article thumbnail

Two Charged in SIM Swapping, Vishing Scams

Krebs on Security

Two young men from the eastern United States have been hit with identity theft and conspiracy charges for allegedly stealing bitcoin and social media accounts by tricking employees at wireless phone companies into giving away credentials needed to remotely access and modify customer account information. Prosecutors say Jordan K.

Scams 294
article thumbnail

How 1-Time Passcodes Became a Corporate Liability

Krebs on Security

This phishing gang apparently had great success targeting employees of all the major mobile wireless providers, but most especially T-Mobile. 12 blog post , the attackers used their access to Mailchimp employee accounts to steal data from 214 customers involved in cryptocurrency and finance. ” On July 28 and again on Aug.

Mobile 276
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Actions Target Russian Govt. Botnet, Hydra Dark Market

Krebs on Security

The FBI and other agencies warned in March that the Cyclops Blink malware was built to replace a threat called “ VPNFilter ,” an earlier malware platform that targeted vulnerabilities in a number of consumer-grade wireless and wired routers.

Marketing 233
article thumbnail

The Life Cycle of a Breached Database

Krebs on Security

22, 2020, when cryptocurrency wallet company Ledger acknowledged that someone had released the names, mailing addresses and phone numbers for 272,000 customers. Allison Nixon , chief research officer with New York City-based cyber intelligence firm Unit221B , recalled what happened in the weeks leading up to Dec.

Passwords 351