Krebs on Security

FEBRUARY 8, 2021

Brad Marden , superintendent of cybercrime operations for the Australian Federal Police (AFP), said their investigation into who was behind U-Admin began in late 2018, after Australian citizens began getting deluged with phishing attacks via mobile text messages that leveraged the software.

Phishing 294

Phishing Scams Banking Mobile 294

Krebs on Security

MARCH 22, 2024

Launched in 2018 under the name Firefox Monitor , Mozilla Monitor also checks data from the website Have I Been Pwned? Mozilla only began bundling Onerep in Firefox last month, when it announced the reputation service would be offered on a subscription basis as part of Mozilla Monitor Plus.

Media 285

Media Government Data breaches Marketing 285

Krebs on Security

AUGUST 23, 2024

Alas, in 2018, the.llc TLD was born and began selling domains. From then on, anyone who registered company.llc would be able to passively intercept that organization’s Microsoft Windows credentials, or actively modify those connections in some way — such as redirecting them somewhere malicious.

DNS 294

DNS Internet Internet Authentication 294

Krebs on Security

OCTOBER 31, 2023

As far back as 2018, Interisle found.US Or so concludes The Interisle Consulting Group , which gathers phishing data from multiple industry sources and publishes an annual report on the latest trends. domains were the worst in the world for spam, botnet (attack infrastructure for DDOS etc.) and illicit or harmful content.

Phishing 294

Phishing Telecommunications Malware Scams 294

Krebs on Security

NOVEMBER 13, 2021

” Troia’s work as a security researcher was the subject of a 2018 article here titled, “ When Security Researchers Pose as Cybercrooks, Who Can Tell the Difference? Troia says the individual has been associated in the past with incidents aimed at damaging the security researcher’s reputation.”

Internet 363

Internet Internet Hacking Accountability 363

Krebs on Security

FEBRUARY 26, 2023

In July 2018, Google disclosed that it had not had any of its 85,000+ employees successfully phished on their work-related accounts since early 2017, when it began requiring all employees to use physical security keys in place of one-time codes. Thus, the second factor cannot be phished, either over the phone or Internet.

Hacking 293

Hacking Social Engineering Phishing Scams 293

Krebs on Security

APRIL 7, 2022

In May 2018, the FBI executed a similar strategy to dismantle VPNFilter, which had spread to more than a half-million consumer devices. On April 1, ASUS released updates to fix the security vulnerability in a range of its Wi-Fi routers.

Marketing 270

Marketing Energy and Utilities Malware Ransomware 270

Krebs on Security

MARCH 14, 2023

In 2018, KrebsOnSecurity detailed how Stevenson earned bug bounty rewards and public recognition from top telecom companies for finding and reporting security holes in their websites, all the while secretly peddling those same vulnerabilities to cybercriminals.

Hacking 272

Hacking Government Media Accountability 272

Security Boulevard

AUGUST 25, 2021

In 2018, Andrew Schober was digitally mugged for approximately $1 million worth of bitcoin. After several years of working with investigators, Schober says he's confident he has located two young men in the United Kingdom responsible for developing a clever piece of digital clipboard-stealing malware that let them siphon his crypto holdings.

Malware 52

Malware Web Fraud 52

Krebs on Security

NOVEMBER 6, 2018

In late September 2018, the REACT Task Force spearheaded an investigation that led to the arrest of two Missouri men — both in their early 20s — who are accused of conducting SIM swaps to steal $14 million from a cryptocurrency company based in San Jose, Calif. . million customers.

Mobile 241

Mobile Cryptocurrency Accountability Passwords 241

Krebs on Security

NOVEMBER 13, 2018

Likewise, kavanaghsirishpub-dot-com corresponded to a pub and restaurant in Tennessee until mid-2018; now it’s pretending to sell cheap Nike shoes. “We have observed more than 800 sites hosting these brand impersonation/skimming stores since June 2018,” the report notes. It’s now advertising running shoes.

Accountability 220

Accountability eCommerce Cybercrime Advertising 220

Krebs on Security

MAY 22, 2023

In September 2018, a user by the name “ ципа ” (phonetically “ Zipper ” in Russian) registered on the Russian hacking forum Lolzteam using the edgard0111012@gmail.com address.

Scams 267

Scams DDOS Cryptocurrency Accountability 267

Krebs on Security

JUNE 21, 2023

guru show that in 2018 the domains were forwarding incoming email to the address obelisk57@gmail.com. The registration records for the website Cryptor[.]biz biz are hidden behind privacy protection services, but the site’s homepage says potential customers should register by visiting the domain crypt[.]guru ” Crypt[.]guru’s

Malware 237

Malware Antivirus Cybercrime Hacking 237

Krebs on Security

MAY 18, 2020

Intel 471 says a rumor has been circulating on Exploit and other forums upO frequented that he was the mastermind behind GandCrab , another ransomware-as-a-service affiliate program that first surfaced in January 2018 and later bragged about extorting billions of dollars from hacked businesses when it closed up shop in June 2019.

Malware 320

Malware Cybercrime Ransomware Marketing 320

Krebs on Security

AUGUST 30, 2022

That’s down from 53 percent that did so in 2018, Okta found. According to a report this year from Okta, 47 percent of workforce customers deploy SMS and voice factors for multi-factor authentication.

