The Internet Crime Complaint Center (IC3) is reporting a major spike in financial account takeovers in 2025, with the attackers commonly posing as either bank staff or law enforcement (or both) to gain the trust of victims.
A TikTok hack that allows for account takeovers with just one click on a malicious link has been discovered by security researchers with Microsoft, and at least one hacker has already popped up on the dark web claiming to have stolen the data of over a billion users.
Social media accounts belonging to Disneyland were compromised by an unknown party and used to post crude and offensive messages during a brief account takeover.
The spear phishing campaign is unique in that the account takeovers start with smaller known contacts of the real target and use existing email conversations to work their way into the victim’s confidence.