Krebs on Security

FEBRUARY 28, 2024

A search in Google for a string of text from that script turns up a December 2023 blog post from cryptocurrency security firm SlowMist about phishing attacks on Telegram from North Korean state-sponsored hackers. “When the project team clicks the link, they encounter a region access restriction,” SlowMist wrote.

Malware 348

Malware Cryptocurrency Software Scams 348

Krebs on Security

JULY 31, 2024

Three years before that, the same pervasive weakness was described in a blog post by security researcher Matthew Bryant , who showed how one could commandeer at least 120,000 domains via DNS weaknesses at some of the world’s largest hosting providers. . Another hijacked Sitting Duck domain — anti-phishing[.]org

DNS 341

DNS Internet Internet Phishing 341

Krebs on Security

JANUARY 30, 2024

” Group-IB dubbed the gang by a different name — 0ktapus — which was a nod to how the criminal group phished employees for credentials. The missives asked users to click a link and log in at a phishing page that mimicked their employer’s Okta authentication page. On July 28 and again on Aug. According to an Aug.

Social Engineering 362

Social Engineering Cybercrime Mobile Identity Theft 362

Krebs on Security

SEPTEMBER 29, 2021

That service quickly went offline, but new research reveals a number of competitors have since launched bot-based services that make it relatively easy for crooks to phish OTPs from targets. Some services also target other popular social media platforms or financial services, providing email phishing and SIM swapping capabilities.”

Passwords 355

Passwords Banking Authentication Mobile 355

Krebs on Security

NOVEMBER 17, 2020

Frank Angiolelli , vice president of security at Indelible, said rogue notifications can be abused for credential phishing, as well as foisting malware and other unwanted applications on users. “This method is currently being used to deliver something akin to adware or click fraud type activity,” Angiolelli said.

Antivirus 362

Antivirus Adware Advertising Internet 362

Krebs on Security

APRIL 14, 2019

But when the interested party inquires about the listing, they are sent a link to a site that looks like Airbnb.com but which is actually a phishing page. Airbnb could help by adding some type of robust multi-factor authentication, such as Security Keys — which would defeat these Airbnb phishing pages.

Scams 279

Scams Advertising Accountability Phishing 279

Krebs on Security

SEPTEMBER 2, 2021

You might think that whoever is behind such a sprawling crime machine would use their access to blast out spam, or conduct targeted phishing attacks against each victim’s contacts. mail server responds “OK” = successful access).

Accountability 358

Accountability Authentication Passwords Hacking 358

Krebs on Security

JANUARY 22, 2019

In an interview with KrebsOnSecurity, Bryant said the domain hijacking technique can be a powerful tool in the hands of spammers and scammers, who can use domains associated with these companies not only to get their missives past junk and malware filters, but also to make phishing and malware lures far more believable and effective.

DNS 278

DNS Internet Internet Computers and Electronics 278

Krebs on Security

JULY 10, 2024

The Russia-based cybercrime group dubbed “ Fin7 ,” known for phishing and malware attacks that have cost victim organizations an estimated $3 billion in losses since 2013, was declared dead last year by U.S. Malwarebytes blogged about a similar campaign in April, but did not attribute the activity to any particular group.

Cybercrime 343

Cybercrime Phishing Malware Software 343

Krebs on Security

SEPTEMBER 13, 2024

In a SIM-swapping attack , the fraudsters will phish or purchase credentials for mobile phone company employees, and use those credentials to redirect a target’s mobile calls and text messages to a device the attackers control. .” ” Beige members were implicated in two stories published here in 2020.

Cybercrime 345

Cybercrime Accountability Mobile Hacking 345