Schneier on Security

NOVEMBER 3, 2021

Scammers are using that prestigious domain name to shill brands : Basically, it appears that anyone with $300 to spare can ­– or could, depending on whether Harvard successfully shuts down the practice — advertise nearly anything they wanted on Harvard.edu, in posts that borrow the university’s domain and prestige while making no mention (..)

Accountability 319

Accountability Advertising Scams 319

Krebs on Security

JUNE 22, 2022

” The DOJ’s statement doesn’t mention that RSOCKS has been in operation since 2014, when access to the web store for the botnet was first advertised on multiple Russian-language cybercrime forums. Even today, the RUSdot Mailer is advertised for sale at the top of the RUSdot community forum.

Advertising 308

Advertising Cybercrime System Administration Hacking 308

Krebs on Security

MARCH 20, 2023

Until recently, AT&T also shared CPNI data with Xandr , whose privacy policy in turn explains that it shares data with hundreds of other advertising firms. EPIC says T-Mobile customer data sold to third parties uses another unique identifier called mobile advertising IDs or “ MAIDs.”

Mobile 323

Mobile Wireless Advertising Telecommunications 323

WIRED Threat Level

DECEMBER 2, 2024

Brands have been at the mercy of the algorithm when it comes to where their ads appear online, but they’re about to get more control.

Advertising 114

Advertising 114

Krebs on Security

FEBRUARY 1, 2021

SMS Bandits also provided their own “bulletproof hosting” service advertised as a platform that supported “freedom of speach” [sic] where customers could “host any content without restriction.” agency advertises a service designed to help intercept one-time passwords needed to log in to various websites.

Phishing 348

Phishing Telecommunications Advertising Mobile 348

Krebs on Security

JANUARY 25, 2024

For example, a Google search earlier this week for the free graphic design program FreeCAD produced the following result, which shows that a “Sponsored” ad at the top of the search results is advertising the software available from freecad-us[.]org. million advertiser accounts. Google says it removed 5.2

Software 301

Software Advertising Malware Accountability 301

Adam Levin

FEBRUARY 8, 2021

A December 2020 update infected users with a Trojan-style malware that bombards users with unwanted advertising. may also allow a bad player to place invasive data tracking on your device as well as annoying advertising. Barcode Scanner is an app available in the Google Play store for Android devices.

Mobile 303

Mobile Advertising Malware Risk 303

Schneier on Security

NOVEMBER 12, 2020

Apple will start requiring standardized privacy labels for apps in its app store, starting in December: Apple allows data disclosure to be optional if all of the following conditions apply: if it’s not used for tracking, advertising or marketing; if it’s not shared with a data broker; if collection is infrequent, unrelated to the app’s (..)

Advertising 352

Advertising Marketing Accountability Software 352

Krebs on Security

MAY 5, 2021

This week, messaging security vendor Proofpoint published some new data on the rise of these malicious Office 365 apps, noting that a high percentage of Office users will fall for this scheme [full disclosure: Proofpoint is an advertiser on this website]. A cybercriminal service advertising the sale of access to hacked Office365 accounts.

Accountability 354

Accountability Advertising Passwords Phishing 354

Schneier on Security

FEBRUARY 1, 2024

Empower social media platform users and researchers to review who and what exactly is being advertised on Facebook. Improve the ability for consumers to take advantage of their right to opt out under state privacy laws. Improve the transparency of Facebook’s existing tools. And then the report gives specifics.

Surveillance 352

Surveillance Advertising Media Data privacy 352

Krebs on Security

FEBRUARY 17, 2020

” “Next an ad serving limit will be placed on your publisher account and all the revenue will be refunded to advertisers. In this scam, the extortionists are likely betting that some publishers may see paying up as a cheaper alternative to having their main source of advertising revenue evaporate.

Scams 339

Scams Advertising Accountability Web Fraud 339

Krebs on Security

NOVEMBER 17, 2020

This is evident by the apparent scale of the infrastructure behind a relatively new company based in Montenegro called PushWelcome , which advertises the ability for site owners to monetize traffic from their visitors. An ad from PushWelcome touting the money that websites can make for embedding their dodgy push notifications scripts.

