Krebs on Security

JANUARY 30, 2024

authorities arrested a 19-year-old Florida man charged with wire fraud, aggravated identity theft, and conspiring with others to use SIM-swapping to steal cryptocurrency. As documented by Group-IB, the group pivoted from its access to Twilio to attack at least 163 of its customers. 9, 2024, U.S. Twilio disclosed in Aug.

Social Engineering 318

Social Engineering Mobile Cybercrime Passwords 318

Identity IQ

MAY 7, 2021

What is Account Takeover? Account takeover, also known as ATO, is a form of identity theft in which a malicious third party gains access to or “takes over” an online account. One of the primary reasons behind this massive rise in account takeover is the relative ease with which it can be done.

Accountability 105

Accountability Data breaches Passwords Social Engineering 105

Security Affairs

JANUARY 8, 2024

file exposed information that attackers could employ for lateral movement within the ministry’s systems, potentially escalating to anything from account takeover to a ransomware attack. With access to government SMTP credentials, attackers can impersonate government officials or employees to conduct social engineering attacks.

Government 123

Government Identity Theft Social Engineering Encryption 123

Hot for Security

MARCH 2, 2021

By applying high-pressure tactics and the promise of expedited payments, scammers have managed to dupe recipients into providing their personal information and bank account numbers or paying a small “processing fees.” ” The latest Bitdefender telemetry shows that coronavirus-fueled scams are still going strong.

Scams 116

Scams Identity Theft Banking Phishing 116

SecureWorld News

AUGUST 2, 2021

Here is how the company describes the threat of phishing emails: "Phishing is a common way scammers try to trick you into giving them personal information such as an account username and password, Social Security number, or other personal information. How to spot phishing emails. Be especially wary of.zip,exe,doc files.

Phishing 87

Phishing Social Engineering Scams Identity Theft 87

Security Affairs

AUGUST 12, 2023

The now-closed Amazon Simple Storage Service (S3), a file vault for digital data, left over 16,000 sensitive documents open to anyone with the means to scan the open web. For example, malicious actors could create fake accounts impersonating victims and make unauthorized transactions.

Identity Theft 86

Identity Theft Social Engineering Retail Banking 86

Identity IQ

FEBRUARY 7, 2023

Phishing is a type of social engineering scam most commonly hidden in a fraudulent email but sometimes via text message, website, or phone call where a criminal posing as a legitimate institution, such as a bank or service, tries to obtain sensitive information from a target victim. Social Media Phishing. What is Phishing?

Phishing 98

Phishing Identity Theft Scams Banking 98

Malwarebytes

FEBRUARY 12, 2021

Two former college graduates are in a lot of trouble after breaking into other students’ accounts and stealing sensitive personal data. A man from New York has pleaded guilty to one count of aggravated identity theft, and one count of computer intrusion causing damage. What happened? Many of the images were then shared.

Identity Theft 94

Identity Theft Social Engineering Passwords Accountability 94

Security Affairs

JANUARY 3, 2024

For the tool to function, the operator must input a list of compromised email accounts to be scanned. This involves specifying the credentials, as well as the IBAN and BIC codes that will be used for the ‘swapping’ or spoofing process in the documents. Utilizing AI-driven bots for advanced social engineering techniques.

Artificial Intelligence 118

Artificial Intelligence Banking Scams Cybercrime 118

Identity IQ

FEBRUARY 8, 2024

The deep web is also made up of content that is not indexed by search engines and requires a login to access. You probably use the deep web all the time — examples may include bank accounts, your email, and login-restricted content such as news or streaming entertainment. The FBI shut down the Silk Road in October 2013.

Identity Theft 98

Identity Theft Cryptocurrency Government Engineering 98

Security Affairs

FEBRUARY 26, 2021

After further investigation, we have concluded that these documents belonged to people injured or deceased in traffic accidents. Document included in every court case, showing personal information about the victim. Document showing victims salary before the accident as well as expected future salary prior to the accident.

Data breaches 96

Data breaches Insurance Identity Theft Education 96

Security Affairs

APRIL 8, 2021

The leaked files appear to only contain LinkedIn profile information – we did not find any deeply sensitive data like credit card details or legal documents in the sample posted by the threat actor. Change the password of your LinkedIn and email accounts. Enable two-factor authentication (2FA) on all your online accounts.

Identity Theft 112

Identity Theft Passwords Social Engineering Phishing 112

Security Affairs

JANUARY 27, 2022

Millions of customers of large businesses have been left vulnerable to identity theft, thanks to a security flaw that exposes their personal data to illicit download. First, the verification process requires customers to take a photo of their ID document. ” -an advisory by Onfido.

