Cyber attacks fuel surge in cargo theft across logistics industry

Proofpoint researchers observed a coordinated cybercrime campaign (active since mid‑2025) targeting trucking and logistics firms: attackers delivered malicious VBS/PowerShell payloads via breached load boards, installed persistent remote management tools (ScreenConnect, Pulseway, SimpleHelp) — in some cases using a fraudulent code‑signing workflow — and conducted hands‑on credential and browser data theft to divert cargo and payments; losses in North America were reported at $6.6 billion in 2025, and activity is linked to organized crime.