cybercrime, highlighting the need for enhanced AI-driven defenses.

Two British teens, Thalha Jubair and Owen Flowers, have pleaded not guilty to charges related to a cyberattack on Transport for London in August 2024, which caused significant damage and compromised customer data. They are also linked to other international hacking incidents, including attacks on U.S. healthcare networks.

Hackers compromised 80 CCTV systems across India, stealing over 50,000 clips and selling them for profit on porn channels. The attackers exploited weak passwords and used various hacking tools to access cameras in hospitals, schools, and homes. Key members of the operation were arrested, facing charges under cyber terrorism laws.

Russian law enforcement has successfully shut down 100 servers associated with the notorious NoName05716 hacking group, known for its DDoS attacks on various targets. This operation reflects ongoing efforts to combat cybercrime and disrupt malicious online activities in the region.

The Scattered Spider ransomware group has decided to cease operations due to intense law enforcement pressure following significant cyberattacks on companies like Jaguar Land Rover and Salesforce. In a farewell message, they apologize to their victims and hint at a possible return with a new venture called "ShinySp1d3r RaaS."

Ethan J. Foltz, a 22-year-old from Oregon, has been arrested for allegedly operating "Rapper Bot," a large botnet used for launching DDoS attacks, including a significant attack that disrupted Twitter/X in March 2025. Federal investigators tracked Foltz's activities through financial records and chat logs, revealing that he and a co-conspirator extorted online businesses using the botnet's capabilities, which could generate massive amounts of junk data per second. Foltz now faces criminal charges that could lead to a maximum of 10 years in prison if convicted.

A new HBO Max documentary series titled "Most Wanted: Teen Hacker" focuses on the cybercrimes of Julius Kivimäki, a Finnish hacker convicted of leaking patient records and extorting a psychotherapy clinic. The four-part series details Kivimäki's criminal activities from a young age, including a notorious DDoS attack against gaming platforms and his eventual arrest and sentencing for extortion. The series aims to shed light on the real-world impacts of cybercrime through Kivimäki's destructive exploits.

The U.S. government has seized approximately $774 million in cryptocurrency linked to North Korean cybercriminal activities. This operation is part of ongoing efforts to disrupt the funding of illicit activities supported by the North Korean regime, particularly through hacking and ransomware schemes.

Two teenagers have been arrested in the UK for their involvement in the Scattered Spider hacking group, which is linked to a planned cyberattack on Transport for London in 2024. The arrests follow a broader crackdown on cybercrime targeting critical infrastructure. Authorities are emphasizing the importance of cybersecurity in protecting public services against such threats.