Remove Cybercrime Remove Event Remove Web Fraud
article thumbnail

A Day in the Life of a Prolific Voice Phishing Crew

Krebs on Security

” Perm is the current administrator of Star Fraud , one of the more consequential cybercrime communities on Telegram and one that has emerged as a foundry of innovation in voice phishing attacks. As we’ll see in a moment, that phishing kit is operated and rented out by a cybercriminal known as “ Perm ” a.k.a.

Phishing 338
article thumbnail

Alleged Boss of ‘Scattered Spider’ Hacking Group Arrested

Krebs on Security

A 22-year-old man from the United Kingdom arrested this week in Spain is allegedly the ringleader of Scattered Spider , a cybercrime group suspected of hacking into Twilio , LastPass , DoorDash , Mailchimp , and nearly 130 other organizations over the past two years. man arrested was a SIM-swapper who went by the alias “ Tyler.”

Hacking 344
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Scam ‘Funeral Streaming’ Groups Thrive on Facebook

Krebs on Security

Recently, these scammers have branched out into offering fake streaming services for nearly any kind of event advertised on Facebook. Apkdownloadweb has a Facebook page , which shows a number of “live video” teasers for sports events that have already happened, and says its domain is apkdownloadweb[.]com. net for DNS.

Scams 64
article thumbnail

Pakistani Firm Shipped Fentanyl Analogs, Scams to US

Krebs on Security

The authorities called it “the biggest money laundering case in the history of Pakistan,” and named a number of businesses based in Texas that allegedly helped move the proceeds of cybercrime. The following mind map was helpful in piecing together key events, individuals and connections mentioned above.

Scams 270
article thumbnail

Disneyland Malware Team: It’s a Puny World After All

Krebs on Security

A financial cybercrime group calling itself the Disneyland Team has been making liberal use of visually confusing phishing domains that spoof popular bank brands using Punycode , an Internet standard that allows web browsers to render domain names with non-Latin alphabets like Cyrillic.

Malware 338
article thumbnail

That Domain You Forgot to Renew? Yeah, it’s Now Stealing Credit Cards

Krebs on Security

.” The report tracks the work of Magecart — the name given to a collective of at least seven cybercrime groups involved in hacking Web sites to steal payment card data. Credit card data stolen by these various Magecart groups invariably gets put up for sale at online cybercrime shops, the security firms found.

article thumbnail

New Ransom Payment Schemes Target Executives, Telemedicine

Krebs on Security

.” While CLOP as a money making collective is a fairly young organization, security experts say CLOP members hail from a group of Threat Actors (TA) known as “TA505,” which MITRE’s ATT&CK database says is a financially motivated cybercrime group that has been active since at least 2014.