article thumbnail

Fla. Man Charged in SIM-Swapping Spree is Key Suspect in Hacker Groups Oktapus, Scattered Spider

Krebs on Security

A booking photo of Noah Michael Urban released by the Volusia County Sheriff. As it happens, Plex announced its own data breach one day before LastPass disclosed its initial August intrusion. The missives asked users to click a link and log in at a phishing page that mimicked their employer’s Okta authentication page.

article thumbnail

LastPass: ‘Horse Gone Barn Bolted’ is Strong Password

Krebs on Security

“LastPass in my book is one step above snake-oil. . “And now this is blaming the users — ‘you should have used a longer passphrase’ — not them for having weak defaults that were never upgraded for existing users,” Weaver said. ”

Passwords 273
article thumbnail

Meet the World’s Biggest ‘Bulletproof’ Hoster

Krebs on Security

In 2010, this author received a massive data dump from a source that had hacked into or otherwise absconded with more than four years of email records from ChronoPay — at the time a major Russian online payment provider whose CEO and co-founders were the chief subjects of my 2014 book, Spam Nation: The Inside Story of Organized Cybercrime.