Krebs on Security

DECEMBER 18, 2024

More importantly, Tony recognized the voice of “Daniel from Google” when it was featured in an interview by Junseth , a podcaster who covers cryptocurrency scams. Even security-conscious people tend to underestimate the complex and shifting threat from phone-based phishing scams, but they do so at their peril.

Cryptocurrency 363

Cryptocurrency Accountability Authentication Phishing 363

Krebs on Security

APRIL 28, 2020

You may have heard that today’s phone fraudsters like to use use caller ID spoofing services to make their scam calls seem more believable. But such records are ideally suited for criminals engaged in the type of phone scams that are the subject of this article.

Scams 363

Scams Banking Accountability Financial Services 363

Krebs on Security

OCTOBER 18, 2023

In August 2023, security researcher Randy McEoin blogged about a scam he dubbed ClearFake , which uses hacked WordPress sites to serve visitors with a page that claims you need to update your browser before you can view the content. Previously, the group had stored its malicious update files on Cloudflare, Guard.io

Scams 337

Scams Malware Cryptocurrency Hacking 337

Krebs on Security

MARCH 23, 2020

political campaigns, cities and towns had paid a shady company called Web Listings Inc. The story concluded that this dubious service had been scamming people and companies for more than a decade, and promised a Part II to explore who was behind Web Listings. In December 2018, KrebsOnSecurity looked at how dozens of U.S.

Scams 319

Scams Marketing Internet Internet 319

Krebs on Security

NOVEMBER 3, 2020

Two young men from the eastern United States have been hit with identity theft and conspiracy charges for allegedly stealing bitcoin and social media accounts by tricking employees at wireless phone companies into giving away credentials needed to remotely access and modify customer account information. Prosecutors say Jordan K. resident Kyell A.

Scams 357

Scams Wireless Identity Theft Mobile 357

Krebs on Security

SEPTEMBER 24, 2018

All of the domains mentioned above have been reported to the Justice Department’s National Center for Disaster Fraud , which accepts tips at disaster@leo.gov. Let me be clear: Just because a site is listed here doesn’t mean it’s a scam (or that it will be).

Scams 271

Scams Accountability Media Web Fraud 271

Krebs on Security

JANUARY 7, 2025

Before we get to the Apple scam in detail, we need to revisit Tony’s case. The Owner: The phishing panel owner, who will frequently listen in on and participate in scam calls. The phishing domain used to steal roughly $4.7 million in cryptocurrencies from Tony was verify-trezor[.]io.

Phishing 338

Phishing Cryptocurrency Accountability Social Engineering 338

Krebs on Security

MAY 21, 2021

One of the oldest scams around — the fake job interview that seeks only to harvest your personal and financial data — is on the rise, the FBI warns. Here’s the story of a recent LinkedIn impersonation scam that led to more than 100 people getting duped, and one almost-victim who decided the job offer was too-good-to-be-true.

Scams 364

Scams Accountability Advertising Web Fraud 364

Krebs on Security

NOVEMBER 1, 2024

A scan of social media networks showed this is not an uncommon scam. Booking.com did not respond to questions about that, and its current account security advice urges customers to enable 2FA. In November 2023, the security firm SecureWorks detailed how scammers targeted booking.com hospitality partners with data-stealing malware.

Phishing 278

Phishing Accountability Artificial Intelligence Cybercrime 278

Krebs on Security

JULY 21, 2022

The term “pig butchering” refers to a time-tested, heavily scripted, and human-intensive process of using fake profiles on dating apps and social media to lure people into investing in elaborate scams. In a more visceral sense, pig butchering means fattening up a prey before the slaughter. “The scale of this is so massive.

Scams 330

Scams Cryptocurrency Marketing Internet 330

Krebs on Security

NOVEMBER 4, 2021

Here’s a look at a fairly elaborate SMS-based phishing scam that spoofs FedEx in a bid to extract personal and financial information from unwary recipients. Most phishing scams invoke a temporal element that warns of negative consequences should you fail to respond or act quickly. com, g001bfedeex[.]com, com, and so on.

Phishing 337

Phishing Scams Mobile DNS 337

Krebs on Security

NOVEMBER 21, 2020

The attacks were facilitated by scams targeting employees at GoDaddy , the world’s largest domain name registrar, KrebsOnSecurity has learned. In March, a voice phishing scam targeting GoDaddy support employees allowed attackers to assume control over at least a half-dozen domain names, including transaction brokering site escrow.com.

