Krebs on Security

JANUARY 25, 2024

19, 2024) of more than 200 domains at the Internet address 93.190.143[.]252 Although this website claims to be the official FreeCAD website, that honor belongs to the result directly below — the legitimate freecad.org. How do we know freecad-us[.]org org is malicious? com , filezillasoft[.]com com , keepermanager[.]com

Software 315

Software Advertising Malware Accountability 315

Krebs on Security

FEBRUARY 28, 2024

“Recent updates to macOS’s XProtect signature database indicate that Apple are aware of the problem, but early 2024 has already seen a number of stealer families evade known signatures,” security firm SentinelOne wrote in January.

Malware 323

Malware Cryptocurrency Software Phishing 323

Krebs on Security

APRIL 4, 2024

co (as pictured in Monahan’s screenshot above) shows that between March 15 and March 19, 2024, those address raked in and transferred out nearly $18,000 in cryptocurrencies. Reviewing the four malicious cryptocurrency payment addresses that the attackers swapped into notes passed through privnote[.]co

Phishing 269

Phishing Cryptocurrency DDOS Internet 269

Krebs on Security

SEPTEMBER 26, 2024

In February 2024, a Fortune 50 ransomware victim paid a record $75 million ransom to a Russian cybercrime group that calls themselves the Dark Angels. Taleon reminds UAPS customers they will enjoy 0% commission and no “know your customer” (KYC) requirements “on our exchange Cryptex.”

Cryptocurrency 289

Cryptocurrency Cybercrime Retail Government 289

Krebs on Security

FEBRUARY 18, 2025

” The rise of so-called “ghost tap” mobile software was first documented in November 2024 by security experts at ThreatFabric. In August 2024, security researcher Grant Smith gave a presentation at the DEFCON security conference about tracking down the Smishing Triad after scammers spoofing the U.S.

Phishing 279

Phishing Mobile Scams Retail 279

Krebs on Security

JULY 10, 2024

But experts say Fin7 has roared back to life in 2024 — setting up thousands of websites mimicking a range of media and technology companies — with the help of Stark Industries Solutions , a sprawling hosting provider that is a persistent source of cyberattacks against enemies of Russia. authorities.

Phishing 311

Phishing Cybercrime Malware Software 311

Krebs on Security

SEPTEMBER 13, 2024

Others sell the explicit CSAM content produced by extortion on the dark web.” ” KrebsOnSecurity has learned Holy’s real name is Owen David Flowers , and that he is the previously unnamed 17-year-old who was arrested in July 2024 by the U.K.’s

Cybercrime 317

Cybercrime Accountability Mobile Hacking 317

Krebs on Security

SEPTEMBER 30, 2024

Au was featured on the July 2024 cover of “Womenpreneur Middle East.” Meanwhile, the U.K. tabloids reported this summer that Au was dating Davide Sanclimenti , the 2022 co-winner on the dating reality show Love Island. ” Recall that we promised to revisit Mr. Zelocchi’s claimed acting credits.

Cryptocurrency 308

Cryptocurrency Government Internet Internet 308

Krebs on Security

OCTOBER 9, 2024

25, 2024 in Danbury, Ct., ” A November 2022 story at patch.com quoted Veer Chetal (class of 2024) crediting the Harvard program with his decision to pursue a career in law. Image: ABC7NY. youtube.com/watch?v=xoiaGzwrunY v=xoiaGzwrunY Late in the afternoon of Aug.

Cryptocurrency 284

Cryptocurrency Social Engineering Accountability Mobile 284

Krebs on Security

MAY 22, 2023

Proshutinskiy’s LinkedIn profile says he is a Class of 2024 student at TGM , which is a Christian mission school in Austria. The very first result that comes up when one searches that unusual name in Google is a LinkedIn profile for a Sergey Proshutinskiy from Vienna, Austria.

Scams 297

Scams DDOS Cryptocurrency Accountability 297

Krebs on Security

OCTOBER 3, 2024

In June 2024, security experts at Sysdig documented a new attack that leveraged stolen cloud credentials to target ten cloud-hosted LLMs. “If undiscovered, this type of attack could result in over $46,000 of LLM consumption costs per day for the victim.”

Accountability 289

Accountability Artificial Intelligence Web Fraud Cryptocurrency 289

Krebs on Security

DECEMBER 18, 2024

On the evening of May 15, 2024, Tony was putting his three- and one-year-old boys to bed when he received a message from Google about an account security issue, followed by a phone call from a “Daniel Alexander” at Google who said his account was compromised by hackers. Nevertheless, Soundcloud removed the audio file.

Cryptocurrency 362

Cryptocurrency Accountability Authentication Phishing 362

Krebs on Security

JANUARY 30, 2025

In October 2024, the security firm Silent Push published a lengthy analysis of how Amazon AWS and Microsoft Azure were providing services to Funnull, a two-year-old Chinese content delivery network that hosts a wide variety of fake trading apps, pig butchering scams , gambling websites, and retail phishing pages.

Accountability 234

Accountability Scams Passwords Retail 234