Krebs on Security

JUNE 28, 2022

That same day, AWM Proxy — a 14-year-old anonymity service that rents hacked PCs to cybercriminals — suddenly went offline. AWMproxy, the storefront for renting access to infected PCs, circa 2011. Over the past decade, both Glupteba and AWM Proxy have grown substantially. But on Dec.

Passwords 234

Passwords Malware Internet Internet 234

Krebs on Security

JUNE 21, 2023

has been associated with the user Kerens on the Russian hacking forum Exploit from 2011 to the present day. The very first post by Kerens on Exploit in 2011 was a negative review of a popular crypting service that predated Cryptor[.]biz .” Meanwhile, the Jabber address masscrypt@exploit.im

Malware 211

Malware Antivirus Cybercrime Hacking 211

Krebs on Security

APRIL 18, 2023

Verified and other Russian language crime forums where MrMurza had a presence have been hacked over the years, with contact details and private messages leaked online. For the past few years, someone using the nickname Gaihnik25 has been posting messages to the Russian-language hacking forum Gerki[.]pw The address gaihnik@mail.ru

Malware 225

Malware Passwords Accountability Advertising 225

Krebs on Security

JULY 16, 2019

Here’s a snippet from one of Yalishanda’s advertisements to a cybercrime forum in 2011, when he was running a bulletproof service under the domain real-hosting[.]biz: The one or two domain names registered to Aleksandr Volosovyk and that mail.ru The nickname Yalishanda means “Alexander” in Mandarin (????). and Europe.

Cybercrime 178

Cybercrime Phishing Banking Malware 178

Krebs on Security

FEBRUARY 9, 2022

Debuting in 2011, Ferum Shop is one of the oldest observed dark web marketplaces selling “card not present” data (customer payment records stolen from hacked online merchants), according to Gemini. “In this time period, roughly 66% of Ferum Shop’s records have been from United States financial institutions. .

Cybercrime 228

Cybercrime Identity Theft Marketing Retail 228