article thumbnail

An Interview With the Target & Home Depot Hacker

Krebs on Security

” Dmitri Golubov, circa 2005. Golubov was arrested in Ukraine in 2005 as part of a joint investigation with multiple U.S. . “My nickname was MikeMike, and I worked with Dmitri Golubov and made technologies for him,” Shefel said. “I’m also godfather of his second son.” Image: U.S. ” he inquired.

Retail 270
article thumbnail

Real-Time Attacks Against Two-Factor Authentication

Schneier on Security

In the event targets' accounts were protected by 2fa, the attackers redirected targets to a new page that requested a one-time password. I wrote about this exact attack in 2005 and 2009. This isn't new.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

MY TAKE: A path for SMBs to achieve security maturity: start small controlling privileged accounts

The Last Watchdog

These hacking waves contribute to the harvesting of account credentials and unauthorized access to loosely-configured servers; and these ill-gotten assets can, in turn, be utilized to execute different stages of higher-level hacks, such as account takeovers and ransomware campaigns. These are simple steps to take,” he told me.

article thumbnail

Ask Fitis, the Bear: Real Crooks Sign Their Malware

Krebs on Security

That same email address also is tied to two forum accounts for a user with the handle “ O.R.Z.” user account — this one on Verified[.]ru Prior to that, akafitis@gmail.com was used as the email address for the account “ Fitis ,” which was active on Exploit between September 2006 and May 2007.

Malware 310
article thumbnail

Meet Ika & Sal: The Bulletproof Hosting Duo from Hell

Krebs on Security

From January 2005 to April 2013, there were two primary administrators of the cybercrime forum Spamdot (a.k.a bank accounts. Multiple accounts are registered to that email address under the name Alexander Valerievich Grichishkin , from Cherepovets. This post is an attempt to remedy that omission. w s, icamis[.]ru

article thumbnail

Capital One Data Theft Impacts 106M People

Krebs on Security

That data included approximately 140,000 Social Security numbers and approximately 80,000 bank account numbers on U.S. “Importantly, no credit card account numbers or log-in credentials were compromised and over 99 percent of Social Security numbers were not compromised,” Capital One said in a statement posted to its site.

article thumbnail

DEEP TECH NEWS: How ‘attribute-based encryption’ preserves privacy at a fined-grained level

The Last Watchdog

It can differentiate departments, such as HR, accounting or the executive suite, as well as keep track of user roles, such as manager, clerk or subcontractor. ABE has undergone significant theoretical advancements since 2005. For instance, ABE can correlate specific company attributes to certain user attributes.