Cyber News 02DEC2025

General

• An interesting side-effect of multi-tenant cloud architecture - Microsoft Teams security features are tied to the tenant hosting the conversation, not the participants.
  • https://www.ontinue.com/resource/blog-microsoft-chat-with-anyone-understanding-phishing-risk/
• [EU] German and Swiss authorities shutdown a bitcoin mixer service imaginatively named 'Cryptomixer'. Authorities obtain 12TiB of data but only €25m in Bitcoin.

Since its creation in the year 2016, over EUR 1.3 billion in Bitcoin were mixed through the service

• https://www.eurojust.europa.eu/news/cryptocurrency-mixing-service-used-launder-money-taken-down
• https://www.europol.europa.eu/media-press/newsroom/news/europol-and-partners-shut-down-cryptomixer
• (Obligatory manga video) https://www.operation-olympia.com/
• https://www.bleepingcomputer.com/news/security/police-takes-down-cryptomixer-cryptocurrency-mixing-service/
• https://therecord.media/cryptomixer-service-takedown-bitcoin-seized
• Meanwhile, North Korea may have nabbed another $3om - from Upbit (mentioned previously, after their reported acquisition by Naver).
  • https://therecord.media/officials-accuse-north-korea-hackers-of-attack-on-crypto-exchange
• The danger of running extensions in the browser - they may start off as trustworthy, but switch to malicious at any time, with a simple auto-update
  • https://www.koi.ai/blog/4-million-browsers-infected-inside-shadypanda-7-year-malware-campaign
  • https://www.bleepingcomputer.com/news/security/shadypanda-browser-extensions-amass-43m-installs-in-malicious-campaign/
  • https://www.theregister.com/2025/12/01/chrome_edge_malicious_browser_extensions/
• One to watch out for, if using Android TV - popular client 'SmartTube' appears to have suffered a supply-chain compromise. Good news - Play Protect worked and flagged the compromised version as malicious.
  • https://www.bleepingcomputer.com/news/security/smarttube-youtube-app-for-android-tv-breached-to-push-malicious-update/
• The latest in high-quality Microsoft code - non-ASCII characters blocking file opening in the new Outlook client.
  • https://www.bleepingcomputer.com/news/microsoft/microsoft-says-new-outlook-cant-open-some-excel-attachments/

Privacy

• [US] More issues with surveillance vendor Flock (known for their ALPR cameras). Flock reported to be using cheap overseas labour to tag surveillance images for AI training.
  • (Wired with 404 Media) https://archive.is/tpflz

Geo-Politics

• [CN] China's embracing of combined attack-defence labs (a purple-team mindset).
  • https://nattothoughts.substack.com/p/chinas-cybersecurity-companies-advancing

AI

• Is it 'AI Generated' or just regurgitated human-generated content plus spelling mistakes? Google's NotebookLM gets caught out.
  • https://www.bleepingcomputer.com/news/artificial-intelligence/google-deletes-x-post-after-getting-caught-using-a-stolen-ai-recipe-infographic/