News related to
Security

Okta Threat Intelligence has uncovered a widespread campaign exploiting malicious online ads to tempt hotel and vacation rental professionals into disclosing access credentials. Attackers have been deploying paid search advertisements on platforms such as Google Search, impersonating familiar hospitality service providers. These deceptive ads lead victims to counterfeit login portals of cloud‑based property management and guest messaging systems, with the goal of harvesting usernames, passwords and one‑time authentication codes.

The adverts specifically mimic legitimate service providers—Okta researchers identified at least thirteen hospitality‑focused brands being spoofed. Rather than redirecting users to authentic company sites, these ads channel them to typosquatted domains that host visually convincing but fraudulent login pages. Through these pages, attackers collect credentials and MFA codes, undercutting security even when multi‑factor authentication is in place.

The phishing sites also incorporate tracking capabilities—collecting geolocation, session data, bot detection metrics and analytics—to better tailor the campaign and measure its effectiveness.

This strategy exemplifies the growing menace of malvertising, where advertisements themselves become vectors for malware distribution or phishing. Malwarebytes data reflects dramatic growth in such campaigns: a 42 per cent month‑on‑month escalation in fall 2023, followed by another rise of 41 per cent between July and September. Malicious ads frequently appear alongside legitimate search results, granting them apparent credibility and increasing the chance of successful deception.

Experts point out the dual advantage these tactics offer to threat actors: extensive reach through ad networks and a veneer of trust derived from the proximity to legitimate search results.

The hospitality sector faces unique vulnerabilities as hotels and rental operators increasingly rely on cloud systems to manage bookings, guest interactions and operational workflows. With projections indicating that by 2028 some 76 per cent of travel and tourism revenues will be generated online, these sectors have become especially tempting targets.

This campaign represents a convergence of two escalating cybersecurity concerns: the explosive growth of malvertising and the rising exposure of hospitality infrastructure to credential-based attacks. While the ads serve as the initial lure, the fraudulent credential capture enables potential downstream compromises across cloud services that manage guest data, reservations and even messaging systems.

For hotel and rental operators, the implications are severe—a breach of access credentials might cascade into broader system intrusions, guest data exposure and operational disruption. Preventive measures should include rigorous verification of URLs before entering credentials, vigilant monitoring of sponsored search results for impostor ads, widespread staff awareness and training, and robust technical controls like domain-based message authentication and behavioural anomaly detection.

Journalistic integrity demands careful cross-verification of details. Okta’s findings were drawn from their threat intelligence and threat detection capabilities tailored to enterprise identity environments. Malvertising trends are substantiated by independent cybersecurity data from industry researchers such as Malwarebytes. The convergence of these findings draws a consistent picture: the hospitality industry must brace for sophisticated phishing campaigns delivered via the same channels they rely on for marketing.

Mastercard and Circle have deepened their collaboration to enable settlement of transactions in USDC and EURC stablecoins for acquirers and merchants across Eastern Europe, the Middle East and Africa. Arab Financial Services and Eazy Financial Services are among the first institutions to access this capability, which integrates stablecoin payments into Mastercard’s established global network.

The initiative marks a clear shift towards tokenised money. Mastercard’s President for EEMEA, Dimitrios Dosis, emphasised the ambition to bring stablecoins into mainstream finance by investing in infrastructure, governance and partnerships, while leveraging the company’s longstanding expertise in security and compliance. Kash Razzaghi, Chief Business Officer at Circle, framed the move as a step towards “borderless, real‑time commerce,” seeking to make USDC as ubiquitous as traditional payments.

Arab Financial Services highlighted the tangible value of the new model: improved liquidity, operational efficiencies and dramatically reduced friction in high‑volume reconciliations. Eazy Financial Services underscored how the expanded settlement option aligns with its mission to offer faster, more secure, and efficient payment solutions, setting a fresh standard for digital settlements in EEMEA.

This development builds on existing collaborations such as crypto payment card solutions with the likes of Bybit and S1LKPAY, which already use USDC for settlement in the region. Mastercard further extends its stablecoin portfolio beyond USDC and EURC, already supporting USDG, FIUSD and PYUSD across various use‑cases spanning remittances, B2B, and payouts via platforms like Mastercard Move and the Multi‑Token Network, underpinned by its Crypto Credential and Crypto Secure frameworks.

Financial infrastructure experts view the rollout as particularly meaningful for emerging markets. World Bank data indicates cross‑border transfer costs remain high—around 8% on average—far exceeding the UN’s Sustainable Development Goal threshold of 3%. Introducing stablecoin settlement is expected to trim costs, accelerate transfers, and bolster working capital and currency resilience for small and medium businesses.

