News Gist .News

An alleged job scam posing as “OpenAI” exploited unsuspecting international workers, particularly from Bangladesh, luring them with promises of stable income and cryptocurrency investment opportunities. The scam operated through Telegram, where victims were misled into believing they were completing legitimate tasks for the company, only to find that their recruiter, “Aiden,” vanished without a trace. This incident highlights the vulnerability of remote workers in the digital economy and raises alarms about the effectiveness of current protections against online fraud.

Researchers have uncovered a network of fake identities created by North Korean cybercriminals, all looking for software development work in Asia and the West. The goal is to earn money to fund Pyongyang's ballistic missile and nuclear weapons development programs. By creating these fake personas, hackers are able to gain access to companies' back ends, steal sensitive data, or even get paid.

Gen Z workers are resorting to "career catfishing" by accepting job offers but not showing up on their first day, leaving employers in the dark and potentially damaging their professional reputations. This trend is seen as a response to the widespread ghosting of job seekers, who feel they're being left in the dark during the hiring process. As more young workers adopt this tactic, it could have serious consequences for businesses and the job market as a whole.

Microsoft's Threat Intelligence has identified a new tactic from Chinese threat actor Silk Typhoon towards targeting "common IT solutions" such as cloud applications and remote management tools in order to gain access to victim systems. The group has been observed attacking a wide range of sectors, including IT services and infrastructure, healthcare, legal services, defense, government agencies, and many more. By exploiting zero-day vulnerabilities in edge devices, Silk Typhoon has established itself as one of the Chinese threat actors with the "largest targeting footprints".

The modern-day cyber threat landscape has become increasingly crowded, with Advanced Persistent Threats (APTs) becoming a major concern for cybersecurity teams worldwide. Group-IB's recent research points to 2024 as a 'year of cybercriminal escalation', with a 10% rise in ransomware compared to the previous year, and a 22% rise in phishing attacks. The "Game-changing" role of AI is being used by both security teams and cybercriminals, but its maturity level is still not there yet.

Vishing attacks have skyrocketed, with CrowdStrike tracking at least six campaigns in which attackers pretended to be IT staffers to trick employees into sharing sensitive information. The security firm's 2025 Global Threat Report revealed a 442% increase in vishing attacks during the second half of 2024 compared to the first half. These attacks often use social engineering tactics, such as help desk social engineering and callback phishing, to gain remote access to computer systems.

Elon Musk's Department of Government Efficiency has deployed a proprietary chatbot called GSAi to automate tasks previously done by humans at the General Services Administration, affecting 1,500 federal workers. The deployment is part of DOGE's ongoing purge of the federal workforce and its efforts to modernize the US government using AI. GSAi is designed to help streamline operations and reduce costs, but concerns have been raised about the impact on worker roles and agency efficiency.

The average scam cost the victim £595, report claims. Deepfakes are claiming thousands of victims, with a new report from Hiya detailing the rising risk and deepfake voice scams in the UK and abroad, noting how the rise of generative AI means deepfakes are more convincing than ever, and attackers can leverage them more frequently too. AI lowers the barriers for criminals to commit fraud, and makes scamming victims easier, faster, and more effective.

Amnesty International has uncovered evidence that a zero-day exploit sold by Cellebrite was used to compromise the phone of a Serbian student who had been critical of the government, highlighting a campaign of surveillance and repression. The organization's report sheds light on the pervasive use of spyware by authorities in Serbia, which has sparked international condemnation. The incident demonstrates how governments are exploiting vulnerabilities in devices to silence critics and undermine human rights.

YouTube creators have been targeted by scammers using AI-generated deepfake videos to trick them into giving up their login details. The fake videos, including one impersonating CEO Neal Mohan, claim there's a change in the site's monetization policy and urge recipients to click on links that lead to phishing pages designed to steal user credentials. YouTube has warned users about these scams, advising them not to click on unsolicited links or provide sensitive information.

Google has introduced AI-powered features designed to enhance scam detection for both text messages and phone calls on Android devices. The new capabilities aim to identify suspicious conversations in real-time, providing users with warnings about potential scams while maintaining their privacy. As cybercriminals increasingly utilize AI to target victims, Google's proactive measures represent a significant advancement in user protection against sophisticated scams.

OpenAI Startup Fund has successfully invested in over a dozen startups since its establishment in 2021, with a total of $175 million raised for its main fund and an additional $114 million through specialized investment vehicles. The fund operates independently, sourcing capital from external investors, including prominent backer Microsoft, which distinguishes it from many major tech companies that utilize their own funds for similar investments. The diverse portfolio of companies receiving backing spans various sectors, highlighting OpenAI's strategic interest in advancing AI technologies across multiple industries.

AppLovin Corporation (NASDAQ:APP) is pushing back against allegations that its AI-powered ad platform is cannibalizing revenue from advertisers, while the company's latest advancements in natural language processing and creative insights are being closely watched by investors. The recent release of OpenAI's GPT-4.5 model has also put the spotlight on the competitive landscape of AI stocks. As companies like Tencent launch their own AI models to compete with industry giants, the stakes are high for those who want to stay ahead in this rapidly evolving space.

