Remove Banking Remove DDOS Remove Scams Remove Web Fraud
article thumbnail

US Harbors Prolific Malicious Link Shortening Service

Krebs on Security

The top-level domain for the United States — US — is home to thousands of newly-registered domains tied to a malicious link shortening service that facilitates malware and phishing scams, new research suggests. domains were the worst in the world for spam, botnet (attack infrastructure for DDOS etc.) US phishing domains.

Phishing 264
article thumbnail

‘Spam Nation’ Villain Vrublevsky Charged With Fraud

Krebs on Security

years in a Russian penal colony for convincing one of his top affiliates to launch a distributed denial-of-service (DDoS) attack against a competitor that shut down the ticketing system for the state-owned Aeroflot airline. What Pavel does is he blackmails those Ukrainian banks using his connections and knowledge.

Banking 190
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Why is.US Being Used to Phish So Many of Us?

Krebs on Security

Domain names ending in “ US ” — the top-level domain for the United States — are among the most prevalent in phishing scams, new research shows. domains were the worst in the world for spam, botnet (attack infrastructure for DDOS etc.) This is noteworthy because.US is overseen by the U.S.

Phishing 228
article thumbnail

SSNDOB marketplace shut down by global law enforcement operation

Malwarebytes

DDoS attacks from rivals are common, so several domains working together keeps things ticking over. We’ve noted the gradual emergence of Bitcoin ATMs in scams previously; here, cryptocurrency ATMs are more popular as a payment method to SSNDOB than other dubious online services. Tips for locking down after an SSN breach.

DDOS 104
article thumbnail

How $100M in Jobless Claims Went to Inmates

Krebs on Security

Much of this fraud exploits weak authentication methods used by states that have long sought to verify applicants using static, widely available information such as Social Security numbers and birthdays. Many states also lacked the ability to tell when multiple payments were going to the same bank accounts.

Scams 311