Cryptocurrency 364

Cryptocurrency VPN Scams Social Engineering 364

Krebs on Security

OCTOBER 25, 2018

The fraudsters behind the often laughable Nigerian prince email scams have long since branched out into far more serious and lucrative forms of fraud, including account takeovers, phishing, dating scams, and malware deployment. The FBI says BEC scams netted thieves more than $12 billion between 2013 and 2018.

Scams 245

Scams Accountability Media Banking 245

Krebs on Security

JUNE 6, 2023

In May, KrebsOnSecurity interviewed a Russian spammer named “ Quotpw “ who was mass-registering accounts on the social media network Mastodon in order to conduct a series of huge spam campaigns advertising scam cryptocurrency investment platforms. com site,” the Trend researchers wrote. . Image: Trend Micro.

Accountability 263

Accountability Scams Cryptocurrency Advertising 263

Krebs on Security

FEBRUARY 3, 2022

Urlscan also found this phishing scam from Jan. The best advice to sidestep phishing scams is to avoid clicking on links that arrive unbidden in emails, text messages and other mediums. Most phishing scams invoke a temporal element that warns of dire consequences should you fail to respond or act quickly. Image: Urlscan.io.

Phishing 359

Phishing Marketing Scams Accountability 359

Krebs on Security

FEBRUARY 17, 2020

A new email-based extortion scheme apparently is making the rounds, targeting Web site owners serving banner ads through Google’s AdSense program. In this scam, the extortionists are likely betting that some publishers may see paying up as a cheaper alternative to having their main source of advertising revenue evaporate.

Scams 363

Scams Advertising Accountability Web Fraud 363

Krebs on Security

APRIL 10, 2025

Phishers using multiple virtualized Android devices to orchestrate and distribute RCS-based scam campaigns. For example, one phishing vendor appears to send out messages using dozens of Android device emulators running in parallel on a single machine. Image: Prodaft.

Phishing 250

Phishing Banking Mobile Retail 250

Krebs on Security

JULY 29, 2021

And as the phishing examples above demonstrate, many of today’s phishing scams use elements from hacked databases to make their lures more convincing. Most phishing scams invoke a temporal element that warns of negative consequences should you fail to respond or act quickly. Urgency should be a giant red flag. Take a deep breath.

Passwords 363

Passwords Password Management Phishing Scams 363

Krebs on Security

SEPTEMBER 19, 2024

While it’s unlikely that many programmers fell for this scam, it’s notable because less targeted versions of it are likely to be far more successful against the average Windows user. Because this particular scam has a great deal of room for growth and creativity.

Phishing 327

Phishing Scams Malware Passwords 327

Krebs on Security

MARCH 28, 2024

One key reason thread hijacking is so successful is that these attacks generally do not include the tell that exposes most phishing scams: A fabricated sense of urgency. “We call these mutli-persona phishing scams, and they’re often paired with thread hijacking,” Kalember said.

Phishing 316

Phishing Scams Accountability Passwords 316

Krebs on Security

JANUARY 29, 2022

The scam artist John Bernard (left) in a recent Zoom call, and a photo of John Clifton Davies from 2015. ” Bernard’s scam is genius because he never approaches investors directly; rather, investors are incentivized to put his portfolio in front of tech firms seeking financial backing. Tønnevold rejects this.”

Scams 317

Scams Technology Web Fraud 317

Krebs on Security

FEBRUARY 26, 2023

The general manager of Escrow.com said he suspected the call was a scam, but decided to play along for about an hour — all the while recording the call and coaxing information out of the scammer. One multifactor option — physical security keys — appears to be immune to these advanced scams.

Hacking 333

Hacking Social Engineering Phishing Scams 333

Security Boulevard

NOVEMBER 19, 2021

What follows is a deep dive into how this increasingly clever Zelle fraud scam typically works, and what victims can do about it. The post The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back appeared first on Security Boulevard.

Scams 111

Scams Banking Accountability Phishing 111

Krebs on Security

MAY 30, 2023

Meanwhile, anyone in the compromised Discord channel who notices the scam and replies is banned, and their messages are deleted by the compromised admin account. “I’ve seen all kinds of crypto scams, but I’ve never seen one like this.”

Hacking 351

Hacking Accountability Scams Cryptocurrency 351

Krebs on Security

FEBRUARY 8, 2021

” The operation was carried out in coordination with the FBI and authorities in Australia, which was particularly hard hit by phishing scams perpetrated by U-Admin customers. The best advice to sidestep phishing scams is to avoid clicking on links that arrive unbidden in emails, text messages and other mediums. Image: fr3d.hk/blog.

