Authentication, Cryptocurrency and Password Management

Alleged Boss of ‘Scattered Spider’ Hacking Group Arrested

Krebs on Security

JUNE 15, 2024

.” In a SIM-swapping attack, crooks transfer the target’s phone number to a device they control and intercept any text messages or phone calls sent to the victim — including one-time passcodes for authentication, or password reset links sent via SMS. Tylerb was reputed to have fled the United Kingdom after that assault.

Hacking

Hacking Phishing Cybercrime Passwords

New Version of Meduza Stealer Released in Dark Web

Security Affairs

DECEMBER 29, 2023

On Christmas Eve, Resecurity’s HUNTER unit spotted the author of perspective password stealer Meduza has released a new version (2.2). Altogether, Meduza makes a great competitor to Azorult , Redline , Racoon , and Vidar Stealer used by cybercriminals for account takeover (ATO), online-banking theft, and financial fraud.

Password Management

Password Management Cryptocurrency Passwords Authentication

CryptoCore hacker group stole over $200M from cryptocurrency exchanges

Security Affairs

JUNE 24, 2020

The CryptoCore hacker group that is believed to be operating out of Eastern Europe has stolen around $200 million from online cryptocurrency exchanges. Experts from ClearSky states that a hacker group tracked as CryptoCore, which is believed to be operating out of Eastern Europe, has stolen around $200 million from cryptocurrency exchanges.

Cryptocurrency

Cryptocurrency Phishing Accountability Passwords

Phorpiex botnet sent millions of phishing emails to deliver LockBit Black ransomware

Security Affairs

MAY 13, 2024

Password Management : Use strong, unique passwords and implement multi-factor authentication (MFA) whenever possible, prioritizing authentication apps or hardware tokens over SMS text-based codes. Reference the provided resources for establishing DMARC authentication.

Phishing

Phishing Ransomware Security Awareness Authentication

Fla. Man Charged in SIM-Swapping Spree is Key Suspect in Hacker Groups Oktapus, Scattered Spider

Krebs on Security

JANUARY 30, 2024

authorities arrested a 19-year-old Florida man charged with wire fraud, aggravated identity theft, and conspiring with others to use SIM-swapping to steal cryptocurrency. The missives asked users to click a link and log in at a phishing page that mimicked their employer’s Okta authentication page. 9, 2024, U.S. According to an Aug.

Social Engineering

Social Engineering Mobile Cybercrime Passwords

OpenSea warns of Discord channel compromise

Malwarebytes

MAY 6, 2022

Use 2FA and a password manager. We don’t know what the phishing page was trying to obtain, but it will be something valuable, which probably means cryptocurrency or Discord logins. You can make it harder to steal your Discord login by using a password manager and two-factor authentication (2FA).

Phishing

Phishing Password Management Cryptocurrency Scams

Erbium info-stealing malware, a new option in the threat landscape

Security Affairs

SEPTEMBER 27, 2022

Threat actors behind the new ‘Erbium’ information-stealing malware are distributing it as fake cracks and cheats for popular video games to steal victims’ credentials and cryptocurrency wallets. Collecting user credentials, such as passwords, from a range of popular chat and email programs, as well as web browsers.

Malware

Malware Password Management Authentication Passwords

Data Provided by the Estonian Central Criminal Police is Now Searchable on Have I Been Pwned

Troy Hunt

JUNE 11, 2018

They suspected that a significant volume of the credentials obtained in these incidents have been used to access mailboxes, cryptocurrency exchanges, cloud service accounts and other similar online assets. In total, there were 655k records affected that are now searchable.

Cryptocurrency

Cryptocurrency Cybercrime Data breaches Passwords

Erbium stealer on the hunt for data

Malwarebytes

SEPTEMBER 29, 2022

Erbium targets multiple forms of cryptocurrency wallet, along with password managing software and two-factor authentication (2FA) data. According to the latest research available , it leans into that well worn tactic of plundering several forms of web browser for passwords, autofill data, and also cookies.

Cryptocurrency

Cryptocurrency Malware Password Management Data collection

Ukraine Nabs Suspect in 773M Password ?Megabreach?

Krebs on Security

MAY 19, 2020

The SBU said they found on Sanix’s computer records showing he sold databases with “logins and passwords to e-mail boxes, PIN codes for bank cards, e-wallets of cryptocurrencies, PayPal accounts, and information about computers hacked for further use in botnets and for organizing distributed denial-of-service (DDoS) attacks.”

