Krebs on Security

OCTOBER 31, 2023

As far back as 2018, Interisle found.US Or so concludes The Interisle Consulting Group , which gathers phishing data from multiple industry sources and publishes an annual report on the latest trends. domains were the worst in the world for spam, botnet (attack infrastructure for DDOS etc.) and illicit or harmful content.

Phishing 262

Phishing Telecommunications Malware Scams 262

Krebs on Security

SEPTEMBER 1, 2023

As far back as 2018, Interisle found.US . “These ccTLDs make a strong case for validating domain registrants in the interest of public safety.” ” Sadly,US has been a cesspool of phishing activity for many years. domains were the worst in the world for spam, botnet (attack infrastructure for DDOS etc.)

Phishing 226

Phishing Telecommunications Government DNS 226

Krebs on Security

NOVEMBER 13, 2021

” Troia’s work as a security researcher was the subject of a 2018 article here titled, “ When Security Researchers Pose as Cybercrooks, Who Can Tell the Difference? Troia says the individual has been associated in the past with incidents aimed at damaging the security researcher’s reputation.”

Internet 362

Internet Internet Hacking Accountability 362

Krebs on Security

FEBRUARY 26, 2023

In July 2018, Google disclosed that it had not had any of its 85,000+ employees successfully phished on their work-related accounts since early 2017, when it began requiring all employees to use physical security keys in place of one-time codes. Thus, the second factor cannot be phished, either over the phone or Internet.

Hacking 261

Hacking Social Engineering Phishing Scams 261

Krebs on Security

MARCH 14, 2023

In 2018, KrebsOnSecurity detailed how Stevenson earned bug bounty rewards and public recognition from top telecom companies for finding and reporting security holes in their websites, all the while secretly peddling those same vulnerabilities to cybercriminals.

Hacking 244

Hacking Government Media Accountability 244

Security Boulevard

AUGUST 25, 2021

In 2018, Andrew Schober was digitally mugged for approximately $1 million worth of bitcoin. After several years of working with investigators, Schober says he's confident he has located two young men in the United Kingdom responsible for developing a clever piece of digital clipboard-stealing malware that let them siphon his crypto holdings.

Malware 52

Malware Web Fraud 52

Krebs on Security

APRIL 7, 2022

In May 2018, the FBI executed a similar strategy to dismantle VPNFilter, which had spread to more than a half-million consumer devices. On April 1, ASUS released updates to fix the security vulnerability in a range of its Wi-Fi routers.

Marketing 240

Marketing Energy and Utilities Malware Ransomware 240

Krebs on Security

NOVEMBER 13, 2018

Likewise, kavanaghsirishpub-dot-com corresponded to a pub and restaurant in Tennessee until mid-2018; now it’s pretending to sell cheap Nike shoes. “We have observed more than 800 sites hosting these brand impersonation/skimming stores since June 2018,” the report notes. It’s now advertising running shoes.

Accountability 215

Accountability eCommerce Cybercrime Advertising 215

Krebs on Security

AUGUST 9, 2021

In 2018, KrebsOnSecurity examined a huge network of phishing sites masquerading as the top carding stores which all traced back to a web development group in Pakistan that’s apparently been stealing from thieves for years.

Phishing 353

Phishing Cybercrime Accountability Advertising 353

Krebs on Security

MAY 22, 2023

In September 2018, a user by the name “ ципа ” (phonetically “ Zipper ” in Russian) registered on the Russian hacking forum Lolzteam using the edgard0111012@gmail.com address.

Scams 236

Scams DDOS Cryptocurrency Accountability 236

Krebs on Security

JUNE 21, 2023

guru show that in 2018 the domains were forwarding incoming email to the address obelisk57@gmail.com. The registration records for the website Cryptor[.]biz biz are hidden behind privacy protection services, but the site’s homepage says potential customers should register by visiting the domain crypt[.]guru ” Crypt[.]guru’s

Malware 213

Malware Antivirus Cybercrime Hacking 213

Krebs on Security

MAY 18, 2020

Intel 471 says a rumor has been circulating on Exploit and other forums upO frequented that he was the mastermind behind GandCrab , another ransomware-as-a-service affiliate program that first surfaced in January 2018 and later bragged about extorting billions of dollars from hacked businesses when it closed up shop in June 2019.

Malware 308

Malware Cybercrime Ransomware Marketing 308

Krebs on Security

AUGUST 30, 2022

That’s down from 53 percent that did so in 2018, Okta found. According to a report this year from Okta, 47 percent of workforce customers deploy SMS and voice factors for multi-factor authentication.

