Financial cybercrime group the Disneyland Team is spoofing bank domains using Punycode, a standard that lets browsers render domains with non-Latin alphabets (Brian Krebs/Krebs on Security)

Brian Krebs / Krebs on Security:
Brian Krebs apologizes to IoT manufacturer Ubiquiti after posting now-removed articles on a “breach” based on a “sole source” currently under federal indictment  —  Last year, I posted a series of articles about a purported “breach” at Ubiquiti.

Sunil Jagtiani / Bloomberg:
FTX to provide $6M in compensation to account holders impacted by a phishing incident via a 3rd-party site but says this kind of relief will not become the norm  —  Digital-asset exchange FTX will provide about $6 million compensation to its account holders impacted by a phishing incident via a third-party website.

Bill Toulas / BleepingComputer:
The US DOJ seizes internet domains for Z-Library, a repository that went viral on TikTok for offering 11M+ books, including pirated textbooks, and 84M articles  —  Internet domains for the popular Z-Library online eBook repository were seized early this morning by the U.S. Department of Justice, preventing easy access to the service.

Brian Krebs / Krebs on Security:
Sources: Vyacheslav “Tank” Penchukov, a Ukrainian accused of leading a cybercriminal group that raided SMBs with JabberZeus malware, is arrested in Switzerland  —  Vyacheslav “Tank” Penchukov, the accused 40-year-old Ukrainian leader of a prolific cybercriminal group that stole tens …

Brian Krebs / Krebs on Security:
Russian native and likely proprietor of the RSOCKS botnet was arrested in Bulgaria at the request of the US; he requested and was granted extradition to the US  —  A 36-year-old Russian man recently identified by KrebsOnSecurity as the likely proprietor of the massive RSOCKS botnet …