Accountability, Banking, Cybercrime and Web Fraud

Disneyland Malware Team: It’s a Puny World After All

Krebs on Security

NOVEMBER 16, 2022

A financial cybercrime group calling itself the Disneyland Team has been making liberal use of visually confusing phishing domains that spoof popular bank brands using Punycode , an Internet standard that allows web browsers to render domain names with non-Latin alphabets like Cyrillic. Bank customers. Bank customers.

Malware

Malware Banking Phishing DDOS

Would You Have Fallen for This Phone Scam?

Krebs on Security

APRIL 28, 2020

But you probably didn’t know that these fraudsters also can use caller ID spoofing to trick your bank into giving up information about recent transactions on your account — data that can then be abused to make their phone scams more believable and expose you to additional forms of identity theft.

Scams

Scams Banking Accountability Financial Services

When Efforts to Contain a Data Breach Backfire

Krebs on Security

AUGUST 16, 2022

Earlier this month, the administrator of the cybercrime forum Breached received a cease-and-desist letter from a cybersecurity firm. The missive alleged that an auction on the site for data stolen from 10 million customers of Mexico’s second-largest bank was fake news and harming the bank’s reputation.

Data breaches

Data breaches Banking Cybercrime Marketing

The Rise of One-Time Password Interception Bots

Krebs on Security

SEPTEMBER 29, 2021

In February, KrebsOnSecurity wrote about a novel cybercrime service that helped attackers intercept the one-time passwords (OTPs) that many websites require as a second authentication factor in addition to passwords. agency — advertised a web-based bot designed to trick targets into giving up OTP tokens. ” .

Passwords

Passwords Mobile Authentication Banking

Giving a Face to the Malware Proxy Service ‘Faceless’

Krebs on Security

APRIL 18, 2023

.'” MRMURZA Faceless is a project from MrMurza , a particularly talkative member of more than a dozen Russian-language cybercrime forums over the past decade. MrMurza’s Faceless advertised on the Russian-language cybercrime forum ProCrd. was used for an account “Hackerok” at the accounting service klerk.ru

Malware

Malware Passwords Accountability Advertising

Phishing Sites Targeting Scammers and Thieves

Krebs on Security

AUGUST 9, 2021

Also, this greenhorn criminal clearly had bought into BriansClub’s advertising, which uses my name and likeness in a series of ads that run on all the top cybercrime forums. That was right after KrebsOnSecurity broke the news that someone had hacked BriansClub and siphoned information on 26 million stolen debit and credit accounts.

Phishing

Phishing Cybercrime Accountability Advertising

Riding the State Unemployment Fraud ‘Wave’

Krebs on Security

MAY 23, 2020

In too many cases, he said, the deposits are going into accounts where the beneficiary name does not match the name on the bank account. “Scattered Canary uses Gmail ‘dot accounts’ to mass-create accounts on each target website,” Agari’s Patrick Peterson wrote. ” Image: Agari.

Insurance

Insurance Accountability Banking Government

911 Proxy Service Implodes After Disclosing Breach

Krebs on Security

JULY 29, 2022

These services can be used in a legitimate manner for several business purposes — such as price comparisons or sales intelligence — but they are massively abused for hiding cybercrime activity because they can make it difficult to trace malicious traffic to its original source.

Cybercrime

Cybercrime Software VPN Backups

How Cybercriminals are Weathering COVID-19

Krebs on Security

APRIL 30, 2020

A screen shot from a user account at “Snowden,” a long-running reshipping mule service. It stands to reason that the virus outbreak might depress cybercriminal demand for “dumps,” or stolen account data that can be used to create physical counterfeit credit cards.

Cybercrime

Cybercrime Computers and Electronics Marketing Scams

A Deep Dive Into the Residential Proxy Service ‘911’

Krebs on Security

JULY 18, 2022

These services can be used in a legitimate manner for several business purposes — such as price comparisons or sales intelligence — but they are massively abused for hiding cybercrime activity because they can make it difficult to trace malicious traffic to its original source. su between 2016 and 2019. ”

VPN

VPN Computers and Electronics Antivirus Software

Arrest, Raids Tied to ‘U-Admin’ Phishing Kit

Krebs on Security

FEBRUARY 8, 2021

Brad Marden , superintendent of cybercrime operations for the Australian Federal Police (AFP), said their investigation into who was behind U-Admin began in late 2018, after Australian citizens began getting deluged with phishing attacks via mobile text messages that leveraged the software. Further reading: uAdmin Show & Tell.