Passwords

Passwords Accountability Hacking Password Management

CERT-UA warns of malspam attacks distributing the Jester info stealer

Security Affairs

MAY 9, 2022

The Jester stealer is able to steal credentials and authentication tokens from Internet browsers, MAIL/FTP / VPN clients, cryptocurrency wallets, password managers, messengers, game programs, and more.

Password Management

Password Management VPN Cryptocurrency Government

167 counterfeit apps used for financial scams against Android and iOS users

SC Magazine

MAY 12, 2021

Researchers found 167 counterfeit Android and iOS apps that attackers used to steal money from victims who believed they installed a financial trading, banking or cryptocurrency app. Use strong access controls to protect the most important accounts using a password manager and multifactor authentication.

Scams

Scams Cryptocurrency Social Engineering Banking

How to spot the signs of a virtual kidnap scam

Malwarebytes

MAY 15, 2022

We see criminals gravitating to digital payment systems, cryptocurrencies, and even gift cards across most realms of attack. 2 factor authentication and password managers are good places to start. At this point, it’s already game over. The fraudster on this occasion asked for money to be sent through Venmo.

Scams

Scams Social Engineering Password Management Engineering

Experts Fear Crooks are Cracking Keys Stolen in LastPass Breach

Krebs on Security

SEPTEMBER 5, 2023

In November 2022, the password manager service LastPass disclosed a breach in which hackers stole password vaults containing both encrypted and plaintext data for more than 25 million users. Taylor Monahan is founder and CEO of MetaMask , a popular software cryptocurrency wallet used to interact with the Ethereum blockchain.

Cryptocurrency

Cryptocurrency Passwords Encryption Accountability

LastPass: ‘Horse Gone Barn Bolted’ is Strong Password

Krebs on Security

SEPTEMBER 22, 2023

The password manager service LastPass is now forcing some of its users to pick longer master passwords. But critics say the move is little more than a public relations stunt that will do nothing to help countless early adopters whose password vaults were exposed in a 2022 breach at LastPass. ”

Passwords

Passwords Encryption Password Management Cryptocurrency

Happy 13th Birthday, KrebsOnSecurity!

Krebs on Security

DECEMBER 29, 2022

You just knew 2022 was going to be The Year of Crypto Grift when two of the world’s most popular antivirus makers — Norton and Avira — kicked things off by installing cryptocurrency mining programs on customer computers. The now-defunct and always phony cryptocurrency trading platform xtb-market[.]com,

Cryptocurrency

Cryptocurrency Cybercrime Computers and Electronics Scams

Popular apps left biometric data, IDs of millions of users in danger

Security Affairs

JANUARY 27, 2022

Other affected businesses include Chip, a UK-based savings app boasting 400,000 users; Hoolah, a shopping app with over 100,000 installs ; Mode, a cryptocurrency app with over 50,000 installs ; and Greenwheels, a car-sharing service with over 50,000 installs. Enable two-factor authentication (2FA) on all your online accounts.

Identity Theft

Identity Theft Accountability Data breaches Social Engineering

DiceKeys

Schneier on Security

AUGUST 24, 2020

You can then use that key to derive master passwords for password managers, as the seed to create a U2F key for two-factor authentication, or even as the secret key for cryptocurrency wallets.

Passwords

Passwords Cryptocurrency Password Management Authentication

The Life Cycle of a Breached Database

Krebs on Security

JULY 29, 2021

Our continued reliance on passwords for authentication has contributed to one toxic data spill or hack after another. 22, 2020, when cryptocurrency wallet company Ledger acknowledged that someone had released the names, mailing addresses and phone numbers for 272,000 customers. Don’t re-use passwords.

Passwords

Passwords Password Management Phishing Scams

The Rise of AI Social Engineering Scams

Identity IQ

JUNE 1, 2023

This wouldn’t be the first time there’s been confusion as to the authenticity of Musk’s statements. Def not me,” in response to a deepfake video that showed him promoting a cryptocurrency scam. Strengthen Cybersecurity Practices Use Strong and Unique Passwords: Create strong passwords that are unique for each online account.

Social Engineering

Social Engineering Scams Engineering Identity Theft

Mystic Stealer

Security Boulevard

JUNE 15, 2023

Oftentimes this is credential data, but it can be any data that may have financial value to an adversary; this includes paid online service accounts, cryptocurrency wallets, instant messenger, or email contacts lists, etc. Key Mystic Stealer functions include its ability to extract data from web browsers and cryptocurrency wallets.

