New details are emerging about a breach at National Public Data (NPD), a consumer data broker that recently spilled hundreds of millions of Americans’ Social Security Numbers, addresses, and phone numbers online. KrebsOnSecurity has learned that another NPD data broker which shares access to the same consumer records inadvertently published the passwords to its back-end […]
Category Archives: Krebs
Category Added in a WPeMatico Campaign
A Little Sunshine, Atlas Data Privacy Corp., Data Breaches, fbi, HaveIBeenPwned.com, InfraGard, Instant Checkmate, Jerico Pictures, Krebs, National Criminal Data LLC, National Public Data breach, News, PeopleConnect, recordscheck.net, Sal Verini, Salvatore Verini, Security, Shadowglade LLC, SXUL, The Coming Storm, Trinity Entertainment, Troy Hunt, TruthFinder, Twisted History LLC, USDoD, VX-Underground
NationalPublicData.com Hack Exposes a Nation’s Data
15
Aug
Aug
A great many readers this month reported receiving alerts that their Social Security Number, name, address and other personal information were exposed in a breach at a little-known but aptly-named consumer data broker called NationalPublicData.com. This post examines what we know about a breach that has exposed hundreds of millions of consumer records. We’ll also […]
13
Aug
Aug
Microsoft today released updates to fix at least 90 security vulnerabilities in Windows and related software, including a whopping six zero-day flaws that are already being actively exploited by attackers. Image: Shutterstock. This month’s bundle of update joy from Redmond includes patches for security holes in Office, .NET, Visual Studio, Azure, Co-Pilot, Microsoft Dynamics, Teams, […]
07
Aug
Aug
A partial selfie posted by Puchmade Dev to his Twitter account. Yes, that is a functioning handheld card skimming device, encrusted in diamonds. Underneath that are more medallions, including a diamond-studded bitcoin and payment card. In January, KrebsOnSecurity wrote about rapper Punchmade Dev, whose music videos sing the praises of a cybercrime lifestyle. That story […]
05
Aug
Aug
A ransomware group called Dark Angels made headlines this past week when it was revealed the crime group recently received a record $75 million data ransom payment from a Fortune 50 company. Security experts say the Dark Angels have been around since 2021, but the group doesn’t get much press because they work alone and […]
Alexander Vinnik, Alsu Kurmasheva, BTC-e, Evan Gershkovich, German Moyzhes, Ivan Ermakov, Krebs, Maxim Marchenko, Mt. Gox, Ne'er-Do-Well News, News, Paul Whelan, ransomware, Roman Seleznev, Russia's War on Ukraine, Security, trickbot, Vadim Krasikov, Vladimir Putin, Vladislav Klyushin
U.S. Trades Cybercriminals to Russia in Prisoner Swap
01
Aug
Aug
Twenty-four prisoners were freed today in an international prisoner swap between Russia and Western countries. Among the eight Russians repatriated were several convicted cybercriminals. In return, Russia has reportedly released 16 prisoners, including Wall Street Journal reporter Evan Gershkovich and ex-U.S. Marine Paul Whelan. Among the more notable Russian hackers released in the prisoner swap […]
31
Jul
Jul
More than a million domain names — including many registered by Fortune 100 firms and brand protection companies — are vulnerable to takeover by cybercriminals thanks to authentication weaknesses at a number of large web hosting providers and domain registrars, new research finds. Image: Shutterstock. Your Web browser knows how to find a site like […]
26
Jul
Jul
Google says it recently fixed an authentication weakness that allowed crooks to circumvent the email verification required to create a Google Workspace account, and leverage that to impersonate a domain holder at third-party services that allow logins through Google’s “Sign in with Google” feature. Last week, KrebsOnSecurity heard from a reader who said they received a […]
.top, A Little Sunshine, Anti-Phishing Working Group, Dave Piscitello, Interisle Consulting Group, Internet Corporation for Assigned Names and Numbers, Jiangsu Bangning Science & Technology Co. Ltd, Krebs, Latest Warnings, News, Security, The Coming Storm
Phish-Friendly Domain Registry “.top” Put on Notice
23
Jul
Jul
The Chinese company in charge of handing out domain names ending in “.top” has been given until mid-August 2024 to show that it has put in place systems for managing phishing reports and suspending abusive domains, or else forfeit its license to sell domains. The warning comes amid the release of new findings that .top […]
19
Jul
Jul
A faulty software update from cybersecurity vendor Crowdstrike crippled countless Microsoft Windows computers across the globe today, disrupting everything from airline travel and financial institutions to hospitals and businesses online. Crowdstrike said a fix has been deployed, but experts say the recovery from this outage could take some time, as Crowdstrike’s solution needs to be […]