UK Tax Phishing Scam: 14 Arrested in £47 Million Fraud Scheme

13 Arrested in Romania Over Phishing-Based UK Tax Fraud Scheme

Thirteen individuals have been arrested in Romania as part of a significant international operation targeting tax fraud linked to phishing attacks. This operation has revealed an extensive scam that defrauded over 100,000 taxpayers in the UK, resulting in a loss of approximately £47 million. The UK's HM Revenue and Customs (HMRC) has issued warnings to the public regarding ongoing phishing fraud attempts. More detailed information can be found in the article here.

Tax Fraud Scheme
Image courtesy of The Cyber Express

Android Malware Attack with Fake Telegram Apps

In a related cybersecurity concern, researchers have uncovered a malware campaign targeting Android users through fake Telegram applications. These malicious apps have been distributed across 607 different domains, posing a serious threat to users who may unknowingly download them. The apps are designed to mimic the legitimate Telegram application, thus tricking users into installing them.

Once installed, the malware can steal sensitive information, including personal messages and contact lists, and may lead to further compromises of the user's device. To protect against such threats, it is vital to only download applications from trusted sources like the Google Play Store and to verify the authenticity of the app before installation. Users are also advised to keep their devices updated with the latest security patches. More about this threat can be read in the full article linked here.

For additional cybersecurity tips and insights, consider referring to resources from Cyber Express or HackRead.

Ransomware Attacks Target Russian Vodka and Healthcare Sectors

The Novabev Group, parent company of the Beluga vodka brand, experienced a ransomware attack on July 14, 2025, causing significant disruptions. The attack affected WineLab, the company's liquor store chain, leading to a three-day closure of over 2,000 locations in Russia. The company reported that the attack crippled its IT infrastructure, particularly point-of-sale systems and online services. Novabev Group stated, "The company maintains a principled position of rejecting any interaction with cybercriminals and refuses to fulfill their demands."

By Alan V Gutnov July 19, 2025 3 min read

Retail Sector Faces Surge in Ransomware Attacks: A 2025 Analysis

Publicly disclosed ransomware attacks on the retail sector globally surged by 58% in Q2 2025 compared to Q1, with UK-based firms being particularly targeted, according to a report by BlackFog. This spike in attacks follows high-profile breaches affecting retailers like Marks & Spencer (M&S), The Co-op, and Harrods, attributed to the threat actor known as Scattered Spider.

By Alan V Gutnov July 19, 2025 2 min read

AI-Driven Lcryx Ransomware Emerges in Cryptomining Botnet

A cryptomining botnet active since 2019 has incorporated a likely AI-generated ransomware known as Lcryx into its operations. Recent analysis by the FortiCNAPP team at FortiGuard Labs identified the first documented incident linking H2miner and Lcryx ransomware. This investigation focused on a cluster of virtual private servers (VPS) utilized for mining Monero.

By Edward Zhou July 19, 2025 3 min read

Preventing ClickFix Attacks: Safeguarding Against Human Error

ClickFix is an emerging social engineering technique utilized by threat actors to exploit human error. This technique involves misleading users into executing malicious commands under the guise of providing "quick fixes" for common computer issues. Threat actors use familiar platforms and deceptive prompts to encourage victims to paste and run harmful scripts.