Bret Taylor discussed the transformative potential of AI agents during a fireside chat at the Mobile World Congress, emphasizing their higher capabilities compared to traditional chatbots and their growing role in customer service. He expressed optimism that these agents could significantly enhance consumer experiences while also acknowledging the challenges of ensuring they operate within appropriate guidelines to prevent misinformation. Taylor believes that as AI agents become integral to brand interactions, they may evolve to be as essential as websites or mobile apps, fundamentally changing how customers engage with technology.

Mistral AI, a French tech startup specializing in AI, has gained attention for its chat assistant Le Chat and its ambition to challenge industry leader OpenAI. Despite its impressive valuation of nearly $6 billion, Mistral AI's market share remains modest, presenting a significant hurdle in its competitive landscape. The company is focused on promoting open AI practices while navigating the complexities of funding, partnerships, and its commitment to environmental sustainability.

The energy company EDF gave a man's mobile number to scammers, who stole over £40,000 from his savings account. The victim, Stephen, was targeted by fraudsters who obtained his name and email address, allowing them to access his accounts with multiple companies. Stephen reported the incident to Hertfordshire Police and Action Fraud, citing poor customer service as a contributing factor.

YouTube has issued a warning to its users about an ongoing phishing scam that uses an AI-generated video of its CEO, Neal Mohan, as bait. The scammers are using stolen accounts to broadcast cryptocurrency scams, and the company is urging users not to click on any suspicious links or share their credentials with unknown parties. YouTube has emphasized that it will never contact users privately or share information through a private video.

The Department of Justice has announced criminal charges against 12 Chinese government-linked hackers who are accused of hacking more than 100 American organizations, including the U.S. Treasury, over the course of a decade. The charged individuals all played a “key role” in China’s hacker-for-hire ecosystem, targeting organizations for the purposes of “suppressing free speech and religious freedoms.” The Justice Department has also confirmed that two of the indicted individuals are linked to the China government-backed hacking group APT27.

The UK's Competition and Markets Authority has dropped its investigation into Microsoft's partnership with ChatGPT maker OpenAI due to a lack of de facto control over the AI company. The decision comes after the CMA found that Microsoft did not have significant enough influence over OpenAI since 2019, when it initially invested $1 billion in the startup. This conclusion does not preclude competition concerns arising from their operations.

The Lee Enterprises ransomware attack is affecting the company's ability to pay outside vendors, including freelancers and contractors, as a result of the cyberattack that began on February 3. The attack has resulted in widescale outages and ongoing disruption at dozens of newspapers across the United States, causing delays to print editions and impacting various aspects of the company's operations. Lee Enterprises has confirmed that hackers "encrypted critical applications," including those related to vendor payments.

A "hidden feature" was found in a Chinese-made Bluetooth chip that allows malicious actors to run arbitrary commands, unlock additional functionalities, and extract sensitive information from millions of Internet of Things (IoT) devices worldwide. The ESP32 chip's affordability and widespread use have made it a prime target for cyber threats, putting the personal data of billions of users at risk. Cybersecurity researchers Tarlogic discovered the vulnerability, which they claim could be used to obtain confidential information, spy on citizens and companies, and execute more sophisticated attacks.

The U.S. government has indicted a slew of alleged Chinese hackers, sanctioned a Chinese tech company, and offered a $10 million bounty for information on a years-long spy campaign that targeted victims across America and around the world. The indictment accuses 10 people of collaborating to steal data from their targets, including the U.S. Defense Intelligence Agency, foreign ministries, news organizations, and religious groups. The alleged hacking scheme is believed to have generated significant revenue for Chinese intelligence agencies.

Former top U.S. cybersecurity official Rob Joyce warned lawmakers on Wednesday that cuts to federal probationary employees will have a "devastating impact" on U.S. national security. The elimination of these workers, who are responsible for hunting and eradicating cyber threats, will destroy a critical pipeline of talent, according to Joyce. As a result, the U.S. government's ability to protect itself from sophisticated cyber attacks may be severely compromised. The probe into China's hacking campaign by the Chinese Communist Party has significant implications for national security.

Europol has arrested 25 individuals involved in an online network sharing AI-generated child sexual abuse material (CSAM), as part of a coordinated crackdown across 19 countries lacking clear guidelines. The European Union is currently considering a proposed rule to help law enforcement tackle this new situation, which Europol believes requires developing new investigative methods and tools. The agency plans to continue arresting those found producing, sharing, and distributing AI CSAM while launching an online campaign to raise awareness about the consequences of using AI for illegal purposes.

Threat actors are exploiting misconfigured Amazon Web Services (AWS) environments to bypass email security and launch phishing campaigns that land in people's inboxes. Cybersecurity researchers have identified a group using this tactic, known as JavaGhost, which has been active since 2019 and has evolved its tactics to evade detection. The attackers use AWS access keys to gain initial access to the environment and set up temporary accounts to send phishing emails that bypass email protections.

The Justice Department has indicted 12 Chinese nationals for their involvement in a hacking operation that allegedly sold sensitive data of US-based dissidents to the Chinese government, with payments reportedly ranging from $10,000 to $75,000 per hacked email account. This operation, described as state-sponsored, also extended its reach to US government agencies and foreign ministries in countries such as Taiwan, India, South Korea, and Indonesia. The charges highlight ongoing cybersecurity tensions and the use of cyber mercenaries to conduct operations that undermine both national security and the privacy of individuals critical of the Chinese government.