Chijioke Timothy Odimegwu and Harafat Mogaji, former airmen stationed at Dover Air Force Base, were sentenced to a combined 189 months in federal prison for running business email compromise and phishing schemes that diverted corporate wire transfers, including a $1.68 million payment from an Iowa City victim and a $720,000 payment from an Ohio victim. Odimegwu received 111 months and must pay over $366,000 in restitution, while Mogaji got 78 months and owes nearly $996,000, with both facing three years of supervised release afterward.
bleepingcomputer.com
· 2026-09-29
Microsoft and partner organizations dismantled EvilTokens, a phishing-as-a-service operation that used AI tools and device code phishing to compromise over 12,000 inboxes across more than 10,000 organizations. Following a US court-enabled legal action, Microsoft seized 50 websites and disabled over 150 additional domains linked to the operators, tracked as Storm-2992. The UK's Metropolitan Police also arrested two men connected to the scheme this month; both were released on bail pending further investigation.
darkreading.com
· 2026-09-22
Microsoft researchers uncovered a phishing operation in which an unidentified attacker sent over one million fraudulent emails within three days, each tailored to target accounts payable staff at specific companies. The emails impersonated ServiceNow, demanding nearly $50,000 in fake subscription payments, and included fabricated email threads featuring real executives' names to make the scam appear legitimate.
darkreading.com
· 2026-09-11
GoKawiil