Remove Account Security Remove Passwords Remove Web Fraud
article thumbnail

LastPass: ‘Horse Gone Barn Bolted’ is Strong Password

Krebs on Security

The password manager service LastPass is now forcing some of its users to pick longer master passwords. LastPass says the changes are needed to ensure all customers are protected by their latest security improvements. Nor was he ever forced to improve his master password. And very recently, it upped that again to 600,000.

Passwords 294
article thumbnail

Booking.com Phishers May Leave You With Reservations

Krebs on Security

Booking.com said it now requires 2FA , which forces partners to provide a one-time passcode from a mobile authentication app (Pulse) in addition to a username and password. “2FA is required and enforced, including for partners to access payment details from customers securely,” a booking.com spokesperson wrote.

Phishing 230
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Lamborghini Carjackers Lured by $243M Cyberheist

Krebs on Security

Ortiz earned the distinction of being the first person convicted of SIM-swapping, a crime that involves using mobile phone company insiders or compromised employee accounts to transfer a target’s phone number to a mobile device controlled by the attackers.

article thumbnail

Busting SIM Swappers and SIM Swap Myths

Krebs on Security

Soon after, the attackers were able to use their control over his mobile number to reset his Gmail account password. Samy said a big challenge for mobile stores is balancing customer service with account security. Someone needs to light a fire under some folks to get these protections put in place.” ” Sgt.

Mobile 242