Kiberjinoyatchilik
Niderlandiya politsiyasi bank hisoblaridan 400 000 dollardan ortiq mablag'ni o'g'irlagan NFC relay hujumlari bo'yicha ikki kishini hibsga oldi
Shaxslar jabrlanuvchilarga qo'ng'iroq qilib, ularni ilova o'rnatishga va kredit kartalarini skanerlashga ishontirish orqali bank hisoblaridan mablag' o'g'irlashgan.
Muallif
Ionut Arghire
| 2026-yil 26-oktabr (ET 7:47)
Niderlandiya rasmiylari bank yordam xizmati firibgarligi sxemasining yangi turini amalga oshirgan va 400 000 dollardan ortiq zarar yetkazgan ikki shaxsni hibsga oldi.
Sxema doirasida gumondorlar potentsial jabrlanuvchilarga qo'ng'iroq qilib, sun'iy intellekt yordamida yaratilgan audio segmentlarni ijro etishgan, unda qabul qiluvchining bank hisobida shubhali faoliyat bo'lganligi da'vo qilingan.
Audio yozuvlar turli banklar, kompaniyalar va ssenariylarni taqlid qilgan, jabrlanuvchilardan shubhali faoliyat uchun javobgar emasliklarini tasdiqlash uchun "1" tugmasini bosishni so'ragan, so'ngra ularni kutish rejimiga qo'ygan.
Keyin bank xodimi sifatida o'zini tanitgan gumondor qo'ng'iroqni davom ettirgan, jabrlanuvchining debet kartasi bloklanganligini da'vo qilib, qabul qiluvchidan ilova yuklab olishni va kartani telefonga yaqin tutib skanerlashni so'ragan.
Bu ilova kontaktless to'lovlarni qo'llab-quvvatlovchi kartaning NFC chipidan ma'lumotlarni olishiga olib kelgan. Ma'lumotlar keyin ilovani tayyorlab, bankomatda kutib turgan jinoyatchiga yuborilgan va u jabrlanuvchining hisobidan pul yechib olgan.
Sxema yordamida gumondorlar 170 nafar turli yoshdagi jabrlanuvchilarning bank hisoblaridan 380 000 yevrodan ortiq (~425 600 dollar) mablag'ni o'g'irlashgan, deb xabar qiladi Niderlandiya politsiyasi.
Reklama. O'qishni davom ettirish uchun pastga aylantiring.
Ikki gumondor — 23 yoshli Vaassen shahridan va 25 yoshli Ede shahridan — 6-oktabrda hibsga olingan. Birinchisi sxema ortidagi infratuzilmani qurib, hujumlarni tashkil etgan bo'lishi mumkin, ikkinchisi esa muvofiqlashtiruvchi rolni o'ynagan.
Tergovchilar shuningdek, firibgarlarning serverlarini o'chirib, ularni telefonlari va noutbuklari bilan birga musodara qilgan. Ikkalasi ham tergov davomida hibsda qolmoqda.
Bog'liq: Microsoft 1 milliarddan ortiq xabar ortida turgan xitoy tilidagi fishing bozorini to'xtatdi
Bog'liq: AQSh Shimoliy Koreya IT xodimlari noutbuk fermalariga qarshi kurashda ikki kishini hibsga oldi
Bog'liq: Canonical veb-saytlari bu yil ikkinchi DDoS hujumida buzildi
Bog'liq: Ransomware javob berish bo'yicha mutaxassis ShinyHunters FBI xakerlik tekshiruvida hibsga olindi
Yozgan: Ionut Arghire
Ionut Arghire — SecurityWeek uchun xalqaro muxbir.
Kundalik axborot byulleteni
So'nggi kiberxavfsizlik tahdidlari, tendensiyalari va mutaxassis fikrlari haqida ma'lumot olish uchun SecurityWeek elektron pochta byulleteniga obuna bo'ling.
Biznes elektron pochta*
emailsignupsource
Qo'shimcha ma'lumot olish uchun Maxfiylik siyosatimizni o'qing.
