• Search for:
    22 Oct, 2020
    The Now-Defunct Firms Behind 8chan, QAnon
    Cybersecurity , , , , , , , , , ,

    Some of the world’s largest Internet firms have taken steps to crack down on disinformation spread by QAnon conspiracy theorists and the hate-filled anonymous message board 8chan. But according to a California-based security researcher, those seeking to de-platform these communities may have overlooked a simple legal solution to that end: Both the Nevada-based web hosting company owned by 8chan’s current figurehead and the California firm that provides its sole connection to the Internet are defunct businesses in the eyes of their respective state regulators. In practical terms, what this means is that the legal contracts which granted these companies temporary control over large swaths of Internet address space are now null and void, and American Internet regulators would be well within their rights to cancel those contracts and reclaim the space. …

    Read MoreThe Now-Defunct Firms Behind 8chan, QAnon

    19 Oct, 2020
    QAnon/8Chan Sites Briefly Knocked Offline
    Cybersecurity , , , , , , , , , , , , ,

    A phone call to an Internet provider in Oregon on Sunday evening was all it took to briefly sideline multiple websites related to 8chan/8kun — a controversial online image board linked to several mass shootings — and QAnon, the far-right conspiracy theory which holds that a cabal of Satanic pedophiles is running a global child sex-trafficking ring and plotting against President Donald Trump. Following a brief disruption, the sites have come back online with the help of an Internet company based in St. Petersburg, Russia. …

    Read MoreQAnon/8Chan Sites Briefly Knocked Offline

    15 Oct, 2020
    Breach at Dickey’s BBQ Smokes 3M Cards
    Cybersecurity , , , , ,

    One of the digital underground’s most popular stores for peddling stolen credit card information began selling a batch of more than three million new card records this week. KrebsOnSecurity has learned the payment card data was stolen in a two-year-long data breach at more than 100 Dickey’s Barbeque Restaurant locations around the country. …

    Read MoreBreach at Dickey’s BBQ Smokes 3M Cards

    13 Oct, 2020
    Microsoft Patch Tuesday, October 2020 Edition
    Cybersecurity , , , , , , , , , , ,

    It’s Cybersecurity Awareness Month! In keeping with that theme, if you (ab)use Microsoft Windows computers you should be aware the company shipped a bevy of software updates today to fix at least 87 security problems in Windows and programs that run on top of the operating system. That means it’s once again time to backup and patch up. …

    Read MoreMicrosoft Patch Tuesday, October 2020 Edition

    12 Oct, 2020
    Microsoft Uses Trademark Law to Disrupt Trickbot Botnet
    Cybersecurity ,

    Microsoft Corp. has executed a coordinated legal sneak attack in a bid to disrupt the malware-as-a-service botnet Trickbot, a global menace that has infected millions of computers and is used to spread ransomware. A court in Virginia granted Microsoft control over many Internet servers Trickbot uses to plunder infected systems, based on novel claims that the crime machine abused the software giant’s trademarks. However, it appears the operation has not completely disabled the botnet. …

    Read MoreMicrosoft Uses Trademark Law to Disrupt Trickbot Botnet

    10 Oct, 2020
    Report: U.S. Cyber Command Behind Trickbot Tricks
    Cybersecurity , , , , , , ,

    A week ago, KrebsOnSecurity broke the news that someone was attempting to disrupt the Trickbot botnet, a malware crime machine that has infected millions of computers and is often used to spread ransomware. A new report Friday says the coordinated attack was part of an operation carried out by the U.S. military’s Cyber Command. …

    Read MoreReport: U.S. Cyber Command Behind Trickbot Tricks

    8 Oct, 2020
    Amid an Embarrassment of Riches, Ransom Gangs Increasingly Outsource Their Work
    Cybersecurity , , , , , , ,

    There’s an old adage in information security: “Every company gets penetration tested, whether or not they pay someone for the pleasure.” Many organizations that do hire professionals to test their network security posture unfortunately tend to focus on fixing vulnerabilities hackers could use to break in. But judging from the proliferation of help-wanted ads for offensive pentesters in the cybercrime underground, today’s attackers have exactly zero trouble gaining that initial intrusion: The real challenge seems to be hiring enough people to help everyone profit from the access already gained. …

    Read MoreAmid an Embarrassment of Riches, Ransom Gangs Increasingly Outsource Their Work

    7 Oct, 2020
    Promising Infusions of Cash, Fake Investor John Bernard Walked Away With $30M
    Cybersecurity , , , , , , , , , , , , , , , ,

    September featured two stories on a phony tech investor named John Bernard, a pseudonym used by a convicted thief named John Clifton Davies who’s fleeced dozens of technology companies out of an estimated $30 million with the promise of lucrative investments. Those stories prompted a flood of tips from Davies’ victims that paint a much clearer picture of this serial con man and his cohorts, including allegations of hacking, smuggling, bank fraud and murder. …

    Read MorePromising Infusions of Cash, Fake Investor John Bernard Walked Away With $30M

    7 Oct, 2020
    Promising Infusions of Cash, Fake Investor John Bernard Walked Away With $30M
    Cybersecurity , , , , , , , , , , , , , , , ,

    September featured two stories on a phony tech investor named John Bernard, a pseudonym used by a convicted thief named John Clifton Davies who’s fleeced dozens of technology companies out of an estimated $30 million with the promise of lucrative investments. Those stories prompted a flood of tips from Davies’ victims that paint a much clearer picture of this serial con man and his cohorts, including allegations of hacking, smuggling, bank fraud and murder. …

    Read MorePromising Infusions of Cash, Fake Investor John Bernard Walked Away With $30M

    2 Oct, 2020
    Attacks Aimed at Disrupting the Trickbot Botnet
    Cybersecurity , , , , , , , , ,

    Over the past 10 days, someone has been launching a series of coordinated attacks designed to disrupt Trickbot, an enormous collection of more than two million malware-infected Windows PCs that are constantly being harvested for financial data and are often used as the entry point for deploying ransomware within compromised organizations. …

    Read MoreAttacks Aimed at Disrupting the Trickbot Botnet