Krebs on Security

NOVEMBER 6, 2018

In late September 2018, the REACT Task Force spearheaded an investigation that led to the arrest of two Missouri men — both in their early 20s — who are accused of conducting SIM swaps to steal $14 million from a cryptocurrency company based in San Jose, Calif. . million customers.

Mobile 265

Mobile Cryptocurrency Accountability Passwords 265

Krebs on Security

NOVEMBER 13, 2021

” Troia’s work as a security researcher was the subject of a 2018 article here titled, “ When Security Researchers Pose as Cybercrooks, Who Can Tell the Difference? Troia says the individual has been associated in the past with incidents aimed at damaging the security researcher’s reputation.”

Internet 363

Internet Internet Hacking Accountability 363

Krebs on Security

NOVEMBER 13, 2018

Likewise, kavanaghsirishpub-dot-com corresponded to a pub and restaurant in Tennessee until mid-2018; now it’s pretending to sell cheap Nike shoes. “We have observed more than 800 sites hosting these brand impersonation/skimming stores since June 2018,” the report notes. It’s now advertising running shoes.

Accountability 243

Accountability eCommerce Cybercrime Advertising 243

Krebs on Security

MAY 18, 2020

Intel 471 says a rumor has been circulating on Exploit and other forums upO frequented that he was the mastermind behind GandCrab , another ransomware-as-a-service affiliate program that first surfaced in January 2018 and later bragged about extorting billions of dollars from hacked businesses when it closed up shop in June 2019.

Malware 350

Malware Cybercrime Ransomware Marketing 350

Krebs on Security

MARCH 22, 2024

Launched in 2018 under the name Firefox Monitor , Mozilla Monitor also checks data from the website Have I Been Pwned? Mozilla only began bundling Onerep in Firefox last month, when it announced the reputation service would be offered on a subscription basis as part of Mozilla Monitor Plus.

Media 321

Media Government Data breaches Marketing 321

Krebs on Security

APRIL 7, 2022

In May 2018, the FBI executed a similar strategy to dismantle VPNFilter, which had spread to more than a half-million consumer devices. On April 1, ASUS released updates to fix the security vulnerability in a range of its Wi-Fi routers.

Marketing 302

Marketing Energy and Utilities Malware Ransomware 302

Krebs on Security

SEPTEMBER 26, 2024

CRYPTEX In early 2018, Taleon and the proprietors of UAPS launched a cryptocurrency exchange called Cryptex[.]net A screenshot of Chainalysis’s summary of illicit activity on Cryptex since the exchange’s inception in 2018. net that has emerged as a major mover of ill-gotten crypto coins.

Cryptocurrency 293

Cryptocurrency Cybercrime Retail Government 293

Krebs on Security

OCTOBER 31, 2023

As far back as 2018, Interisle found.US Or so concludes The Interisle Consulting Group , which gathers phishing data from multiple industry sources and publishes an annual report on the latest trends. domains were the worst in the world for spam, botnet (attack infrastructure for DDOS etc.) and illicit or harmful content.

Phishing 328

Phishing Telecommunications Malware Scams 328

Krebs on Security

FEBRUARY 26, 2023

In July 2018, Google disclosed that it had not had any of its 85,000+ employees successfully phished on their work-related accounts since early 2017, when it began requiring all employees to use physical security keys in place of one-time codes. Thus, the second factor cannot be phished, either over the phone or Internet.

Hacking 326

Hacking Social Engineering Phishing Scams 326

Krebs on Security

APRIL 14, 2019

This 2018 story from travel blog goatsontheroad.com tells the tale of a couple that was very nearly scammed by a Land Lordz-like trap, before the wife figures out they’re no longer on airbnb.com.

Scams 270

Scams Advertising Accountability Phishing 270

Krebs on Security

AUGUST 23, 2024

Alas, in 2018, the.llc TLD was born and began selling domains. From then on, anyone who registered company.llc would be able to passively intercept that organization’s Microsoft Windows credentials, or actively modify those connections in some way — such as redirecting them somewhere malicious.

DNS 324

DNS Internet Internet Authentication 324

Krebs on Security

MARCH 14, 2023

In 2018, KrebsOnSecurity detailed how Stevenson earned bug bounty rewards and public recognition from top telecom companies for finding and reporting security holes in their websites, all the while secretly peddling those same vulnerabilities to cybercriminals.

Hacking 301

Hacking Government Media Accountability 301

Krebs on Security

FEBRUARY 4, 2021

.” This is not the first time Instagram has come for his accounts: As documented in this story in The Atlantic , some of his accounts totaling more than 1 million followers were axed in late 2018 when the platform took down 500 usernames that were stolen, resold, and used for posting memes.

Accountability 331

Accountability Hacking Media Mobile 331

Krebs on Security

SEPTEMBER 24, 2018

The landing page for hurricaneflorencerelieffund-dot-com also is the landing page for at least 4 other Hurricane Florence donation sites that use the same anonymous PayPal address. Among the earliest of these is hurricaneflorencerelieffund-dot-com , registered anonymously via GoDaddy on Sept.

Scams 256

Scams Accountability Media Web Fraud 256

Krebs on Security

AUGUST 30, 2019

based United Rentals [ NYSE:URI ] is the world’s largest equipment rental company, with some 18,000 employees and earnings of approximately $4 billion in 2018. While phony invoices are a common malware lure, this particular campaign sent users to a page on United Rentals’ own Web site (unitedrentals.com). Stamford, Ct.-based

Phishing 239

Phishing Marketing Accountability DNS 239

Krebs on Security

AUGUST 30, 2022

That’s down from 53 percent that did so in 2018, Okta found. According to a report this year from Okta, 47 percent of workforce customers deploy SMS and voice factors for multi-factor authentication.

