Krebs on Security

MAY 5, 2021

After a user logs in, the link prompts them to install a malicious but innocuously-named app that gives the attacker persistent, password-free access to any of the user’s emails and files, both of which are then plundered to launch malware and phishing scams against others.

Accountability 347

Accountability Advertising Passwords Phishing 347

Krebs on Security

NOVEMBER 21, 2020

In March, a voice phishing scam targeting GoDaddy support employees allowed attackers to assume control over at least a half-dozen domain names, including transaction brokering site escrow.com. 2019 that wasn’t discovered until April 2020.

Cryptocurrency 364

Cryptocurrency VPN Scams Social Engineering 364

Krebs on Security

JANUARY 30, 2024

” Group-IB dubbed the gang by a different name — 0ktapus — which was a nod to how the criminal group phished employees for credentials. The missives asked users to click a link and log in at a phishing page that mimicked their employer’s Okta authentication page. On July 28 and again on Aug. According to an Aug.

Social Engineering 356

Social Engineering Mobile Passwords Cybercrime 356

Krebs on Security

JULY 31, 2024

. “Hijacked domains have been used directly in phishing attacks and scams, as well as large spam systems,” reads the Infoblox report, which refers to lame domains as “ Sitting Ducks.” Other attacks have used hijacked domains in targeted phishing attacks by creating lookalike subdomains.

DNS 310

DNS Internet Internet Phishing 310

Krebs on Security

NOVEMBER 17, 2020

That’s according to a deep analysis of the PushWelcome network compiled by Indelible LLC , a cybersecurity firm based in Portland, Ore. Frank Angiolelli , vice president of security at Indelible, said rogue notifications can be abused for credential phishing, as well as foisting malware and other unwanted applications on users.

Antivirus 358

Antivirus Advertising Internet Internet 358

Krebs on Security

NOVEMBER 26, 2019

. “GSA is working with the appropriate authorities and has already implemented additional fraud prevention controls,” the agency wrote, without elaborating on what those additional controls might be. KrebsOnSecurity did get a substantive response from the Cybersecurity and Infrastructure Security Agency , a division of the U.S.

Government 359

Government Internet Internet Web Fraud 359

Krebs on Security

MAY 30, 2023

” On May 26, Aura Network reported on Twitter that its Discord server was compromised in a phishing attack that resulted in the deletion of Discord channels and the dissemination of fake Aura Network Airdrop Campaign links. “This could have been a lot worse.”

Hacking 341

Hacking Accountability Scams Cryptocurrency 341

Krebs on Security

FEBRUARY 28, 2023

In each case, the goal of the attackers was the same: Phish T-Mobile employees for access to internal company tools, and then convert that access into a cybercrime service that could be hired to divert any T-Mobile user’s text messages and phone calls to another device.

Mobile 337

Mobile Phishing Authentication Advertising 337

Krebs on Security

JULY 10, 2024

The Russia-based cybercrime group dubbed “ Fin7 ,” known for phishing and malware attacks that have cost victim organizations an estimated $3 billion in losses since 2013, was declared dead last year by U.S. Among the new Fin7 domains Silent Push found are several sites phishing people seeking tickets at the Louvre.

Phishing 315

Phishing Cybercrime Malware Software 315

Krebs on Security

APRIL 16, 2020

Security experts are poring over thousands of new Coronavirus-themed domain names registered each day, but this often manual effort struggles to keep pace with the flood of domains invoking the virus to promote malware and phishing sites, as well as non-existent healthcare products and charities.

Cyber threats 328

Cyber threats Phishing Data collection Government 328

Krebs on Security

FEBRUARY 2, 2021

Russian cybersecurity firm Group-IB published a report last year detailing the activities of ValidCC, noting the gang behind the crime shop was responsible for plundering nearly 700 e-commerce sites. “UltraRank combined attacks on single targets with supply chain attacks.”

Cybercrime 254

Cybercrime Media Accountability Hacking 254

Krebs on Security

SEPTEMBER 13, 2024

In a SIM-swapping attack , the fraudsters will phish or purchase credentials for mobile phone company employees, and use those credentials to redirect a target’s mobile calls and text messages to a device the attackers control. .” ” Beige members were implicated in two stories published here in 2020.

Cybercrime 320

Cybercrime Accountability Mobile Hacking 320