Romanian Gavril Sandu extradited to the US in 2026 for a 2009-2010 vishing bank fraud scheme. He hacked small businesses’ VoIP systems, cloned payment cards, and faces up to 30 years in prison. #Romania #VoIPFraud #BankFraud
Romanian Extradited to US for Role in Hacking Scheme 17 Years Ago
A Romanian national, 53-year-old Gavril Sandu, was extradited to the United States in April 2026 to face charges related to a vishing-based bank fraud scheme carried out between May 2009 and October 2010. Authorities say Sandu hacked small businesses' VoIP systems to steal customer credentials, cloned payment cards and acted as...
www.hendryadrian.com
May 6, 2026 at 12:45 PM
Romanian Gavril Sandu extradited to the US in 2026 for a 2009-2010 vishing bank fraud scheme. He hacked small businesses’ VoIP systems, cloned payment cards, and faces up to 30 years in prison. #Romania #VoIPFraud #BankFraud
CL-CRI-1116 attacks combine phishing SSO pages, antidetect browsers, and residential proxies to steal credentials via spoofed VoIP vishing. Attackers bypass MFA, exploit Microsoft Graph API, and demand seven-figure ransoms. #CLCRI1116 #VoIPFraud
Extortion in the Enterprise: Defending Against BlackFile Attacks
CL-CRI-1116 campaigns combine SSO-style phishing pages with antidetect browsers and residential proxies to harvest credentials. Attackers use vishing from spoofed VoIP/CNAM to capture credentials and TOTPs, bypass MFA, abuse Microsoft Graph API and SaaS search to collect sensitive files, exfiltrate data via APIs or file-sharing services, and pressure victims with seven-figure ransom demands and SWATting. #CL-CRI-1116 #MicrosoftGraphAPI
www.hendryadrian.com
April 24, 2026 at 9:00 AM
CL-CRI-1116 attacks combine phishing SSO pages, antidetect browsers, and residential proxies to steal credentials via spoofed VoIP vishing. Attackers bypass MFA, exploit Microsoft Graph API, and demand seven-figure ransoms. #CLCRI1116 #VoIPFraud