--- title: "FBI Recovers Decryption Keys, Chrome Reduces Cookies, Penguin Fans Breach, Cybersecurity News [June 03, 2024] | DuoCircle" description: "FBI Recovers Decryption Keys, Chrome Reduces Cookies, Penguin Fans Breach, Cybersecurity News [June 03." image: "https://www.duocircle.com/images/og-default.png" canonical: "https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-24-of-2024/" --- Quick Answer Five stories. The FBI now holds more than 7,000 LockBit decryption keys recovered after Operation Cronos and is urging past victims to come forward. Google Chrome rolled out Tracking Protection, throttling third-party cookies for 1% of users as a precursor to broader rollout. Club Penguin fans breached an internal Disney Confluence server and stole 2.5GB of data, including unrelated corporate records. Resecurity disclosed the V3B phishing kit targeting 54 European bank brands with real-time MFA bypass. And Microsoft India's X account was hijacked to promote a fake Roaring Kitty cryptocurrency, redirecting followers to a wallet-drainer site. FBI Recovers Decryption Keys, Chrome Reduces Cookies, Penguin Fans Breach, Cybersecurity News \[June 03, 2024\] Your browser does not support the audio element. [ Download episode](https://media.mailhop.org/duocircle/images/2024/06/FBI-Recovers-Decryption-Keys-Chrome-Reduces-Cookies-Penguin-Fans-Breach-–-Cybersecurity-News-June-03-2024.mp3) Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-24-of-2024%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=FBI%20Recovers%20Decryption%20Keys%2C%20Chrome%20Reduces%20Cookies%2C%20Penguin%20Fans%20Breach%2C%20Cybersecurity%20News%20%5BJune%2003%2C%202024%5D&url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-24-of-2024%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-24-of-2024%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-24-of-2024%2F&title=FBI%20Recovers%20Decryption%20Keys%2C%20Chrome%20Reduces%20Cookies%2C%20Penguin%20Fans%20Breach%2C%20Cybersecurity%20News%20%5BJune%2003%2C%202024%5D "Share on Reddit") [ ](mailto:?subject=FBI%20Recovers%20Decryption%20Keys%2C%20Chrome%20Reduces%20Cookies%2C%20Penguin%20Fans%20Breach%2C%20Cybersecurity%20News%20%5BJune%2003%2C%202024%5D&body=Check out this article: undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-24-of-2024%2F "Share via Email") ![Cybersecurity News](https://media.mailhop.org/duocircle/images/2024/06/anti-phishing-software.jpg) Here’s the latest scoop on [cybersecurity](/) news around the world with the FBI’s new LockBit decryptor, the new cookie storage update by Google for Chrome users, how Club Penguin users breached a Disney server, the **New v3B phishing kit**, and the hijacking of Microsoft India’s X account. Let’s dive in! ## FBI Recovers 7,000 Lockbit Decryption Keys, Advises Ransomware Victims to Seek Assistance The FBI is urging all victims of LockBit [ransomware attacks](/data-privacy/8-most-nefarious-ransomware-attacks-from-2017-to-mid-2023/) to contact them after they obtained **7000 decryption keys** that can be used to recover encrypted data. The FBI officials have been disrupting the [LockBit ransomware gang](https://www.techtarget.com/searchsecurity/news/366577762/Trend-Micro-LockBit-ransomware-gangs-comeback-is-failing) for quite a while and will now help victims get their online data with the help of over 7000 decryption keys that they have found. FBI started **taking down the gang’s infrastructure** in February this year with Operation Cronos, where they seized 34 servers that had the decryption keys- using which they have created a free [LockBit 3.0 Black Ransomware decryptor](https://lockbitdecryptor.com/) that the victims of the gang can use to get their data for free. The [ransomware gang](https://www.computerweekly.com/news/366587407/Qilin-ransomware-gang-likely-behind-crippling-NHS-attack) made away with over $1 billion in ransomware in 7000 attacks on organizations. And that too, between June 2022 and February of this year. The **FBI’s operation was a huge win**, but LockBit is still active and has switched to a new server and dark web portals. Ensuring [ransomware