Duo's Security Blog

SEPTEMBER 14, 2021

Adoption of two-factor authentication has substantially increased since we began conducting this research in 2017. SMS Text Message Remains the Most Used Authentication Method SMS (85%) continues to be the most common second factor that respondents with 2FA experience have used, slightly up from in 2019 (72%).

Password Management 92

Password Management Passwords Authentication Accountability 92

Krebs on Security

JULY 10, 2022

Twice in the past month KrebsOnSecurity has heard from readers who’ve had their accounts at big-three credit bureau Experian hacked and updated with a new email address that wasn’t theirs. In both cases the readers used password managers to select strong, unique passwords for their Experian accounts.

Accountability 315

Accountability Passwords Authentication Password Management 315

Malwarebytes

MAY 10, 2024

A cybercriminal called Menelik posted the following message on the “Breach Forums” site: “The data includes 49 million customer and other information of systems purchased from Dell between 2017-2024. Change your password. You can make a stolen password useless to thieves by changing it. Enable two-factor authentication (2FA).

Data breaches 135

Data breaches Passwords Phishing Big data 135

Malwarebytes

AUGUST 11, 2022

Slack, the workplace communication platform, has notified some of its users that their hashed passwords have been subject to exposure for the last five years. The flaw exposed hashed passwords of users when creating or revoking shared invitation links for workspaces. Hashed passwords could still be revered by brute force methods.

Passwords 63

Passwords Accountability Encryption Authentication 63

Krebs on Security

AUGUST 25, 2023

Countless websites and online services use SMS text messages for both password resets and multi-factor authentication. For example, many online services require you to provide a phone number upon registering an account, but that number can often be removed from your profile afterwards. Why do I suggest this?

Mobile 198

Mobile Cyber Risk Cryptocurrency Data breaches 198

Krebs on Security

FEBRUARY 26, 2023

million customers, including website administrator passwords, sFTP credentials, and private SSL keys; -December 2022: Hackers gained access to and installed malware on GoDaddy’s cPanel hosting servers that “intermittently redirected random customer websites to malicious sites.”

Hacking 268

Hacking Social Engineering Phishing Scams 268

Krebs on Security

JULY 23, 2018

Google has not had any of its 85,000+ employees successfully phished on their work-related accounts since early 2017, when it began requiring all employees to use physical Security Keys in place of passwords and one-time codes, the company told KrebsOnSecurity. A YubiKey Security Key made by Yubico. a mobile device).

Phishing 224

Phishing Authentication Mobile Passwords 224

Krebs on Security

APRIL 11, 2019

Google this week made it easier for Android users to enable strong 2-factor authentication (2FA) when logging into Google’s various services. and higher can now be used as Security Keys , an additional authentication layer that helps thwart phishing sites and password theft. a one-time token, key fob or mobile device).

Mobile 235

Mobile Authentication Passwords Accountability 235

Security Affairs

JULY 2, 2019

US Cyber Command posted on Twitter an alert about cyber attacks exploiting the CVE-2017-11774 vulnerability in Outlook. Yesterday I was using Twitter when I noticed the following alert issued by the account managed by the US Cyber Command : USCYBERCOM has discovered active malicious use of CVE-2017-11774 and recommends immediate #patching.

Energy and Utilities 80

Energy and Utilities Malware Advertising InfoSec 80

Krebs on Security

AUGUST 12, 2020

Several stories here have highlighted the importance of creating accounts online tied to your various identity, financial and communications services before identity thieves do it for you. ” In short, although you may not be required to create online accounts to manage your affairs at your ISP, the U.S. .”

Accountability 341

Accountability Mobile Banking Passwords 341

Krebs on Security

AUGUST 27, 2019

Imperva , a leading provider of Internet firewall services that help Web sites block malicious cyberattacks, alerted customers on Tuesday that a recent data breach exposed email addresses, scrambled passwords, API keys and SSL certificates for a subset of its firewall users. Redwood Shores, Calif.-based

Cybersecurity 245

Cybersecurity Firewall Passwords Data breaches 245

Krebs on Security

MARCH 8, 2019

Unfortunately, if you don’t already have an account at the credit bureau’s new myEquifax portal , it may be simple for identity thieves to lift an existing credit freeze at Equifax and bypass the PIN armed with little more than your, name, Social Security number and birthday. Getting an account at myequifax.com was easy.

