Threats Day: Cloud Bucket Hijacking, Windows LPE Chain, Global Fraud Bust + 17 More Stories
Summary: A global anti-fraud operation spanning 97 countries, codenamed First Light 2026 and run from January 15 to April 30, 2026, led to 5,811 arrests, the interception of $293 million in illicit assets, and the identification of over 142,000 victims. Separately, researchers disclosed Process Parameter Poisoning (P³), a code injection technique that stages shellcode in the Process Parameters structure without creating or suspending processes or threads.
What's compelling: INTERPOL counted more than 142,000 victims of social engineering scams in a single operation, and the P³ loader's advantage is that it triggers none of the common detection mechanisms built around suspended processes and threads.
Read the original at The Hacker News ↗
- Topics
- Phishing & Social Engineering
- Mentions
- CVE-2026-9181
- Related
- US disrupts North Korean campaign behind $400 million crypto theft Cyber Risks · Nov 14, 2026North Korea ‘s Crypto Theft Operations: DOJ Seizes $1.2 Billion and Disrupts Hacker Infrastructure Cyber Risks · Nov 13, 2026FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls Cyber Risks · Nov 13, 2026