Krebs on Security

NOVEMBER 20, 2020

Conor Freeman of Dublin took part in the theft of more than two million dollars worth of cryptocurrency from different victims throughout 2018. One way to protect your accounts against SIM swappers is to remove your phone number as a primary or secondary authentication mechanism wherever possible.

Cryptocurrency 309

Cryptocurrency Mobile Authentication Accountability 309

Krebs on Security

MAY 24, 2019

The digitized records — including bank account numbers and statements, mortgage and tax records, Social Security numbers, wire transaction receipts, and drivers license images — were available without authentication to anyone with a Web browser. billion in 2018. No authentication was required to read the documents.

Insurance 279

Insurance Banking Identity Theft Scams 279

Krebs on Security

AUGUST 7, 2018

On July 18, 2018, Pasco County authorities arrested Ricky Joseph Handschumacher , an employee of the city of Port Richey, Fla, charging him with grand theft and money laundering. In some cases, fraudulent SIM swaps succeed thanks to lax authentication procedures at mobile phone stores. A WORRIED MOM. GRAND PLANS.

Mobile 249

Mobile Cryptocurrency Computers and Electronics Scams 249

Krebs on Security

JULY 12, 2024

AT&T also acknowledged the customer records were exposed in a cloud database that was protected only by a username and password (no multi-factor authentication needed). For its part, Snowflake says it now requires all new customers to use multi-factor authentication. In a regulatory filing with the U.S.

Data breaches 346

Data breaches Passwords Authentication Accountability 346

Security Affairs

FEBRUARY 5, 2025

Microsoft.NET Framework Information Disclosure Vulnerability CVE-2018-9276 (CVSS score of 7.2) Paessler PRTG Network Monitor OS Command Injection Vulnerability CVE-2018-19410 (CVSS score of 9.8) The vulnerability allowed authenticated threat actors to execute code or SQL queries, leading to remote code execution.

Authentication 68

Authentication Hacking Cybersecurity Software 68

Krebs on Security

FEBRUARY 8, 2021

Brad Marden , superintendent of cybercrime operations for the Australian Federal Police (AFP), said their investigation into who was behind U-Admin began in late 2018, after Australian citizens began getting deluged with phishing attacks via mobile text messages that leveraged the software.

Phishing 339

Phishing Scams Banking Mobile 339

Krebs on Security

NOVEMBER 21, 2018

The problem stemmed from an authentication weakness in a USPS Web component known as an “application program interface,” or API — basically, a set of tools defining how various parts of an online application such as databases and Web pages should interact with one another. .

Accountability 279

Accountability Authentication Identity Theft Advertising 279

Krebs on Security

AUGUST 30, 2022

The missives asked users to click a link and log in at a phishing page that mimicked their employer’s Okta authentication page. Those who submitted credentials were then prompted to provide the one-time password needed for multi-factor authentication. That’s down from 53 percent that did so in 2018, Okta found.

Mobile 340

Mobile Phishing Authentication Accountability 340

Krebs on Security

DECEMBER 16, 2021

Truglia admitted to a New York federal court that he let a friend use his account at crypto-trading platform Binance in 2018 to launder more than $20 million worth of virtual currency stolen from Michael Terpin , a cryptocurrency investor who co-founded the first angel investor group for bitcoin enthusiasts.

Cryptocurrency 363

Cryptocurrency Mobile Accountability Scams 363

Krebs on Security

JUNE 21, 2021

He said the percentage of companies that reported already having inventoried all of their IT systems is roughly equal to the number of larger water utilities (greater than 50,000 population) that recently had to certify to the Environmental Protection Agency (EPA) that they are compliant with the Water Infrastructure Act of 2018.

Hacking 362

Hacking Accountability Cybersecurity Technology 362

Krebs on Security

JULY 4, 2020

One of the most-read advice columns on this site is a 2018 piece called “ Plant Your Flag, Mark Your Territory ,” which tried to impress upon readers the importance of creating accounts at websites like those at the Social Security Administration , the IRS and others before crooks do it for you.

Accountability 351

Accountability Passwords Authentication Insurance 351

Krebs on Security

FEBRUARY 26, 2023

Many companies now require employees to supply a one-time password — such as one sent via SMS or produced by a mobile authenticator app — in addition to their username and password when logging in to company assets online. The key works without the need for any special software drivers.

Hacking 330

Hacking Social Engineering Phishing Scams 330

Krebs on Security

MARCH 16, 2021

But Lucky225 said the class of SMS interception he’s been testing targets a series of authentication weaknesses tied to a system developed by NetNumber , a private company in Lowell, Mass. Surprisingly, despite the fact that I publicly disclosed this in 2018 , nothing has been done to stop this relatively unsophisticated attack.”

