Krebs on Security

MAY 18, 2020

Almost daily now there is news about flaws in commercial software that lead to computers getting hacked and seeded with malware. Here’s a look at one long-lived malware vulnerability testing service that is used and run by some of the Dark Web’s top cybercriminals. is cybercrime forum.

Malware 351

Malware Cybercrime Ransomware Marketing 351

Krebs on Security

APRIL 18, 2023

For the past seven years, a malware-based proxy service known as “ Faceless ” has sold anonymity to countless cybercriminals. The proxy lookup page inside the malware-based anonymity service Faceless. Russian vehicle registration records from 2016 show the email address denispankov@yandex.ru Image: spur.us.

Malware 299

Malware Passwords Accountability Advertising 299

Krebs on Security

JUNE 21, 2023

If you operate a cybercrime business that relies on disseminating malicious software, you probably also spend a good deal of time trying to disguise or “crypt” your malware so that it appears benign to antivirus and security products. This story explores the history and identity behind Cryptor[.]biz WHO RUNS CRYPTOR[.]BIZ?

Malware 277

Malware Antivirus Cybercrime Hacking 277

Krebs on Security

JULY 18, 2022

re network uses at least two free VPN services to lure its users to install a malware-like software that achieves persistence on the user’s computer,” the researchers wrote. The 911 user interface, as it existed when the service first launched in 2016. Another domain tied to the ustraffic@qq.com email in 2016 was ExeClean[.]net

VPN 352

VPN Computers and Electronics Antivirus Software 352

Krebs on Security

APRIL 7, 2022

The DOJ said it did not seek to disinfect compromised devices; instead, it obtained court orders to remove the Cyclops Blink malware from its “command and control” servers — the hidden machines that allowed the attackers to orchestrate the activities of the botnet. energy facilities. ” HYDRA. . ” HYDRA.

Marketing 307

Marketing Energy and Utilities Malware Ransomware 307

Krebs on Security

FEBRUARY 3, 2022

Way back in 2016, security firm Fortinet blogged about LinkedIn’s redirect being used to promote phishing sites and online pharmacies. 26 sample from Urlscan shows a LinkedIn link redirecting to a Paypal phishing page. Let me be clear that the activity described in this post is not new.

Phishing 360

Phishing Marketing Scams Accountability 360

Krebs on Security

JANUARY 22, 2019

But as he began digging deeper, Guilmette came to the conclusion that the spammers were exploiting an obscure — albeit widespread — weakness among hosting companies, cloud providers and domain registrars that was first publicly detailed in 2016. EARLY WARNING SIGNS.

DNS 269

DNS Internet Internet Computers and Electronics 269