Antivirus 359

Antivirus Advertising Internet Internet 359

Schneier on Security

FEBRUARY 16, 2021

Users began noticing something weird going on with their phones: their default browsers kept getting hijacked and redirected to random advertisements, seemingly out of nowhere. But a December 2020 update included some new features: However, a rash of malicious activity was recently traced back to the app. That’s not the case here.

Advertising 302

Advertising Malware 302

Krebs on Security

MARCH 10, 2020

was originally advertised on the public Russian-language hacking forum Antichat by a venerated user in that community who goes by the alias “ Isis.” ” A Google Translate version of that advertisement is here (PDF). Isis’ profile on antichat. ru — wasn’t working at the time.

Accountability 310

Accountability Advertising Hacking Cybercrime 310

Krebs on Security

APRIL 1, 2021

NB: KrebsOnSecurity has not changed any of its advertising practices: The handful of ads we run are still image-only creatives that are vetted by me and served in-house. Hopefully, we achieved that and this new design will render well in whatever device you use to view it.

Mobile 281

Mobile Advertising 281

Tech Republic Security

NOVEMBER 22, 2023

Atomic Stealer malware advertises itself through ClearFake browser updates disguised as Google's Chrome and Apple’s Safari.

Malware 201

Malware Advertising Cybersecurity 201

Malwarebytes

SEPTEMBER 26, 2024

And, even though the Firefox PPA offers more privacy than third-party cookies, noyb says this move means that Mozilla is caving in to advertisers. Mozilla says that PPA allows advertisers to measure the effectiveness of their advertising without compromising the user’s privacy. Let us know in the comments. How can I disable PPA?

Advertising 132

Advertising 132

Schneier on Security

JUNE 23, 2021

To evade detection, the malware makes use of the company’s so-called “invisible low stealth technology” and its Android product is advertised as having “low data and battery consumption” to prevent people from suspecting their phone or tablet has been infected.

Manufacturing 272

Manufacturing Spyware Surveillance Marketing 272

Schneier on Security

JULY 28, 2021

Mobile carriers sold­ — and still sell — ­location data to brokers who aggregate it and sell it to a range of buyers, including advertisers, law enforcement , roadside services, and even bounty hunters. The data that resulted in Burrill’s ouster was reportedly obtained through legal means.

Mobile 362

Mobile Advertising Data collection Surveillance 362

Malwarebytes

DECEMBER 3, 2024

We’ve identified specific advertiser accounts that make up the bulk of fraudulent ads we have reported to Google this past year. For instance, one advertiser had over 30 reported incidents in the past 3 months. It’s unclear why Google has not taken definitive action on the advertiser profiles we have reported.

Scams 140

Scams Advertising Accountability Engineering 140

Penetration Testing

NOVEMBER 2, 2024

In a world increasingly dependent on online advertising, cybercriminals have seized an opportunity to exploit Meta’s vast advertising ecosystem.

Advertising 137

Advertising Cybersecurity Malware 137

Schneier on Security

NOVEMBER 9, 2023

” Many of the minuscule objects aren’t clearly advertised. […] But there is no doubt some online sellers deliberately trick customers into buying smaller and often cheaper-to-produce items, Witcher said.

Retail 288

Retail Hacking Advertising 288

Schneier on Security

NOVEMBER 21, 2022

A company offered recovery services based on this break, but was reluctant to advertise because it didn’t want Zeppelin’s creators to fix their encryption flaw. The company also used that same donated infrastructure to help victims decrypt their data using the recovered keys. Technical details.

Encryption 278

Encryption Ransomware Advertising Cybersecurity 278

Krebs on Security

MARCH 8, 2024

Currently, consumer reports advertised for sale at Radaris.com are being fulfilled by a different people-search company called TruthFinder. The FTC said both companies deceived customers by providing “Remove” and “Flag as Inaccurate” buttons that did not work as advertised. In May 2022, the U.S. government.

Media 297

Media Data privacy Advertising Government 297

Krebs on Security

JANUARY 24, 2023

First advertised in the cybercrime underground in 2014, RSOCKS was the web-based storefront for hacked computers that were sold as “proxies” to cybercriminals looking for ways to route their Web traffic through someone else’s device. “I At that time, RSOCKS was advertising more than 80,000 proxies. RSOCKS, circa 2016.

