ZeroFox Cyber Intelligence Daily Brief - February 24, 2025
|by Alpha Team
ZeroFox Cyber Intelligence Daily Brief - February 24, 2025
ZeroFox Intelligence collects, curates, and analyzes information derived from open and proprietary sources. Here is today’s daily roundup to give you and your clients an advantage over the adversary.
Brief Highlights
- Bybit Suffers Massive Theft of USD 1.4 Billion in Suspected DPRK-Sponsored Hack
- 215 Foreign Nationals Freed in Southeast Asia Scam Centre Bust
- Indictment Charges Two Brothers, Mayor's Assistant with Tax Fraud, Corruption, Money Laundering
Bybit Suffers Massive Theft of USD 1.4 Billion in Suspected DPRK-Sponsored Hack
Source: https://hackread.com/investigators-link-bybit-hack-north-korea-lazarus-group/
What happened: Bybit, one of the largest cryptocurrency exchanges, has suffered a massive theft of USD 1.4 billion in a cold wallet breach—which researchers are attributing to the North Korean state-sponsored Lazarus Group.
Why it matters: The scale of the cryptocurrency theft is very likely to impact many users who have invested their finances into the exchange. Moreover, the alleged involvement of state-sponsored actors in the hack also indicates that the stolen sum could be used for further illicit activities or campaigns to aid the state’s military and nuclear power. Scammers will also likely take advantage of the anxiety surrounding this situation and target vulnerable users with customer support scams to extort money.
215 Foreign Nationals Freed in Southeast Asia Scam Centre Bust
What happened: Thai and Cambodian police have rescued 215 foreign nationals who were trafficked and forced to work in scam centres during a raid at a building in Poipet, Cambodia,. The operation was part of a crackdown on illegal online activities across Southeast Asia.
Why it matters: The individuals trafficked and forced to work in scam centres are likely subjected to exploitation, abuse, and forced labor under harrowing conditions. People from countries like Thailand, Pakistan, India, Taiwan, and Indonesia—where they are more exposed to economic hardship, lack of awareness, and coercion—often get lured into working at scam centers with promises of stable pay. Once deceived, the victims are forced to conduct illegal online operations, where they are manipulated and controlled.
Indictment Charges Two Brothers, Mayor's Assistant with Tax Fraud, Corruption, Money Laundering
What happened: A federal grand jury returned a 32-count superseding indictment charging two siblings and their associate (East Cleveland mayor’s assistant) with multiple fraud, tax fraud, money laundering, and public corruption schemes.
Why it matters: All three defendants were charged with conspiracy to commit bribery concerning programs receiving federal funds, conspiracy to commit honest services wire fraud, and Hobbs Act conspiracy. From June 2020 to August 2023, the two siblings allegedly used deceptive schemes, including investment fraud and real estate transactions, to steal money–while the associate allegedly used their position for personal gains in exchange for favors. These deceptive actions not only resulted in financial losses for victims but also exploited critical systems meant to support people during difficult times.
DEEP AND DARK WEB INTELLIGENCE
BreachForums user miyak0: Well-regarded threat actor "miyak0" has advertised VPN access to an unnamed UK-based engineering and support services company on BreachForums.
VULNERABILITY AND EXPLOIT INTELLIGENCE
CVE-2025-24989: This improper access control vulnerability enables an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control. It has been mitigated in the service.
Affected products: Microsoft Power Pages
Tags: DIB, tlp:green