article thumbnail

Tech CEO Sentenced to 5 Years in IP Address Scheme

Krebs on Security

Shortly after Spamhaus started blocking Micfo’s IP address ranges, Micfo shifted gears and began reselling IP addresses mainly to companies marketing “virtual private networking” or VPN services that help customers hide their real IP addresses online. Golestan did not respond to a request for comment.

Internet 300
article thumbnail

When Low-Tech Hacks Cause High-Impact Breaches

Krebs on Security

But we do know the March 2020 attack was precipitated by a spear-phishing attack against a GoDaddy employee. GoDaddy described the incident at the time in general terms as a social engineering attack, but one of its customers affected by that March 2020 breach actually spoke to one of the hackers involved.

Hacking 268
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

GoDaddy Employees Used in Attacks on Multiple Cryptocurrency Services

Krebs on Security

And in May of this year, GoDaddy disclosed that 28,000 of its customers’ web hosting accounts were compromised following a security incident in Oct. 2019 that wasn’t discovered until April 2020. Restrict VPN access hours, where applicable, to mitigate access outside of allowed times.

article thumbnail

Interview With a Crypto Scam Investment Spammer

Krebs on Security

pw has been registered and abandoned by several parties since 2014, but the most recent registration data available through DomainTools.com shows it was registered in March 2020 to someone in Krasnodar, Russia with the email address edgard011012@gmail.com. In May 2020, Zipper told another Lolzteam member that quot[.]pw

Scams 243
article thumbnail

Experian, You Have Some Explaining to Do

Krebs on Security

Turner said he created the account at Experian in 2020 to place a security freeze on his credit file, and that he used a password manager to select and store a strong, unique password for his Experian account. “We believe these are isolated incidents of fraud using stolen consumer information,” Experian’s statement reads.

article thumbnail

Does Your Domain Have a Registry Lock?

Krebs on Security

13, 2020, which was the date the fraudsters got around to changing the domain name system (DNS) settings for e-hawk.net. But as we’ll see in a moment, there are other security precautions that can and do help if your domain somehow ends up getting hijacked. Dijkxhoorn said his company first learned of the domain theft on Jan.

DNS 266
article thumbnail

Amid an Embarrassment of Riches, Ransom Gangs Increasingly Outsource Their Work

Krebs on Security

” From other classified ads he posted in August and September 2020, it seems clear Dr. Samuil’s team has some kind of privileged access to financial data on targeted companies that gives them a better idea of how much cash the victim firm may have on hand to pay a ransom demand. .” ” WHO IS DR. SAMUIL?