Cybercrime 259

Cybercrime Advertising IoT Malware 259

Krebs on Security

APRIL 18, 2023

For less than a dollar per day, Faceless customers can route their malicious traffic through tens of thousands of compromised systems advertised on the service. Notices posted for Faceless users, advertising an email flooding service and soliciting zero-day vulnerabilities in Internet of Things devices. Image: Darkbeast/Ke-la.com.

Malware 274

Malware Passwords Accountability Advertising 274

Krebs on Security

NOVEMBER 14, 2024

That investigation detailed how the 38-year-old Shefel adopted the nickname Rescator while working as vice president of payments at ChronoPay , a Russian financial company that paid spammers to advertise fake antivirus scams, male enhancement drugs and knockoff pharmaceuticals.

Retail 235

Retail Advertising Cryptocurrency Marketing 235

Krebs on Security

APRIL 5, 2021

Fabian Wosar , chief technology officer at computer security firm Emsisoft , said the direct appeals to victim customers is a natural extension of other advertising efforts by the ransomware gangs, which recently included using hacked Facebook accounts to post victim shaming advertisements.

Ransomware 327

Ransomware Advertising Retail DDOS 327

The Hacker News

APRIL 16, 2024

Federal Trade Commission (FTC) has ordered the mental telehealth company Cerebral from using or disclosing personal data for advertising purposes. Cerebral and

Advertising 138

Advertising 138

The Hacker News

OCTOBER 24, 2024

The Irish data protection watchdog on Thursday fined LinkedIn €310 million ($335 million) for violating the privacy of its users by conducting behavioral analyses of personal data for targeted advertising.

Advertising 136

Advertising 136

Schneier on Security

DECEMBER 5, 2023

Mass surveillance ushered in the era of personalized advertisements; mass spying will supercharge that industry. Their true customers—their advertisers—will demand it. Governments around the world already use mass surveillance; they will engage in mass spying as well. Corporations will spy on people.

Surveillance 358

Surveillance Internet Internet Government 358

Krebs on Security

SEPTEMBER 1, 2021

The first mention of VIP72 in the cybercrime underground came in 2006 when someone using the handle “ Revive ” advertised the service on Exploit, a Russian language hacking forum. And it stands to reason that VIP72 was launched with the help of systems already infected with Corpse’s trojan malware.

Malware 311

Malware Cybercrime Internet Internet 311

Krebs on Security

NOVEMBER 19, 2024

The original October 31 post from abyss0, where they advertise the sale of data from several large banks that are customers of a large financial software company. A review of abyss0’s posts to BreachForums reveals this user has offered to sell databases stolen in several dozen other breaches advertised over the past six months.

Data breaches 270

Data breaches Banking Cybercrime Advertising 270

Krebs on Security

MAY 22, 2023

Since then, the same spammers have used this method to advertise more than 100 different crypto investment-themed domains. That user advertised a service called “ Quot Project ” which said they could be hired to write programming scripts in Python and C++. In May 2020, Zipper told another Lolzteam member that quot[.]pw

Scams 284

Scams DDOS Cryptocurrency Accountability 284

Troy Hunt

JULY 30, 2022

data breach (protecting against malicious insiders is a hard one) Sponsored by: Kolide is an endpoint security solution for teams that want to meet SOC2 compliance goals without sacrificing privacy.

Data breaches 245

Data breaches Advertising 245

Malwarebytes

JUNE 4, 2024

All the ads seen below belong to different advertisers based in Pakistan. Some of those advertiser accounts have a fairly large footprint with several hundred ads. They are registered to advertisers based in the US and their websites look almost authentic. We also saw several ads that at first appear somewhat legitimate.

Scams 139

Scams Advertising Consumer Protection Mobile 139

Troy Hunt

OCTOBER 14, 2023

when I'm getting lawyers asking me to advertise their class action suits on HIBP, you know damn well who's getting rich out of all this, and it ain't the plaintiffs) The Bureau van Dijk data breach is now in HIBP (we should be asking a lot more questions about why data aggregators collecting this sort of info still exist)

Data breaches 281

Data breaches Advertising Marketing Account Security 281