article thumbnail

This Service Helps Malware Authors Fix Flaws in their Code

Krebs on Security

” From 2013 to 2016, upO was a major player on Exploit[.]in For roughly one year beginning in 2016, Lebron was a top moderator on Exploit. For roughly one year beginning in 2016, Lebron was a top moderator on Exploit. in in late 2016, complaining that RedBear was refusing to pay a debt owed to him.

Malware 322
article thumbnail

Dirt-Cheap, Legit, Windows Software: Pick Two

Krebs on Security

Last week, KrebsOnSecurity heard from a reader who’d just purchased a copy of Microsoft Office 2016 Professional Plus from a seller on eBay for less than $4. Let’s call this Red Flag #1, as a legitimately purchased license of Microsoft Office 2016 is still going to cost between $70 and $100.

Software 256
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Actions Target Russian Govt. Botnet, Hydra Dark Market

Krebs on Security

Sandworm also has been implicated in the “ Industroyer ” malware attacks on Ukraine’s power grid in December 2016, as well as the 2016 global malware contagion “ NotPetya, ” which crippled companies worldwide using an exploit believed to have been developed by and then stolen from the U.S.

Marketing 287
article thumbnail

How Phishers Are Slinking Their Links Into LinkedIn

Krebs on Security

Way back in 2016, security firm Fortinet blogged about LinkedIn’s redirect being used to promote phishing sites and online pharmacies. 26 sample from Urlscan shows a LinkedIn link redirecting to a Paypal phishing page. Let me be clear that the activity described in this post is not new.

Phishing 347
article thumbnail

Bomb Threat, Sextortion Spammers Abused Weakness at GoDaddy.com

Krebs on Security

But as he began digging deeper, Guilmette came to the conclusion that the spammers were exploiting an obscure — albeit widespread — weakness among hosting companies, cloud providers and domain registrars that was first publicly detailed in 2016. EARLY WARNING SIGNS.

DNS 247
article thumbnail

Giving a Face to the Malware Proxy Service ‘Faceless’

Krebs on Security

In September 2016, MrMurza sent a message to all iSocks users saying the service would soon be phased out in favor of Faceless, and that existing iSocks users could register at Faceless for free if they did so quickly — before Faceless began charging new users registration fees between $50 and $100. Image: Darkbeast/Ke-la.com.

Malware 274
article thumbnail

Arrest, Raids Tied to ‘U-Admin’ Phishing Kit

Krebs on Security

“Universal Admin,” is crimeware platform that first surfaced in 2016. Pretty much every Australian received a half dozen of these phishing attempts.” ” U-Admin, a.k.a. U-Admin was sold by an individual who used the hacker handle “ Kaktys ” on multiple cybercrime forums.

Phishing 307