Krebs on Security

JUNE 15, 2024

0KTAPUS In August 2022, KrebsOnSecurity wrote about peering inside the data harvested in a months-long cybercrime campaign by Scattered Spider involving countless SMS-based phishing attacks against employees at major corporations. A Scattered Spider phishing lure sent to Twilio employees.

Hacking 336

Hacking Cybercrime Phishing Passwords 336

Krebs on Security

JULY 10, 2024

The Russia-based cybercrime group dubbed “ Fin7 ,” known for phishing and malware attacks that have cost victim organizations an estimated $3 billion in losses since 2013, was declared dead last year by U.S. In typosquatting attacks, Fin7 registers domains that are similar to those for popular free software tools.

Phishing 316

Phishing Cybercrime Malware Software 316

Krebs on Security

FEBRUARY 26, 2023

But it’s worth revisiting how this group typically got in to targeted companies: By calling employees and tricking them into navigating to a phishing website. But we do know the March 2020 attack was precipitated by a spear-phishing attack against a GoDaddy employee. In a filing with the U.S.

Hacking 327

Hacking Social Engineering Phishing Scams 327

Krebs on Security

NOVEMBER 16, 2022

A financial cybercrime group calling itself the Disneyland Team has been making liberal use of visually confusing phishing domains that spoof popular bank brands using Punycode , an Internet standard that allows web browsers to render domain names with non-Latin alphabets like Cyrillic. com — which was created to phish U.S.

Malware 332

Malware Banking Phishing DDOS 332

Krebs on Security

AUGUST 30, 2019

But when accounts at those CRM providers get hacked or phished, the results can be damaging for both the client’s brand and their customers. Here’s a look at a recent CRM-based phishing campaign that targeted customers of Fortune 500 construction equipment vendor United Rentals. Stamford, Ct. . Image: APWG.

Phishing 241

Phishing Marketing Accountability DNS 241

Krebs on Security

FEBRUARY 28, 2024

A search in Google for a string of text from that script turns up a December 2023 blog post from cryptocurrency security firm SlowMist about phishing attacks on Telegram from North Korean state-sponsored hackers. “When the project team clicks the link, they encounter a region access restriction,” SlowMist wrote.

Malware 328

Malware Cryptocurrency Software Phishing 328

Krebs on Security

MAY 5, 2021

After a user logs in, the link prompts them to install a malicious but innocuously-named app that gives the attacker persistent, password-free access to any of the user’s emails and files, both of which are then plundered to launch malware and phishing scams against others.

Accountability 351

Accountability Advertising Passwords Phishing 351

Krebs on Security

JANUARY 30, 2024

” Group-IB dubbed the gang by a different name — 0ktapus — which was a nod to how the criminal group phished employees for credentials. The missives asked users to click a link and log in at a phishing page that mimicked their employer’s Okta authentication page. On July 28 and again on Aug. According to an Aug.

Social Engineering 357

Social Engineering Mobile Passwords Cybercrime 357

Krebs on Security

NOVEMBER 21, 2020

In March, a voice phishing scam targeting GoDaddy support employees allowed attackers to assume control over at least a half-dozen domain names, including transaction brokering site escrow.com. Actively scan and monitor web applications for unauthorized access, modification, and anomalous activities.

Cryptocurrency 364

Cryptocurrency VPN Scams Social Engineering 364

Krebs on Security

FEBRUARY 28, 2023

In each case, the goal of the attackers was the same: Phish T-Mobile employees for access to internal company tools, and then convert that access into a cybercrime service that could be hired to divert any T-Mobile user’s text messages and phone calls to another device. The key works without the need for any special software drivers.

Mobile 341

Mobile Phishing Authentication Advertising 341

Krebs on Security

SEPTEMBER 28, 2021

But according to new research, this same feature can be abused to redirect the Good Samaritan to an iCloud phishing page — or to any other malicious website. The AirTag’s “Lost Mode” lets users alert Apple when an AirTag is missing. Department of Defense facility.

Mobile 352

Mobile Phishing Malware Software 352

Krebs on Security

NOVEMBER 23, 2018

Even so, anti-phishing company PhishLabs found in a survey last year that more than 80% of respondents believed the green lock indicated that a website was either legitimate and/or safe. Now that anyone can get SSL certificates for free , phishers and other scammers that ply their trade via fake Web sites are starting to up their game.

Scams 279

Scams Wireless Phishing Banking 279

Krebs on Security

APRIL 7, 2022

The Justice Department said that in Dragonfly’s first stage between 2012 and 2014, the defendants hacked into computer networks of industrial control systems (ICS) companies and software providers, and then hid malware inside legitimate software updates for such systems. and international companies and entities, including U.S.

Marketing 304

Marketing Energy and Utilities Malware Ransomware 304

Krebs on Security

NOVEMBER 17, 2020

And almost invariably, those messages include misleading notifications about security risks on the user’s system, prompts to install other software, ads for dating sites, erectile disfunction medications, and dubious investment opportunities.

Antivirus 359

Antivirus Advertising Internet Internet 359

Krebs on Security

APRIL 14, 2019

Scammers who make a living swindling Airbnb.com customers have a powerful new tool at their disposal: A software-as-a-service offering called “ Land Lordz ,” which helps automate the creation and management of fake Airbnb Web sites and the sending of messages to advertise the fraudulent listings.

Scams 271

Scams Advertising Accountability Phishing 271

Krebs on Security

SEPTEMBER 13, 2024

In a SIM-swapping attack , the fraudsters will phish or purchase credentials for mobile phone company employees, and use those credentials to redirect a target’s mobile calls and text messages to a device the attackers control. .” KrebsOnSecurity has learned Judische is a 26-year-old software engineer in Ontario, Canada.

Cybercrime 322

Cybercrime Accountability Mobile Hacking 322

Krebs on Security

SEPTEMBER 2, 2021

In about half the cases the credentials are being checked via “ IMAP ,” which is an email standard used by email software clients like Mozilla’s Thunderbird and Microsoft Outlook. mail server responds “OK” = successful access). mail server responds “OK” = successful access).

Accountability 345

Accountability Authentication Passwords Hacking 345

Security Boulevard

FEBRUARY 8, 2021

Cyber cops in Ukraine carried out an arrest and several raids last week in connection with the author of a U-Admin, a software package used to administer what’s being called “one of the world’s largest phishing services.” The post Arrest, Raids Tied to ‘U-Admin’ Phishing Kit appeared first on Security Boulevard.

Phishing 59

Phishing Scams Software Web Fraud 59

Krebs on Security

FEBRUARY 2, 2021

Group-IB dubbed the gang “ UltraRank ,” which it said had additionally compromised at least 13 third-party suppliers whose software components are used by countless online stores across Europe, Asia, North and Latin America. “UltraRank combined attacks on single targets with supply chain attacks.”

Cybercrime 255

Cybercrime Media Accountability Hacking 255

Krebs on Security

NOVEMBER 6, 2018

DARK WEB SOFTWARE? Ferri said the detectives investigating his SIM swap attack let on that the crooks responsible had at some point in the attack used “specialized software to get into T-Mobile’s customer database.” When pressed about the software again, there was a long, uncomfortable silence.

Mobile 267

Mobile Cryptocurrency Accountability Passwords 267

Security Boulevard

AUGUST 18, 2022

Recipients who call the supplied toll-free number to contest the transaction are soon asked to download software that lets the scammers assume remote control over their computer. The post PayPal Phishing Scam Uses Invoices Sent Via PayPal appeared first on Security Boulevard.

Scams 52

Scams Phishing Accountability Software 52