• Search for:
    29 Sep, 2021
    The Rise of One-Time Password Interception Bots
    Cybersecurity , , , , , , , , , ,

    In February, KrebsOnSecurity wrote about a novel cybercrime service that helped attackers intercept the one-time passwords (OTPs) that many websites require as a second authentication factor in addition to passwords. That service quickly went offline, but new research reveals a number of competitors have since launched bot-based services that make it relatively easy for crooks to phish OTPs from targets. …

    Read MoreThe Rise of One-Time Password Interception Bots

    28 Sep, 2021
    Apple AirTag Bug Enables ‘Good Samaritan’ Attack
    Cybersecurity , , , , , , ,

    The new $30 Airtag tracking device from Apple has a feature that allows anyone who finds one of these tiny location beacons to scan it with a mobile phone and discover its owner’s phone number if the Airtag has been set to lost mode. But according to new research, this same feature can be abused to redirect the Good Samaritan to an iCloud phishing page — or to any other malicious website. …

    Read MoreApple AirTag Bug Enables ‘Good Samaritan’ Attack