Cryptocurrency

Cryptocurrency Password Management Malware DNS

Internet Safety Month: Avoiding the consequences of unsafe Internet practices

Malwarebytes

JUNE 3, 2022

By focusing on this context, we hope that you’ll come away with a stronger understanding about, for instance, why you should use a password manager rather than that you should use a password manager. By selling fake raffle tickets for the promotion, the scammers raked in $438,000 worth of cryptocurrency.

Internet

Internet Internet Scams Passwords

NFTs: The Newest Collectible

eSecurity Planet

APRIL 21, 2021

From news of a collage selling for almost $70 million at Christie’s auction house to a portrayal of Janet Yellen and Morpheus rapping about cryptocurrency on SNL , the current craze is all about non-fungible tokens (NFTs). Also Read: Best Password Management Software & Tools for 2021. How do NFTs work?

Cryptocurrency

Cryptocurrency Marketing Accountability Scams

Report: how cybercriminals abuse API keys to steal millions

Security Affairs

MAY 21, 2021

CyberNews researchers found that crooks could abuse cryptocurrency exchange API keys and steal cryptocurrencies. CyberNews researchers found that cybercriminals are able to abuse cryptocurrency exchange API keys and steal cryptocurrencies from their victims’ accounts without being granted withdrawal rights.

Cryptocurrency

Cryptocurrency Accountability Marketing Passwords

Will 2019 Be the Year Cybersecurity Goes Mainstream?

Adam Levin

JANUARY 2, 2019

It’s still a relatively uncommon exploit, but if you are visibly in possession of something hackers want–whether it’s a cool “OG” handle on social media, cryptocurrency or the codes to launch nuclear war–the assaults on attractive targets will increase in 2019.

Cybersecurity

Cybersecurity Identity Theft Passwords Password Management

Drawing the RedLine – Insider Threats in Cybersecurity

Security Boulevard

MARCH 31, 2022

Passwords: An Easy Target. Let’s not mince words: passwords are difficult for most organizations to manage. Despite the ready availability of password management software, deployment and strategic management of passwords is difficult as your employment numbers skyrocket. Defense Against SIM-Swapping.

Cybersecurity

Cybersecurity Social Engineering Passwords Malware

Types of Encryption, Methods & Use Cases

eSecurity Planet

DECEMBER 7, 2023

Users can establish a symmetric key to share private messages through a secure channel, like a password manager. The RSA algorithm remains the most popular public key cryptographic system today and introduced the concept of digital signatures for authentication outside of academia.

Encryption

Encryption Authentication Passwords Password Management

What Is Encryption? Definition, How it Works, & Examples

eSecurity Planet

DECEMBER 7, 2023

ECC is used for email encryption, cryptocurrency digital signatures, and internet communication protocols. Encryption protocols can also verify the authenticity of sources and prevent a sender from denying they were the origin of a transmission.

Encryption

Encryption Passwords IoT Firewall

Cyber Security Informer

Alleged Boss of ‘Scattered Spider’ Hacking Group Arrested

New Version of Meduza Stealer Released in Dark Web

Trending Sources

CryptoCore hacker group stole over $200M from cryptocurrency exchanges

Phorpiex botnet sent millions of phishing emails to deliver LockBit Black ransomware

Fla. Man Charged in SIM-Swapping Spree is Key Suspect in Hacker Groups Oktapus, Scattered Spider

OpenSea warns of Discord channel compromise

Erbium info-stealing malware, a new option in the threat landscape

Data Provided by the Estonian Central Criminal Police is Now Searchable on Have I Been Pwned

Erbium stealer on the hunt for data

Ukraine Nabs Suspect in 773M Password ?Megabreach?

CERT-UA warns of malspam attacks distributing the Jester info stealer

167 counterfeit apps used for financial scams against Android and iOS users

How to spot the signs of a virtual kidnap scam

Experts Fear Crooks are Cracking Keys Stolen in LastPass Breach

LastPass: ‘Horse Gone Barn Bolted’ is Strong Password

Happy 13th Birthday, KrebsOnSecurity!

Popular apps left biometric data, IDs of millions of users in danger

DiceKeys

The Life Cycle of a Breached Database

The Rise of AI Social Engineering Scams

Mystic Stealer

Internet Safety Month: Avoiding the consequences of unsafe Internet practices

NFTs: The Newest Collectible

Report: how cybercriminals abuse API keys to steal millions

Will 2019 Be the Year Cybersecurity Goes Mainstream?

Drawing the RedLine – Insider Threats in Cybersecurity

Types of Encryption, Methods & Use Cases

What Is Encryption? Definition, How it Works, & Examples

Stay Connected