Krebs on Security

NOVEMBER 6, 2018

that has been tracking down individuals engaged in unauthorized “SIM swaps” — a complex form of mobile phone fraud that is often used to steal large amounts of cryptocurrencies and other items of value from victims. SIM swapping attacks primarily target individuals who are visibly active in the cryptocurrency space.

Mobile 267

Mobile Cryptocurrency Accountability Passwords 267

Krebs on Security

SEPTEMBER 26, 2024

The government also indicted and sanctioned a top Russian cybercriminal known as Taleon , whose cryptocurrency exchange Cryptex has evolved into one of Russia’s most active money laundering networks. ru , which periodically published hacking tools and exploits for software vulnerabilities. The links have been redacted.

Cryptocurrency 295

Cryptocurrency Cybercrime Retail Government 295

Krebs on Security

JUNE 6, 2023

Kopeechka also has multiple affiliate programs, including one that pays app developers for embedding Kopeechka’s API in their software. “There was nothing in the Mastodon software to detect that activity, and the protocol is not designed to handle this.” com site,” the Trend researchers wrote.

Accountability 255

Accountability Scams Cryptocurrency Advertising 255

Krebs on Security

JULY 29, 2022

The abrupt closure comes ten days after KrebsOnSecurity published an in-depth look at 911 and its connections to shady pay-per-install affiliate programs that secretly bundled 911’s proxy software with other titles, including “free” utilities and pirated software. A cached copy of flashupdate[.]net

Cybercrime 320

Cybercrime Software VPN Backups 320

Krebs on Security

JANUARY 30, 2024

authorities arrested a 19-year-old Florida man charged with wire fraud, aggravated identity theft, and conspiring with others to use SIM-swapping to steal cryptocurrency. 12 blog post , the attackers used their access to Mailchimp employee accounts to steal data from 214 customers involved in cryptocurrency and finance.

Social Engineering 357

Social Engineering Mobile Passwords Cybercrime 357

Krebs on Security

APRIL 7, 2022

The Justice Department said that in Dragonfly’s first stage between 2012 and 2014, the defendants hacked into computer networks of industrial control systems (ICS) companies and software providers, and then hid malware inside legitimate software updates for such systems. and international companies and entities, including U.S.

Marketing 304

Marketing Energy and Utilities Malware Ransomware 304

Krebs on Security

JANUARY 17, 2024

That changed recently when Punchmade’s various video and social media accounts began promoting a new web shop that is selling stolen payment cards and identity data, as well as hacked financial accounts and software for producing counterfeit checks. Punchmade Dev’s shop. ” the site promises.

Cybercrime 324

Cybercrime Media Banking Accountability 324

Krebs on Security

FEBRUARY 26, 2023

Absent from GoDaddy’s SEC statement is another spate of attacks in November 2020, in which unknown intruders redirected email and web traffic for multiple cryptocurrency services that used GoDaddy in some capacity. The key works without the need for any special software drivers.

Hacking 327

Hacking Social Engineering Phishing Scams 327

Krebs on Security

SEPTEMBER 13, 2024

In November 2020, intruders thought to be associated with the Beige Group tricked a GoDaddy employee into installing malicious software, and with that access they were able to redirect the web and email traffic for multiple cryptocurrency trading platforms.

Cybercrime 322

Cybercrime Accountability Mobile Hacking 322

Krebs on Security

DECEMBER 5, 2022

Glupteba is a rootkit that steals passwords and other access credentials, disables security software, and tries to compromise other devices on the victim network — such as Internet routers and media storage servers — for use in relaying spam or other malicious traffic. A slide from a talk given in Sept.

Cybercrime 297

Cybercrime Malware Internet Internet 297

Security Boulevard

MAY 22, 2023

Social networks are constantly battling inauthentic bot accounts that send direct messages to users promoting scam cryptocurrency investment platforms. According to the hacker, their spam software has been in private use until the last few weeks, when it was released as open source code.

Scams 64

Scams Cryptocurrency Accountability Software 64