Krebs on Security

FEBRUARY 28, 2024

A search in Google for a string of text from that script turns up a December 2023 blog post from cryptocurrency security firm SlowMist about phishing attacks on Telegram from North Korean state-sponsored hackers. “When the project team clicks the link, they encounter a region access restriction,” SlowMist wrote.

Malware 323

Malware Cryptocurrency Software Phishing 323

Krebs on Security

APRIL 18, 2023

In January 2023, the Faceless service website said it was willing to pay for information about previously undocumented security vulnerabilities in IoT devices. Verified and other Russian language crime forums where MrMurza had a presence have been hacked over the years, with contact details and private messages leaked online.

Malware 290

Malware Passwords Accountability Advertising 290

Krebs on Security

SEPTEMBER 5, 2023

” Monahan has been documenting the crypto thefts via Twitter/X since March 2023, frequently expressing frustration in the search for a common cause among the victims. And then he got hacked. “I would personally advocate that nobody ever uses LastPass again: Not because they were hacked. Then on Aug. But on Nov.

Cryptocurrency 360

Cryptocurrency Passwords Encryption Accountability 360

Krebs on Security

SEPTEMBER 26, 2024

ru , which periodically published hacking tools and exploits for software vulnerabilities. By 2004, v1pee had adopted the moniker “ Vega ” on the exclusive Russian language hacking forum Mazafaka , where this user became one of the more reliable vendors of stolen payment cards.

Cryptocurrency 289

Cryptocurrency Cybercrime Retail Government 289

Krebs on Security

MARCH 22, 2023

28, 2023, researchers at the Chinese security firm DarkNavy published a blog post purporting to show evidence that a major Chinese ecommerce company’s app was using this same three-exploit chain to read user data stored by other apps on the affected device, and to make its app nearly impossible to remove. .

Malware 317

Malware eCommerce Mobile Media 317

Krebs on Security

SEPTEMBER 13, 2024

A cyberattack that shut down two of the top casinos in Las Vegas last year quickly became one of the most riveting security stories of 2023: It was the first known case of native English-speaking hackers in the United States and Britain teaming up with ransomware gangs based in Russia.

Cybercrime 317

Cybercrime Accountability Mobile Hacking 317

Krebs on Security

NOVEMBER 2, 2023

One of the largest cybercrime services for laundering stolen merchandise was hacked recently, exposing its internal operations, finances and organizational structure. The login page for the criminal reshipping service SWAT USA Drop. The SWAT drop service has been around in various names and under different ownership for almost a decade.

Cybercrime 324

Cybercrime Marketing Scams Retail 324

Krebs on Security

FEBRUARY 28, 2023

All three SIM-swapping entities that were tracked for this story remain active in 2023, and they all conduct business in open channels on the instant messaging platform Telegram. “They underestimate these actors and say this person isn’t technically sophisticated,” she said.

Mobile 337

Mobile Phishing Authentication Advertising 337

Krebs on Security

MAY 22, 2023

Chaput said that on May 4, 2023, someone unleashed a spam torrent targeting users on these Mastodon communities via “private mentions,” a kind of direct messaging on the platform. The messages said recipients had earned an investment credit at a cryptocurrency trading platform called moonxtrade[.]com. pw was their domain.

Scams 297

Scams DDOS Cryptocurrency Accountability 297

Krebs on Security

OCTOBER 9, 2024

It remains unclear which Chetal family member acquired the 2023 Lamborghini Urus, which has a starting price of around $233,000. The attackers also spoofed a call from account support representatives at the cryptocurrency exchange Gemini , claiming the target’s account had been hacked.

Cryptocurrency 284

Cryptocurrency Social Engineering Accountability Mobile 284

Krebs on Security

DECEMBER 18, 2024

A scammer called using a real Google phone number to warn his Gmail account was being hacked, sent email security alerts directly from google.com, and ultimately seized control over the account by convincing him to click “yes” to a Google prompt on his mobile device. .

Cryptocurrency 362

Cryptocurrency Accountability Authentication Phishing 362

Krebs on Security

JANUARY 30, 2025

In 2023, Suncity’s CEO was sentenced to 18 years in prison on charges of fraud, illegal gambling, and “ triad offenses,” i.e. working with Chinese transnational organized crime syndicates.

Accountability 234

Accountability Scams Passwords Retail 234