Krebs on Security

MARCH 31, 2022

At issue are forged “emergency data requests,” (EDRs) sent through hacked police or government agency email accounts. ” Tuesday’s story showed how fraudulently obtained EDRs were a tool used by members of LAPSUS$ , the data extortion group that recently hacked Microsoft , NVIDIA , Okta and Samsung.

Government 258

Government Accountability Education Media 258

Krebs on Security

MARCH 29, 2022

The reality that teenagers are now impersonating law enforcement agencies to subpoena privileged data on their targets at whim is evident in the dramatic backstory behind LAPSUS$ , the data extortion group that recently hacked into some of the world’s most valuable technology companies , including Microsoft , Okta , NVIDIA and Vodafone.

Accountability 275

Accountability Government Hacking Social Engineering 275

Krebs on Security

MARCH 22, 2023

Google said it believes the exploit chain for Samsung devices belonged to a “commercial surveillance vendor,” without elaborating further. The highly technical writeup also did not name the malicious app in question. “The app has problems such as inexplicable installation, privacy leakage, and inability to uninstall.”

Malware 263

Malware eCommerce Mobile Media 263