Krebs on Security

MARCH 31, 2020

PT Monday evening, Escrow.com’s website looked radically different: Its homepage was replaced with a crude message in plain text: The profanity-laced message left behind by whoever briefly hijacked the DNS records for escrow.com. Running a reverse DNS lookup on this 111.90.149[.]49 Image: Escrow.com.

Phishing 288

Phishing DNS Social Engineering Accountability 288

Krebs on Security

FEBRUARY 26, 2023

GoDaddy described the incident at the time in general terms as a social engineering attack, but one of its customers affected by that March 2020 breach actually spoke to one of the hackers involved. But we do know the March 2020 attack was precipitated by a spear-phishing attack against a GoDaddy employee.

Hacking 269

Hacking Social Engineering Phishing Scams 269

Security Affairs

AUGUST 27, 2019

According to Dragos, the Hexane group has been active since at least the middle of 2018, it intensified its activity since early 2019 with an escalation of tensions within the Middle East. Lyceum was observed using password spraying and brute-force attacks to compromise email accounts of targeted individuals.

DNS 81

DNS Passwords Penetration Testing Social Engineering 81

Security Affairs

FEBRUARY 1, 2019

Security experts at Cybaze – Yoroi ZLab have analyzed a new sample of the AdvisorsBot malware, a downloader that was first spotted in August 2018. Other interesting function is “j2aYhH”: Figure 8 – Accounts and emails stealing. This function searches for all email accounts registered on victim machine.

Malware 85

Malware DNS Social Engineering Advertising 85

eSecurity Planet

DECEMBER 3, 2021

Fifteen years after the launch of the microblogging social media platform, Twitter remains a dominant public forum for instant communication with individuals and organizations worldwide on a universe of topics, including #cybersecurity. — Jack Daniel (@jack_daniel) October 10, 2018. jaysonstreet) March 3, 2018.

Accountability 139

Accountability Cybersecurity Penetration Testing InfoSec 139

SecureList

JANUARY 13, 2022

We reported about the first variant of such software back in 2018, but there were many other samples to be found, which was later reported by the US CISA (Cybersecurity and Infrastructure Security Agency) in 2021. This lets them mount high-quality social engineering attacks that look like totally normal interactions.

Cryptocurrency 130

Cryptocurrency Malware Accountability Banking 130

eSecurity Planet

MARCH 25, 2022

In November 2021, an unauthorized third party called a Robinhood customer support employee and, through social engineering , gained access to the company’s customer support systems. Between 2016 and 2018, the malware strain SamSam made brute force RDP attacks an integral part of its attacks on several public organizations.

VPN 119

VPN Software Authentication Encryption 119