{"id":4514,"date":"2025-07-13T19:45:13","date_gmt":"2025-07-13T19:45:13","guid":{"rendered":"https:\/\/techtrendfeed.com\/?p=4514"},"modified":"2025-07-13T19:45:13","modified_gmt":"2025-07-13T19:45:13","slug":"information-temporary-hafnium-scattered-spider-hackers-arrested","status":"publish","type":"post","link":"https:\/\/techtrendfeed.com\/?p=4514","title":{"rendered":"Information temporary: Hafnium, Scattered Spider hackers arrested"},"content":{"rendered":"<p> <br \/>\n<\/p>\n<div id=\"content-body\">&#13;<\/p>\n<p>This week, worldwide cybersecurity legislation enforcement took motion in opposition to headline-making cybercriminals and state-sponsored menace actors.<\/p>\n<p>Italian authorities detained a person for allegedly working as a contractor for China&#8217;s Ministry of State Safety. He&#8217;s charged with stealing COVID-19 analysis and exploiting Microsoft Trade Server vulnerabilities.<\/p>\n<p>British police arrested 4 members of the Scattered Spider hacking group who allegedly partnered with the DragonForce <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.techtarget.com\/searchsecurity\/definition\/ransomware\">ransomware<\/a> group to conduct cyberattacks in opposition to main retailers.<\/p>\n<p>Additionally this week, whereas not the direct results of a legislation enforcement takedown, two ransomware teams introduced plans to shutter operations.<\/p>\n<p>Learn extra concerning the week&#8217;s takedowns and shutdowns.<\/p>\n<section class=\"section main-article-chapter\" data-menu-title=\"U.K. authorities arrest suspects linked to Scattered Spider cyberattacks\">\n<h2 class=\"section-title\"><i class=\"icon\" data-icon=\"1\"\/>U.Okay. authorities arrest suspects linked to Scattered Spider cyberattacks<\/h2>\n<p>The U.Okay.&#8217;s Nationwide Crime Company arrested 4 people &#8212; two 19-year-old males, one 17-year-old male and a 20-year-old feminine &#8212; in reference to cyberattacks in opposition to <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.cybersecuritydive.com\/news\/threat-actors-uk-retail-attacks-targeting-us\/748198\/\">retailers<\/a> Marks &amp; Spencer, Co-op and Harrods. Safety consultants imagine the suspects are linked to Scattered Spider, the cybercrime collective beforehand chargeable for <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.techtarget.com\/searchsecurity\/news\/366552775\/Okta-Caesars-MGM-hacked-in-social-engineering-campaign\">assaults on MGM Resorts and Caesars Leisure<\/a>.<\/p>\n<p>The suspects had been apprehended in West Midlands and London on expenses together with Laptop Misuse Act offenses, blackmail and cash laundering.<\/p>\n<p><a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.darkreading.com\/cyberattacks-data-breaches\/4-arrested-uk-marks-spencer-co-op-harrods-hacks\"><i>Learn the total story by Alexander Culafi on Darkish Studying<\/i><\/a><i>.<\/i><\/p>\n<\/section>\n<section class=\"section main-article-chapter\" data-menu-title=\"Chinese hacker arrested for COVID-19 research theft, Exchange attacks\">\n<h2 class=\"section-title\"><i class=\"icon\" data-icon=\"1\"\/>Chinese language hacker arrested for COVID-19 analysis theft, Trade assaults<\/h2>\n<p>Italian authorities and the FBI arrested Xu Zewei, a 33-year-old Chinese language nationwide allegedly concerned within the Hafnium hacking group&#8217;s operations. Xu was charged with stealing COVID-19 analysis from American scientists and <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.techtarget.com\/searchsecurity\/news\/252497972\/Timeline-of-Microsoft-Exchange-Server-attacks-raises-questions\">exploiting Microsoft Trade Server vulnerabilities<\/a> in 2020 and 2021, actions prosecutors claimed had been directed by China&#8217;s Ministry of State Safety.<\/p>\n<p>Arrested in Milan on July 3, Xu allegedly labored at Shanghai Powerock Community Co. Ltd., which prosecutors described as an &#8220;enabling&#8221; firm for state-sponsored hacking. A second suspect, Zhang Yu, stays at giant.<\/p>\n<p><a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.cybersecuritydive.com\/news\/suspected-contractor-for-chinas-hafnium-group-arrested-in-italy\/752533\/\"><i>Learn the total story by David Jones on Cybersecurity Dive<\/i><\/a><i>.