Phishing 342

Phishing Scams Banking Mobile 342

Krebs on Security

OCTOBER 9, 2023

Recent weeks have seen a sizable uptick in the number of phishing scams targeting U.S. With the holiday shopping season nearly upon us, now is a great time to remind family and friends about the best advice to sidestep phishing scams: Avoid clicking on links or attachments that arrive unbidden in emails, text messages and other mediums.

Phishing 330

Phishing Scams Passwords Web Fraud 330

Krebs on Security

AUGUST 4, 2023

The file included in this phishing scam uses what’s known as a “right-to-left override” or RLO character. The best advice to sidestep phishing scams is to avoid clicking on links that arrive unbidden in emails, text messages and other mediums.

Phishing 246

Phishing Scams Computers and Electronics Software 246

Krebs on Security

OCTOBER 13, 2021

Holden said each time a new victim submitted credentials at the Coinbase phishing site, the administrative panel would make a loud “ding” — presumably to alert whoever was at the keyboard on the other end of this phishing scam that they had a live one on the hook.

Passwords 363

Passwords Phishing Accountability Mobile 363

Krebs on Security

JANUARY 13, 2020

The best advice to sidestep phishing scams is to avoid clicking on links that arrive unbidden in emails, text messages and other mediums. Most phishing scams invoke a temporal element that warns of dire consequences should you fail to respond or act quickly.

Phishing 286

Phishing Scams Mobile Encryption 286

Krebs on Security

NOVEMBER 23, 2018

‘Tis the season when even those who know a thing or two about Internet scams tend to let down their guard in the face of an eye-popping discount or the stress of last-minute holiday shopping. Even people who shop mainly at big-name online stores can get scammed if they’re not wary of too-good-to-be-true offers.

Scams 279

Scams Wireless Phishing Banking 279

Krebs on Security

OCTOBER 5, 2022

Fake profiles also may be tied to so-called “pig butchering” scams , wherein people are lured by flirtatious strangers online into investing in cryptocurrency trading platforms that eventually seize any funds when victims try to cash out. of spam and scams. “Clearly they are not monitored,” Taylor assessed.

Accountability 316

Accountability Scams Artificial Intelligence Cryptocurrency 316

Krebs on Security

FEBRUARY 25, 2021

.” According to ID.me, a major driver of phony jobless claims comes from social engineering, where people have given away personal data in response to romance or sweepstakes scams, or after applying for what they thought was a legitimate work-from-home job. “A lot of this is targeting the elderly,” Hall said.

Scams 336

Scams Insurance DDOS Authentication 336

Krebs on Security

OCTOBER 20, 2022

Fake profiles also may be tied to so-called “pig butchering” scams , wherein people are lured by flirtatious strangers online into investing in cryptocurrency trading platforms that eventually seize any funds when victims try to cash out.

Accountability 324

Accountability Cryptocurrency Scams CISO 324

Krebs on Security

OCTOBER 31, 2023

The top-level domain for the United States — US — is home to thousands of newly-registered domains tied to a malicious link shortening service that facilitates malware and phishing scams, new research suggests. The findings come close on the heels of a report that identified.US domains registered daily.US

Phishing 337

Phishing Telecommunications Malware Scams 337

Krebs on Security

APRIL 30, 2020

Most online retailers years ago stopped shipping to regions of the world most frequently associated with credit card fraud, including Eastern Europe, North Africa, and Russia. For example, reshipping scams have over the years become easier for both reshipping mule operators and the mules themselves.

Cybercrime 360

Cybercrime Computers and Electronics Marketing Scams 360

Krebs on Security

JUNE 22, 2023

In March, 2023, a reader named Dylan from British Columbia wrote in to say he’d received one of these shipping fee scam messages not long after placing an order to buy gobs of building blocks directly from Lego.com. The message included his full name, phone number, and postal code, and urged him to click a link to mydeliveryfee-ups[.]info

Phishing 328

Phishing Retail Mobile Scams 328

Krebs on Security

MAY 16, 2020

In those schemes, the scammers typically recruit people — often victims of online romance scams or those who also are out of work and looking for any source of income — to receive direct deposits from the fraudulent transactions, and then forward the bulk of the illicit funds to the perpetrators.

Insurance 363

Insurance Banking Identity Theft Accountability 363