article thumbnail

Interview With a Crypto Scam Investment Spammer

Krebs on Security

Social networks are constantly battling inauthentic bot accounts that send direct messages to users promoting scam cryptocurrency investment platforms. Chaput said that at one point last week the volume of bot accounts being registered for the crypto spam campaign started overwhelming the servers that handle new signups at Mastodon.social.

Scams 243
article thumbnail

Fake Lawsuit Threat Exposes Privnote Phishing Sites

Krebs on Security

For example, this account at Medium has authored more than a dozen blog posts in the past year singing the praises of Tornote as a secure, self-destructing messaging service. Throughout 2023, Tornote was hosted with the Russian provider DDoS-Guard , at the Internet address 186.2.163[.]216. io seem like a legitimate website.

Phishing 216
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Disneyland Malware Team: It’s a Puny World After All

Krebs on Security

.” A fake PNC website overlay or “web inject” displaying a message intended to temporarily prevent the user from accessing their account. The “SKIP” button in the screenshot above sends the user to the real bank login page, “in case the account is not interesting to us,” the manual explains.

Malware 273
article thumbnail

Why is.US Being Used to Phish So Many of Us?

Krebs on Security

” Dean Marks is executive director and legal counsel for a group called the Coalition for Online Accountability , which has been critical of the NTIA’s stewardship of.US. domains were the worst in the world for spam, botnet (attack infrastructure for DDOS etc.) “Even very large ccTLDs, like.de

Phishing 232
article thumbnail

US Harbors Prolific Malicious Link Shortening Service

Krebs on Security

” Infoblox determined that until May 2023, domains ending in.info accounted for the bulk of new registrations tied to the malicious link shortening service, which Infoblox has dubbed “ Prolific Puma.” domains were the worst in the world for spam, botnet (attack infrastructure for DDOS etc.) US phishing domains.

Phishing 269
article thumbnail

SSNDOB marketplace shut down by global law enforcement operation

Malwarebytes

DDoS attacks from rivals are common, so several domains working together keeps things ticking over. One breach taking your login from a gaming forum can quickly become something that exposes Government service logins or bank accounts. SSNDOB attempted to ward off a permanent shut down by spreading the data across four different URLs.

DDOS 103
article thumbnail

This Service Helps Malware Authors Fix Flaws in their Code

Krebs on Security

biz which explain in intricate detail flaws found in high-profile malware tools whose authors have used his service in the past, including; the Black Energy DDoS bot administration panel; malware loading panels tied to the Smoke and Andromeda bot loaders; the RMS and Spyadmin trojans; and a popular loan scan script. ESTRANGED BEDFELLOWS. .

Malware 314