Hackers Target Trucking and Freight Firms to Steal Real-World Cargo Shipments

This report describes an active and widespread campaign since early 2025 in which organized criminal groups compromise carriers and brokers—via fraudulent load-board postings, hijacked email threads, and phishing—to install remote monitoring and management (RMM) tools and credential-harvesting utilities. With remote access, attackers delete or alter bookings, add devices to dispatcher lines, and rebook loads under compromised identities to steal high-value cargo, contributing to escalating cargo-theft losses estimated in the billions.