fraud6 articles
Florida 'Ransomware Recovery' Boss Charged With Quietly Paying Hackers While Billing Victims $19M for Fake Expertise
Zohar Pinhasi, owner of Florida-based cybersecurity firm MonsterCloud, has been charged with wire fraud by the U.S. Department of Justice for allegedly deceiving ransomware victims by secretly paying ransoms to cybercriminals while falsely claiming to use proprietary decryption tools. Pinhasi reportedly charged clients over $19 million in total, far exceeding the $8 million he actually paid to ransomware attackers, pocketing the substantial difference as profit. If convicted on all counts, he faces up to 20 years in prison per charge.
Ransomware 'Rescuer' Allegedly Just Paid the Criminals and Pocketed a $11M Markup
Zohar Pinhasi, owner of MonsterCloud, has been charged with wire fraud for deceiving ransomware victims by claiming his company could decrypt their data using proprietary tools, when in reality he was secretly paying ransoms to attackers. He allegedly paid over $8 million in ransoms while charging clients more than $19 million, in one case paying $8,200 to a ransomware group but billing the victim $150,000. Pinhasi now faces wire fraud and wire fraud conspiracy charges that could result in decades in prison.
Fake Cops, Real Losses: FBI Says Government Impersonation Scams Topped $1.6 Billion in 19 Months
Scammers impersonating law enforcement and government officials have cost US victims over $1.6 billion since January 2025, with nearly 61,000 complaints filed with the FBI's IC3 over a 19-month period. The scams typically involve unsolicited calls threatening arrest or legal consequences unless victims make payments, with tactics ranging from fake criminal charges and missed jury duty fines to targeted schemes aimed at professionals, foreign nationals, and international students. The FBI has reminded the public that law enforcement agencies will never call individuals to demand payment or sensitive information.
Upbound Group's Data Breach Cost It $13 Million in Fake Lease Agreements
Texas-based consumer finance company Upbound Group disclosed in an SEC filing that a recent data breach, in which hackers obtained non-sensitive customer information, was used to facilitate fraudulent lease-to-own agreements. The incident resulted in approximately $13 million in fraudulent contract losses within its Acima segment during the second quarter of 2026. The company has notified law enforcement, engaged external cybersecurity experts, and considers the breach non-material, though its investigation remains ongoing.
Banks Still Treating MFA as Optional. Your Money Pays the Price.
The author recounts how their 84-year-old mother lost $30,000 to thieves who exploited her reused passwords and lack of multi-factor authentication (MFA) to access her bank accounts, retirement savings, and Gmail. Despite many banks and Google offering MFA, they make it optional rather than mandatory, prioritising user convenience and avoiding friction over customer security. The article argues that financial institutions should require stronger, phishing-resistant MFA — such as passkeys — by default across all platforms, as optional security measures leave the majority of users dangerously exposed.
1.4 Million Scam Accounts Taken Down in Southeast Asia Crackdown
In a coordinated operation called "Disruption Week," law enforcement agencies including the US Department of Justice and Royal Thai Police, alongside major tech companies such as Meta, Microsoft, and Google, dismantled scam networks operating out of Southeast Asia. The effort resulted in over 1.4 million social media and Microsoft accounts being disrupted, 63 arrests, and more than $3.8 million in cryptocurrency assets frozen. The targeted scam compounds, located in Cambodia, Laos, and Burma, had been trafficking workers under false pretenses and forcing them to carry out large-scale fraud operations against victims in the US and abroad.