Remove 2020 Remove VPN Remove Web Fraud
article thumbnail

GoDaddy Employees Used in Attacks on Multiple Cryptocurrency Services

Krebs on Security

And in May of this year, GoDaddy disclosed that 28,000 of its customers’ web hosting accounts were compromised following a security incident in Oct. 2019 that wasn’t discovered until April 2020. Restrict VPN access hours, where applicable, to mitigate access outside of allowed times.

article thumbnail

When Low-Tech Hacks Cause High-Impact Breaches

Krebs on Security

But we do know the March 2020 attack was precipitated by a spear-phishing attack against a GoDaddy employee. GoDaddy described the incident at the time in general terms as a social engineering attack, but one of its customers affected by that March 2020 breach actually spoke to one of the hackers involved.

Hacking 332
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Tech CEO Sentenced to 5 Years in IP Address Scheme

Krebs on Security

Shortly after Spamhaus started blocking Micfo’s IP address ranges, Micfo shifted gears and began reselling IP addresses mainly to companies marketing “virtual private networking” or VPN services that help customers hide their real IP addresses online. Golestan did not respond to a request for comment.

Internet 346
article thumbnail

Amid an Embarrassment of Riches, Ransom Gangs Increasingly Outsource Their Work

Krebs on Security

” From other classified ads he posted in August and September 2020, it seems clear Dr. Samuil’s team has some kind of privileged access to financial data on targeted companies that gives them a better idea of how much cash the victim firm may have on hand to pay a ransom demand. .” ” WHO IS DR. SAMUIL?

article thumbnail

Does Your Domain Have a Registry Lock?

Krebs on Security

13, 2020, which was the date the fraudsters got around to changing the domain name system (DNS) settings for e-hawk.net. But as we’ll see in a moment, there are other security precautions that can and do help if your domain somehow ends up getting hijacked. Dijkxhoorn said his company first learned of the domain theft on Jan.

DNS 334
article thumbnail

Gift Card Gang Extracts Cash From 100k Inboxes Daily

Krebs on Security

” In a December 2020 blog post about how Microsoft is moving away from passwords to more robust authentication approaches, the software giant said an average of one in every 250 corporate accounts is compromised each month. .”

article thumbnail

Experian, You Have Some Explaining to Do

Krebs on Security

Turner said he created the account at Experian in 2020 to place a security freeze on his credit file, and that he used a password manager to select and store a strong, unique password for his Experian account. “We believe these are isolated incidents of fraud using stolen consumer information,” Experian’s statement reads.