CuraSec

tag: Sentencing · 2 items

2026-10-20 · BleepingComputer · source ↗ #spearphishing#financial-fraud#sentencing
  • Engineer — Skip
  • SOC/IR — Learn: This case documents a multi-year spearphishing campaign targeting tax preparation firms, offering a concrete example of credential-theft-to-financial-fraud kill chain useful for triage context in similar sectors.
  • Leader — Skip
2026-07-17 · BleepingComputer · source ↗ #scattered-spider#cybercrime#sentencing
  • Engineer — Skip
  • SOC/IR — Learn: Sentencing of key Scattered Spider members provides closure on a high-profile social-engineering and ransomware campaign; useful context for briefings on this threat group’s tradecraft, though no new IOCs or detections arise from the verdict.
  • Leader — Learn: The 5.5-year sentences for the TfL intrusion reinforce the legal accountability narrative useful for board discussions on insider/social-engineering risk; no immediate action required but worth noting as a governance and deterrence data point.