Global Cyber Pulse: 08 April 2025

April 8, 2025 | Cybersecurity
By Ashwani Mishra, Editor-Technology, 63SATS
Fadnavis Pushes for Tech-Driven Policing to Combat Cybercrime Surge

Maharashtra CM Devendra Fadnavis emphasized the growing threat of financial cybercrimes, calling for a more technologically adept police force. Speaking at a Mumbai Police event, he inaugurated the Nirbhaya Cyber Lab at DB Marg and virtually launched cyber police stations in Worli and Govandi.

Additional rollouts included forensic vans for women, speed monitoring tools, and dedicated cells for women and children in 87 city police stations. Fadnavis stressed the importance of equipping law enforcement to handle evolving threats, particularly financial fraud, digital threats, and cyber abuse, which he highlighted as the most reported offences in the state.

WK Kellogg Warns of Data Breach Linked to Cleo Ransomware Attack

WK Kellogg Co has confirmed that sensitive employee and vendor data was compromised during the 2024 Clop ransomware attacks targeting Cleo’s file transfer software. The breach exploited two zero-day vulnerabilities—CVE-2024-50623 and CVE-2024-55956—allowing threat actors to access Cleo-hosted servers.

WK Kellogg was notified in February 2025, learning that unauthorized access occurred in December 2024. The compromised servers were primarily used to transfer employee files to HR service providers. The company has launched an investigation and is working with Cleo and cybersecurity experts to assess the breach’s impact and enhance data protection.

PoisonSeed Phishing Scam Drains Millions from Crypto Wallets

A sophisticated phishing campaign, dubbed PoisonSeed, is targeting users of Coinbase and Ledger via bulk email and CRM platforms like Mailchimp and SendGrid. Instead of typical malicious links, scammers send “seed phrases,” tricking victims into creating new wallets controlled by attackers. This tactic bypasses standard filters and allows threat actors to access victims’ crypto funds.

Claiming Coinbase was shifting to self-custody wallets, emails urged users to migrate assets. Since mid-March, Coinbase has warned users against using unfamiliar recovery phrases. Silent Push estimates that around $46 million in crypto has already been stolen through this method.

Russian Tech CEO Arrested Over Criminal Ties, Troll Farm Links

Yuri Bozoyan, CEO of Russia-based Aeza Group, has been detained in Moscow on charges related to drug trafficking and leading a criminal group. Aeza, a hosting provider suspected of facilitating cybercrime and disinformation campaigns, has drawn international scrutiny. Two other employees were also arrested. Russian court documents reveal their alleged involvement in narcotics distribution and organized crime.

Authorities raided Aeza’s St. Petersburg office—once associated with paramilitary leader Yevgeny Prigozhin’s disinformation operations. Cyber experts have previously linked Aeza to Doppelgänger, a Kremlin-backed campaign spreading fake news and propaganda across Europe and beyond.

Czech PM’s X Account Hacked, Fake Russian Attack Claim Posted

Hackers breached Czech Prime Minister Petr Fiala’s official X (formerly Twitter) account, posting a false alert about a Russian assault on Czech forces near Kaliningrad. The fabricated message was swiftly deleted. A government spokesperson confirmed the post was misinformation and assured the public no such attack had occurred. The cyber intrusion sparked concerns over growing geopolitical tensions and the vulnerability of high-profile digital accounts.

Authorities are investigating the breach while emphasizing the importance of swift response mechanisms in the face of state-linked disinformation and influence operations targeting public institutions.

Five-Nation Advisory Warns of Fast Flux Obfuscation in Cyberattacks

Cybersecurity bodies from the US, Australia, Canada, New Zealand, and the UK have issued a joint alert highlighting the dangers of “fast flux” techniques used by hackers to hide their infrastructure. This method manipulates DNS records to make malicious domains harder to track and block. By rotating IP addresses frequently, attackers maintain uninterrupted control over infected systems.

The advisory aims to raise awareness among enterprises and security professionals about closing these network defense gaps. Agencies like CISA, NSA, FBI, and others stress collaboration and stronger DNS monitoring as vital steps in countering this threat.