The Chinese company in charge of handing out domain names ending in “.top” has been given until mid-August 2024 to show that it has put in place systems for managing phishing reports and suspending abusive domains, or else forfeit its license to sell domains. The warning comes amid the release of new findings that .top […]
Category Archives: Krebs
Category Added in a WPeMatico Campaign
A faulty software update from cybersecurity vendor Crowdstrike crippled countless Microsoft Windows computers across the globe today, disrupting everything from airline travel and financial institutions to hospitals and businesses online. Crowdstrike said a fix has been deployed, but experts say the recovery from this outage could take some time, as Crowdstrike’s solution needs to be […]
At least a dozen organizations with domain names at domain registrar Squarespace saw their websites hijacked last week. Squarespace bought all assets of Google Domains a year ago, but many customers still haven’t set up their new accounts. Experts say malicious hackers learned they could commandeer any migrated Squarespace accounts that hadn’t yet been registered, […]
A Little Sunshine, Advance Auto Parts, Allstate, Anheuser-Busch, AT&T breach, Data Breaches, fbi, Krebs, Latest Warnings, Los Angeles Unified, Mitsubishi, Neiman Marcus, News, Progressive, Pure Storage, Santander Bank, Security, Snowflake hack, State Farm, Techcrunch, Ticketmaster, U.S. Securities and Exchange Commission, wired
Hackers Steal Phone, SMS Records for Nearly All AT&T Customers
AT&T Corp. disclosed today that a new data breach has exposed phone call and text message records for roughly 110 million people — nearly all of its customers. AT&T said it delayed disclosing the incident in response to “national security and public safety concerns,” noting that some of the records included data that could be […]
7-zip, Advanced IP Scanner, AIMP, AnyDesk, AutoDesk, Bastion Secure, Bitwarden, Blackberry, Combi Security, eSentire, Fin7, Krebs, Malwarebytes, Microsoft, Ne'er-Do-Well News, News, Node.js, Notepad, pgAdmin, ProDaft, ProtectedPDFViewer, PuTTY, Python, ransomware, Rest Proxy, Russia's War on Ukraine, Security, Silent Push, spearphishing, Stark Industries Solutions, Sublime Text, typosquatting, Web Fraud 2.0, Zach Edwards
The Stark Truth Behind the Resurgence of Russia’s Fin7
The Russia-based cybercrime group dubbed “Fin7,” known for phishing and malware attacks that have cost victim organizations an estimated $3 billion in losses since 2013, was declared dead last year by U.S. authorities. But experts say Fin7 has roared back to life in 2024 — setting up thousands of websites mimicking a range of media […]
AskWoody.com, Automox, CVE-2024-38021, CVE-2024-38074, CVE-2024-38076, CVE-2024-38077, CVE-2024-38080, CVE-2024-38112, Forta, Immersive Labs, Jason Kikta, Kevin Breen, Krebs, Michael Gorelik, Morphisec, MSHTML, News, sans internet storm center, Satnam Narang, Security, SQL Server 2014, Time to Patch, Tyler Reguly, Windows Layer Two Bridge Network
Microsoft Patch Tuesday, July 2024 Edition
Microsoft Corp. today issued software updates to plug at least 139 security holes in various flavors of Windows and other Microsoft products. Redmond says attackers are already exploiting at least two of the vulnerabilities in active attacks against Windows users. The first Microsoft zero-day this month is CVE-2024-38080, a bug in the Windows Hyper-V component […]
Breadcrumbs, Cobalt Strike, Cobaltforce, Constella Intelligence, [email protected], Flashpoint, Intel 471, [email protected], Krebs, LockBit, Maksim Georgievich Kirtsov, [email protected], [email protected], Mikhail Matveev, Ne'er-Do-Well News, News, Operation Endgame, osint.industries, Ozersk Technological Institute National Research Nuclear University, Recorded Future, Security, U.S. Department of Justice, Wazawaka, x999xx, Кирцов Максим Георгиевич
The Not-So-Secret Network Access Broker x999xx
Most accomplished cybercriminals go out of their way to separate their real names from their hacker handles. But among certain old-school Russian hackers it is not uncommon to find major players who have done little to prevent people from figuring out who they are in real life. A case study in this phenomenon is “x999xx,” […]
617-794-0001, A Little Sunshine, Aleksej Gubarev, Andtop Company, Atlas Data Privacy Corp., Barsky.com, Better Business Bureau, Bitseller Expert Limited, Boston Law Group, Breadcrumbs, BuzzFeed, Constella Intelligence, difive.com, Dmitry Lubarsky, DomainTools.com, Gary Norden, [email protected], Humanbook, Igor Lubarsky, Krebs, News, Pavel Kaydash, Radaris, Radaris.com, Security, Steele Dossier, trustoria.com, Val Gurvits, Webzilla, XBT Holding
KrebsOnSecurity Threatened with Defamation Lawsuit Over Fake Radaris CEO
On March 8, 2024, KrebsOnSecurity published a deep dive on the consumer data broker Radaris, showing how the original owners are two men in Massachusetts who operated multiple Russian language dating services and affiliate programs, in addition to a dizzying array of people-search websites. The subjects of that piece are threatening to sue KrebsOnSecurity for […]
0ktapus, Caesars, Data Breaches, DoorDash, fbi, Group-IB, King Bob, Krebs, lastpass, Mailchimp, MGM, Murcia Today, Ne'er-Do-Well News, News, Noah Michael Urban, Okta, Scattered Spider, Security, signal, SIM Swapping, Sosa, The Com, Tyler Buchanan, VX-Underground, Web Fraud 2.0
Alleged Boss of ‘Scattered Spider’ Hacking Group Arrested
A 22-year-old man from the United Kingdom arrested this week in Spain is allegedly the ringleader of Scattered Spider, a cybercrime group suspected of hacking into Twilio, LastPass, DoorDash, Mailchimp, and nearly 130 other organizations over the past two years. The Spanish daily Murcia Today reports the suspect was wanted by the FBI and arrested […]