Krebs on Security

APRIL 14, 2019

The ne’er-do-well who set up the account below has been paying $550 a month for a Land Lordz “basic plan” subscription at landlordz[.]site site that helps him manage more than 500 scam properties and interactions with up to 100 (soon-to-be-scammed) “guests” looking to book the fake listings.

Scams 277

Scams Advertising Accountability Phishing 277

Krebs on Security

MARCH 10, 2020

FBI officials last week arrested a Russian computer security researcher on suspicion of operating deer.io , a vast marketplace for buying and selling stolen account credentials for thousands of popular online services and stores. Kennedy Airport, according to court documents unsealed Monday. Firsov was arrested Mar.

Accountability 353

Accountability Advertising Hacking Cybercrime 353

Joseph Steinberg

DECEMBER 1, 2020

Social media users’ delight at receiving notification that their accounts have qualified for Verification (that is, receiving the often-coveted “blue check mark” that appears on the social media profiles of public figures) has become the latest target of criminal exploitation.

Media 246

Media Accountability Phishing Scams 246

Malwarebytes

APRIL 22, 2025

Cybercriminals are abusing Googles infrastructure, creating emails that appear to come from Google in order to persuade people into handing over their Google account credentials. The difference is that anyone with a Google account can create a website on sites.google.com. And that is exactly what the cybercriminals did.

Risk 145

Risk Accountability Scams Phishing 145

Adam Levin

JANUARY 15, 2019

citizens are more vulnerable to the effects of identity theft and scams as a result of the ongoing government shutdown. This effectively leaves victims unable to file reports or get documentation of their stolen identities, which is typically a first step for mitigating damage to credit and financial accounts. . With 87.5%

Identity Theft 219

Identity Theft Scams Government Phishing 219

Adam Levin

NOVEMBER 17, 2020

Here are 50 ways to avoid getting scammed on Black Friday — and beyond. Credit cards offer markedly better fraud protections than debit cards , which connect directly to your bank account. Virtual credit cards similarly allow online shoppers to mask their financial accounts. Vary login credentials across accounts.

Scams 243

Scams Retail Banking Passwords 243

Webroot

APRIL 11, 2025

For most of us, tax season is all about finding documents, filling out forms, and crossing your fingers youre getting a refund. Thats why each year, the IRS releases its list of Dirty Dozen Tax Scams. Common tax scams to watch out for in 2025 IRS Impersonation: The most common type of tax fraud starts with a phone call, text or email.

Scams 62

Scams Identity Theft Backups Phishing 62

Krebs on Security

NOVEMBER 21, 2020

The attacks were facilitated by scams targeting employees at GoDaddy , the world’s largest domain name registrar, KrebsOnSecurity has learned. In March, a voice phishing scam targeting GoDaddy support employees allowed attackers to assume control over at least a half-dozen domain names, including transaction brokering site escrow.com.

Cryptocurrency 364

Cryptocurrency VPN Scams Social Engineering 364

Adam Levin

SEPTEMBER 5, 2019

Some of the information out there was granular enough to allow a variety of scams, but the most serious is SIM-card swapping scams, where a criminal, armed with enough information about you, and most crucially your phone number, arranges to have your number moved to a phone in the criminal’s possession. . Monitor your accounts.

Scams 197

Scams Accountability Financial Services Insurance 197

Troy Hunt

JULY 31, 2024

How many attempted scams do you get each day? The email went on: The impact of this vulnerability is severe, potentially resulting in: Mass account takeovers by malicious actors. Exposure of sensitive user data including names, emails, addresses, and documents. Financial and reputational damage due to security breaches.

Scams 362

Scams Passwords Malware Accountability 362

Malwarebytes

APRIL 8, 2025

Brand impersonation: from Google ad to phishing page Accounting and tax preparation software has traditionally been a common lure for scammers, particularly those related to online support operating out of large call centres in India and surrounding areas. Malicious QuickBooks domains quicckboocks-accounting[.]com

Phishing 79

Phishing Scams Accountability Passwords 79

Webroot

MARCH 3, 2025

This month, take advantage of all that NCPW offers, including access to free tools and information that can help you identify and prevent online scams, fraud, and identity theft. Beware before you share Phishing scams Avoid clicking on malicious links in emails and social media. Document disposal Shred sensitive documents.

