Remove Authentication Remove Banking Remove Cryptocurrency Remove Web Fraud
article thumbnail

How Coinbase Phishers Steal One-Time Passwords

Krebs on Security

Coinbase is the world’s second-largest cryptocurrency exchange, with roughly 68 million users from over 100 countries. ” Last month, Coinbase disclosed that malicious hackers stole cryptocurrency from 6,000 customers after using a vulnerability to bypass the company’s SMS multi-factor authentication security feature.

Passwords 341
article thumbnail

Experts Fear Crooks are Cracking Keys Stolen in LastPass Breach

Krebs on Security

Since then, a steady trickle of six-figure cryptocurrency heists targeting security-conscious people throughout the tech industry has led some security experts to conclude that crooks likely have succeeded at cracking open some of the stolen LastPass vaults. “The victim profile remains the most striking thing,” Monahan wrote.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Busting SIM Swappers and SIM Swap Myths

Krebs on Security

that has been tracking down individuals engaged in unauthorized “SIM swaps” — a complex form of mobile phone fraud that is often used to steal large amounts of cryptocurrencies and other items of value from victims. SIM swapping attacks primarily target individuals who are visibly active in the cryptocurrency space.

Mobile 235
article thumbnail

The Life Cycle of a Breached Database

Krebs on Security

Our continued reliance on passwords for authentication has contributed to one toxic data spill or hack after another. The emails encouraged recipients to click a link to accept the cash back offer, and the link went to a look-alike domain that requested bank information. customers this month.

Passwords 355
article thumbnail

Fighting Fake EDRs With ‘Credit Ratings’ for Police

Krebs on Security

Kodex’s first big client was cryptocurrency giant Coinbase , which confirmed their partnership but otherwise declined to comment for this story. Twilio confirmed it uses Kodex’s technology for law enforcement requests destined for any of its business units, but likewise declined to comment further. EDR OVERLOAD?

Mobile 182