Cyber Threats Evolve: 25+ Stories of Exploits, Scams, and Emerging Risks

Cyber Threats Evolve: Exploits, Scams, and Emerging Risks

The latest ThreatsDay Bulletin highlights a series of cyber threats, including the takedown of the notorious RAMP cybercrime forum by the U.S. Federal Bureau of Investigation (FBI) and a lawsuit challenging WhatsApp’s privacy claims. A new phishing campaign is also leveraging fake recruitment-themed emails to steal logins, while a novel campaign has exploited the trust associated with *.vercel.app domains to bypass email filters and deceive users.

Why This Matters

The cumulative effect of these threats poses a significant risk to individuals and organizations, as security controls are being worked on and trusted platforms are turning into weak spots. The technical reality is that many of these threats are not loud incidents, but quiet shifts that are easy to miss until they add up, with potential costs including data breaches, financial losses, and reputational damage. For instance, the takedown of RAMP has significant implications for the cybercrime ecosystem, with groups shifting activity toward alternative spaces, illustrating the underground’s ability to reconstitute quickly.

Key Insights

• The U.S. FBI has seized the notorious RAMP cybercrime forum, with visitors to the forum’s Tor site and clearnet domain now greeted by a seizure banner.
• A lawsuit filed against Meta alleges that WhatsApp has made false claims about the privacy and security of its users, with the company accused of defrauding users.
• The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published an initial list of hardware and software product categories that support or are expected to support post-quantum cryptography (PQC) standards.

Working Example

No code is provided in this context.

Practical Applications

• Use Case: The French government’s plans to replace U.S. videoconferencing apps with a homegrown alternative, Visio, to improve security and strengthen digital resilience.
• Pitfall: The use of fake recruitment-themed emails to steal logins, highlighting the need for individuals and organizations to be cautious when receiving unsolicited emails.

References:

• https://thehackernews.com/2026/01/threatsday-bulletin-new-rces-darknet.html
• https://www.cisa.gov/
• https://www.whatsapp.com/