Krebs on Security

FEBRUARY 8, 2021

Brad Marden , superintendent of cybercrime operations for the Australian Federal Police (AFP), said their investigation into who was behind U-Admin began in late 2018, after Australian citizens began getting deluged with phishing attacks via mobile text messages that leveraged the software.

Phishing 262

Phishing Scams Banking Mobile 262

Krebs on Security

AUGUST 17, 2023

.” According to the Indonesian security blog Cyberthreat.id , Saputra admitted being the administrator of 16Shop , but told the publication he handed the project off to others by early 2020. A LinkedIn profile for Rizky says he is a backend Web developer in Bandung who earned a bachelor’s degree in information technology in 2020.

Phishing 187

Phishing Passwords Internet Internet 187

Krebs on Security

APRIL 4, 2024

There is no indication these are the real names of the phishers, but the names are useful in pointing to other sites targeting Privnote since 2020. A search at DomainTools.com for privatenote[.]io io shows it has been registered to two names over as many years, including Andrey Sokol from Moscow and Alexandr Ermakov from Kiev.

Phishing 210

Phishing Cryptocurrency DDOS Internet 210

Krebs on Security

APRIL 30, 2020

In a report published today, the company said since late March 2020 it has observed several crooks complaining about COVID-19 interfering with the daily activities of their various money mules (people hired to help launder the proceeds of cybercrime). ” Alex Holden , founder and CTO of Hold Security , agreed.

Cybercrime 303

Cybercrime Computers and Electronics Marketing Scams 303

Krebs on Security

APRIL 28, 2020

” The incident Jim described happened in late January 2020, and Citi may have changed its procedures since then. Dozens of cybercrime shops traffic in this stolen data, which is more traditionally used to defraud online merchants. . “I was appalled that Citi would do that. Click to enlarge. Image: Gemini Advisory.

Scams 357

Scams Banking Accountability Financial Services 357

Krebs on Security

FEBRUARY 4, 2021

Like most cybercrime forums, OGUsers is overrun with shady characters who are there mainly to rip off other members. Indeed, the leaked OGUsers databases — which include private messages on the forum prior to June 2020 — offer a small window into the overall value of the hijacked social media account industry.

Accountability 296

Accountability Hacking Media Mobile 296

Krebs on Security

FEBRUARY 2, 2021

ValidCC , a dark web bazaar run by a cybercrime group that for more than six years hacked online merchants and sold stolen payment card data, abruptly closed up shop last week. Group-IB believes UltraRank is responsible for a slew of hacks that other security firms previously attributed to at least three distinct cybercrime groups.

Cybercrime 203

Cybercrime Media Accountability Hacking 203

Krebs on Security

APRIL 27, 2022

” The 30-year-old Donahue said he left the FBI in April 2020 to start Kodex because it was clear that social media and technology companies needed help validating the increasingly large number of law enforcement requests domestically and internationally. Apple’s compliance with EDRs was 93 percent worldwide in 2020.

Mobile 180

Mobile Government Media Technology 180

Krebs on Security

JULY 29, 2021

22, 2020, when cryptocurrency wallet company Ledger acknowledged that someone had released the names, mailing addresses and phone numbers for 272,000 customers. Allison Nixon , chief research officer with New York City-based cyber intelligence firm Unit221B , recalled what happened in the weeks leading up to Dec.

Passwords 353

Passwords Password Management Phishing Scams 353

Krebs on Security

OCTOBER 8, 2020

But judging from the proliferation of help-wanted ads for offensive pentesters in the cybercrime underground, today’s attackers have exactly zero trouble gaining that initial intrusion: The real challenge seems to be hiring enough people to help everyone profit from the access already gained. THE DOCTOR IS IN.

Cybercrime 300

Cybercrime VPN Malware Penetration Testing 300

Krebs on Security

JUNE 6, 2023

Launched in 2020, websites under the banner of the Impulse Scam Crypto Project are all essentially “advanced fee” scams that tell people they have earned a cryptocurrency investment credit. The crypto scam affiliate program “Project Impulse,” advertising in 2021. Image: Trend Micro. billion last year.

Accountability 206

Accountability Scams Cryptocurrency Advertising 206

Krebs on Security

SEPTEMBER 2, 2021

Here’s the story of a cybercrime group that compromises up to 100,000 email inboxes per day, and apparently does little else with this access except siphon gift card and customer loyalty program data that can be resold online.

Accountability 284

Accountability Authentication Passwords Hacking 284

Krebs on Security

FEBRUARY 9, 2022

The crackdown — the second closure of major card fraud shops by Russian authorities in as many weeks — comes closely behind Russia’s arrest of 14 alleged affiliates of the REvil ransomware gang , and has many in the cybercrime underground asking who might be next. K in January 2020. It was seized by Dept.

Cybercrime 230

Cybercrime Identity Theft Marketing Retail 230

Krebs on Security

FEBRUARY 25, 2021

Labor Department’s inspector general said this week that roughly $100 million in fraudulent unemployment insurance claims were paid in 2020 to criminals who are already in jail. A new report (PDF) from the Labor Department’s Office of Inspector General (OIG) found that from March through October of 2020, some $3.5

Scams 309

Scams Insurance DDOS Authentication 309