Accountability 268

Accountability Identity Theft Authentication Passwords 268

Security Affairs

NOVEMBER 3, 2018

Cybercriminals offered for sale private messages from at least 81,000 Facebook accounts claiming of being in possession of data from 120 million accounts. Crooks are offering for sale Criminals are selling the private messages of 81,000 hacked Facebook accounts for 10 cents per account. ” states the BBC.

Accountability 97

Accountability Advertising Cybercrime Hacking 97

Security Affairs

OCTOBER 17, 2023

The group is also the author of the NotPetya ransomware that hit hundreds of companies worldwide in June 2017. ’ The CERT-UA also reported that the state-sponsored hackers used compromised VPN accounts that weren’t protected by multi-factor authentication. “Note (!)

Telecommunications 103

Telecommunications Authentication Data collection Passwords 103

Krebs on Security

AUGUST 16, 2018

An entrepreneur and virtual currency investor is suing AT&T for $224 million, claiming the wireless provider was negligent when it failed to prevent thieves from hijacking his mobile account and stealing millions of dollars in cryptocurrencies. On June 11, 2017, Terpin’s phone went dead.

Mobile 229

Mobile Cryptocurrency Accountability Authentication 229

Security Affairs

JUNE 8, 2022

“Upon gaining an initial foothold into a telecommunications organization or network service provider, PRC state-sponsored cyber actors have identified critical users and infrastructure including systems critical to maintaining the security of authentication, authorization, and accounting.

Telecommunications 94

Telecommunications Authentication Passwords Accountability 94

Troy Hunt

JANUARY 8, 2019

Very often, those addresses are accompanied by other personal information such as passwords. No, and the passwords are the very first thing that starts to give it all away. The attack is simple but effective due to the prevalence of password reuse. That's it, job done, they're into your account.

Hacking 224

Hacking Passwords Accountability Data breaches 224

The Last Watchdog

AUGUST 18, 2021

billion in 2017; Avast acquired AVG for $1.3 There are simple steps consumers can take today, for free, to lower their overall risk of a cyber attack, including using multi-factor authentication for their accounts and using strong passwords. A lot of water has flowed under the bridge since then.

Antivirus 223

Antivirus Marketing Identity Theft Social Engineering 223

Malwarebytes

MAY 7, 2021

If you use a Google account, it may soon be mandatory to sign up to Google’s two-step verification program. As recently as 2017, a tiny amount of GMail users made use of its two-step options. With so much valuable data stuffed inside Google accounts, it’s beyond time to ensure they’re locked down properly.

Passwords 97

Passwords Password Management Backups Accountability 97

Security Affairs

AUGUST 15, 2018

Hundreds of Instagram accounts were hijacked in what appears to be the result of a coordinated attack, all the accounts share common signs of compromise. Alleged attackers have hijacked Instagram accounts and modified personal information making impossible to restore the accounts. Russian domain. Russian domain.

Accountability 49

Accountability Hacking Authentication Passwords 49

Hot for Security

MARCH 29, 2021

You probably don’t recall creating an account on the Verifications.io Email verifiers are online services that allow marketers and salespeople to verify that the email address you used to create an account, sign up for a newsletter or make an order on their website is real and valid. platform or River City Media.

Data breaches 116

Data breaches Media Marketing Social Engineering 116

Elie

NOVEMBER 9, 2017

Over the course of March, 2016–March, 2017, we identify 788,000 potential victims of off-theshelf keyloggers; 12.4 billion usernames and passwords exposed via data breaches and traded on blackmarket forums. Drawing upon Google as a case study, we find 7–25% of exposed passwords match a victim’s Google account.

Data breaches 112

Data breaches Phishing Risk Malware 112

eSecurity Planet

APRIL 19, 2023

Since then Portnox continued to add capabilities, launched the first cloud-native NAC in 2017, and now offers a NAC SaaS solution, Portnox Cloud. authentication to gather endpoint information for reporting and enforcement. Agents Portnox does not require an agent.

IoT 93

IoT Authentication VPN Backups 93

Security Affairs

DECEMBER 1, 2019

Over 90 percent of the users identified by Google were targeted via “credential phishing emails” that attempt to trick victims into providing their password or other account credentials to hijack their Google account. It doesn’t mean that hackers successfully compromised their Google accounts.

Phishing 126

Phishing Accountability Advertising Cyber Attacks 126

Krebs on Security

AUGUST 12, 2018

The perpetrators also alter account balances and security measures to make an unlimited amount of money available at the time of the transactions, allowing for large amounts of cash to be quickly removed from the ATM. “At a pre-determined time, the co-conspirators withdraw account funds from ATMs using these cards.”