Consumer Protection 99

Consumer Protection Identity Theft Scams Social Engineering 99

Krebs on Security

FEBRUARY 3, 2022

The trouble is, there’s little to stop criminals from leveraging newly registered or hacked LinkedIn business accounts to create their own ad campaigns using Slinks. Urlscan also found this phishing scam from Jan. Here’s the very first Slink created: [link] which redirects to the homepage for LinkedIn Marketing Solutions.

Phishing 359

Phishing Marketing Scams Accountability 359

Krebs on Security

JULY 23, 2020

As first reported here last year , First American’s website exposed 16 years worth of digitized mortgage title insurance records — including bank account numbers and statements, mortgage and tax records, Social Security numbers, wire transaction receipts, and drivers license images. In the days that followed, the DFS and U.S.

Insurance 352

Insurance Financial Services Penetration Testing Scams 352

Krebs on Security

MAY 24, 2019

NYSE:FAF ] leaked hundreds of millions of documents related to mortgage deals going back to 2003, until notified this week by KrebsOnSecurity. He said anyone who knew the URL for a valid document at the Web site could view other documents just by modifying a single digit in the link.

Insurance 279

Insurance Banking Identity Theft Scams 279

SecureWorld News

FEBRUARY 3, 2025

Department of Justice (DOJ) , the seized domains were actively facilitating the sale of phishing kits, scam pages, and other fraud tools, which were then used by transnational organized crime groups to conduct business email compromise (BEC) schemes. According to the U.S.

Phishing 110

Phishing Cybercrime Scams Authentication 110

Krebs on Security

NOVEMBER 2, 2018

Thieves are combining SMS-based phishing attacks with new “cardless” ATMs to rapidly convert phished bank account credentials into cash. Recent arrests in Ohio shed light on how this scam works. Image: Mastercard.us. A graphic from Mastercard touting the potential benefits of cardless ATM transactions.

Phishing 275

Phishing Banking Scams Accountability 275

Krebs on Security

MAY 29, 2021

Happily, identifying and tracking these fake reviewer accounts is often the easiest way to spot scams. Comments on the fake Microsoft Authenticator browser extension show the reviews for these applications are either positive or very negative — basically calling it out as a scam. Image: chrome-stats.com.

Accountability 360

Accountability Authentication Scams Software 360

Malwarebytes

MARCH 20, 2025

In particular, we have previously detailed how Google advertiser accounts can be hijacked to create new malicious ads and perpetuate a vicious cycle leading to more compromised accounts. Each ad uses a unique domain name which does a redirect to more static domains dedicated to the fake Semrush and Google account login pages.

Scams 66

Scams Accountability Phishing Advertising 66

Security Affairs

MAY 15, 2025

Exposed data included contact details, partial SSNs and bank info, ID images, account history, and limited internal documents. Compromised data includes: Name, address, phone, and email; Masked Social Security (last 4 digits only); Masked bank-account numbers and some bank account identifiers; GovernmentID images (e.g.,

Data breaches 84

Data breaches Banking Accountability Retail 84

Krebs on Security

NOVEMBER 22, 2021

. “According to this actor, he had originally intended to send his targets—all senior-level executives—phishing emails to compromise their accounts, but after that was unsuccessful, he pivoted to this ransomware pretext,” Abnormal’s Crane Hassold wrote. How much money are we talking about?

Scams 328

Scams Cybercrime Banking Identity Theft 328

Krebs on Security

NOVEMBER 14, 2024

That investigation detailed how the 38-year-old Shefel adopted the nickname Rescator while working as vice president of payments at ChronoPay , a Russian financial company that paid spammers to advertise fake antivirus scams, male enhancement drugs and knockoff pharmaceuticals. “Hi, how are you?” ” he inquired.

Retail 270

Retail Advertising Cryptocurrency Marketing 270

Krebs on Security

JULY 21, 2022

The term “pig butchering” refers to a time-tested, heavily scripted, and human-intensive process of using fake profiles on dating apps and social media to lure people into investing in elaborate scams. In a more visceral sense, pig butchering means fattening up a prey before the slaughter. “The scale of this is so massive.

Scams 328

Scams Cryptocurrency Marketing Internet 328

The Hacker News

MAY 29, 2024

million through business email compromise (BEC) schemes and romance scams. According to court documents, Mullings is said to have opened 20 bank accounts in the name of Department of Justice (DoJ) has sentenced a 31-year-old to 10 years in prison for laundering more than $4.5

Scams 122

Scams Banking Accountability 122

Krebs on Security

MAY 5, 2021

After a user logs in, the link prompts them to install a malicious but innocuously-named app that gives the attacker persistent, password-free access to any of the user’s emails and files, both of which are then plundered to launch malware and phishing scams against others. Image: Proofpoint.