Ionut Arghiredan ko'proq
- LiteLLM yangi ta'minot zanjiri hujumida buzildi
- Signal zaifligi zararli qo'ng'iroq qiluvchilarga qo'ng'iroqni to'xtatishni bloklashga imkon beradi
- Splunk, SolarWinds yangi xavfsizlik yangilanishlarini e'lon qildi
- Cisco bir nechta mahsulotlar bo'yicha 34 zaiflikni tuzatdi
- PHP2Shell ekspluatatsiyasi yamoqlardan bir necha kun oldin boshlandi
- PHP2Shell yamoqlari birinchi ekspluatatsiya urinishlari sensorlarga yetib kelishi bilan e'lon qilindi
- Chrome'ning 353 yangi xavfsizlik tuzatishlarining aksariyati xotira xatolaridan iborat
- Brauzerlar qayta tiklanadigan shaxsiy kalitlar tufayli eMudhra oraliq CA'larini blokladi
So'nggi yangiliklar
- Node2Shell: Brotli zaifligi Microsoft, Node.js, Python paketlarida yamoqlashni keltirib chiqardi
- Mythos 5 iyul hujumida haqiqiy dunyo zararini e'tiborsiz qoldirdi
- Sobiq 8200 bo'linma ofitserlari agentik SecOps startapi Mave uchun 34 million dollar yig'di
- Boshqa yangiliklarda: Tor chiqish relaylari o'g'irlandi, banklar noqonuniy AI agentlarini aniqladi, o'z-o'zini tiklaydigan macOS ransomware
- Mirai botnet operatorlari PHP2Shell hujumlariga qo'shildi, ASLR aylanib o'tish ekspluatlari paydo bo'ldi
- Xitoy APT ConnectWise hujumlarida AI pentest vositasi Artex'dan foydalanadi
- Hujumchilar to'rt oy ichida uchinchi Arista VCO nol kun zaifligini ekspluatatsiya qiladi
- Capcom ma'lumotlar buzilishidan 11 million kishi ta'sirlandi
Trend
SecurityWeek tahlili: 2024-yilning birinchi yarmida 178 ta kiberxavfsizlik M&A bitimi e'lon qilindi
Mirai botnet operatorlari PHP2Shell hujumlariga qo'shildi, ASLR aylanib o'tish ekspluatlari paydo bo'ldi
Sobiq 8200 bo'linma ofitserlari agentik SecOps startapi Mave uchun 34 million dollar yig'di
Xitoy APT ConnectWise hujumlarida AI pentest vositasi Artex'dan foydalanadi
Atlassian Data Center va Server mahsulotlarida 75 zaiflikni tuzatdi
Hujumchilar to'rt oy ichida uchinchi Arista VCO nol kun zaifligini ekspluatatsiya qiladi
Boshqa yangiliklarda: Tor chiqish relaylari o'g'irlandi, banklar noqonuniy AI agentlarini aniqladi, o'z-o'zini tiklaydigan macOS ransomware
11 million kishi Capcom ma'lumotlar buzilishidan ta'sirlandi
Kundalik axborot byulleteni
So'nggi tahdidlar, tendensiyalar va texnologiyalar, shuningdek, soha mutaxassislarining chuqur fikrlari haqida ma'lumot olish uchun SecurityWeek elektron pochta byulleteniga obuna bo'ling.
Biznes elektron pochta*
emailsignupsource
Qo'shimcha ma'lumot olish uchun Maxfiylik siyosatimizni o'qing.
Vebinar: Sizning Google Workspace'dagi AI kirish xavfi allaqachon mavjud
2026-yil 19-oktabr
Google Workspace bilan bog'langan AI vositalari millionlab maxfiy elektron pochta va fayllarga kirishi mumkin. Tashkilotingizning xavfini aniqlash va AI kirishini boshqarish uchun ramka o'rganish uchun ushbu sessiyaga qo'shiling.
Ro'yxatdan o'ting
Virtual tadbir: CISO Forum 2026 Summit
2026-yil 10 va 11-noyabr
CISO'lar, yuqori darajadagi kiberxavfsizlik rahbarlari, amaliyotchilar, soha mutaxassislari va boshqa xavfsizlik rahbarlari amaliy tajriba almashish va korporativ kiberxavfsizlik strategiyasini shakllantiruvchi masalalarni ko'rib chiqish uchun birlashadigan ushbu tadbirga qo'shiling.
Ro'yxatdan o'ting
Harakatdagi odamlar
Cequence Security Russ Schaferni CMO etib tayinladi.
Mona Harrington DHS'da Kiber integratsiya bo'yicha yordamchi direktor etib tayinlandi.
iCOUNTER Mark H. FitzPatrickni CFO etib tayinladi.