Mobile 284

Mobile Phishing Authentication Accountability 284

Krebs on Security

AUGUST 30, 2019

based United Rentals [ NYSE:URI ] is the world’s largest equipment rental company, with some 18,000 employees and earnings of approximately $4 billion in 2018. While phony invoices are a common malware lure, this particular campaign sent users to a page on United Rentals’ own Web site (unitedrentals.com). Stamford, Ct.-based

Phishing 211

Phishing Marketing Accountability DNS 211

Krebs on Security

APRIL 14, 2019

This 2018 story from travel blog goatsontheroad.com tells the tale of a couple that was very nearly scammed by a Land Lordz-like trap, before the wife figures out they’re no longer on airbnb.com.

Scams 239

Scams Advertising Accountability Phishing 239

Krebs on Security

FEBRUARY 4, 2021

.” This is not the first time Instagram has come for his accounts: As documented in this story in The Atlantic , some of his accounts totaling more than 1 million followers were axed in late 2018 when the platform took down 500 usernames that were stolen, resold, and used for posting memes.

Accountability 298

Accountability Hacking Media Mobile 298

Krebs on Security

JULY 18, 2022

The user “ Transfer ” advertised and sold access to 911 from 2016 to 2018, amid many sales threads where they advertised expensive electronics and other consumer goods that were bought online with stolen credit cards. Both of these identities were active on the crime forum fl.l33t[.]su su between 2016 and 2019.

VPN 297

VPN Computers and Electronics Antivirus Software 297

Krebs on Security

MARCH 22, 2022

Zukhov was arrested in Bulgaria in 2018 and extradited to the United States. The journal explains that Zhukov lived with a ChronoPay employee and had a great deal of interaction with ChronoPay’s high-risk department, so much so that Zhukov at one point gave Vrublevsky a $100,000 jeweled watch as a gift.

Banking 188

Banking Marketing DDOS Risk 188

Krebs on Security

SEPTEMBER 24, 2018

The landing page for hurricaneflorencerelieffund-dot-com also is the landing page for at least 4 other Hurricane Florence donation sites that use the same anonymous PayPal address. Among the earliest of these is hurricaneflorencerelieffund-dot-com , registered anonymously via GoDaddy on Sept.

Scams 214

Scams Accountability Media Web Fraud 214

Krebs on Security

OCTOBER 15, 2019

million cards added; 2018 brought in 9.2 The leaked data shows that in 2015, BriansClub added just 1.7 million card records for sale. But business would pick up in each of the years that followed: In 2016, BriansClub uploaded 2.89 million stolen cards; 2017 saw some 4.9 million more. million cards.

Hacking 207

Hacking Cybercrime Marketing Banking 207

Krebs on Security

MARCH 23, 2020

In December 2018, KrebsOnSecurity looked at how dozens of U.S. political campaigns, cities and towns had paid a shady company called Web Listings Inc. The story concluded that this dubious service had been scamming people and companies for more than a decade, and promised a Part II to explore who was behind Web Listings.

Scams 255

Scams Marketing Internet Internet 255

Krebs on Security

SEPTEMBER 5, 2023

LastPass says that since 2018 it has required a twelve-character minimum for master passwords, which the company said “greatly minimizes the ability for successful brute force password guessing.” In February 2018, LastPass changed the default to 100,100 iterations. And very recently, it upped that again to 600,000.

Cryptocurrency 346

Cryptocurrency Passwords Encryption Accountability 346

Krebs on Security

SEPTEMBER 22, 2023

LastPass officially instituted this change back in 2018, but some undisclosed number of the company’s earlier customers were never required to increase the length of their master passwords. In February 2018, LastPass changed the default to 100,100 iterations. LastPass sent this notification to users earlier this week.

Passwords 256

Passwords Encryption Password Management Cryptocurrency 256

Krebs on Security

NOVEMBER 6, 2018

In late September 2018, the REACT Task Force spearheaded an investigation that led to the arrest of two Missouri men — both in their early 20s — who are accused of conducting SIM swaps to steal $14 million from a cryptocurrency company based in San Jose, Calif. . million customers.

Mobile 233

Mobile Cryptocurrency Accountability Passwords 233

Krebs on Security

NOVEMBER 4, 2018

In September, Symantec said it blocked almost a quarter of a million instances of attempted formjacking since mid-August 2018. ” It’s unclear if the compromises detailed in this post are related to the work of that crime gang.

Antivirus 225

Antivirus Hacking DNS Internet 225

Krebs on Security

OCTOBER 25, 2018

The FBI says BEC scams netted thieves more than $12 billion between 2013 and 2018. However, BEC scams succeed thanks to help from a variety of seemingly unrelated types of online fraud — most especially dating scams.

Scams 182

Scams Accountability Media Banking 182

Krebs on Security

FEBRUARY 9, 2022

In 2018, the U.S. .” The arrests of the six men comes less than two weeks after Russian law enforcement officials detained four suspected carders — including Andrey Sergeevich Novak , the reputed owner of the extremely popular and long-running UniCC carding shop.

Cybercrime 231

Cybercrime Identity Theft Marketing Retail 231