GoKawiilThe U.S. Federal Bureau of Investigation (FBI) warned the transportation and logistics industry of a sharp rise in cyber-enabled cargo theft, with estimated losses in the United States and Canada reaching nearly $725 million in 2025.
This represents a 60% surge in losses compared to the previous year, fueled by criminals increasingly using hacking and impersonation tactics to hijack high-value freight. Confirmed cargo theft incidents have risen 18 percent last year alone, while the average value per theft grew 36 percent to $273,990, due to more selective targeting of high-value loads.
The bureau said in a public service announcement on Wednesday that threat actors have been infiltrating the computer systems of freight brokers and carriers through spoofed emails and fake web links since at least 2024.
Once inside, criminals post fraudulent listings on online load boards (digital marketplaces used by shippers, brokers, and carriers) and impersonate legitimate companies to divert shipments.
For instance, in February, the typosquatting monitoring platform Have I Been Squatted reported that the Diesel Vortex financially motivated threat group was stealing credentials from freight and logistics operators in the U.S. and Europe in phishing attacks that had been running since September 2025 and were using 52 domains.
"The Federal Bureau of Investigation is publishing this Public Service Announcement (PSA) to warn the public of cyber threat actors increasingly using sophisticated, cyber-enabled tactics to impersonate legitimate businesses to hijack freight, steal high-value shipments, and reroute deliveries, resulting in a surge of strategic cargo theft," the FBI warned.
"Cyber threat actors target US transportation and logistics sectors, including companies with interests in shipping, receiving, delivering, and insuring cargo."
Cargo theft attack flow (FBI)
Attackers first compromise broker or carrier accounts by luring employees to phishing sites that install remote monitoring software, and then gain undetected access to the targeted company's systems.
In the next stage, they post tens of thousands of fake freight listings, tricking legitimate carriers into downloading malicious files, and then accept real shipments under a stolen carrier identity. The loads are rerouted to complicit drivers, stolen for resale, and, in some cases, the criminals also demand ransoms for the location of diverted loads.
... continue reading