Remove 2013 Remove Authentication Remove Internet Remove Web Fraud
article thumbnail

Experian, You Have Some Explaining to Do

Krebs on Security

“I was able to answer the credit report questions successfully, which authenticated me to their system,” Turner said. That’s because Experian does not offer any type of multi-factor authentication options on consumer accounts. But now he’s wondering what else he could do to prevent another account compromise.

article thumbnail

Bomb Threat, Sextortion Spammers Abused Weakness at GoDaddy.com

Krebs on Security

Experts at Cisco Talos and other security firms quickly drew parallels between the two mass spam campaigns, pointing to a significant overlap in Russia-based Internet addresses used to send the junk emails. 13, 2018 bomb threat hoax. domaincontrol.com and ns18.domaincontrol.com). domaincontrol.com).

DNS 233
article thumbnail

Experts Fear Crooks are Cracking Keys Stolen in LastPass Breach

Krebs on Security

“The threat actor was able to capture the employee’s master password as it was entered, after the employee authenticated with MFA, and gain access to the DevOps engineer’s LastPass corporate vault.” ” By 2013, new LastPass customers were given 5,000 iterations by default.