fbi Archives - s0x • Austin Managed IT Services

16 Feb, 2022

Red Cross Hack Linked to Iranian Influence Operation?

Cybersecurity Data Breaches, fbi, FireEye, ICRC hack, International Committee for the Red Cross, KELA, kelvinmiddelkoop@hotmail.com, Ne'er-Do-Well News, RaidForums, Ransomware, Red Cross and Red Crescent Movement, Restoring Family Links, Sheriff, threat_actor, unindicted

A network intrusion at the International Committee for the Red Cross (ICRC) in January led to the theft of personal information on more than 500,000 people receiving assistance from the group. KrebsOnSecurity has learned that the email address used by a cybercriminal actor who offered to sell the stolen ICRC data also was used to register multiple domain names the FBI says are tied to a sprawling media influence operation originating from Iran. …

8 Dec, 2021

Canada Charges Its “Most Prolific Cybercriminal”

Cybersecurity A Little Sunshine, darkcloudowner, Darkode, DCReavers2, fbi, fubar, Iserdo, Matt Watson, Matthew Philbert, Ne'er-Do-Well News, Ontario Provincial Police, Project CODA, Ransomware

A 31-year-old Canadian man has been arrested and charged with fraud in connection with numerous ransomware attacks against businesses, government agencies and private citizens throughout Canada and the United States. Canadian authorities describe him as “the most prolific cybercriminal we’ve identified in Canada,” but so far they’ve released few other details about the investigation or the defendant. Helpfully, an email address and nickname apparently connected to the accused offer some additional clues. …

13 Nov, 2021

Hoax Email Blast Abused Poor Coding in FBI Website

Cybersecurity A Little Sunshine, Criminal Justice Information Services division, Department of Justice, eims@ic.fbi.gov, fbi, FBI email hack, Law Enforcement Enterprise Portal, LEEP, Ne'er-Do-Well News, NightLion, pompompurin, Shadowbyte, Vinny Troia, Web Fraud 2.0

The Federal Bureau of Investigation (FBI) confirmed today that its fbi.gov domain name and Internet address were used to blast out thousands of fake emails about a cybercrime investigation. According to an interview with the person who claimed responsibility for the hoax, the spam messages were sent by abusing insecure code in an FBI online portal designed to share information with state and local law enforcement authorities. …

23 Sep, 2021

Indictment, Lawsuits Revive Trump-Alfa Bank Story

Cybersecurity 66.216.133.29, A Little Sunshine, Alfa Bank, B.G.R. Group, Daniel J. Jones, DNS, fbi, Heartland Payment Systems, Indiana University School of Informatics and Computing, James A. Baker, John H. Durham, L. Jean Camp, Mandiant, Michael Sussmann, Nicholas Weaver, Paul Vixie, Spectrum Health, Stroz Friedberg, The Democracy Integrity Project, Trump Organization, trump1.contact-client.com, University of California Berkeley

In October 2016, media outlets reported that data collected by some of the world’s most renowned cybersecurity experts had identified frequent and unexplained communications between an email server used by the Trump Organization and Alfa Bank, one of Russia’s largest financial institutions. Those publications set off speculation about a possible secret back-channel of communications, as well as a series of lawsuits and investigations that culminated last week with the indictment of the same former federal cybercrime prosecutor who brought the data to the attention of the FBI five years ago. …

19 Aug, 2021

Wanted: Disgruntled Employees to Deploy Ransomware

Cybersecurity Abnormal Security, BEC, business email compromise, ceo fraud, Crane Hassold, fbi, Internet Crime Complaint Center, Latest Warnings, Locbit 2.0 ransomware, The Coming Storm

7 Jun, 2021

Adventures in Contacting the Russian FSB

Cybersecurity A Little Sunshine, BadB, C#, CryptoPro, fbi, Federal Security Service, FSB, GOST, Lance James, Treasury Department, Unit221B, virustotal, Vladislav Horohorin, Yandex

KrebsOnSecurity recently had occasion to contact the Russian Federal Security Service (FSB), the Russian equivalent of the U.S. Federal Bureau of Investigation (FBI). In the process of doing so, I encountered a small snag: The FSB’s website said in order to contact them securely, I needed to download and install an encryption and virtual private networking (VPN) appliance that is flagged by at least 20 antivirus products as malware. The reason I contacted the FSB — one of the successor agencies to the Russian KGB — ironically enough had to do with security concerns raised about the FSB’s own preferred method of being contacted. …

21 May, 2021

How to Tell a Job Offer from an ID Theft Trap

Cybersecurity Employment Fraud, Erica Siegel, fbi, Geosyntec Consultants, Latest Warnings, LinkedIn, LinkedIn job scam, Troy Gwin, Web Fraud 2.0

17 May, 2021

Try This One Weird Trick Russian Hackers Hate

Cybersecurity Allison Nixon, Colonial Pipeline ransomware attack, Cybereason, DarkSide ransomware, fbi, Lance James, Microsoft Windows, Ransomware, rEvil, Security Tools, Sodinokibi, twitter, Unit221B

In a Twitter discussion last week on ransomware attacks, KrebsOnSecurity noted that virtually all ransomware strains have a built-in failsafe designed to cover the backsides of the malware purveyors: They simply will not install on a Microsoft Windows computer that already has one of many types of virtual keyboards installed — such as Russian or Ukrainian. So many readers had questions in response to the tweet that I thought it was worth a blog post exploring this one weird cyber defense trick. …

29 Apr, 2021

Task Force Seeks to Disrupt Ransomware Payments

Cybersecurity amazon, Cisco, Department of Homeland Security, disrupting ransomware payments, Emsisoft, Europol, fbi, FireEye, Institute for Security and Technology, mcafee, microsoft, Philip Reiner, Ransomware, The Coming Storm, The Wall Street Journal, U.K. National Crime Agency, U.S. Justice Department, U.S. Treasury Department

16 Apr, 2021

Did Someone at the Commerce Dept. Find a SolarWinds Backdoor in Aug. 2020?

Cybersecurity, VMware A Little Sunshine, CVE-2020-4006, Cybersecurity Infrastructure Security Administration, Democratic National Committee, fbi, FireEye, GoldMax, Lexicon.exe, microsoft, national security agency, National Telecommunications and Information Administration, NTIA, SolarWinds hack, Sunshuttle, The Wall Street Journal, U.S. Commerce Department, U.S. Treasury Department, virustotal, VMware

On Aug. 13, 2020, someone uploaded a suspected malicious file to VirusTotal, a service that scans submitted files against more than five dozen antivirus and security products. Last month, Microsoft and FireEye identified that file as a newly-discovered fourth malware backdoor used in the sprawling SolarWinds supply chain hack. An analysis of the malicious file and other submissions by the same VirusTotal user suggest the account that initially flagged the backdoor as suspicious belongs to IT personnel at the National Telecommunications and Information Administration (NTIA), a division of the U.S. Commerce Department that handles telecommunications and Internet policy. …

Tag Archives: fbi