article thumbnail

Russian Reshipping Service ‘SWAT USA Drop’ Exposed

Krebs on Security

One of the largest cybercrime services for laundering stolen merchandise was hacked recently, exposing its internal operations, finances and organizational structure. Services like SWAT are known as “Drops for stuff” on cybercrime forums. The login page for the criminal reshipping service SWAT USA Drop. “SwatVerified.”

article thumbnail

Giving a Face to the Malware Proxy Service ‘Faceless’

Krebs on Security

” MRMURZA Faceless is a project from MrMurza , a particularly talkative member of more than a dozen Russian-language cybercrime forums over the past decade. MrMurza’s Faceless advertised on the Russian-language cybercrime forum ProCrd. Image: Darkbeast/Ke-la.com. In 2013, U.S.

Malware 227
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

911 Proxy Service Implodes After Disclosing Breach

Krebs on Security

These services can be used in a legitimate manner for several business purposes — such as price comparisons or sales intelligence — but they are massively abused for hiding cybercrime activity because they can make it difficult to trace malicious traffic to its original source.

article thumbnail

Who and What is Behind the Malware Proxy Service SocksEscort?

Krebs on Security

. “The malware has been used to create residential proxy services to shroud malicious activity such as password spraying , web-traffic proxying and ad fraud,” the Lumen researchers wrote. KrebsOnSecurity briefly visited SocksEscort last year and promised a follow-up on the history and possible identity of its proprietors.

Malware 197
article thumbnail

How Cybercriminals are Weathering COVID-19

Krebs on Security

One of the more common and perennial cybercriminal schemes is “reshipping fraud,” wherein crooks buy pricey consumer goods online using stolen credit card data and then enlist others to help them collect or resell the merchandise. ” Alex Holden , founder and CTO of Hold Security , agreed. ” CONSCIENCE VS. COMMERCE.

article thumbnail

“BriansClub” Hack Rescues 26M Stolen Cards

Krebs on Security

The data stolen from BriansClub encompasses more than 26 million credit and debit card records taken from hacked online and brick-and-mortar retailers over the past four years, including almost eight million records uploaded to the shop in 2019 alone. The leaked data shows that in 2015, BriansClub added just 1.7 million card records for sale.

Hacking 207
article thumbnail

The Life Cycle of a Breached Database

Krebs on Security

Earlier this month, customers of the soccer jersey retailer classicfootballshirts.co.uk “If you were to look [on cybercrime forums] at the past history of people posting about that Ledger database, you’d see people were selling it privately for months prior to that,” Nixon said.

Passwords 354