Mobile 316

Mobile Phishing Authentication Accountability 316

Krebs on Security

AUGUST 30, 2019

based United Rentals [ NYSE:URI ] is the world’s largest equipment rental company, with some 18,000 employees and earnings of approximately $4 billion in 2018. While phony invoices are a common malware lure, this particular campaign sent users to a page on United Rentals’ own Web site (unitedrentals.com). Stamford, Ct.-based

Phishing 217

Phishing Marketing Accountability DNS 217

Krebs on Security

FEBRUARY 4, 2021

.” This is not the first time Instagram has come for his accounts: As documented in this story in The Atlantic , some of his accounts totaling more than 1 million followers were axed in late 2018 when the platform took down 500 usernames that were stolen, resold, and used for posting memes.

Accountability 323

Accountability Hacking Media Mobile 323

Krebs on Security

APRIL 14, 2019

This 2018 story from travel blog goatsontheroad.com tells the tale of a couple that was very nearly scammed by a Land Lordz-like trap, before the wife figures out they’re no longer on airbnb.com.

Scams 247

Scams Advertising Accountability Phishing 247

Krebs on Security

MARCH 22, 2022

Zukhov was arrested in Bulgaria in 2018 and extradited to the United States. The journal explains that Zhukov lived with a ChronoPay employee and had a great deal of interaction with ChronoPay’s high-risk department, so much so that Zhukov at one point gave Vrublevsky a $100,000 jeweled watch as a gift.

Banking 199

Banking Marketing DDOS Risk 199

Krebs on Security

SEPTEMBER 24, 2018

The landing page for hurricaneflorencerelieffund-dot-com also is the landing page for at least 4 other Hurricane Florence donation sites that use the same anonymous PayPal address. Among the earliest of these is hurricaneflorencerelieffund-dot-com , registered anonymously via GoDaddy on Sept.

Scams 230

Scams Accountability Media Web Fraud 230

Krebs on Security

OCTOBER 15, 2019

million cards added; 2018 brought in 9.2 The leaked data shows that in 2015, BriansClub added just 1.7 million card records for sale. But business would pick up in each of the years that followed: In 2016, BriansClub uploaded 2.89 million stolen cards; 2017 saw some 4.9 million more. million cards.

Hacking 226

Hacking Cybercrime Marketing Banking 226

Krebs on Security

NOVEMBER 4, 2018

In September, Symantec said it blocked almost a quarter of a million instances of attempted formjacking since mid-August 2018. ” It’s unclear if the compromises detailed in this post are related to the work of that crime gang.

Antivirus 238

Antivirus Hacking Internet Internet 238

Krebs on Security

OCTOBER 25, 2018

The FBI says BEC scams netted thieves more than $12 billion between 2013 and 2018. However, BEC scams succeed thanks to help from a variety of seemingly unrelated types of online fraud — most especially dating scams.

Scams 202

Scams Accountability Media Banking 202

Krebs on Security

OCTOBER 17, 2023

In 2018, ARIN sued Golestan and Micfo, alleging they had obtained hundreds of thousands of IP addresses under false pretenses. Canada, and parts of the Caribbean. Amir Golestan, the former CEO of Micfo. ARIN and Micfo settled that dispute in arbitration, with Micfo returning most of the addresses that it hadn’t already sold.

Internet 323

Internet Internet VPN Marketing 323

Krebs on Security

OCTOBER 9, 2023

com , which DomainTools.com says was registered way back in September 2018 to an individual in Nigeria. According to dnslytics.com , that same analytics code has shown up on at least six other nearly identical USPS phishing pages dating back nearly as many years, including onlineuspsexpress[.]com

Phishing 303

Phishing Scams Passwords Web Fraud 303

Krebs on Security

AUGUST 9, 2021

In 2018, KrebsOnSecurity examined a huge network of phishing sites masquerading as the top carding stores which all traced back to a web development group in Pakistan that’s apparently been stealing from thieves for years.

Phishing 362

Phishing Cybercrime Accountability Advertising 362

Krebs on Security

SEPTEMBER 1, 2023

As far back as 2018, Interisle found.US . “These ccTLDs make a strong case for validating domain registrants in the interest of public safety.” ” Sadly,US has been a cesspool of phishing activity for many years. domains were the worst in the world for spam, botnet (attack infrastructure for DDOS etc.)

Phishing 256

Phishing Telecommunications Government DNS 256

Krebs on Security

JULY 18, 2022

The user “ Transfer ” advertised and sold access to 911 from 2016 to 2018, amid many sales threads where they advertised expensive electronics and other consumer goods that were bought online with stolen credit cards. Both of these identities were active on the crime forum fl.l33t[.]su su between 2016 and 2019.

VPN 320

VPN Computers and Electronics Antivirus Software 320

Krebs on Security

MARCH 23, 2020

In December 2018, KrebsOnSecurity looked at how dozens of U.S. political campaigns, cities and towns had paid a shady company called Web Listings Inc. The story concluded that this dubious service had been scamming people and companies for more than a decade, and promised a Part II to explore who was behind Web Listings.

Scams 270

Scams Marketing Internet Internet 270

Krebs on Security

FEBRUARY 9, 2022

In 2018, the U.S. .” The arrests of the six men comes less than two weeks after Russian law enforcement officials detained four suspected carders — including Andrey Sergeevich Novak , the reputed owner of the extremely popular and long-running UniCC carding shop.

Cybercrime 262

Cybercrime Marketing Identity Theft Retail 262