Krebs on Security

FEBRUARY 26, 2023

We don’t know much about the source of the November 2021 incident, other than GoDaddy’s statement that it involved a compromised password, and that it took about two months for the company to detect the intrusion. What else do we know about the cause of these incidents?

Hacking 331

Hacking Social Engineering Phishing Scams 331

Krebs on Security

MAY 22, 2023

Social networks are constantly battling inauthentic bot accounts that send direct messages to users promoting scam cryptocurrency investment platforms. The messages said recipients had earned an investment credit at a cryptocurrency trading platform called moonxtrade[.]com. “On Twitter, more spam and crypto scam.”

Scams 307

Scams DDOS Cryptocurrency Accountability 307

Krebs on Security

DECEMBER 5, 2022

In December 2021, Google filed a civil lawsuit against two Russian men thought to be responsible for operating Glupteba , one of the Internet’s largest and oldest botnets. ” A report from the Polish computer emergency response team (CERT Orange Polksa) found Glupteba was the biggest malware threat in 2021.

Cybercrime 300

Cybercrime Malware Internet Internet 300

Krebs on Security

JANUARY 17, 2024

Purchases can be made in cryptocurrencies, and checking out prompts one to continue payment at Coinbase.com. The profile explains that he launched his own record label in 2021 called Punchmade Records, where he produces his own instrumentals and edits his own music videos. ” the site promises.

Cybercrime 327

Cybercrime Media Banking Accountability 327

Krebs on Security

AUGUST 30, 2022

12 blog post , the attackers used their access to Mailchimp employee accounts to steal data from 214 customers involved in cryptocurrency and finance. 2021 post about the change. .” On July 28 and again on Aug. 7, several employees at email delivery firm Mailchimp provided their remote access credentials to this phishing group.

Mobile 344

Mobile Phishing Authentication Accountability 344

Krebs on Security

AUGUST 16, 2022

” The administrator of Breached is “ Pompompurin ,” the same individual who alerted this author in November 2021 to a glaring security hole in a U.S. Thank you for your cooperation and prompt attention to this urgent matter.” Justice Department website that was used to spoof security alerts from the FBI.

Data breaches 325

Data breaches Banking Cybercrime Marketing 325

Krebs on Security

APRIL 27, 2022

Donahue is co-founder of Kodex , a company formed in February 2021 that builds security portals designed to help tech companies “manage information requests from government agencies who contact them, and to securely transfer data & collaborate against abuses on their platform.” A sample Kodex dashboard. Image: Kodex.us.

Mobile 225

Mobile Government Media Technology 225

Krebs on Security

SEPTEMBER 13, 2024

In November 2020, intruders thought to be associated with the Beige Group tricked a GoDaddy employee into installing malicious software, and with that access they were able to redirect the web and email traffic for multiple cryptocurrency trading platforms. million customers. Pompompurin had been a nemesis to the FBI for several years.

Cybercrime 326

Cybercrime Accountability Mobile Hacking 326

Krebs on Security

SEPTEMBER 4, 2022

18, 2021, police in Abington Township, Pa., There are dozens of SIM swappers who are now teenage or 20-something millionaires, by virtue of having stolen vast sums of cryptocurrencies from SIM swapping victims.

Government 50

Government Accountability Cryptocurrency Web Fraud 50

Krebs on Security

MARCH 22, 2022

The latest document in the hacked archive is dated April 2021. Inferno Pay, a cryptocurrency and payment API allegedly operated by the ChronoPay CEO. These diary entries, interspersed between highly technical how-tos, are all written in Russian and in the third person.

Banking 233

Banking Marketing DDOS Risk 233

Malwarebytes

JUNE 8, 2022

We’ve noted the gradual emergence of Bitcoin ATMs in scams previously; here, cryptocurrency ATMs are more popular as a payment method to SSNDOB than other dubious online services. Chainalysis also notes a potential connection between SSNDOB and another dark web market trading in credit cards which called it quits in 2021.

DDOS 121

DDOS Cryptocurrency Data breaches Scams 121

Krebs on Security

APRIL 11, 2022

Online scams that try to separate the unwary from their cryptocurrency are a dime a dozen, but a great many seemingly disparate crypto scam websites tend to rely on the same dodgy infrastructure providers to remain online in the face of massive fraud and abuse complaints from their erstwhile customers. The ark-x2[.]org

Scams 234

Scams Cryptocurrency Media Hacking 234