protection](/resources/locky-ransomware) is crucial to prevent such incidents in the future. The US State Department and FBI have arrested and charged many members of the gang and also **offers $10 million** for any information that could lead to LockBit leadership members and $5 million for tips that lead to arrest of the gang’s affiliates. You can find all the information in the [FBI’s keynote](https://www.fbi.gov/news/speeches/fbi-cyber-assistant-director-bryan-vorndran-s-remarks-at-the-2024-boston-conference-on-cyber-security). [![cyberattack](https://media.mailhop.org/duocircle/images/2024/06/gmail-dmarc-1.jpg)](https://media.mailhop.org/duocircle/images/2024/06/gmail-dmarc-1.jpg) ## Google Chrome Minimizes Cookie Requests to Boost Performance This week, Google shared details of a **new Chrome feature** that will change the way of [requesting cookies](https://support.google.com/chrome/answer/95647) and increase the performance of the search engine. _Single-process browsers managed cookies easily because **all data is kept in the memory**._ But as new ones came, they focused on performance and security. As of early 2024, Chrome ran a new process for every window, so the method that handled the cookies had to deal with multiple queries, slowing things down. Google [shared a blog post](https://blog.chromium.org/2024/06/introducing-shared-memory-versioning-to.html) highlighting how they found this issue and also discovered that 87% of their **cookies are redundant**. To fix this, they’ve come up with a new system, which they’re calling **Shared Memory Versioning**, so Chrome keeps a local copy of the cookie data and its version number instead of checking it again and again with the network service. Without the repeated requests, Chrome works faster. > _The cookie access has **sped up by 60%**, and Google has seen a spike of 5% in the early tests._ ## Club Penguin Enthusiasts Breach Disney Confluence Server, Steal 2.5GB of Data Fans of Club Penguin hacked a Disney Confluence server this week to steal [information about the game](https://www.bbc.com/news/newsbeat-67754897) but **instead found 2.5 GB** of internal [corporate data](https://financialcrimeacademy.org/corporate-data-and-information-2/). Club Penguin was a multiplayer game with a virtual world that was available from 2005 to 2018\. It was **officially shut down in 2017**, but the game continued to live on [private servers](https://en.wikipedia.org/wiki/Private%5Fserver) and independent developers, even if the operators were arrested. Now, a person posted a link to **Internal PDFs** on the [4Chan](https://www.4chan.org/index.php) message board of the game. The link leads to a 415 MB archive that has 137 PDF files full of old internal information like emails, designs, documents, and character sheets. The data is about 7 years old and is mostly useful for fans of the game. However, this link with the data is [only a small part](https://www.bleepingcomputer.com/news/security/club-penguin-fans-breached-disney-confluence-server-stole-25gb-of-data/) of the original and bigger data set that has documentation for businesses, software, and IT projects that are used internally by Disney. The [threat actors](https://thehackernews.com/2024/06/sticky-werewolf-expands-cyber-attack.html) who breached Disney’s servers actually stole the organization’s corporate strategies, ad plans, **Disney +**, internal tools, business projects, and infrastructure data. The Club Penguin data might be old, but the rest of the **stolen information is new**. Disney has not issued any statement regarding the news. ## New V3B Phishing Kit Targets Customers of 54 European Banks Threat actors are distributing a new [phishing kit](https://thehackernews.com/2024/03/new-phishing-kit-leverages-sms-voice.html) called **V3B on Telegram**. _The phishing kit is priced between **$130-$450 per month** and comes with a lot of features, localization options, live chat, evasion, and **OTP/TAN/2FA support**._ Many cybercriminals are already using it to target customers of major financial institutions in multiple countries. It was discovered by Resecurity’s researchers, who also [shared