Analyses point to early adopters witnessing significant gains: settlement speeds up by 30%, and liquidity costs drop around 20%, according to some reports. Mastercard’s compliance infrastructure, combined with evolving regulatory frameworks like the European MiCA and US GENIUS Act, fosters institutional trust in this digital settlement evolution.

Circle is working to fortify USDC’s global footprint beyond this initiative. Its broader strategy includes partnerships with Finastra to plug USDC into traditional payment hubs, OKX for zero‑fee USDC conversions, and ventures with SBI Group and Ripple in Asia—all aimed at building liquidity, interoperability and widespread adoption.

Sui Network and Alibaba Cloud have unveiled an artificial intelligence‑powered coding assistant for the Move programming language, embedded directly within ChainIDE to enhance developer experience from the outset.

An AI assistant has been introduced into ChainIDE, Sui’s flagship development environment, enabling developers to generate Move code through natural language prompts in English, Chinese and Korean. The assistant provides intelligent autocompletion, real‑time security checks, automated documentation and readily available templates—features engineered to smooth out common roadblocks in smart contract development.

This integration aligns with the growing convergence of AI and blockchain innovation, offering a unified environment where developers can focus more on creativity and less on syntax or language barriers.

Market reception has been positive. The SUI token’s price climbed between one and 2.1 percent following the announcement, reaching approximately $3.44, signalling investor confidence despite a generally bearish crypto climate.

Behind the integration lies a broader strategy to lower entry barriers for Move developers—particularly non-English speakers, who constitute a significant portion of the global Web3 community. By offering multilingual support, the tool opens the door for wider participation across Asia and beyond.

Industry observers suggest that this could translate into increased developer engagement and boosted ecosystem activity. The intelligent tooling is expected to streamline dApp deployment, reduce development cycles and yield more robust, secure code—even for newcomers to blockchain development.

Emerging data underscores this potential. Preliminary reports indicate a possible 40 percent uplift in developer activity within the Sui ecosystem, alongside rising application deployment and on‑chain usage. When combined with enhanced tooling and cloud infrastructure from Alibaba Cloud, this surge can help catalyse a flywheel effect: more developers, more dApps, more users, stronger demand for SUI through gas fees and staking.

Alibaba Cloud contributes more than software. The alliance includes node infrastructure support and enterprise‑grade scalability capabilities, reinforcing the network’s ability to handle higher transaction volumes and support institutional use cases.

Security remains a key consideration. The assistant’s real‑time vulnerability detection helps flag potential issues such as reentrancy risks or inefficiencies before deployment. Yet concerns persist about overreliance on AI-generated code, emphasising the importance of combining automation with developer oversight.

Institutional momentum continues to build. Swiss custodial services and SUI‑centric investment vehicles have entered the ecosystem, signalling growing trust. Meanwhile, developer outreach events in financial hubs such as Hong Kong, Singapore and Dubai are helping showcase Sui’s AI‑enhanced toolkit to enterprises and Web3 innovators.

Pepeto has secured over $6.5 million in presale funding, driven by an operational ecosystem that includes a zero‑fee decentralised exchange, staking rewards exceeding 230 per cent APY, and independent audits—a suite of features positioning the token as a serious contender amid meme‑coin revival.

At its Ethereum‑based core, Pepeto boasts PepetoSwap, a DEX offering fee‑free, fast trading, alongside PepetoBridge, enabling seamless cross‑chain transfers without intermediaries—all built on the security of Ethereum’s mainnet. Audits conducted by SolidProof and Coinsult reinforce its transparency credentials, a notable departure from many fleeting meme‑coin projects.

The presale’s momentum stems from strong investor appetite. Millions have poured into the token, with reports showing more than $6.2 million raised by Stage 10—completed ahead of schedule—and over $6.5 million amassed as the presale continues. Token pricing has incrementally increased across presale stages, intensifying urgency among investors hoping to enter early.

Pepeto’s tokenomics reflect a deliberately structured approach: 30 per cent allocated to presale distribution, another 30 per cent to staking incentives, 20 per cent for marketing, 12.5 per cent for liquidity, and 7.5 per cent reserved for development. The absence of team wallets and trade taxes further underscores a model designed to align with holder interests.

Community engagement appears healthy; over 100,000 followers on social platforms are amplifying the narrative around Pepeto—and its product rollout, including a public demo exchange, has already lifted awareness and participation.

