Remove 2019 Remove Authentication Remove Web Fraud
article thumbnail

Don’t Let Your Domain Name Become a “Sitting Duck”

Krebs on Security

More than a million domain names — including many registered by Fortune 100 firms and brand protection companies — are vulnerable to takeover by cybercriminals thanks to authentication weaknesses at a number of large web hosting providers and domain registrars, new research finds. Image: Shutterstock.

DNS 312
article thumbnail

Arrest, Raids Tied to ‘U-Admin’ Phishing Kit

Krebs on Security

“According to the analysis of foreign law enforcement agencies, more than 50% of all phishing attacks in 2019 in Australia were carried out thanks to the development of the Ternopil hacker,” the attorney general’s office said, noting that investigators had identified hundreds of U-Admin customers. ” U-Admin, a.k.a.

Phishing 331
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

GoDaddy Employees Used in Attacks on Multiple Cryptocurrency Services

Krebs on Security

And in May of this year, GoDaddy disclosed that 28,000 of its customers’ web hosting accounts were compromised following a security incident in Oct. 2019 that wasn’t discovered until April 2020. authenticate the phone call before sensitive information can be discussed.

article thumbnail

Owners of 1-Time Passcode Theft Service Plead Guilty

Krebs on Security

agency , a once popular online service that helped attackers intercept the one-time passcodes (OTPs) that many websites require as a second authentication factor in addition to passwords. Launched in November 2019, OTP Agency was a service for intercepting one-time passcodes needed to log in to various websites.

article thumbnail

Does Your Domain Have a Registry Lock?

Krebs on Security

On December 23, 2019, unknown attackers began contacting customer support people at OpenProvider , a popular domain name registrar based in The Netherlands. 23, 2019, the e-hawk.net domain was transferred to a reseller account within OpenProvider. ” Dijkxhoorn shared records obtained from OpenProvider showing that on Dec.

DNS 316
article thumbnail

‘Land Lordz’ Service Powers Airbnb Scams

Krebs on Security

Here’s one from would-be victim Shanon, on March 28, 2019, to the scammers. Airbnb could help by adding some type of robust multi-factor authentication, such as Security Keys — which would defeat these Airbnb phishing pages.

Scams 271
article thumbnail

Phishers are Angling for Your Cloud Providers

Krebs on Security

Salesforce told KrebsOnSecurity that this was not a compromise of Pardot, but of a Pardot customer account that was not using multi-factor authentication. However, in such setups the content that gets promoted through the client’s domain is actually hosted on the cloud CRM provider’s systems. Image: APWG. Update, 2:55 p.m.

Phishing 241