Accountability 348

Accountability Advertising Passwords Phishing 348

Krebs on Security

AUGUST 7, 2018

Investigators allege Handschumacher was part of a group of at least nine individuals scattered across multiple states who for the past two years have drained bank accounts via an increasingly common scheme involving mobile phone “SIM swaps.” A WORRIED MOM.

Mobile 249

Mobile Cryptocurrency Computers and Electronics Scams 249

SecureList

MAY 27, 2024

Ways to deceive message board users There are two main types of message board scams. This type of fraud is known as scam 1.0 or a buyer scam , because the attacker poses as the seller to deceive the buyer. This is known as scam 2.0 or a seller scam , because the attacker deceives the seller posing as the buyer.

Scams 127

Scams Phishing Accountability Banking 127

eSecurity Planet

MAY 16, 2025

The stolen information was then used in social engineering scams that tricked users into giving away their crypto. These insiders abused their access to customer support systems to steal the account data for a small subset of customers, Coinbase said in a blog post. Masked bank account details and identifiers. What was stolen?

Social Engineering 70

Social Engineering Scams Accountability Retail 70

Krebs on Security

SEPTEMBER 14, 2020

“He said we used to use big accounting firms for this but found them to be ineffective,” Nick said. “The company they wanted us to use looked like a real accounting firm, but we couldn’t find any evidence that they were real. Also, we asked to see an investment portfolio.

Scams 354

Scams Cryptocurrency Accountability Technology 354

Security Affairs

OCTOBER 20, 2021

Once hijacked the channel, attackers either sell it to the highest bidder or employ it in cryptocurrency scam scheme. The malware landing page is disguised as a software download URL that was sent via email or a PDF on Google Drive, or via Google documents containing the phishing links. Pierluigi Paganini.

Accountability 144

Accountability Malware Phishing Social Engineering 144

Schneier on Security

NOVEMBER 7, 2017

There's a new criminal tactic involving hacking an e-mail account of a company that handles high-value transactions and diverting payments. Criminals hack into an art dealer's email account and monitor incoming and outgoing correspondence. The criminals then withdraw the money and vanish.

Scams 190

Scams Accountability Banking Hacking 190

Krebs on Security

AUGUST 7, 2024

A partial selfie posted by Puchmade Dev to his Twitter account. That story showed how Punchmade’s social media profiles promoted Punchmade-themed online stores selling bank account and payment card data. Yes, that is a functioning handheld card skimming device, encrusted in diamonds.

Banking 302

Banking Cybercrime Accountability Retail 302

Krebs on Security

FEBRUARY 8, 2021

” The operation was carried out in coordination with the FBI and authorities in Australia, which was particularly hard hit by phishing scams perpetrated by U-Admin customers. 2020 blog post on an ongoing Qakbot campaign that was first documented three months earlier by Check Point Research. The U-Admin phishing panel interface.

Phishing 338

Phishing Scams Banking Mobile 338

Krebs on Security

OCTOBER 1, 2021

Federal Communications Commission (FCC) is asking for feedback on new proposed rules to crack down on SIM swapping and number port-out fraud, increasingly prevalent scams in which identity thieves hijack a target’s mobile phone number and use that to wrest control over the victim’s online identity.

Wireless 350

Wireless Mobile Passwords Authentication 350

Krebs on Security

AUGUST 19, 2021

. “According to this actor, he had originally intended to send his targets—all senior-level executives—phishing emails to compromise their accounts, but after that was unsuccessful, he pivoted to this ransomware pretext,” Hassold wrote. billion in 2020. Open our letter at your email.

Ransomware 363

Ransomware Social Engineering Cybercrime Scams 363

Malwarebytes

DECEMBER 27, 2024

Facebook had to admit that it scrapes the public photos, posts and other data from the accounts of Australian adult users to train its AI models, which no doubt contributed to Australias ban on social media for children under the age of 16. We saw further refinement of an ongoing type of AI-supported scam known as deepfakes.

Scams 112

Scams Media Artificial Intelligence Technology 112

SecureList

DECEMBER 6, 2022

There are two main types of online fraud aimed at stealing user data and money: phishing and scams. The history of scams and phishing. Posing as AOL employees, the scammers sent messages asking users to verify their accounts or asking for payment details. Also in the 1990s, the first online scams appeared.

Scams 131

Scams Phishing Social Engineering Banking 131