Banking 215

Banking Accountability Retail Phishing 215

eSecurity Planet

FEBRUARY 15, 2022

The agencies offered some sound cybersecurity advice for BlackByte that applies pretty generally: Conduct regular backups and store them as air-gapped, password-protected copies offline. Review domain controllers, servers, workstations, and active directories for new or unrecognized user accounts. BlackByte Ransomware Protection Steps.

Ransomware 117

Ransomware Encryption Backups Accountability 117

Security Affairs

JUNE 24, 2020

The CryptoCore group, aks Crypto-gang, “Dangerous Password”, and “Leery Turtle” has been active since 2018. “While the group’s key infiltration vector to the exchange is usually through spear-phishing against the corporate network, the executives’ personal email accounts are the first to be targeted.”

Cryptocurrency 101

Cryptocurrency Phishing Accountability Passwords 101

Krebs on Security

FEBRUARY 12, 2019

11, when the company’s Twitter account started fielding reports from users who said they were no longer receiving messages. VFEmail’s Twitter account responded that “external facing systems, of differing OS’s and remote authentication, in multiple data centers are down.” Just attack and destroy.”

Hacking 249

Hacking DDOS Backups Accountability 249

Identity IQ

FEBRUARY 1, 2022

Identity theft happens when someone uses your personal or financial information — like your Social Security or financial account number — to commit fraud. If your data is used to open an account, take out a loan or lease, file taxes, or apply for unemployment insurance or other government benefits, you may be the victim of identity theft.

Identity Theft 130

Identity Theft Scams Data breaches Insurance 130

Krebs on Security

AUGUST 19, 2020

According to interviews with several sources, this hybrid phishing gang has a remarkably high success rate, and operates primarily through paid requests or “bounties,” where customers seeking access to specific companies or accounts can hire them to target employees working remotely at home.

Phishing 357

Phishing VPN Social Engineering Media 357

Security Affairs

SEPTEMBER 21, 2019

US authorities have indicted two men for hacking the exchange EtherDelta in December 2017, one of them was also accused of TalkTalk hack. US authorities have indicted two men, Elliot Gunton and Anthony Tyler Nashatka, for hacking the cryptocurrency exchange EtherDelta in 2017. Six days later, on December 19, 2017.

Hacking 79

Hacking DNS Cryptocurrency Accountability 79

The Last Watchdog

DECEMBER 19, 2022

Cybersecurity firm Positive Technologies found 88 new IAB sales on dark web marketplaces in the first quarter of 2020, compared to just three in all of 2017. These include: •Using multifactor authentication (MFA) on all accounts. IABs aren’t necessarily a new threat, but they’ve seen tremendous growth over the past few years.

Cybercrime 124

Cybercrime Digital transformation Ransomware Cybersecurity 124

eSecurity Planet

SEPTEMBER 16, 2021

The last update was in November 2017, and the latest draft is available for peer review until the end of the year. Insecure authentication process such as flawed account recovery or password reset, or insecure session tokens. Identification and Authentication Failures (?): Previously “Broken Authentication.”

Authentication 119

Authentication Penetration Testing Firewall Security Awareness 119

NopSec

JUNE 28, 2022

The state-sponsored actors target telecommunications providers’ Remote Authentication Dial-In User Service (RADIUS) servers. Using SQL commands, the actors seek the usernames and passwords of the providers’ customers among other goals.

Telecommunications 52

Telecommunications Authentication Small Business Passwords 52

SecureWorld News

SEPTEMBER 15, 2020

Between January and August 2020, unidentified actors used aggregation software to link actor-controlled accounts to client accounts belonging to the same institution, resulting in more than $3.5 Alert customers and employees to this scheme and actively monitor accounts for unauthorized access, modification, and anomalous activities."

Banking 57

Banking Passwords Accountability DDOS 57

Fox IT

JANUARY 12, 2021

Credential theft and password spraying to Cobalt Strike. This adversary starts with obtaining usernames and passwords of their victim from previous breaches. These credentials are used in a credential stuffing or password spraying attack against the victim’s remote services, such as webmail or other internet reachable mail services.

VPN 68

VPN Accountability Passwords DNS 68

Krebs on Security

JANUARY 25, 2022

27 — Thanksgiving Day weekend — Jim got a series of rapid-fire emails from MSF saying they’ve received his loan application, that they’d approved it, and that the funds requested were now available at the bank account specified in his MSF profile. Then on Nov. Take a look at that 546.56 for that $1,000.

Financial Services 217

Financial Services Banking Accountability Identity Theft 217