Krebs on Security

JUNE 28, 2022

On December 7, 2021, Google announced it was suing two Russian men allegedly responsible for operating the Glupteba botnet, a global malware menace that has infected millions of computers over the past decade. But on Dec. AWM Proxy’s online storefront disappeared that same day.

Passwords 239

Passwords Malware Internet Internet 239

Krebs on Security

AUGUST 2, 2022

The underground cybercrime forums are now awash in pleas from people who are desperately seeking a new supplier of abundant, cheap, and reliably clean proxies to restart their businesses. According to Constella Intelligence [currently an advertiser on KrebsOnSecurity], Oleg used the same password from his iboss32@ro.ru

Malware 253

Malware Cybercrime Internet Internet 253

Krebs on Security

DECEMBER 8, 2022

.” While CLOP as a money making collective is a fairly young organization, security experts say CLOP members hail from a group of Threat Actors (TA) known as “TA505,” which MITRE’s ATT&CK database says is a financially motivated cybercrime group that has been active since at least 2014.

Healthcare 262

Healthcare Backups Ransomware Insurance 262

Krebs on Security

JULY 18, 2022

These services can be used in a legitimate manner for several business purposes — such as price comparisons or sales intelligence — but they are massively abused for hiding cybercrime activity because they can make it difficult to trace malicious traffic to its original source. FORUM ACTIVITY? ”

VPN 301

VPN Computers and Electronics Antivirus Software 301

Krebs on Security

APRIL 27, 2022

Donahue is co-founder of Kodex , a company formed in February 2021 that builds security portals designed to help tech companies “manage information requests from government agencies who contact them, and to securely transfer data & collaborate against abuses on their platform.” A sample Kodex dashboard. Image: Kodex.us.

Mobile 183

Mobile Government Media Technology 183

Krebs on Security

MARCH 29, 2022

” On April 5, 2021, Everlynn posted a new sales thread to the cybercrime forum cracked[.]to In other cases, KT said, hackers will try to guess the passwords of police department email systems. But KT said each time Everlynn gets released from police custody, they go right back to committing the same cybercrimes.

Accountability 274

Accountability Government Hacking Social Engineering 274

Krebs on Security

FEBRUARY 28, 2023

In each case, the goal of the attackers was the same: Phish T-Mobile employees for access to internal company tools, and then convert that access into a cybercrime service that could be hired to divert any T-Mobile user’s text messages and phone calls to another device.

Mobile 310

Mobile Phishing Authentication Advertising 310

Krebs on Security

JUNE 6, 2023

However, far more interesting is their program for rewarding people who choose to sell Kopeechka usernames and passwords for working email addresses. The crypto scam affiliate program “Project Impulse,” advertising in 2021. Image: Trend Micro. billion last year.

Accountability 210

Accountability Scams Cryptocurrency Advertising 210

Krebs on Security

SEPTEMBER 2, 2021

Here’s the story of a cybercrime group that compromises up to 100,000 email inboxes per day, and apparently does little else with this access except siphon gift card and customer loyalty program data that can be resold online. As of last year, Microsoft had nearly 240 million active users, according to this analysis. What do you do?

Accountability 289

Accountability Authentication Passwords Hacking 289