Cybercrime losses break the $20 billion mark
2026-04-07T20:51:56Z•58f8b3dae4181e0c7de13a24ef4f107fe7a64022ec92e6ec5faf65144729b2be
AI-enabled-phishingAPT28Acronis-MDRCloudflareComp-AI','SOC2','ISO27001','HIPAA','GDPR','OpenAI-safety-fellowyDHCP-manipulationDNS-manipulationFBIGRUGitHub-CopilotIC3MDR-for-MSPsOAuth-device-codeaccount-takeovercredential-theftcross-model-reviewcybercrimedevice-code-phishingfinancial-lossesmanaged-detection-responseopen-source-compliancephishingpost-quantumquantum-threatrouter-hijacking
What happened
Collection of security news (Apr 7, 2026): FBI IC3 reports record online-crime losses ($20.877B in 2025) driven largely by cyber-enabled fraud and phishing. UK NCSC attributes widespread router compromises to APT28 (likely GRU unit 26165) that alter DHCP/DNS settings to hijack and surveil internet traffic. Microsoft details an AI-enabled phishing campaign that abuses the OAuth Device Code flow (bypassing standard 15-minute protections) with automation and dynamic codes to enable large-scale account takeover. Cloudflare accelerated its post-quantum roadmap to 2029 after research narrowed the Q‑
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- helpnetsecurity
- Record identifier
- 58f8b3dae4181e0c7de13a24ef4f107fe7a64022ec92e6ec5faf65144729b2be
- Enrichment time
- 2026-04-07T20:51:56Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.