<\/i><\/p>\n<\/section>\n<section class=\"section main-article-chapter\" data-menu-title=\"SatanLock announces sudden shutdown\">\n<h2 class=\"section-title\"><i class=\"icon\" data-icon=\"1\"\/>SatanLock publicizes sudden shutdown<\/h2>\n<p>SatanLock, a ransomware group that emerged in April, introduced its shutdown on Telegram and its Darkish Net leak website. The group eliminated all sufferer listings, leaving solely a message that mentioned, &#8220;SatanLock venture can be shut down &#8212; The recordsdata will all be leaked at the moment.&#8221;<\/p>\n<p>Regardless of its temporary existence, SatanLock compromised 67 organizations inside weeks of showing.<\/p>\n<p><a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.darkreading.com\/threat-intelligence\/satanlock-ransomware-group-shutdowns\"><i>Learn the total story by Kristina Beek on Darkish Studying<\/i><\/a><i>.<\/i><\/p>\n<\/section>\n<section class=\"section main-article-chapter\" data-menu-title=\"Hunters International shuts down, transitions to data theft operation\">\n<h2 class=\"section-title\"><i class=\"icon\" data-icon=\"1\"\/>Hunters Worldwide shuts down, transitions to knowledge theft operation<\/h2>\n<p>Hunters Worldwide, a ransomware group working since 2023 as a Hive ransomware rebrand, introduced its shutdown and mentioned it&#8217;s going to launch free decryptors for all victims.<\/p>\n<p>After concentrating on extra 300 organizations utilizing SharpRhino malware for preliminary entry, the group has eliminated sufferer names from its leak website and posted a goodwill message providing free decryption software program.<\/p>\n<p>Analysis indicated the closure is a part of a deliberate transition, with the group rebranding itself as &#8220;World Leaks,&#8221; an extortion-only operation that started in early 2025.<\/p>\n<p><a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.darkreading.com\/threat-intelligence\/hunters-international-raas-group-closes-doors\"><i>Learn the total story by Kristina Beek on Darkish Studying<\/i><\/a><i>.<\/i><\/p>\n<p><b>Editor&#8217;s observe:<\/b><i> An editor used AI instruments to assist within the technology of this information temporary. Our professional editors at all times overview and edit content material earlier than publishing.<\/i><\/p>\n<p><i>Sharon Shea is govt editor of Informa TechTarget&#8217;s SearchSecurity website.<\/i><\/p>\n<\/section>\n<\/div>\n\n","protected":false},"excerpt":{"rendered":"<p>&#13; This week, worldwide cybersecurity legislation enforcement took motion in opposition to headline-making cybercriminals and state-sponsored menace actors. Italian authorities detained a person for allegedly working as a contractor for China&#8217;s Ministry of State Safety. He&#8217;s charged with stealing COVID-19 analysis and exploiting Microsoft Trade Server vulnerabilities. British police arrested 4 members of the Scattered [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":4516,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[58],"tags":[3361,554,4018,121,2075,2076],"class_list":["post-4514","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-arrested","tag-hackers","tag-hafnium","tag-news","tag-scattered","tag-spider"],"_links":{"self":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/4514","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4514"}],"version-history":[{"count":1,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/4514\/revisions"}],"predecessor-version":[{"id":4515,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/4514\/revisions\/4515"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/media\/4516"}],"wp:attachment":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4514"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4514"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4514"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}<!-- This website is optimized by Airlift. Learn more: https://airlift.net. Template:. Learn more: https://airlift.net. Template: 69d9690a190636c2e0989534. Config Timestamp: 2026-04-10 21:18:02 UTC, Cached Timestamp: 2026-05-15 00:04:28 UTC -->