YMCO Fake Jobs Turned Personal Bank Accounts Into a Cash-Out Service
Korniev’s guilty plea exposes how YMCO recruited job seekers to forward stolen bank funds. The warning sign was the work: using a personal account.
News desk
Security incidents, exploited vulnerabilities, breach reports, malware campaigns, and urgent patch notes arranged for fast daily scanning.
October 24, 2026
Korniev’s guilty plea exposes how YMCO recruited job seekers to forward stolen bank funds. The warning sign was the work: using a personal account.
Talos traces real event details, altered poster QR codes and a live Google sign-in relay. Verify the invitation’s destination before entering account data.
CloudSEK links seven fake npm AI SDKs to a Windows RAT. The install hook, not the apparent client, drops a console-host lookalike before import.
New BlueKit research tracks subscription phishing tools. Its remote-browser technique explains why account recovery needs session checks, not just a new password.
SANS traced fake payment and DHL PDFs to scripts that display a decoy document while installing Action1. Check what ran before treating the agent…
BBC finds shopping searches and detailed customer profiles in stolen ASOS data. The company describes employee impersonation; platform claims remain distinct.
Unit 42 traced a fake Dubai Airports job test that ran malware when a Visual Studio project opened, then used GitHub for commands and…
Ukraine’s Cyberpolice warns about fake police calls demanding transfers or cash for relatives. Personal details do not prove the caller’s identity.
Ukraine police describe about 300 money mules and alleged insider help bypassing card blocks. The UAH 127 million turnover is separate from confirmed losses.