Remove Authentication Remove Data breaches Remove Identity Theft Remove Web Fraud
article thumbnail

Fla. Man Charged in SIM-Swapping Spree is Key Suspect in Hacker Groups Oktapus, Scattered Spider

Krebs on Security

authorities arrested a 19-year-old Florida man charged with wire fraud, aggravated identity theft, and conspiring with others to use SIM-swapping to steal cryptocurrency. The missives asked users to click a link and log in at a phishing page that mimicked their employer’s Okta authentication page. 9, 2024, U.S.

article thumbnail

Identity Thieves Bypassed Experian Security to View Credit Reports

Krebs on Security

This was Experian’s advice even for people who’d just explained that this method was what identity thieves had used to lock them in out in the first place. In April 2021, KrebsOnSecurity revealed how identity thieves were exploiting lax authentication on Experian’s PIN retrieval page to unfreeze consumer credit files.

article thumbnail

Scary Fraud Ensues When ID Theft & Usury Collide

Krebs on Security

Although he didn’t technically have an account with MSF, their authentication system is based on email addresses, so Jim requested that a password reset link be sent to his email address. Jim said numerous calls to Bank of America’s fraud team went nowhere because they refused to discuss an account that was not in his name.