Browser Hijacking Campaign Infects 2.3 Million Users
Koi Security researchers uncovered RedDirection, a network of 18 Chrome and Edge extensions – masquerading as utilities like the popular Geco color picker – that initially behaved normally but later hijacked every browser session, tracked and exfiltrated URLs, and backdoored users’ browsers through silent updates. Combined, these extensions have infected over 2.3 million users, making it one of the largest documented browser‑hijacking operations.
Monzo Fined £21m After Implausible Address Sign‑ups
The FCA imposed a £21 million fine on digital bank Monzo for weak financial crime controls that let customers register using implausible UK addresses (10 Downing Street, Buckingham Palace, Monzo HQ) amid growth from 600,000 to 5.8 million users, and for repeatedly breaching rules on onboarding high‑risk clients (2020-22). The penalty was discounted from £30.1 million after Monzo’s voluntary resolution -Monzo says it has since made substantial improvements to its controls.
INTERPOL Warns of Global Human Trafficking–Fueled Scam Centres
As of March 2025, victims from 66 countries have been trafficked into online scam centres, with 74% still concentrated in Southeast Asia but emerging hubs now in the Middle East, West Africa, and Central America. Traffickers, 90% from Asia, 80% male, and 61% aged 20-39 -coerce victims via debt bondage, beatings, and sexual abuse to run social engineering scams. INTERPOL notes the rise of AI-driven deepfakes for romance and sextortion schemes and warns these centres increasingly overlap with drug, firearms, and wildlife trafficking routes, urging coordinated international law enforcement and NGO partnerships.
EU Pilots Digital ID Age-Check App in Five Member States
France, Spain, Italy, Denmark and Greece will test a blueprint app for age verification – built on the European Digital Identity Wallet specs – to protect children online from harmful content. The app, launching next year, can be customised by each country or used as a standalone service. The Commission also issued Digital Services Act guidelines mandating platforms like Google, Meta and TikTok to tackle addictive design, cyberbullying and illegal content. “Platforms have no excuse to be continuing practices that put children at risk,” said EU tech chief Henna Virkkunen.
EU Releases Privacy‑Preserving Age‑Verification Blueprint
On 14 July 2025, the Commission published the first version of an open‑source, white‑label age‑verification blueprint to help platforms implement a user‑friendly, privacy‑preserving method for confirming over‑18 status without revealing personal data. A pilot phase will run with Denmark, France, Greece, Italy and Spain, integrating the solution into national digital wallets or custom apps. Key features include separation of issuance and presentation to prevent cross‑service tracking, single‑use proofs, and forthcoming integration of zero‑knowledge proofs for unlinkable transactions. Online services are invited to join testing alongside adult content providers, supporting coherent DSA Article 28 compliance across the EU.
APP Scams Reimbursement Dashboard
In our latest dashboard covering 7 Oct 2024 – 31 Mar 2025, 87% (£66 m) of money lost to authorised push payment (APP) scams was returned to victims, with 109 000 claims reported, 77 000 were reimbursable under the policy. Firms closed 86% of claims within 5 business days, while just 3% were rejected for insufficient consumer care.
Barclays Fined £42m for AML Risk Management Failings
The Financial Conduct Authority fined Barclays Bank UK PLC and Barclays Bank PLC a total of £42 million for two separate failures in its anti–money laundering controls: £39.3 million for inadequate due diligence and ongoing monitoring of high‑risk client Stunt & Co, allowing £46.8 million linked to the Fowler Oldfield laundering operation to flow unchecked and £3 million for opening an account for WealthTek without a simple check of the Financial Services Register, despite its lack of authorization to hold client funds.
Stay compliant, stay secure, and have a great week!