Krebs on Security

AUGUST 18, 2021

T-Mobile is warning that a data breach has exposed the names, date of birth, Social Security number and driver’s license/ID information of more than 40 million current, former or prospective customers who applied for credit with the company. T-Mobile hasn’t yet responded to requests for clarification regarding how many of the 7.8

Mobile 312

Mobile Identity Theft Accountability Cybercrime 312

Bleeping Computer

JANUARY 19, 2023

T-Mobile disclosed a new data breach after a threat actor stole the personal information of 37 million current postpaid and prepaid customer accounts through one of its Application Programming Interfaces (APIs). [.]

Data breaches 145

Data breaches Mobile Accountability Hacking 145

Security Boulevard

APRIL 20, 2024

Mobile application security testing is a critical aspect of modern software development, driven by the widespread use of mobile devices in our daily lives, which store vast amounts of personal data like photos, email access, social media accounts, and payment information. The post What is Mobile Application Security Testing?

Mobile 62

Mobile Media Accountability Software 62

Tech Republic Security

JANUARY 24, 2023

The criminals took advantage of an API to grab personal details such as customer names, billing addresses, email addresses, phone numbers, dates of birth, and T-Mobile account numbers. The post How hackers stole the personal data of 37 million T-Mobile customers appeared first on TechRepublic.

Mobile 215

Mobile Accountability Data breaches Phishing 215

Bleeping Computer

MAY 27, 2021

Klarna Bank suffered a severe technical issue this morning that allowed mobile app users to log into other customers' accounts and see their stored information. [.].

Mobile 142

Mobile Accountability Banking 142

Duo's Security Blog

NOVEMBER 29, 2023

Epic’s new flagship EPCS healthcare management mobile apps Haiku and Canto integrate with Cisco Duo to provide multi-factor authentication (MFA). The challenge According to a recent study by ESG , sponsored by Duo, “76% of organizations have experienced multiple account compromises over the past year.”

Mobile 117

Mobile Healthcare Authentication Passwords 117

Tech Republic Security

SEPTEMBER 14, 2021

T-Mobile customers should change their password and PIN and set up two-step verification to protect their accounts.

Mobile 123

Mobile Accountability Passwords 123

Malwarebytes

SEPTEMBER 22, 2023

Some T-Mobile customers logged into their accounts on Wednesday to find another customer’s billing and account information showing on their online dashboards. T-Mobile denied there was an attack, but confirmed there had been a data leak. “There was no cyberattack or breach at T-Mobile. .

Mobile 113

Mobile Data breaches Accountability Passwords 113

Security Boulevard

APRIL 15, 2024

Almost 600,000 Roku customers had their accounts hacked through two credential stuffing attacks several weeks apart, illustrating the ongoing risks to people who reuse passwords for multiple online accounts. The post Roku: Credential Stuffing Attacks Affect 591,000 Accounts appeared first on Security Boulevard.

Accountability 112

Accountability Passwords Risk Hacking 112

Tech Republic Security

AUGUST 20, 2021

In response to a breach that compromised the personal data of millions of subscribers, T-Mobile customers should change their password and PIN and set up two-step verification.

Mobile 198

Mobile Data breaches Accountability Passwords 198

Security Boulevard

APRIL 19, 2023

Most executives view mobile applications as a crucial component of their organization’s business strategy. Mobile apps help companies generate revenue, engage with customers and create new business opportunities. The post Rethinking the Status Quo of Mobile App Security appeared first on Security Boulevard. However, many.

Mobile 116

Mobile Accountability CISO Information Security 116

SecureWorld News

AUGUST 16, 2021

T-Mobile is investigating a post made on an underground forum that claims 100 million user accounts have been compromised in a data breach. The hacker, who spoke with VICE's Motherboard in an online chat, said the data came from T-Mobile USA and involves "full customer info.". Hacker steals millions of T-Mobile users' info.

Data breaches 95

Data breaches Mobile Accountability Wireless 95

Security Affairs

DECEMBER 21, 2023

More than 22,000 users of Blink Mobility should take the necessary steps to protect themselves against the risk of identity theft. Los Angeles-based electric car-sharing provider Blink Mobility left a misconfigured MongoDB database open to the public. In the wrong hands, this data can be exploited for financial gain.

Mobile 107

Mobile Identity Theft Passwords Phishing 107

Krebs on Security

FEBRUARY 4, 2021

Facebook, Instagram , TikTok , and Twitter this week all took steps to crack down on users involved in trafficking hijacked user accounts across their platforms. Facebook said it targeted a number of accounts tied to key sellers on OGUsers, as well as those who advertise the ability to broker stolen account sales. THE MIDDLEMEN.

Accountability 291

Accountability Hacking Media Mobile 291

Security Affairs

DECEMBER 1, 2019

The official Twitter account of Huawei Mobile Brazil has been hacked and attackers have sent offensive messages to the rival Apple. The official Twitter account of Huawei Mobile Brazil has been hacked, attackers have sent offensive messages to provoke the rival Apple. SecurityAffairs – hacking, Twitter account).

Mobile 103

Mobile Accountability Hacking Wireless 103

Security Affairs

DECEMBER 29, 2021

T-Mobile discloses a new data breach that impacted a “very small number of customers” who were victim of SIM swap attacks. T-Mobile has suffered another security breach, threat actors gained access to the accounts of “a small number of” customers.’. ” a T-Mobile Spokesperson told BleepingComputer.

Data breaches 130

Data breaches Mobile Wireless Accountability 130

Troy Hunt

OCTOBER 2, 2020

The vulnerability allow an attacker to hijack any account. On a surface of it, things looked bad: complete account takeover with a very trivial attack. All I needed was for Scott to create an account and let me know the email address he used which in this case, was test@scotthelme.co.uk. Full account takeover.

Accountability 363

Accountability Hacking Passwords InfoSec 363

Krebs on Security

DECEMBER 2, 2020

For at least the third time in its existence, OGUsers — a forum overrun with people looking to buy, sell and trade access to compromised social media accounts — has been hacked. An offer by the apparent hackers of OGUsers, offering to remove account information from the eventual database leak in exchange for payment.

Accountability 279

Accountability Hacking Scams Media 279

CyberSecurity Insiders

JULY 11, 2022

France-based virtual mobile operator ‘La Poste Mobile’ has made a public announcement through its website admitting to have become a victim to ransomware attack. Note 2- So, in this incident of Ransomware attack on La Poste Mobile, the same can be expected. . .

Mobile 119

Mobile Ransomware Encryption Cryptocurrency 119

Security Boulevard

DECEMBER 19, 2022

Identity theft takes many shapes and forms, and account takeover is one of them. In this case, ATO happens when a cybercriminal gains unauthorized access to a user’s financial, airline miles, retail, streaming, or mobile device account. The post What is Account Takeover (ATO)? The post What is Account Takeover (ATO)?

Accountability 110

Accountability Identity Theft Retail Mobile 110

SecureList

FEBRUARY 27, 2023

Figures of the year In 2022, Kaspersky mobile products and technology detected: 1,661,743 malicious installers 196,476 new mobile banking Trojans 10,543 new mobile ransomware Trojans Trends of the year Mobile attacks leveled off after decreasing in the second half of 2021 and remained around the same level throughout 2022.

Mobile 112

Mobile Malware Adware Banking 112

Pen Test Partners

JANUARY 1, 2024

The victim had been defrauded of ~£12,000 through a rogue bank transfer and mentioned that her Android mobile phone had been behaving oddly. We had unpicked a similar mobile fraud case a few months earlier and had success with helping the victim recover their funds. You can watch it here , but you’ll need an iPlayer account.

Mobile 90

Mobile Malware Banking Accountability 90

Krebs on Security

APRIL 12, 2021

Someone is selling account information for 21 million customers of ParkMobile , a mobile parking app that’s popular in North America. Gemini shared a new sales thread on a Russian-language crime forum that included my ParkMobile account information in the accompanying screenshot of the stolen data.

Mobile 347

Mobile Passwords Accountability Cybercrime 347

Krebs on Security

AUGUST 16, 2018

An entrepreneur and virtual currency investor is suing AT&T for $224 million, claiming the wireless provider was negligent when it failed to prevent thieves from hijacking his mobile account and stealing millions of dollars in cryptocurrencies. ” AN ‘IDENTITY CRISIS’?

Mobile 218

Mobile Cryptocurrency Accountability Authentication 218

Krebs on Security

NOVEMBER 28, 2022

A recent scoop by Reuters revealed that mobile apps for the U.S. But that story omitted an important historical detail about Pushwoosh: In 2013, one of its developers admitted to authoring the Pincer Trojan , malware designed to surreptitiously intercept and forward text messages from Android mobile devices. “Pushwoosh Inc.

Mobile 228

Mobile Malware Technology Government 228

Tech Republic Security

SEPTEMBER 23, 2020

The accounts are pushing games, wallpaper, and other apps designed to deploy adware scams toward iOS and Android users, says Avast.

Accountability 170

Accountability Adware Mobile Scams 170

Malwarebytes

AUGUST 19, 2021

At the end of last week, T-Mobile was investigating reports of a “massive” customer data breach. A hacker claimed to stolen 100 million people’s data from T-Mobile’s servers, which included everything from names and driver licences to addresses and social security numbers. It’s now confirmed something bad did take place.

Mobile 138

Mobile Social Engineering Data breaches Accountability 138

Security Boulevard

JANUARY 7, 2022

“We informed a very small number of customers that the SIM card assigned to a mobile number on their account may have been illegally reassigned or limited account information was viewed,” a T-Mobile spokesperson told BleepingComputer last week in response to questions about a new T-Mobile data breach.

Mobile 120

Mobile Social Engineering Data breaches Accountability 120

The Last Watchdog

AUGUST 19, 2021

At the start of this week, word got out that hackers claimed to have seized personal data for as many as 100 million T-Mobile patrons. According to the attackers, this was a configuration issue on an access point T-Mobile used for testing. T-Mobile left a gate left wide open for attackers – and attackers just had to find the gate.”.

Mobile 306

Mobile Data breaches Authentication Accountability 306

CyberSecurity Insiders

DECEMBER 28, 2021

T Mobile that suffered a massive data breach in August this year has again fallen prey to a similar hack in December 2021 that saw information leak of a small set of the telecom company customers. T-Mobile is yet to acknowledge the data breach on an official note.

Data breaches 131

Data breaches Mobile Accountability Cyber Attacks 131

SecureList

DECEMBER 1, 2023

Quarterly figures According to Kaspersky Security Network, in Q3 2023: A total of 8,346,169 mobile malware, adware, and riskware attacks were blocked. The most common threat to mobile devices was adware, accounting for 52% of all detected threats. In total, Kaspersky products blocked more than 8.3 million attacks. 14.98 –1.81

Mobile 81

Mobile Adware Banking Malware 81

CyberSecurity Insiders

APRIL 16, 2023

WhatsApp, owned by Facebook, has introduced three new account protection features to enhance the security and privacy of its users, in line with current expectations. The “Account Protect” feature will add an extra layer of security to user accounts by requiring a PIN to enter the account.

Mobile 90

Mobile Accountability Malware Software 90

SecureWorld News

JANUARY 24, 2024

On January 9, during a period of heightened anticipation surrounding the potential approval of Bitcoin exchange-traded funds (ETFs), an unauthorized post appeared on the SEC's X account claiming the approval had been granted. This allowed them to reset the account password and gain access to post the fake announcement.

Accountability 94

Accountability Hacking Government Mobile 94

Malwarebytes

SEPTEMBER 1, 2023

Not long ago I wrote about a recent campaign to hold LinkedIn users' accounts to ransom. Since he doesn’t use the LinkedIn app on his mobile he checked his account on his laptop first thing in the morning. A reset of the account’s password worked, but failed to remove the unwanted active session.

Accountability 132

Accountability Passwords Mobile Authentication 132

Heimadal Security

JANUARY 20, 2023

T-Mobile announced a new data breach after a threat actor used one of its Application Programming Interfaces to steal personal data from 37 million active postpaid and prepaid customer accounts (APIs).

Data breaches 94

Data breaches Mobile Telecommunications Accountability 94

Malwarebytes

JANUARY 10, 2024

We have seen several high-profile accounts that were taken over on X (formerly Twitter) only to be used for cryptocurrency related promotional activities, like expressing the approval of exchange-traded funds (ETFs). The @SECGov X account was compromised, and an unauthorized post was posted. .” You’re all set.

Accountability 94

Accountability Scams Hacking Cryptocurrency 94

Bleeping Computer

AUGUST 1, 2022

Cybersecurity researchers have uncovered a set of 3,207 mobile apps that are exposing Twitter API keys to the public, potentially enabling a threat actor to take over users' Twitter accounts that are associated with the app. [.].

Accountability 145

Accountability Mobile Cybersecurity 145