Identity Theft 86

Identity Theft Accountability Data breaches Social Engineering 86

Malwarebytes

APRIL 13, 2021

This one blends the pandemic, data harvesting, and a slice of bank account emptying. engineers, 3. accountants, 6 [SIC]. We’ve also discovered another version, again posted to Instagram from another account. In both cases, the accounts claim to be involved in (or offering) some form of immigration service(s).

Scams 110

Scams Identity Theft Social Engineering Accountability 110

Security Boulevard

JANUARY 26, 2023

Stealing personal information and extorting victims for money, these scams leverage fake job postings, sites or portals, and forms, wrapped in social engineering to attract job seekers. Scammers may also ask for Social Security numbers and bank account information for depositing paychecks.

Scams 131

Scams Identity Theft Social Engineering Advertising 131

Security Affairs

NOVEMBER 26, 2018

He gained access to his phone number and used it impersonate the executive and steal $500,000 from two accounts he had at Coinbase and Gemini. But he wasn’t quick enough to stop a hacker from draining $500,000 from two separate accounts he had at Coinbase and Gemini, according to Santa Clara officials.”

Cryptocurrency 81

Cryptocurrency Identity Theft Social Engineering Advertising 81

SecureList

MARCH 29, 2021

Such key positions include the CEO, HR department director, and chief accountant. You might think that this kind of information would be useless for an attack on a company because this personal info is not actually related to the company and contains no data that could actually compromise the company or the account owner.

Identity Theft 86

Identity Theft Phishing Accountability Banking 86

Security Boulevard

JULY 19, 2023

Particularly in the workplace, staff can become overwhelmed with security warnings, IT alerts, cybersecurity policy documents, password change requests, or even media consumption of stories about data breaches at other companies. If employees aren't careful, they can fall for this social engineering tactic.

Risk 75

Risk Cybersecurity Data breaches Authentication 75

Security Affairs

MAY 7, 2021

This includes passwords, usernames, document scans, health records, bank account and credit card details, as well as other essential data, all easily searchable and conveniently stored in one place. Most organizations use databases to store sensitive information.

Passwords 129

Passwords Authentication Identity Theft Engineering 129

Security Boulevard

JUNE 26, 2023

Unfortunately, the increasing reliance on digital systems and capabilities has also attracted an ever-growing number of malicious actors seeking to defraud businesses through phishing , social engineering , or ransomware attacks. A lack of security features to upgrade or downgrade a user may result in mismanagement of user accounts.

Data breaches 52

Data breaches Healthcare Telecommunications Financial Services 52

Approachable Cyber Threats

AUGUST 2, 2021

social engineer a mobile provider employee to facilitate a SIM swap). social engineer a mobile provider employee to facilitate a SIM swap). Should TikTok be breached, like many companies before them, your data can be obtained by hackers and scammers.

Data collection 98

Data collection Media Mobile Identity Theft 98

Security Affairs

SEPTEMBER 15, 2023

Leading Android health apps expose users to avoidable threats like surveillance and identity theft, due to their risky permissions. Access to Contacts: Apps with access to your contacts may misuse this information for spamming, social engineering, or selling your contact details to third parties without your consent.

Accountability 106

Accountability Mobile Surveillance Information Security 106

Spinone

NOVEMBER 30, 2018

There have been some very high profile data breaches in the last couple of years, all of which have cost thousands of dollars of damage and a severe blow to the reputation of the company involved: In late 2014, hackers stole the account information of over 500 million Yahoo email accounts.

Data breaches 40

Data breaches Passwords Backups Mobile 40

SecureList

FEBRUARY 16, 2023

For example, one website offered users to obtain a COVID vaccination certificate by entering their British National Health Service (NHS) account credentials. The scheme likely aimed at identity theft: the illegal use of others’ personal details for deriving profit. Others offered the coveted Green Pass without vaccination.

Phishing 89

Phishing Scams Accountability Energy and Utilities 89

SecureList

NOVEMBER 28, 2022

In the EU, lawmakers are working on the Data Act , meant to further protect sensitive data, as well as a comprehensive AI legal strategy that might put a curb on a range of invasive machine-learning technologies and require greater accountability and transparency. Smartphones will replace more paper documents.

Insurance 101

Insurance Social Engineering IoT Data breaches 101

Security Affairs

JUNE 4, 2021

PrivacyAffairs released the Dark Web Index 2021, the document provides the prices for illegal services/products available in the black marketplaces. A person’s credit card details and account balance are sold for 150 USD if the account balance is under 1000 USD, but 240 if it is under 5000 USD. What about services?

Accountability 113

Accountability Marketing Hacking Cryptocurrency 113

Herjavec Group

AUGUST 26, 2021

They hack into their teacher’s account and leave messages making fun of him. Air Force research facility, discover a password “sniffer” has been installed onto their network, compromising more than 100 user accounts. He also shares passwords with his friends, leading to the first computer “troll.” Systems are shut down for three weeks.

Cybercrime 135

Cybercrime Computers and Electronics Banking Hacking 135