that](https://www.resecurity.com/blog/article/cybercriminals-attack-banking-customers-in-eu-with-v3b-phishing-kit) over 1250 people are already members of the Telegram channel where the PhaaS (Phishing as a Service) tool is distributed. V3B uses JavaScript code on top of a custom CMS (Content Management System) that can **evade detection**. The interface comes with support for Finnish, French, Italian, Polish, and German languages and allows threat actors to run [multi-country campaigns](https://thehackernews.com/2024/03/apt28-hacker-group-targeting-europe.html). They can use the kit on **both mobile and desktops** and can also intercept financial information, credentials, and credit cards. The admin panel also allows threat actors to interact with the victims in real-time so they can obtain OTPs via custom notifications and [social engineering](/phishing-protection/social-engineering-is-a-growing-threat/). There is also a [QR code hijacking](https://www.michigan.gov/consumerprotection/protect-yourself/consumer-alerts/scams/qr-code-hijacking) feature that the threat actors can use to distribute [phishing pages](https://www.wrex.com/news/housing-authority-warns-of-phishing-scam-circulating-facebook/article%5Fd04bf5e8-2508-11ef-af1f-7be8107f0128.html) via QR codes. Phishing kits can allow low-level cybercriminals to launch highly sophisticated campaigns\*\*.\*\* _It’s crucial to implement [phishing protection](/email/phishing-protection) by being vigilant about [unsolicited emails](https://www.idtheftcenter.org/post/https-www-idtheftcenter-org-unsubscribe-email-scam-looks-to-trick-consumers/) and communication and **verifying everything** from official resources before you share any personal information, credentials, OTPs, or financial information_. [![phishing protection ](https://media.mailhop.org/duocircle/images/2024/06/dmarc-report-6355.jpg)](https://media.mailhop.org/duocircle/images/2024/06/dmarc-report-6355.jpg) ## Microsoft India’s X Account Compromised in Roaring Kitty Cryptocurrency Scam The official Microsoft India account on X, which has over 200,000 followers, was hijacked this week when [crypto scammers](https://news.sophos.com/en-us/2024/02/02/cryptocurrency-scams-metastasize-into-new-forms/) used it to **impersonate Roaring Kitty**. This [official account](https://x.com/microsoftindia) **has a gold check** that confirms it as an officially verified organization on the platform, which made the scam more effective. The threat actors used the account to reply to tweets, luring all followers to a [malicious website](https://www.scmagazine.com/news/phishers-place-malicious-content-on-captured-websites) that would allow them to buy **GameStop crypto** as part of a [fake presale](https://ottawa.ctvnews.ca/kingston-police-inundated-by-reports-of-fake-taylor-swift-tickets-sold-on-social-media-1.6913325). However, they would steal the assets of anyone who connected their crypto wallet to the site and authorized transactions. There are tons of [bot accounts](https://www.forbes.com/sites/antoniopequenoiv/2024/04/04/musks-x-says-its-purging-bots-heres-how-the-platform-has-struggled-to-squash-its-bot-problem/) that are also **retweeting the scamming tweet** to increase its reach and trap more people. This isn’t the only case involving X because, in recent months, the users of the platform have become targets of many account hijacks, with the threat actors promoting crypto scams and [wallet drainers](https://news.bitcoin.com/ms-wallet-drainer-has-siphoned-over-58-million-using-google-and-x-phishing-ads/) via these accounts. If you do spot the tweet, do not fall victim and avoid interacting with it. It’s best **not to follow links on X** and verify everything from official websites. ## Topics NewsSecurityUpdates ![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) Brad Slavin General Manager General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio. ## Secure your email infrastructure Protect, authenticate, and deliver. Contact our team to find the right solution. [Contact Sales](/contact/) [Explore Products](/products/) Share this article [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-24-of-2024%2F) [ ](https://twitter.com/intent/tweet?text=FBI%20Recovers%20Decryption%20Keys%2C%20Chrome%20Reduces%20Cookies%2C%20Penguin%20Fans%20Breach%2C%20Cybersecurity%20News%20%5BJune%2003%2C%202024%5D&url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-24-of-2024%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-24-of-2024%2F) Copy Related Articles - [ ![spam](https://media.mailhop.org/duocircle/images/2021/07/sender-policy-framework-7535.jpg) Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam News ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/) - [ ![Cyber Security](https://media.mailhop.org/duocircle/images/2022/01/spf-flattening-7011.jpg) Cyber Security News Update, Week 1 of 2022 News ](/blog/announcements/cyber-security-news-update-week-1-of-2022/) - [ ![Cybersecurity](https://media.mailhop.org/duocircle/images/2023/01/spf-validator-6824.jpg) Cybersecurity News Update, Week 1 of 2023 News ](/blog/announcements/cyber-security-news-update-week-1-of-2023/) - [ ![cybersecurity](https://media.mailhop.org/duocircle/images/2024/01/phishing-protection.jpg) EasyPark Data Breach, Ohio Lottery Cyberattack, GTA 5 Leak, Cybersecurity News \[December 25, 2023\] News ](/blog/announcements/cyber-security-news-update-week-1-of-2024/) ## Related Articles [ News 3m Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam Jul 20, 2021 ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/)[ News 6m Cyber Security News Update, Week 1 of 2022 Jan 7, 2022 ](/blog/announcements/cyber-security-news-update-week-1-of-2022/)[ News 7m Cybersecurity News Update, Week 1 of 2023 Jan 1, 2023 ](/blog/announcements/cyber-security-news-update-week-1-of-2023/)[ News 5m EasyPark Data Breach, Ohio Lottery Cyberattack, GTA 5 Leak, Cybersecurity News \[December 25, 2023\] Jan 4, 2024 ](/blog/announcements/cyber-security-news-update-week-1-of-2024/) ```json {"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}} ``` ```json [{"@context":"https://schema.org","@type":"BlogPosting","headline":"FBI Recovers Decryption Keys, Chrome Reduces Cookies, Penguin Fans Breach, Cybersecurity News [June 03, 2024]","description":"FBI Recovers Decryption Keys, Chrome Reduces Cookies, Penguin Fans Breach, Cybersecurity News [June 03.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-24-of-2024/","datePublished":"2024-06-10T20:30:54.000Z","dateModified":"2025-08-26T11:26:46.000Z","dateCreated":"2024-06-10T20:30:54.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-24-of-2024/"},"articleSection":"announcements","keywords":"News, Security, Updates","wordCount":1135,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2024/06/anti-phishing-software.jpg","caption":"Cybersecurity News","width":900,"height":506},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"News"},{"@type":"ListItem","position":3,"name":"FBI Recovers Decryption Keys, Chrome Reduces Cookies, Penguin Fans Breach, Cybersecurity News [June 03, 2024]","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-24-of-2024/"}]}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"News","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"FBI Recovers Decryption Keys, Chrome Reduces Cookies, Penguin Fans Breach, Cybersecurity News [June 03, 2024]","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-24-of-2024/"}]} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"FBI Recovers Decryption Keys, Chrome Reduces Cookies, Penguin Fans Breach, Cybersecurity News [June 03, 2024]","description":"FBI Recovers Decryption Keys, Chrome Reduces Cookies, Penguin Fans Breach, Cybersecurity News [June 03.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-24-of-2024/","datePublished":"2024-06-10T20:30:54.000Z","dateModified":"2025-08-26T11:26:46.000Z","dateCreated":"2024-06-10T20:30:54.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-24-of-2024/"},"articleSection":"announcements","keywords":"News, Security, Updates","wordCount":1135,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2024/06/anti-phishing-software.jpg","caption":"Cybersecurity News","width":900,"height":506},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ```