Krebs on Security

FEBRUARY 6, 2025

The device information shared, combined with the user’s Internet address and data gathered from mobile advertising companies , could be used to deanonymize users of the DeepSeek iOS app, NowSecure warned. Full disclosure: Wiz is currently an advertiser on this website.] This story will be updated with any substantive replies.

Risk 298

Risk Artificial Intelligence Mobile Encryption 298

Krebs on Security

MAY 7, 2025

com were paid for by the same account advertising a number of scam websites selling logo and web design services. Those website names were then fed into spyfu.com , a competitive intelligence company that tracks the reach and performance of advertising keywords. The Google ads promoting quranmasteronline[.]com

Scams 208

Scams Marketing Advertising Technology 208

Krebs on Security

NOVEMBER 19, 2024

The original October 31 post from abyss0, where they advertise the sale of data from several large banks that are customers of a large financial software company. A review of abyss0’s posts to BreachForums reveals this user has offered to sell databases stolen in several dozen other breaches advertised over the past six months.

Data breaches 304

Data breaches Banking Cybercrime Advertising 304

Penetration Testing

NOVEMBER 2, 2024

In a world increasingly dependent on online advertising, cybercriminals have seized an opportunity to exploit Meta’s vast advertising ecosystem.

Advertising 133

Advertising Cybersecurity Malware 133

The Hacker News

NOVEMBER 5, 2024

million) by South Korea's data privacy watchdog for illegally collecting sensitive personal information from Facebook users, including data about their political views and sexual orientation, and sharing it with advertisers without their consent. Meta has been fined 21.62 billion won ($15.67

Advertising 132

Advertising Data privacy 132

Malwarebytes

MARCH 26, 2025

In this case, they certainly put a lot more effort into creating the fake website which the advertisement linked to: Its different from the real website, but it looks convincing, nonetheless. The advertisers name is not in Chinese characters by the way. The language in which the advertiser’s name is written is Hebrew: .

Artificial Intelligence 128

Artificial Intelligence Advertising Malware Risk 128

Schneier on Security

JANUARY 18, 2022

Rolling Stone is reporting that the UK government has hired the M&C Saatchi advertising agency to launch an anti-encryption advertising campaign. Presumably they’ll lean heavily on the “think of the children!” ” rhetoric we’re seeing in this current wave of the crypto wars.

Encryption 362

Encryption Government Advertising Marketing 362

Malwarebytes

DECEMBER 3, 2024

We’ve identified specific advertiser accounts that make up the bulk of fraudulent ads we have reported to Google this past year. For instance, one advertiser had over 30 reported incidents in the past 3 months. It’s unclear why Google has not taken definitive action on the advertiser profiles we have reported.

Scams 136

Scams Advertising Accountability Engineering 136

Malwarebytes

SEPTEMBER 12, 2024

We’ve uncovered a malicious campaign going after Mac users looking for support or extended warranty from Apple via the AppleCare+ support plans. The perpetrators are buying Google ads to lure in their victims and redirect them to bogus pages hosted on GitHub , the developer and code repository platform owned by Microsoft.

Advertising 143

Advertising Scams Social Engineering Banking 143

Malwarebytes

FEBRUARY 19, 2025

For years, Google has been saying it will phase out the third-party tracking cookies that power much of its advertising business online, proposing new ideas that would allegedly preserve user privacy while still providing businesses with steady revenue streams. But it’s not been straight forward for Google. What can I do?

Advertising 137

Advertising VPN Internet Internet 137

The Hacker News

APRIL 16, 2025

million advertiser accounts in 2024, with a majority of them identified and blocked by its systems before it could serve harmful ads to users. Google on Wednesday revealed that it suspended over 39.2 In all, the tech giant said it stopped 5.1 billion bad ads, restricted 9.1 billion ads, and blocked or restricted ads on 1.3

Advertising 108

Advertising Accountability 108

Schneier on Security

NOVEMBER 3, 2021

Scammers are using that prestigious domain name to shill brands : Basically, it appears that anyone with $300 to spare can ­– or could, depending on whether Harvard successfully shuts down the practice — advertise nearly anything they wanted on Harvard.edu, in posts that borrow the university’s domain and prestige while making no mention (..)

Accountability 347

Accountability Advertising Scams 347

Krebs on Security

DECEMBER 11, 2024

The 122 services targeted in Sanders’ research include some of the more prominent businesses advertising on the cybercrime forums today, such as: -abuse-friendly or “bulletproof” hosting providers like anonvm[.]wtf, wtf, and PQHosting ; -sites selling aged email, financial, or social media accounts, such as verif[.]work

Cryptocurrency 286

Cryptocurrency Banking Cybercrime Advertising 286

The Hacker News

MAY 12, 2025

Instead of relying on traditional phishing or cracked software sites, they build convincing AI-themed platforms often advertised via legitimate-looking Facebook groups and viral social media campaigns,"

Artificial Intelligence 122

Artificial Intelligence Malware Advertising Media 122

Malwarebytes

MARCH 12, 2025

As the company behind the Android Operating System (OS), the Google Play Store, the most popular search engine in the world, and part of the leading company in digital advertising (Alphabet), Google has obtained a position where it would be hard not to profit from. Ever considered not telling them who I am?

Advertising 143

Advertising Accountability Marketing Engineering 143

Schneier on Security

APRIL 4, 2024

The ProtonMail people are accusing Microsoft’s new Outlook for Windows app of conducting extensive surveillance on its users.

Surveillance 360

Surveillance Advertising Data collection 360

Security Boulevard

JANUARY 24, 2025

A malicious generative AI chatbot dubbed "GhostGPT" is being advertised to cybercriminals on underground forums as a tool for more quickly and efficiently creating malware, running BEC attacks, and other nefarious activities, lowering the barrier for less-skilled hackers to launch attacks.

Advertising 129

Advertising Malware Social Engineering Security Awareness 129

Krebs on Security

JUNE 22, 2022

” The DOJ’s statement doesn’t mention that RSOCKS has been in operation since 2014, when access to the web store for the botnet was first advertised on multiple Russian-language cybercrime forums. Even today, the RUSdot Mailer is advertised for sale at the top of the RUSdot community forum.

Advertising 318

Advertising Cybercrime System Administration Hacking 318

Krebs on Security

MARCH 20, 2023

Until recently, AT&T also shared CPNI data with Xandr , whose privacy policy in turn explains that it shares data with hundreds of other advertising firms. EPIC says T-Mobile customer data sold to third parties uses another unique identifier called mobile advertising IDs or “ MAIDs.”

Mobile 314

Mobile Wireless Advertising Accountability 314

Tech Republic Security

OCTOBER 29, 2024

Malvertising is a shortened mash-up of “malicious advertising.” These malicious ads are difficult to detect, and are served to internet users using legitimate advertising networks and publishing platforms, such as the Google Search Network.

Advertising 103

Advertising Cybersecurity Internet Internet 103

Troy Hunt

APRIL 6, 2020

Keep reading the definition until you understand then proceed: Spamming is the use of messaging systems to send an unsolicited message, especially advertising Alrighty, so it's an unsolicited message (I certainly didn't ask for it) and it's intended to advertise your work.

Advertising 344

Advertising Internet Internet VPN 344

Schneier on Security

MARCH 19, 2024

1: Advertising The role advertising plays in the internet arose more by accident than anything else. Advertising was the obvious business model, if never the best one. Big Tech needs something to persuade advertisers to keep spending on their platforms. In both cases, the solution lies in limits on the technology’s use.

Media 355

Media Advertising Surveillance Artificial Intelligence 355

Security Affairs

JANUARY 10, 2025

In August 2024, Russian crooks advertised a macOS malware called BANSHEE Stealer that can target both x86_64 and ARM64 architectures. The malicious code was advertised on cybercrime forums for $3,000 per month. The malware can collect cookies, logins and browsing history, but from Safari only cookies can be collected.

Malware 124

Malware Advertising Antivirus Cybercrime 124

Krebs on Security

FEBRUARY 1, 2021

SMS Bandits also provided their own “bulletproof hosting” service advertised as a platform that supported “freedom of speach” [sic] where customers could “host any content without restriction.” agency advertises a service designed to help intercept one-time passwords needed to log in to various websites.

Phishing 358

Phishing Telecommunications Advertising Mobile 358

Security Affairs

FEBRUARY 2, 2025

The Saim Raza group run multiple marketplaces that advertised and facilitated the sale of hacking and fraud tools, including malware, phishing kits and email extractors. The HeartSender group advertised its tools as fully undetectable by antispam software. These tools are essential components to build and run fraud operations.

Cybercrime 112

Cybercrime Advertising Phishing Hacking 112

Malwarebytes

NOVEMBER 1, 2024

SEO poisoning is a technique employed by cybercriminals to manipulate search engine results, making harmful websites or advertisements appear at the top of search results. Did the advertisement you clicked on take you to the expected web shop? So, what can consumers do to stay safe?

Phishing 126

Phishing Advertising Engineering Risk 126

Schneier on Security

NOVEMBER 12, 2020

Apple will start requiring standardized privacy labels for apps in its app store, starting in December: Apple allows data disclosure to be optional if all of the following conditions apply: if it’s not used for tracking, advertising or marketing; if it’s not shared with a data broker; if collection is infrequent, unrelated to the app’s (..)

Advertising 361

Advertising Marketing Accountability Software 361

Krebs on Security

JANUARY 25, 2024

For example, a Google search earlier this week for the free graphic design program FreeCAD produced the following result, which shows that a “Sponsored” ad at the top of the search results is advertising the software available from freecad-us[.]org. million advertiser accounts. Google says it removed 5.2

Software 325

Software Advertising Malware Accountability 325

Adam Levin

FEBRUARY 8, 2021

A December 2020 update infected users with a Trojan-style malware that bombards users with unwanted advertising. may also allow a bad player to place invasive data tracking on your device as well as annoying advertising. Barcode Scanner is an app available in the Google Play store for Android devices.

Mobile 303

Mobile Advertising Malware Risk 303

Krebs on Security

FEBRUARY 17, 2020

” “Next an ad serving limit will be placed on your publisher account and all the revenue will be refunded to advertisers. In this scam, the extortionists are likely betting that some publishers may see paying up as a cheaper alternative to having their main source of advertising revenue evaporate.

Scams 363

Scams Advertising Accountability Web Fraud 363

Krebs on Security

MARCH 10, 2020

was originally advertised on the public Russian-language hacking forum Antichat by a venerated user in that community who goes by the alias “ Isis.” ” A Google Translate version of that advertisement is here (PDF). Isis’ profile on antichat. ru — wasn’t working at the time.

Accountability 354

Accountability Advertising Hacking Cybercrime 354

Krebs on Security

NOVEMBER 1, 2024

A service advertised on the English-language crime community BreachForums in October courts phishers who may need help with certain aspects of their phishing campaigns targeting booking.com partners. One post last month on the Russian-language hacking forum BHF offered up to $5,000 for each hotel account.

Phishing 273

Phishing Accountability Artificial Intelligence Cybercrime 273

Krebs on Security

MAY 5, 2021

This week, messaging security vendor Proofpoint published some new data on the rise of these malicious Office 365 apps, noting that a high percentage of Office users will fall for this scheme [full disclosure: Proofpoint is an advertiser on this website]. A cybercriminal service advertising the sale of access to hacked Office365 accounts.

Accountability 348

Accountability Advertising Passwords Phishing 348

Schneier on Security

FEBRUARY 16, 2021

Users began noticing something weird going on with their phones: their default browsers kept getting hijacked and redirected to random advertisements, seemingly out of nowhere. But a December 2020 update included some new features: However, a rash of malicious activity was recently traced back to the app. That’s not the case here.

Advertising 326

Advertising Malware 326

Malwarebytes

OCTOBER 30, 2024

That means that a victim’s device could be compromised just by visiting a malicious website or advertisement. This vulnerability, tracked as CVE-2024-10487 , can be used by cybercriminals as a drive-by download. The vulnerability was found in Dawn, an open source and cross-platform implementation of the WebGPU -standard.

Spyware 144

Spyware Architecture Advertising Engineering 144

Malwarebytes

APRIL 24, 2025

The tech giant may have used this data for targeted advertising, according to Blue Shield, which is one of the largest health insurers in the US. In this case, a simple misconfiguration shared data with an entitythat already knows so much about usthat then used the information for targeted advertising.

Insurance 121

Insurance Data breaches Passwords Phishing 121

Krebs on Security

FEBRUARY 28, 2025

Last year, the French security firm Intrinsec detailed Prospero’s connections to bulletproof services advertised on Russian cybercrime forums under the names Securehost and BEARHOST. The bulletproof hosting provider BEARHOST. This screenshot has been machine-translated from Russian.

Malware 257

Malware Antivirus Software DDOS 257