Krebs on Security

MAY 5, 2021

After a user logs in, the link prompts them to install a malicious but innocuously-named app that gives the attacker persistent, password-free access to any of the user’s emails and files, both of which are then plundered to launch malware and phishing scams against others. Image: Proofpoint.

Accountability 327

Accountability Passwords Advertising Phishing 327

Krebs on Security

NOVEMBER 2, 2023

Among the most common ways that thieves extract cash from stolen credit card accounts is through purchasing pricey consumer goods online and reselling them on the black market. The “ drops ” are people who have responded to work-at-home package reshipping jobs advertised on craigslist.com and job search sites.

Cybercrime 271

Cybercrime Marketing Scams Retail 271

Krebs on Security

FEBRUARY 24, 2023

Last year, researchers at Minerva Labs spotted the botnet being used to blast out sextortion scams. The service is currently advertising access to more than 150,000 devices globally. com has been advertised for nearly a decade on the forum Black Hat World by the user BHProxies. WHO’S BEHIND BHPROXIES?

Accountability 229

Accountability Advertising Marketing Malware 229

Krebs on Security

JULY 18, 2022

net , a service that advertised to cybercriminals seeking to obfuscate their malicious software so that it goes undetected by all or at least most of the major antivirus products on the market. net , which advertised “free unlimited internet file-sharing platform” for those who agreed to install their software.

VPN 304

VPN Computers and Electronics Antivirus Software 304

Krebs on Security

AUGUST 9, 2021

Also, this greenhorn criminal clearly had bought into BriansClub’s advertising, which uses my name and likeness in a series of ads that run on all the top cybercrime forums. That was right after KrebsOnSecurity broke the news that someone had hacked BriansClub and siphoned information on 26 million stolen debit and credit accounts.

Phishing 355

Phishing Cybercrime Accountability Advertising 355

Krebs on Security

JUNE 6, 2023

One of the most expensive aspects of any cybercriminal operation is the time and effort it takes to constantly create large numbers of new throwaway email accounts. The service in question — kopeechka[.]store ” “Are you working on large volumes and are costs constantly growing? The service in question — kopeechka[.]store

Accountability 212

Accountability Scams Cryptocurrency Advertising 212

Krebs on Security

AUGUST 2, 2022

Here’s what part of their current homepage looks like: The SocksEscort home page says its services are perfect for people involved in automated online activity that often results in IP addresses getting blocked or banned, such as Craigslist and dating scams, search engine results manipulation, and online surveys. Image: Spur.us.

Malware 256

Malware Cybercrime Internet Internet 256

Krebs on Security

NOVEMBER 23, 2018

‘Tis the season when even those who know a thing or two about Internet scams tend to let down their guard in the face of an eye-popping discount or the stress of last-minute holiday shopping. Even people who shop mainly at big-name online stores can get scammed if they’re not wary of too-good-to-be-true offers.

Scams 273

Scams Wireless Phishing Banking 273

Krebs on Security

APRIL 30, 2020

These restrictions have created a burgeoning underground market for reshipping scams, which rely on willing or unwitting residents in the United States and Europe — derisively referred to as “ reshipping mules ” — to receive and relay high-dollar stolen goods to crooks living in the embargoed areas.

Cybercrime 308

Cybercrime Computers and Electronics Marketing Scams 308

Malwarebytes

JUNE 8, 2022

SSNDOB advertised its services on dark web forums and offered customer support for buyers. We’ve noted the gradual emergence of Bitcoin ATMs in scams previously; here, cryptocurrency ATMs are more popular as a payment method to SSNDOB than other dubious online services. The Bitcoin boon.

DDOS 105

DDOS Cryptocurrency Scams Data breaches 105

Krebs on Security

APRIL 11, 2022

Online scams that try to separate the unwary from their cryptocurrency are a dime a dozen, but a great many seemingly disparate crypto scam websites tend to rely on the same dodgy infrastructure providers to remain online in the face of massive fraud and abuse complaints from their erstwhile customers. ” Ark-x2[.]org

Scams 192

Scams Cryptocurrency Media Hacking 192

Krebs on Security

FEBRUARY 28, 2023

This means that stealing someone’s phone number often can let cybercriminals hijack the target’s entire digital life in short order — including access to any financial, email and social media accounts tied to that phone number. Each advertises their claimed access to T-Mobile systems in a similar way.

Mobile 312

Mobile Phishing Authentication Advertising 312

Krebs on Security

FEBRUARY 25, 2021

Much of this fraud exploits weak authentication methods used by states that have long sought to verify applicants using static, widely available information such as Social Security numbers and birthdays. Many states also lacked the ability to tell when multiple payments were going to the same bank accounts. protections.

Scams 313

Scams Insurance DDOS Authentication 313