Telecommunications 363

Telecommunications Mobile Accountability Wireless 363

Security Affairs

DECEMBER 17, 2024

The threat actors attempted to exploit multiple vulnerabilities in DVRs, including CVE-2017-7921, CVE-2018-9995 , CVE-2020-25078, CVE-2021-33044 , and CVE-2021-36260. In March 2024, threat actors behind this campaign started targeting Internet of Things (IoT) devices in the US, Australia, Canada, New Zealand, and the United Kingdom.

Architecture 112

Architecture Internet Internet Malware 112

Krebs on Security

AUGUST 12, 2020

As KrebsOnSecurity observed back in 2018 , many people — particularly older folks — proudly declare they avoid using the Web to manage various accounts tied to their personal and financial data — including everything from utilities and mobile phones to retirement benefits and online banking services. In 2018, the U.S.

Accountability 356

Accountability Mobile Banking Passwords 356

Krebs on Security

APRIL 4, 2023

Active since 2018, Genesis Market’s slogan was, “Our store sells bots with logs, cookies, and their real fingerprints.” Several websites tied to the cybercrime store Genesis Market had their homepages changed today to this seizure notice. ” The Genesis Store had more than 450,000 bots for sale as of Mar.

Marketing 363

Marketing Passwords Cybercrime Banking 363

Troy Hunt

JANUARY 10, 2018

agarwal_mohit) January 5, 2018. I think the URL is right but it seems inaccessible from other countries: [link] — Troy Hunt (@troyhunt) January 9, 2018. Security /= George blocking — Vatsalya Goel (@vatsalyagoel) January 9, 2018. — Khas Mek (@KhasMek) January 10, 2018. FergusInLondon) January 10, 2018.

Hacking 280

Hacking Government Encryption Risk 280

Krebs on Security

SEPTEMBER 22, 2023

LastPass officially instituted this change back in 2018, but some undisclosed number of the company’s earlier customers were never required to increase the length of their master passwords. In February 2018, LastPass changed the default to 100,100 iterations. LastPass sent this notification to users earlier this week.

Passwords 326

Passwords Encryption Password Management Cryptocurrency 326

Krebs on Security

JANUARY 22, 2019

In July 2018, email users around the world began complaining of receiving spam which began with a password the recipient used at some point in the past and threatened to release embarrassing videos of the recipient unless a bitcoin ransom was paid. 13, 2018 bomb threat hoax. domaincontrol.com, and ns18.domaincontrol.com.

DNS 275

DNS Internet Internet Computers and Electronics 275

Troy Hunt

MARCH 29, 2018

— Dan Blank (@danblank000) March 20, 2018. — Brian Ford (@BrianPFord) March 9, 2018. — Edward Deaver (@EdwardCDeaver) March 10, 2018. This is a product I was already endorsed in by my own free volition and from the perspective of my own authenticity, that was very important. Thanks for all your work!

Password Management 279

Password Management Passwords Data breaches Retail 279

Security Affairs

MARCH 3, 2025

“Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow a remote attacker to bypass authentication or execute arbitrary commands on the underlying operating system of an affected device.” ” reads the advisory.

Small Business 61

Small Business Authentication Hacking Accountability 61

Troy Hunt

MARCH 27, 2018

pic.twitter.com/KiaGNKhaig — Troy Hunt (@troyhunt) March 1, 2018. She was pretty shocked when I showed her this as it was precisely the same verbal password as she used to authenticate to her bank. pic.twitter.com/NphRX2dnCv — Geoffrey Huntley (@GeoffreyHuntley) March 27, 2018. No video recording or photos needed.

Passwords 197

Passwords Banking Mobile Telecommunications 197

Krebs on Security

JANUARY 19, 2021

The release was granted in part due to Ferizi’s 2018 diagnosis if asthma, as well as a COVID outbreak at the facility where he was housed in 2020. 2015 by criminals who social engineered PayPal employees over the phone into changing my password and bypassing multi-factor authentication.

Identity Theft 347

Identity Theft Government Social Engineering Accountability 347

Krebs on Security

MAY 3, 2019

The credit union said the investigation that fueled the lawsuit was prompted by a 2018 KrebsOnSecurity report about glaring security weaknesses in a Fiserv platform that exposed personal and financial details of customers across hundreds of bank Web sites. Brookfield, Wisc.

