Cybersecurity Archives - Page 34 of 60 - s0x • Austin Managed IT Services

15 Jun, 2021

How Does One Get Hired by a Top Cybercrime Gang?

Cybersecurity alex holden, Alla Witte, Breadcrumbs, DarkSide, Hold Security, Ne'er-Do-Well News, trickbot, U.S. Department of Justice

The U.S. Department of Justice (DOJ) last week announced the arrest of a 55-year-old Latvian woman who’s alleged to have worked as a programmer for Trickbot, a malware-as-a-service platform responsible for infecting millions of computers and seeding many of those systems with ransomware. Just how did a self-employed web site designer and mother of two come to work for one of the world’s most rapacious cybercriminal groups and then leave such an obvious trail of clues indicating her involvement with the gang? This post explores answers to those questions, as well as some of the ways Trickbot and other organized cybercrime gangs gradually recruit, groom and trust new programmers. …

8 Jun, 2021

Microsoft Patches Six Zero-Day Security Holes

Cybersecurity adobe, Automox, Christopher Hass, CVE-2021-28550, CVE-2021-31199, CVE-2021-31201, CVE-2021-31955, CVE-2021-31956, CVE-2021-31959, CVE-2021-31963, CVE-2021-33739, CVE-2021-33742, Immersive Labs, Kevin Breen, microsoft, Microsoft Patch Tuesday June 2021, Sharepoint, Time to Patch, windows

7 Jun, 2021

Justice Dept. Claws Back $2.3M Paid by Colonial Pipeline to Ransomware Gang

Cybersecurity A Little Sunshine, Colonial Pipeline, DarkSide ransomware, Elliptic, Ne'er-Do-Well News, Nicholas Weaver, Ransomware, rEvil, Sodinokibi, Tom Robinson, U.S. Department of Justice

7 Jun, 2021

Adventures in Contacting the Russian FSB

Cybersecurity A Little Sunshine, BadB, C#, CryptoPro, fbi, Federal Security Service, FSB, GOST, Lance James, Treasury Department, Unit221B, virustotal, Vladislav Horohorin, Yandex

KrebsOnSecurity recently had occasion to contact the Russian Federal Security Service (FSB), the Russian equivalent of the U.S. Federal Bureau of Investigation (FBI). In the process of doing so, I encountered a small snag: The FSB’s website said in order to contact them securely, I needed to download and install an encryption and virtual private networking (VPN) appliance that is flagged by at least 20 antivirus products as malware. The reason I contacted the FSB — one of the successor agencies to the Russian KGB — ironically enough had to do with security concerns raised about the FSB’s own preferred method of being contacted. …

29 May, 2021

Using Fake Reviews to Find Dangerous Extensions

Cybersecurity A Little Sunshine, adobe, amazon, Breadcrumbs, [email protected], CapCut, chrome-stats.com, Facebook, Google, Google Chrome Store, Hao Nguyen, HBO, microsoft, Microsoft Authenticator, Roku, Verizon

Fake, positive reviews have infiltrated nearly every corner of life online these days, confusing consumers while offering an unwelcome advantage to fraudsters and sub-par products everywhere. Happily, identifying and tracking these fake reviewer accounts is often the easiest way to spot scams. Here’s the story of how bogus reviews on a counterfeit Microsoft Authenticator browser extension exposed dozens of other extensions that siphoned personal and financial data. …

28 May, 2021

Boss of ATM Skimming Syndicate Arrested in Mexico

Cybersecurity All About Skimmers, El Universal, Florian Tudor, Intacash, Ne'er-Do-Well News, OCCRP, Organized Crime and Corruption Reporting Project, The Riviera Maya Gang, Top Life Servicios

21 May, 2021

How to Tell a Job Offer from an ID Theft Trap

Cybersecurity Employment Fraud, Erica Siegel, fbi, Geosyntec Consultants, Latest Warnings, LinkedIn, LinkedIn job scam, Troy Gwin, Web Fraud 2.0

19 May, 2021

Recycle Your Phone, Sure, But Maybe Not Your Number

Cybersecurity Google Voice, Latest Warnings, number parking services, Princeton University, Security Tools, SMS, T-Mobile, Verizon, Web Fraud 2.0

Many online services allow users to reset their passwords by clicking a link sent via SMS, and this unfortunately widespread practice has turned mobile phone numbers into de facto identity documents. Which means losing control over one thanks to a divorce, job termination or financial crisis can be devastating. Even so, plenty of people willingly abandon a mobile number without considering the potential fallout to their digital identities when those digits invariably get reassigned to someone else. New research shows how fraudsters can abuse wireless provider websites to identify available, recycled mobile numbers that allow password resets at a range of email providers and financial services online. …

17 May, 2021

Try This One Weird Trick Russian Hackers Hate

Cybersecurity Allison Nixon, Colonial Pipeline ransomware attack, Cybereason, DarkSide ransomware, fbi, Lance James, Microsoft Windows, Ransomware, rEvil, Security Tools, Sodinokibi, twitter, Unit221B

In a Twitter discussion last week on ransomware attacks, KrebsOnSecurity noted that virtually all ransomware strains have a built-in failsafe designed to cover the backsides of the malware purveyors: They simply will not install on a Microsoft Windows computer that already has one of many types of virtual keyboards installed — such as Russian or Ukrainian. So many readers had questions in response to the tweet that I thought it was worth a blog post exploring this one weird cyber defense trick. …

14 May, 2021

DarkSide Ransomware Gang Quits After Servers, Bitcoin Stash Seized

Cybersecurity Avaddon, BitMix, Colonial Pipeline ransomware attack, DarkSide ransomware, Intel 471, Ne'er-Do-Well News, Ransomware, rEvil, XSS

s0x • Austin Managed IT Services

s0x • Austin Managed IT Services

Category Archives: Cybersecurity