Cybersecurity

Crooked Cops, Stolen Laptops & the Ghost of UGNazi

   ​ A California man accused of failing to pay taxes on tens of millions of dollars allegedly earned from cybercrime also paid local police officers hundreds of thousands of dollars to help him extort, intimidate and silence rivals and former business partners, a new indictment charges. KrebsOnSecurity has learned that many of the man’s alleged …

Crooked Cops, Stolen Laptops & the Ghost of UGNazi Read More »

U.S. Indicts 2 Top Russian Hackers, Sanctions Cryptex

   ​ The United States today unveiled sanctions and indictments against the alleged proprietor of Joker’s Stash, a now-defunct cybercrime store that peddled tens of millions of payment cards stolen in some of the largest data breaches of the past decade. The government also indicted a top Russian cybercriminal known as Taleon, whose cryptocurrency exchange Cryptex …

U.S. Indicts 2 Top Russian Hackers, Sanctions Cryptex Read More »

This Windows PowerShell Phish Has Scary Potential

   ​ Many GitHub users this week received a novel phishing email warning of critical security holes in their code. Those who clicked the link for details were asked to distinguish themselves from bots by pressing a combination of keyboard keys that causes Microsoft Windows to download password-stealing malware. While it’s unlikely that many programmers fell …

This Windows PowerShell Phish Has Scary Potential Read More »

Scam ‘Funeral Streaming’ Groups Thrive on Facebook

   ​ Scammers are flooding Facebook with groups that purport to offer video streaming of funeral services for the recently deceased. Friends and family who follow the links for the streaming services are then asked to cough up their credit card information. Recently, these scammers have branched out into offering fake streaming services for nearly any …

Scam ‘Funeral Streaming’ Groups Thrive on Facebook Read More »

The Dark Nexus Between Harm Groups and ‘The Com’

   ​ A cyberattack that shut down some of the top casinos in Las Vegas last year quickly became one of the most riveting security stories of 2023: It was the first known case of native English-speaking hackers in the United States and Britain teaming up with ransomware gangs based in Russia. But that made-for-Hollywood narrative …

The Dark Nexus Between Harm Groups and ‘The Com’ Read More »

Bug Left Some Windows PCs Dangerously Unpatched

   ​ Microsoft Corp. today released updates to fix at least 79 security vulnerabilities in its Windows operating systems and related software, including multiple flaws that are already showing up in active attacks. Microsoft also corrected a critical bug that has caused some Windows 10 PCs to remain dangerously unpatched against actively exploited vulnerabilities for several …

Bug Left Some Windows PCs Dangerously Unpatched Read More »

Sextortion Scams Now Include Photos of Your Home

   ​ An old but persistent email scam known as “sextortion” has a new personalized touch: The missives, which claim that malware has captured webcam footage of recipients pleasuring themselves, now include a photo of the target’s home in a bid to make threats about publishing the videos more frightening and convincing.​ ​[[{“value”:” An old but persistent …

Sextortion Scams Now Include Photos of Your Home Read More »

Owners of 1-Time Passcode Theft Service Plead Guilty

   ​ [[{“value”:”Three men in the United Kingdom have pleaded guilty to operating otp[.]agency, a once popular online service that helped attackers intercept the one-time passcodes (OTPs) that many websites require as a second authentication factor in addition to passwords. Launched in November 2019, OTP Agency was a service for intercepting one-time passwords needed to log …

Owners of 1-Time Passcode Theft Service Plead Guilty Read More »

Scroll to Top