Task Force Seeks to Disrupt Ransomware Payments

From krebsonsecurity.com 2 years ago in Blogs Security

Some of the world's top tech firms are backing a new industry task force focused on disrupting cybercriminal ransomware gangs by limiting their ability to get paid, and targeting the individuals and finances of the organized thieves behind these crimes.

Articles from Krebs on Security

Phishing Domains Tanked After Meta Sued Freenom

From krebsonsecurity.com 3 days ago in Blogs Security

The number of phishing websites tied to domain name registrar Freenom dropped precipitously in the months surrounding a recent lawsuit from social networking giant Meta, which alleged the free domain name provider has a long history of ignoring abuse complaints...

Interview With a Crypto Scam Investment Spammer

From krebsonsecurity.com 7 days ago in Blogs Security

Social networks are constantly battling inauthentic bot accounts that send direct messages to users promoting scam cryptocurrency investment platforms. What follows is an interview with a Russian hacker responsible for a series of aggressive crypto spam campaigns that recently prompted...

Russian Hacker “Wazawaka” Indicted for Ransomware

From krebsonsecurity.com 2 weeks ago in Blogs Security

A Russian man identified by KrebsOnSecurity in January 2022 as a prolific and vocal member of several top ransomware groups was the subject of two indictments unsealed by the Justice Department today. U.S. prosecutors say Mikhail Pavolovich Matveev, a.k.a. "Wazawaka"...

Re-Victimization from Police-Auctioned Cell Phones

From krebsonsecurity.com 2 weeks ago in Blogs Security

Countless smartphones seized in arrests and searches by police forces across the United States are being auctioned online without first having the data on them erased, a practice that can lead to crime victims being re-victimized, a new study found....

Microsoft Patch Tuesday, May 2023 Edition

From krebsonsecurity.com 3 weeks ago in Blogs Security

Microsoft today released software updates to fix at least four dozen security holes in its Windows operating systems and other software, including patches for two zero-day vulnerabilities that are already being exploited in active attacks.

Feds Take Down 13 More DDoS-for-Hire Services

From krebsonsecurity.com 3 weeks ago in Blogs Security

The U.S. Federal Bureau of Investigation (FBI) this week seized 13 domain names connected to “booter” services that let paying customers launch crippling distributed denial-of-service (DDoS) attacks. Ten of the domains are reincarnations of DDoS-for-hire services the FBI seized in...

$10M Is Yours If You Can Get This Guy to Leave Russia

From krebsonsecurity.com 4 weeks ago in Blogs Security

The U.S. government this week put a $10 million bounty on the head of a Russian man who for the past 18 years operated Try2Check, one of the cybercrime underground's most trusted services for checking the validity of stolen credit...

Promising Jobs at the U.S. Postal Service, ‘US Job Services’ Leaks Customer Data

From krebsonsecurity.com 4 weeks ago in Blogs Security

A sprawling online company based in Georgia that has made tens of millions of dollars purporting to sell access to jobs at the United States Postal Service (USPS) has exposed its internal IT operations and database of nearly 900,000 customers....

Many Public Salesforce Sites are Leaking Private Data

From krebsonsecurity.com 1 month ago in Blogs Security

A shocking number of organizations -- including banks and healthcare providers -- are leaking private and sensitive information from their public Salesforce Community websites, KrebsOnSecurity has learned. The data exposures all stem from a misconfiguration in Salesforce Community that allows...

3CX Breach Was a Double Supply Chain Compromise

From krebsonsecurity.com 1 month ago in Blogs Security

We learned some remarkable new details this week about the recent supply-chain attack on VoIP software provider 3CX, a complex, lengthy intrusion that has the makings of a cyberpunk spy novel: North Korean hackers using legions of fake executive accounts...