article thumbnail

Interview With a Crypto Scam Investment Spammer

Krebs on Security

Social networks are constantly battling inauthentic bot accounts that send direct messages to users promoting scam cryptocurrency investment platforms. ” One of the crypto investment scam messages promoted in the spam campaigns on Mastodon this month. “On Twitter, more spam and crypto scam.”

Scams 250
article thumbnail

Scammers Sent Uber to Take Elderly Lady to the Bank

Krebs on Security

Email scammers sent an Uber to the home of an 80-year-old woman who responded to a well-timed email scam, in a bid to make sure she went to the bank and wired money to the fraudsters. But my mom went over to the neighbor’s house and they saw it for what it was — a scam.”

Banking 289
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

When Low-Tech Hacks Cause High-Impact Breaches

Krebs on Security

We don’t know much about the source of the November 2021 incident, other than GoDaddy’s statement that it involved a compromised password, and that it took about two months for the company to detect the intrusion. One multifactor option — physical security keys — appears to be immune to these advanced scams.

Hacking 275
article thumbnail

Phishers Spoof USPS, 12 Other Natl’ Postal Services

Krebs on Security

Recent weeks have seen a sizable uptick in the number of phishing scams targeting U.S. A different domain with that same Google Analytics code that was registered in 2021 is peraltansepeda[.]com Most phishing scams invoke a temporal element that warns of negative consequences should you fail to respond or act quickly.

Phishing 284
article thumbnail

How Phishers Are Slinking Their Links Into LinkedIn

Krebs on Security

Urlscan also found this phishing scam from Jan. More recently in late 2021, Jeremy Fuchs of Avanan wrote that the use of a LinkedIn URL may mean that any profession — the market for LinkedIn — could click. Here’s one example from Jan. A recent phishing site that abused LinkedIn’s marketing redirect.

Phishing 332
article thumbnail

Karma Catches Up to Global Phishing Service 16Shop

Krebs on Security

The international police organization INTERPOL said last week it had shuttered the notorious 16Shop, a popular phishing-as-a-service platform launched in 2017 that made it simple for even complete novices to conduct complex and convincing phishing scams. 16Shop documentation instructing operators on how to deploy the kit. Image: ZeroFox.

Phishing 198
article thumbnail

The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back

Krebs on Security

What follows is a deep dive into how this increasingly clever Zelle fraud scam typically works, and what victims can do about it. Last week’s story warned that scammers are blasting out text messages about suspicious bank transfers as a pretext for immediately calling and scamming anyone who responds via text.

Scams 355