Phishing

Phishing Scams Banking Mobile

US Harbors Prolific Malicious Link Shortening Service

Krebs on Security

OCTOBER 31, 2023

” Infoblox determined that until May 2023, domains ending in.info accounted for the bulk of new registrations tied to the malicious link shortening service, which Infoblox has dubbed “ Prolific Puma.” “We have not found any legitimate content served through their shorteners.” domains registered daily.US

Phishing

Phishing Telecommunications Malware Scams

“BriansClub” Hack Rescues 26M Stolen Cards

Krebs on Security

OCTOBER 15, 2019

.” Multiple people who reviewed the database shared by my source confirmed that the same credit card records also could be found in a more redacted form simply by searching the BriansClub Web site with a valid, properly-funded account. The leaked data shows that in 2015, BriansClub added just 1.7 million card records for sale.

Hacking

Hacking Cybercrime Marketing Banking

E-Crime Rapper ‘Punchmade Dev’ Debuts Card Shop

Krebs on Security

JANUARY 17, 2024

The rapper and social media personality Punchmade Dev is perhaps best known for his flashy videos singing the praises of a cybercrime lifestyle. But until recently, there wasn’t much to support a conclusion that Punchmade was actually doing the cybercrime things he promotes in his songs. Punchmade Dev’s shop.

Cybercrime

Cybercrime Media Banking Accountability

The Life Cycle of a Breached Database

Krebs on Security

JULY 29, 2021

The messages addressed customers by name and referenced past order numbers and payment amounts tied to each account. The emails encouraged recipients to click a link to accept the cash back offer, and the link went to a look-alike domain that requested bank information. customers this month.

Passwords

Passwords Password Management Phishing Scams

How Do You Fight a $12B Fraud Problem? One Scammer at a Time

Krebs on Security

OCTOBER 25, 2018

The fraudsters behind the often laughable Nigerian prince email scams have long since branched out into far more serious and lucrative forms of fraud, including account takeovers, phishing, dating scams, and malware deployment. Ronnie Tokazowski (RT): The why is that there’s a lot of money being lost to this type of fraud.

Scams

Scams Accountability Media Banking

Fighting Fake EDRs With ‘Credit Ratings’ for Police

Krebs on Security

APRIL 27, 2022

When KrebsOnSecurity recently explored how cybercriminals were using hacked email accounts at police departments worldwide to obtain warrantless Emergency Data Requests (EDRs) from social media firms and technology providers, many security experts called it a fundamentally unfixable problem.

Mobile

Mobile Government Media Technology

Busting SIM Swappers and SIM Swap Myths

Krebs on Security

NOVEMBER 6, 2018

that has been tracking down individuals engaged in unauthorized “SIM swaps” — a complex form of mobile phone fraud that is often used to steal large amounts of cryptocurrencies and other items of value from victims. OG accounts typically can be resold for thousands of dollars. ” FAKE IDs AND PHONY NOTES.

Mobile

Mobile Cryptocurrency Accountability Passwords

Massive Losses Define Epidemic of ‘Pig Butchering’

Krebs on Security

JULY 21, 2022

Nolan’s mentor had her create an account website xtb-market[.]com million of her own money over nearly four months, Nolan found her account was suddenly frozen. She was then issued a tax statement saying she owed nearly $500,000 in taxes before she could reactivate her account or access her funds.

Scams

Scams Cryptocurrency Marketing Internet

How $100M in Jobless Claims Went to Inmates

Krebs on Security

FEBRUARY 25, 2021

Much of this fraud exploits weak authentication methods used by states that have long sought to verify applicants using static, widely available information such as Social Security numbers and birthdays. Many states also lacked the ability to tell when multiple payments were going to the same bank accounts. protections.

Scams

Scams Insurance DDOS Authentication

Cyber Security Informer

Disneyland Malware Team: It’s a Puny World After All

Would You Have Fallen for This Phone Scam?

Trending Sources

When Efforts to Contain a Data Breach Backfire

The Rise of One-Time Password Interception Bots

Giving a Face to the Malware Proxy Service ‘Faceless’

Phishing Sites Targeting Scammers and Thieves

Riding the State Unemployment Fraud ‘Wave’

911 Proxy Service Implodes After Disclosing Breach

How Cybercriminals are Weathering COVID-19

A Deep Dive Into the Residential Proxy Service ‘911’

Arrest, Raids Tied to ‘U-Admin’ Phishing Kit

US Harbors Prolific Malicious Link Shortening Service

“BriansClub” Hack Rescues 26M Stolen Cards

E-Crime Rapper ‘Punchmade Dev’ Debuts Card Shop

The Life Cycle of a Breached Database

How Do You Fight a $12B Fraud Problem? One Scammer at a Time

Fighting Fake EDRs With ‘Credit Ratings’ for Police

Busting SIM Swappers and SIM Swap Myths

Massive Losses Define Epidemic of ‘Pig Butchering’

How $100M in Jobless Claims Went to Inmates

Stay Connected