Krebs on Security

NOVEMBER 3, 2020

Two young men from the eastern United States have been hit with identity theft and conspiracy charges for allegedly stealing bitcoin and social media accounts by tricking employees at wireless phone companies into giving away credentials needed to remotely access and modify customer account information. Prosecutors say Jordan K.

Scams 302

Scams Wireless Identity Theft Mobile 302

Krebs on Security

AUGUST 30, 2022

Those who submitted credentials were then prompted to provide the one-time password needed for multi-factor authentication. This phishing gang apparently had great success targeting employees of all the major mobile wireless providers, but most especially T-Mobile. Image: Cloudflare.com.

Mobile 291

Mobile Phishing Authentication Accountability 291

Krebs on Security

NOVEMBER 23, 2018

‘Tis the season when even those who know a thing or two about Internet scams tend to let down their guard in the face of an eye-popping discount or the stress of last-minute holiday shopping. Even people who shop mainly at big-name online stores can get scammed if they’re not wary of too-good-to-be-true offers.

Scams 273

Scams Wireless Phishing Banking 273

Krebs on Security

JULY 29, 2021

Every time there is another data breach, we are asked to change our password at the breached entity. Our continued reliance on passwords for authentication has contributed to one toxic data spill or hack after another.

Passwords 356

Passwords Password Management Phishing Scams 356

Krebs on Security

FEBRUARY 28, 2023

Countless websites and online services use SMS text messages for both password resets and multi-factor authentication. But in a written statement, T-Mobile said this type of activity affects the entire wireless industry. KrebsOnSecurity shared a large amount of data gathered for this story with T-Mobile. A U2F device made by Yubikey.

Mobile 312

Mobile Phishing Authentication Advertising 312