• Search for:
    29 May, 2020
    Career Choice Tip: Cybercrime is Mostly Boring
    Cybersecurity , , , , , , , , , , ,

    When law enforcement agencies tout their latest cybercriminal arrest, the defendant is often cast as a bravado outlaw engaged in sophisticated, lucrative, even exciting activity. But new research suggests that as cybercrime has become dominated by pay-for-service offerings, the vast majority of day-to-day activity needed to support these enterprises is in fact mind-numbingly boring and tedious, and that highlighting this reality may be a far more effective way combat cybercrime and steer offenders toward a better path. …

    Read MoreCareer Choice Tip: Cybercrime is Mostly Boring

    28 May, 2020
    UK Ad Campaign Seeks to Deter Cybercrime
    Cybersecurity , , , , , , , , , , ,

    The United Kingdom’s anti-cybercrime agency is running online ads aimed at young people who search the Web for services that enable computer crimes, specifically trojan horse programs and DDoS-for-hire services. The ad campaign follows a similar initiative launched in late 2017 that academics say measurably dampened demand for such services by explaining that their use to harm others is illegal and can land potential customers in jail. …

    Read MoreUK Ad Campaign Seeks to Deter Cybercrime

    26 May, 2020
    Report: ATM Skimmer Gang Had Protection from Mexican Attorney General’s Office
    Cybersecurity , , , , , , , ,

    A group of Romanians operating an ATM company in Mexico and suspected of bribing technicians to install sophisticated Bluetooth-based skimmers in cash machines throughout several top Mexican tourist destinations have enjoyed legal protection from a top anti-corruption official in the Mexican attorney general’s office, according to a new complaint filed with the government’s internal affairs division. …

    Read MoreReport: ATM Skimmer Gang Had Protection from Mexican Attorney General’s Office

    23 May, 2020
    Riding the State Unemployment Fraud ‘Wave’
    Cybersecurity , , , , ,

    When a reliable method of scamming money out of people, companies or governments becomes widely known, underground forums and chat networks tend to light up with activity as more fraudsters pile on to claim their share. And that’s exactly what appears to be going on right now as multiple U.S. states struggle to combat a tsunami of phony Pandemic Unemployment Assistance (PUA) claims. Meanwhile, a number of U.S. states are possibly making it easier for crooks by leaking their citizens’ personal data from the very websites the unemployment scammers are using to file bogus claims. …

    Read MoreRiding the State Unemployment Fraud ‘Wave’

    19 May, 2020
    Ukraine Nabs Suspect in 773M Password ‘Megabreach’
    Cybersecurity , , , , , , , ,

    In January 2019, dozens of media outlets raised the alarm about a new “megabreach” involving the release of some 773 million stolen usernames and passwords that was breathlessly labeled “the largest collection of stolen data in history.” A subsequent review by KrebsOnSecurity quickly determined the data was years old and merely a compilation of credentials pilfered from mostly public data breaches. Earlier today, authorities in Ukraine said they’d apprehended a suspect in the case. …

    Read MoreUkraine Nabs Suspect in 773M Password ‘Megabreach’

    18 May, 2020
    This Service Helps Malware Authors Fix Flaws in their Code
    Cybersecurity , , , , , , , , , , , , , , ,

    Almost daily now there is news about flaws in commercial software that lead to computers getting hacked and seeded with malware. But the reality is most malicious software also has its share of security holes that open the door for security researchers or ne’er-do-wells to liberate or else seize control over already-hacked systems. Here’s a look at one long-lived malware vulnerability testing service that is used and run by some of the Dark Web’s top cybercriminals. …

    Read MoreThis Service Helps Malware Authors Fix Flaws in their Code

    16 May, 2020
    U.S. Secret Service: “Massive Fraud” Against State Unemployment Insurance Programs
    Cybersecurity , , , , , , , , , ,

    A well-organized Nigerian crime ring is exploiting the COVID-19 crisis by committing large-scale fraud against multiple state unemployment insurance programs, with potential losses in the hundreds of millions of dollars, according to a new alert issued by the U.S. Secret Service. A memo seen by KrebsOnSecurity that the Secret Service sent to field offices around the United States this week says the ring has been filing unemployment claims in different states using Social Security numbers and other personally identifiable information (PII) belonging to identity theft victims, and that “a substantial amount of the fraudulent benefits submitted have used PII from first responders, government personnel and school employees.” …

    Read MoreU.S. Secret Service: “Massive Fraud” Against State Unemployment Insurance Programs

    12 May, 2020
    Microsoft Patch Tuesday, May 2020 Edition
    Cybersecurity , , , , , , , , , , , , ,

    Microsoft today issued software updates to plug at least 111 security holes in Windows and Windows-based programs. None of the vulnerabilities were labeled as being publicly exploited or detailed prior to today, but as always if you’re running Windows on any of your machines it’s time once again to prepare to get your patches on. …

    Read MoreMicrosoft Patch Tuesday, May 2020 Edition

    11 May, 2020
    Ransomware Hit ATM Giant Diebold Nixdorf
    Cybersecurity , , , , , ,

    Diebold Nixdorf, a major provider of automatic teller machines (ATMs) and payment technology to banks and retailers, recently suffered a ransomware attack that disrupted some operations. The company says the hackers never touched its ATMs or customer networks, and that the intrusion only affected its corporate network. …

    Read MoreRansomware Hit ATM Giant Diebold Nixdorf

    8 May, 2020
    Meant to Combat ID Theft, Unemployment Benefits Letter Prompts ID Theft Worries
    Cybersecurity , , , ,

    Millions of Americans now filing for unemployment will receive benefits via a prepaid card issued by U.S. Bank, a Minnesota-based financial institution that handles unemployment payments for more than a dozen U.S. states. Some of these unemployment applications will trigger an automatic letter from U.S. Bank to the applicant. The letters are intended to prevent identity theft, but many people are mistaking these vague missives for a notification that someone has hijacked their identity. …

    Read MoreMeant to Combat ID Theft, Unemployment Benefits Letter Prompts ID Theft Worries