Banking 242

Banking Accountability Passwords Technology 242

Security Affairs

MARCH 8, 2020

Netgear also addressed a high-severity flaw in several Netgear routers, the vendor tracked the flaw as PSV-2018-0352. The vulnerability is a post-authentication command injection issue and impacts Nighthawk (R7800) routers running firmware prior to version 1.0.2.60. R6700, running firmware versions prior to 1.0.2.8

Firmware 144

Firmware Wireless Advertising Authentication 144

Krebs on Security

AUGUST 23, 2024

The proliferation of new top-level domains (TLDs) has exacerbated a well-known security weakness: Many organizations set up their internal Microsoft authentication systems years ago using domain names in TLDs that didn’t exist at the time. Alas, in 2018, the.llc TLD was born and began selling domains.

DNS 326

DNS Internet Internet Authentication 326

SecureWorld News

FEBRUARY 20, 2025

He urges enterprises to implement Privileged Access Management (PAM) solutions and multi-factor authentication (MFA) and to enforce robust password policies to reduce the risk of account compromise. Beyond patching, identity security is a persistent weak point in defending against ransomware attacks."

Ransomware 113

Ransomware IoT Encryption Social Engineering 113

Krebs on Security

FEBRUARY 18, 2019

27, 2018, Cisco’s Talos research division published a write-up outlining the contours of a sophisticated cyber espionage campaign it dubbed “ DNSpionage.” Two of those domains only appeared at that Internet address in December 2018, including domains in Lebanon and — curiously — Sweden. 14, 2018 and Jan.

DNS 279

DNS Internet Internet Government 279

Krebs on Security

NOVEMBER 6, 2018

In late September 2018, the REACT Task Force spearheaded an investigation that led to the arrest of two Missouri men — both in their early 20s — who are accused of conducting SIM swaps to steal $14 million from a cryptocurrency company based in San Jose, Calif. . million customers.

Mobile 274

Mobile Cryptocurrency Accountability Passwords 274

Krebs on Security

FEBRUARY 12, 2019

VFEmail’s Twitter account responded that “external facing systems, of differing OS’s and remote authentication, in multiple data centers are down.” Strangely, not all VMs shared the same authentication, but all were destroyed. The first signs of the attack came on the morning of Feb. Just attack and destroy.”

Hacking 276

Hacking DDOS Backups Accountability 276

Krebs on Security

SEPTEMBER 5, 2023

“The threat actor was able to capture the employee’s master password as it was entered, after the employee authenticated with MFA, and gain access to the DevOps engineer’s LastPass corporate vault.” In February 2018, LastPass changed the default to 100,100 iterations. And very recently, it upped that again to 600,000.

Cryptocurrency 361

Cryptocurrency Passwords Encryption Accountability 361

Krebs on Security

JULY 8, 2021

” The official description of CVE-2015-2862 says a would-be attacker would need to be already authenticated to the server for the exploit to work. “This is worse because the CVE calls for an authenticated user,” Holden said. “This was not.” “It was deprecated but left up,” Sanders said.

Software 329

Software Ransomware System Administration Authentication 329

Schneier on Security

JANUARY 5, 2018

My next book is still on track for a September 2018 publication. Authentication and Identification are Getting Harder 6. Norton is still the publisher. The title is now Click Here to Kill Everybody: Peril and Promise on a Hyperconnected Planet , which I generally refer to as CH2KE. Computers are Still Hard to Secure 2.

Internet 183

Internet Internet Government Authentication 183

Security Affairs

MAY 30, 2024

ThreatFabric observed threat actors using two publicly available exploits (CVE-2018-4233, CVE-2018-4404) to deliver macOS implants. The experts noticed that a portion of the CVE-2018-4404 exploit is likely borrowed from the Metasploit framework. The flaw resides in WebKit and impacts macOS version 10.13.3

Spyware 140

Spyware Malware Surveillance Mobile 140

Krebs on Security

APRIL 14, 2019

This 2018 story from travel blog goatsontheroad.com tells the tale of a couple that was very nearly scammed by a Land Lordz-like trap, before the wife figures out they’re no longer on airbnb.com. According to twofactorauth.org , Airbnb currently does not support any type of multi-factor authentication that users can enable.

Scams 277

Scams Advertising Accountability Phishing 277

Malwarebytes

MAY 1, 2025

The attack was largely reminiscent of a 2022 YouTube account hack that repurposed a 2018 interview with Apple CEO Tim Cook to fool viewers into following a separate cryptocurrency scam. These attachments could contain malware that steals passwords, data, and multifactor authentication codes.

Small Business 94

Small Business Cybersecurity Passwords Scams 94

Krebs on Security

AUGUST 19, 2020

Time is of the essence in these attacks because many companies that rely on VPNs for remote employee access also require employees to supply some type of multi-factor authentication in addition to a username and password — such as a one-time numeric code generated by a mobile app or text message.

Phishing 363

Phishing VPN Social Engineering Media 363