Analysts compare Pepeto’s structure favourably to early meme‑coin success stories. Some suggest that the ecosystem, staking mechanics, and infrastructure could drive returns of 30× to 70×—or more—if broader market conditions align, drawing parallels to Shiba Inu’s legendary run but with stronger fundamentals.

Broader industry commentary frames Pepeto as more than a hopeful token—it is being touted as the meme‑coin with legs in 2025, combining utility with the viral energy typically absent in the category. A few analysts even liken Pepeto’s potential trajectory to a “next‑BNB‑style” breakout following exchange listings.

Still, the meme‑coin landscape remains inherently speculative. While Pepeto addresses familiar structural weaknesses—such as high fees and opaque governance—its success will depend on sustained investor interest, execution of its infrastructure, and broader crypto market cycles. History cautions that meme‑coins often fade when hype fades.

If Pepeto translates infrastructure into adoption, it may carve out a path distinct from prior meme plays. Early investors, particularly those securing tokens at the current presale price—estimated at approximately $0.000000150—stand to gain significantly should the token replicate past meme-coin rallies, albeit with arguably enhanced foundation.

The US Department of the Treasury has issued a formal call for public feedback on cutting‑edge mechanisms that regulated financial institutions might deploy to detect illicit digital asset activity. This request stems from the Guiding and Establishing National Innovation for U. S. Stablecoins Act, signed into law on 18 July 2025, mandating that entities issuing payment stablecoins are treated as financial institutions under anti‑money laundering, sanctions, and related frameworks. The Treasury now seeks input on application programming interfaces, artificial intelligence, digital identity verification, and blockchain analytics as tools to bolster enforcement and transparency. Respondents are invited to submit comments by 17 October 2025.

The Treasury plans to assess submissions to evaluate how these technologies may enhance detection abilities, weigh the associated costs and privacy and cybersecurity implications, and understand operational hurdles. This evaluation will inform a report to Capitol Hill, which will include suggestions for legislative and regulatory action, possibly followed by guidance or rulemaking.

The request arrives on the back of Executive Order 14178, issued in January 2025, advocating for US leadership in digital finance technologies. It also follows the Working Group on Digital Asset Markets report, released in July 2025, which called for stronger AML/CFT and sanctions frameworks, including enhanced public–private cooperation and digital identity measures.

Regulated entities are urged to outline how they are using—or could use—APIs to improve risk detection, for example through real‑time data sharing or transaction monitoring. AI deployment examples might cover systems capable of spotting complex illicit finance networks via large‑scale transaction analysis. Digital identity verification inputs could focus on portable credentials or biometrics, and the blockchain component invites discussion of analytics tools that integrate on‑chain and off‑chain data, as well as efforts to overcome obfuscation techniques.

Treasury’s criteria for evaluating the proposals extend beyond efficacy. Institutions must weigh how sensitive the data is, the privacy implications of collection and analysis, the technological and operational burdens of implementation, and any cybersecurity vulnerabilities.

Industry reactions underscore both opportunity and burden. As the Treasury’s announcement puts it, “innovative tools are critical to advancing efforts to address illicit finance risks but can also present new resource burdens for financial institutions.” Advocacy groups like America’s Credit Unions have endorsed the consultation, framing it as a critical step in aligning stablecoin activity with the GENIUS Act’s one‑year implementation horizon, urging rapid progress toward safe digital asset services for communities.

Law‑firm analysis also points to the broader AML/CFT context. The consulting documents note that the GENIUS Act and its complementary Executive Order seek to fold stablecoin activities into the Bank Secrecy Act framework—bringing them under familiar obligations for AML, sanctions screening, transaction monitoring, and customer due diligence.

The public consultation ends on 17 October 2025. Following that, the Treasury is expected to synthesise the feedback into a report for the Senate’s Banking committee and the House Financial Services committee, and potentially proceed with issuing guidance or initiating rulemaking.

Beyond these regulatory actions, separate developments in the enforcement space illustrate an increasing reliance on technology to combat illicit finance. The IRS’s CI‑FIRST initiative streamlines subpoena processes and heightens data‑sharing with financial institutions to tackle financial crimes, including those linked to illicit trafficking and fraud, using AI and automation.

In parallel, academic innovations continue apace. Recent studies have explored graph neural networks and unsupervised anomaly detection for tracing illicit flows through Bitcoin, offering early malice‑detection frameworks that prioritise interpretability and adaptability—trends that align well with the Treasury’s probe into AI, APIs, identity verification and blockchain monitoring.