Mobile 340

Mobile Phishing Authentication Accountability 340

Krebs on Security

MAY 22, 2023

In September 2018, a user by the name “ ципа ” (phonetically “ Zipper ” in Russian) registered on the Russian hacking forum Lolzteam using the edgard0111012@gmail.com address.

Scams 301

Scams DDOS Cryptocurrency Accountability 301

Krebs on Security

JUNE 21, 2023

guru show that in 2018 the domains were forwarding incoming email to the address obelisk57@gmail.com. The registration records for the website Cryptor[.]biz biz are hidden behind privacy protection services, but the site’s homepage says potential customers should register by visiting the domain crypt[.]guru ” Crypt[.]guru’s

Malware 272

Malware Antivirus Cybercrime Hacking 272

Krebs on Security

NOVEMBER 4, 2018

In September, Symantec said it blocked almost a quarter of a million instances of attempted formjacking since mid-August 2018. ” It’s unclear if the compromises detailed in this post are related to the work of that crime gang.

Antivirus 263

Antivirus Hacking Internet Internet 263

Krebs on Security

MARCH 22, 2022

Zukhov was arrested in Bulgaria in 2018 and extradited to the United States. The journal explains that Zhukov lived with a ChronoPay employee and had a great deal of interaction with ChronoPay’s high-risk department, so much so that Zhukov at one point gave Vrublevsky a $100,000 jeweled watch as a gift.

Banking 231

Banking Marketing DDOS Risk 231

Krebs on Security

OCTOBER 25, 2018

The FBI says BEC scams netted thieves more than $12 billion between 2013 and 2018. However, BEC scams succeed thanks to help from a variety of seemingly unrelated types of online fraud — most especially dating scams.

Scams 226

Scams Accountability Media Banking 226

Security Boulevard

AUGUST 25, 2021

In 2018, Andrew Schober was digitally mugged for approximately $1 million worth of bitcoin. After several years of working with investigators, Schober says he's confident he has located two young men in the United Kingdom responsible for developing a clever piece of digital clipboard-stealing malware that let them siphon his crypto holdings.

Malware 52

Malware Web Fraud 52

Krebs on Security

AUGUST 9, 2021

In 2018, KrebsOnSecurity examined a huge network of phishing sites masquerading as the top carding stores which all traced back to a web development group in Pakistan that’s apparently been stealing from thieves for years.

Phishing 362

Phishing Cybercrime Accountability Advertising 362

Krebs on Security

OCTOBER 9, 2023

com , which DomainTools.com says was registered way back in September 2018 to an individual in Nigeria. According to dnslytics.com , that same analytics code has shown up on at least six other nearly identical USPS phishing pages dating back nearly as many years, including onlineuspsexpress[.]com

Phishing 328

Phishing Scams Passwords Web Fraud 328

Krebs on Security

OCTOBER 17, 2023

In 2018, ARIN sued Golestan and Micfo, alleging they had obtained hundreds of thousands of IP addresses under false pretenses. Canada, and parts of the Caribbean. Amir Golestan, the former CEO of Micfo. ARIN and Micfo settled that dispute in arbitration, with Micfo returning most of the addresses that it hadn’t already sold.

Internet 345

Internet Internet VPN Marketing 345

Krebs on Security

JULY 18, 2022

The user “ Transfer ” advertised and sold access to 911 from 2016 to 2018, amid many sales threads where they advertised expensive electronics and other consumer goods that were bought online with stolen credit cards. Both of these identities were active on the crime forum fl.l33t[.]su su between 2016 and 2019.

VPN 350

VPN Computers and Electronics Antivirus Software 350

Krebs on Security

MARCH 23, 2020

In December 2018, KrebsOnSecurity looked at how dozens of U.S. political campaigns, cities and towns had paid a shady company called Web Listings Inc. The story concluded that this dubious service had been scamming people and companies for more than a decade, and promised a Part II to explore who was behind Web Listings.

Scams 294

Scams Marketing Internet Internet 294

Krebs on Security

SEPTEMBER 1, 2023

As far back as 2018, Interisle found.US . “These ccTLDs make a strong case for validating domain registrants in the interest of public safety.” ” Sadly,US has been a cesspool of phishing activity for many years. domains were the worst in the world for spam, botnet (attack infrastructure for DDOS etc.)

Phishing 292

Phishing Telecommunications Government DNS 292

Krebs on Security

OCTOBER 15, 2019

million cards added; 2018 brought in 9.2 The leaked data shows that in 2015, BriansClub added just 1.7 million card records for sale. But business would pick up in each of the years that followed: In 2016, BriansClub uploaded 2.89 million stolen cards; 2017 saw some 4.9 million more. million cards.

Hacking 253

Hacking Cybercrime Marketing Banking 253

Krebs on Security

FEBRUARY 9, 2022

In 2018, the U.S. .” The arrests of the six men comes less than two weeks after Russian law enforcement officials detained four suspected carders — including Andrey Sergeevich Novak , the reputed owner of the extremely popular and long-running UniCC carding shop.

Cybercrime 299

Cybercrime Marketing Identity Theft Retail 299