Harakatdagi ko'proq odamlar
Mutaxassis fikrlari
AI dasturiy ta'minot xavfsizligining kaliti tezlik emas, balki yetuklikdir
Sizning dasturchilaringiz AI qabul qilish shkalasida qayerda joylashganligi xavfsizlik xavfini qanday hal qilayotganingizga haqiqiy ta'sir ko'rsatadi. (Matias Madou)
Zamonaviy kiberhujumlarga qarshi kurashda kontekst qirol
Kontekstual himoya xavfsizlik jamoalariga signallarni bog'lash, keyin nima kelishini oldindan ko'rish va tahdidlarni kuchayishidan oldin to'xtatishga yordam beradi. (Etay Maor)
AI hujum tezligini o'zgartirdi, xavfsizlik asoslarini emas
AI zaiflikni aniqlash va ekspluatatsiyani tezlashtirgan sari, virtual yamoqlash hali ham chuqur himoya va kuchli ilova xavfsizligi asoslariga bog'liq. (Joshua Goldfarb)
Kelajak uchun katta rejalar tuzgan to'rt kiber tahdid
- AI, ta'minot zanjiri ta'siri, kvant hisoblash va geosiyosiy ziddiyat xavfsizlik dasturlarini sinovdan o'tkazmoqda. Buzilishlarga tayyorgarlik kundalik operatsiyalarning bir qismiga aylanishi kerak. (Steve Durbin)
Oxiridan boshlang: Agentik tuzatishni qanday yoqish mumkin
Agentik tuzatish ishonch harakati emas. Biz tanish bo'lmagan xavf haqida hukm chiqarish emas, balki ma'lum muammolarni tuzatish haqida gapiryapmiz. (Nadir Izrael)
Cybercrime
Dutch Police Arrest Two Over NFC Relay Attacks That Drained $400,000+ From Bank Accounts
The individuals called victims and persuaded them to install an app and scan their credit cards to loot their bank accounts.
By
Ionut Arghire
| October 26, 2026 (7:47 AM ET)
*
Dutch authorities arrested two individuals for running a new type of bank helpdesk fraud scheme that caused over $400,000 in damages.
As part of the scheme, the suspects called potential victims and played AI-generated audio segments that claimed there had been suspicious activity in the recipient’s bank account.
The audio recordings impersonated various banks, companies, and scenarios, asked victims to press ‘1’ if they were not responsible for the alleged suspicious activity, and then put them on hold.
Next, a suspect impersonating a bank employee took over the call, claiming the victim’s debit card had been blocked and asking the recipient to download an application and scan the card by holding it against the phone.
This resulted in the application extracting the data from the card’s NFC chip that supported contactless payments. The information was then sent to a miscreant who had the application ready and was waiting at an ATM to withdraw money from the victim’s account.
Using the scheme, the suspects looted over €380,000 (~$425,600) from the bank accounts of 170 victims of all ages, the Dutch police say.
Advertisement. Scroll to continue reading.
The two suspects, a 23-year-old from Vaassen and a 25-year-old man from Ede, were arrested on October 6. The former likely built the infrastructure behind the scheme and orchestrated the attacks, while the latter played a coordinating role.
Investigators also took the fraudsters’ servers offline and seized them, along with their phones and laptops. Both remain in custody pending investigation.
Related:Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages
Related:US Arrests Two in Crackdown on North Korean IT Worker Laptop Farms
Related:Canonical Websites Disrupted in Second DDoS Attack This Year
Related:Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe
Written ByIonut Arghire
Ionut Arghire is an international correspondent for SecurityWeek.
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
More from Ionut Arghire
- LiteLLM Compromised in Fresh Supply Chain Attack
- Signal Vulnerability Lets Malicious Callers Block Hang-Ups
- Splunk, SolarWinds Release Fresh Security Updates
- Cisco Patches 34 Vulnerabilities Across Multiple Products
- PHP2Shell Exploitation Started Days Before Patches
- PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors
- Memory Bugs Account for Most of Chrome’s 353 New Security Fixes
- Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys
Latest News
- Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
- Mythos 5 Ignored Real-World Harm in July Attack
- Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup Mave
- In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware
- Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
- China APT Uses AI Pentest Tool Artex in ConnectWise Attacks
- Attackers Exploit Third Arista VCO Zero-Day in Four Months
- 11 Million Impacted by Capcom Data Breach
Trending
SecurityWeek Analysis: 178 Cybersecurity M&A Deals Announced in First Half of 2024
Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup Mave
China APT Uses AI Pentest Tool Artex in ConnectWise Attacks
Atlassian Patches 75 Flaws in Data Center and Server Products
Attackers Exploit Third Arista VCO Zero-Day in Four Months
In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware
11 Million Impacted by Capcom Data Breach
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
Webinar: The AI Access Risk Already in Your Google Workspace
October 19, 2026
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
Register
Virtual Event: CISO Forum 2026 Summit
November 10 & 11, 2026
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
Register
People on the Move
Cequence Security has appointed Russ Schafer as CMO.
Mona Harrington has been named Assistant Director for Cyber Integration at DHS.
iCOUNTER has appointed Mark H. FitzPatrick as CFO.
More People On The Move
Expert Insights
*
The Key to AI Software Security Isn’t Speed, It’s Maturity
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.(Matias Madou)
Context Is King in the Fight Against Modern Cyberattacks
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.(Etay Maor)
AI Has Changed Attack Speed, Not Security Fundamentals
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.(Joshua Goldfarb)
Four Cyber Threats Harboring Big Plans for the Future
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.(Steve Durbin)
Begin at the End: How to Enable Agentic Remediation
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.(Nadir Izrael)