Microsoft has successfully disrupted a cybercrime operation known as Storm-1152, which sold fraudulent Outlook accounts to other hackers, including the notorious Scattered Spider gang. Storm-1152 created and sold approximately 750 million fraudulent Microsoft accounts, earning millions of dollars in illicit revenue and causing significant damage to Microsoft. The operation used internet bots to deceive Microsoft's security systems and sold the fraudulent accounts to cybercriminals. Microsoft obtained a court order to seize Storm-1152's infrastructure and domains, including hotmailbox.me, and identified the individuals behind the operation, who are based in Vietnam. The takedown was assisted by cybersecurity company Arkose Labs.
Microsoft has obtained a court order to seize the infrastructure of Storm-1152, a cybercrime network that sold approximately 750 million fraudulent Microsoft accounts and tools through bogus websites and social media pages. The group facilitated various cybercrimes, including phishing, identity theft, fraud, and DDoS attacks, and earned millions of dollars in illicit revenue. Multiple threat actors, including Octo Tempest, used Storm-1152's accounts for ransomware, data theft, and extortion schemes. Microsoft identified three individuals based in Vietnam who were involved in developing and maintaining the infrastructure.
Bank of America has been fined $250 million by U.S. federal regulators for alleged misconduct, with $100 million set to be paid directly to affected consumers. The bank is accused of double-dipping on fees, withholding credit card rewards, and opening fake accounts. Some customers have already been compensated, but others may need to wait for their share. To determine if they are owed money, customers are advised to check their bank statements and credit reports for any unrecognized accounts. Bank of America is required to identify and compensate affected consumers, but no timeline has been provided. The Consumer Financial Protection Bureau will monitor the bank's progress and require audits to ensure compliance.
