article thumbnail

Alleged Boss of ‘Scattered Spider’ Hacking Group Arrested

Krebs on Security

In January 2024, U.S. 0KTAPUS In August 2022, KrebsOnSecurity wrote about peering inside the data harvested in a months-long cybercrime campaign by Scattered Spider involving countless SMS-based phishing attacks against employees at major corporations. A Scattered Spider phishing lure sent to Twilio employees.

172
172
article thumbnail

State of Malware 2024: What consumers need to know

Malwarebytes

Released today, the Malwarebytes State of Malware 2024 report takes a deep dive into the latest developments in the world of cybercrime. Passwords Google and Microsoft made good on their promise to back passkeys , an encryption-based alternative to passwords that can’t be stolen, guessed, cracked, or phished.

Malware 75
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Criminal record database of millions of Americans dumped online

Malwarebytes

Dates reportedly range from 2020 to 2024. Choose a strong password that you don’t use for anything else. Better yet, let a password manager choose one for you. Some forms of two-factor authentication (2FA) can be phished just as easily as a password. 2FA that relies on a FIDO2 device can’t be phished.

Passwords 137
article thumbnail

Giant Tiger breach sees 2.8 million records leaked

Malwarebytes

million records to a hacker forum, claiming they originated from a March 2024 hack at Canadian retail chain Giant Tiger. In March, one of Giant Tiger‘s vendors, a company used to manage customer communications and engagement, suffered a cyberattack, which impacted Giant Tiger, as reported by CBC. ” on the hacker forum.

Retail 114
article thumbnail

From Marco Polo to Modern Mayhem: Why Identity Management Matters

Thales Cloud Protection & Licensing

From Marco Polo to Modern Mayhem: Why Identity Management Matters madhav Tue, 04/09/2024 - 05:20 Imagine yourself as Marco Polo, the Venetian merchant traversing dangerous trade routes. Here are a few simple habits that can make a big difference: Password Power-Ups : Your passwords are like flimsy shields against determined attackers.

article thumbnail

Ticketmaster confirms customer data breach

Malwarebytes

In the SEC filing, Live Nation also said: On May 27, 2024, a criminal threat actor offered what it alleged to be Company user data for sale via the dark web. Choose a strong password that you don’t use for anything else. Better yet, let a password manager choose one for you. It didn’t mention which customers.

article thumbnail

Fla. Man Charged in SIM-Swapping Spree is Key Suspect in Hacker Groups Oktapus, Scattered Spider

Krebs on Security

9, 2024, U.S. ” Group-IB dubbed the gang by a different name — 0ktapus — which was a nod to how the criminal group phished employees for credentials. The missives asked users to click a link and log in at a phishing page that mimicked their employer’s Okta authentication page. On July 28 and again on Aug.