article thumbnail

Fake Lawsuit Threat Exposes Privnote Phishing Sites

Krebs on Security

The disclosure revealed a profitable network of phishing sites that behave and look like the real Privnote, except that any messages containing cryptocurrency addresses will be automatically altered to include a different payment address controlled by the scammers. co showing the site did indeed swap out any cryptocurrency addresses.

Phishing 223
article thumbnail

Canada Charges Its “Most Prolific Cybercriminal”

Krebs on Security

There is a now-dormant Myspace account for a Matthew Philbert from Orleans, a suburb of Ottawa, Ontario. The information tied to the Myspace account matches the age and town of the defendant. The Myspace account was registered under the nickname “ Darkcloudowner ,” and to the email address dark_cl0ud6@hotmail.com.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

REvil Ransom Arrest, $6M Seizure, and $10M Reward

Krebs on Security

million in cryptocurrency sent to another REvil affiliate, and that the U.S. ” These last two nicknames correspond to accounts on several top cybercrime forums way back in 2013, where a user named “Yaroslav2468” registered using the email address yarik45@gmail.com. The DOJ also said it had seized $6.1

article thumbnail

Three UK-based Nigerian BEC Scammers Used Construction Intelligence Service to Target Victims

Security Boulevard

Victim A notified the FBI that someone was spoofing Victim B, by sending emails from the address "accounts@lucasconstruct.com." (The to a SunTrust bank account rather than to Lucas Construction! to a PNC Bank account controlled by criminals after receiving a similar request to update their records from "accounts@tellepsengroup.com."

Banking 64
article thumbnail

What To Know About Privacy Data

Identity IQ

Other types of data that you should consider private include: Your bank account number and card details. Login information for online accounts you have. When you add this type of data to cloud storage, ensure your account is protected with more than just a password. Credit card details. Your address and phone numbers.

article thumbnail

The Hacker Mind Podcast: Fuzzing Crypto

ForAllSecure

For others, it means cryptocurrency. Guido Vranken returns to The Hacker Mind to discuss his CryptoFuzz tool on GitHub, as well as his experience fuzzing and finding vulnerabilities in cryptographic libraries and also within cryptocurrencies such as Ethereum. That means it falls to you to protect your cryptocurrency.

article thumbnail

Mystic Stealer

Security Boulevard

Oftentimes this is credential data, but it can be any data that may have financial value to an adversary; this includes paid online service accounts, cryptocurrency wallets, instant messenger, or email contacts lists, etc. Key Mystic Stealer functions include its ability to extract data from web browsers and cryptocurrency wallets.