Hackers hijack Japanese financial accounts to conduct nearly $2 billion in trades

Japan’s Financial Services Agency reported a surge in unauthorized online trading in April: attackers used stolen login credentials obtained via phishing to breach nearly 5,000 accounts across multiple securities firms, executing thousands of fraudulent trades that moved roughly $1–2 billion and were used to pump and profit from small-cap stocks; security researchers linked the activity to increased phishing campaigns and the CoGUI phishing kit.