CyberAware UK Weekly Recap: 13 Active Scam Campaigns and What They Mean for Your Family
Every Sunday we pull back from the individual alerts and look at the bigger picture from DarkWatch, the tracking service we use to monitor scam and fraud infrastructure. This week's numbers are worth sitting with for a moment.
DarkWatch recorded 80,869 captures, built profiles on 19,399 entities, raised 2,251 alerts, and is tracking 13 active targets. That last figure is the one to focus on. Thirteen live campaigns are running right now against real organisations. Most of them target businesses, public bodies and services rather than individual households, but the copycat versions always trickle down to our phones and inboxes.
One capture stood out without us needing to name it: a brand new ransomware-as-a-service offering appeared this week, advertised on an active dark web leak site. That means someone is selling the tools rather than doing the crime. It lowers the barrier for less skilled criminals, which is exactly why it belongs in a weekly recap.
In the news, a serving US soldier was jailed for seventy months over extortion attempts against two major US telecoms firms, a reminder that data inside a company carries real value and insiders do get caught. UK security services also said Chinese state funding went into research involving more than a hundred academics linked to British institutions. That is a slow national security story, not a doorstep scam, and worth understanding rather than fearing. Meanwhile, a US data broker lost its web domains in a privacy fight, which is quietly good news for anyone whose details were listed without consent.
Looking ahead, keep an eye on reports of a ransomware group using SharePoint flaws to disable security tools before deploying ransomware. That affects organisations running their own servers. If you are not sure whether your employer or a supplier is exposed, the answer is simply to ask them.
Our takeaway this week is small and specific. Turn on two-factor authentication on your main email account today. Use an authenticator app or a passkey rather than SMS where you can. It blocks most of what these campaigns turn into once they reach a real person, and it takes two minutes.
Related reading