• Search for:
    29 Sep, 2021
    The Rise of One-Time Password Interception Bots
    Cybersecurity , , , , , , , , , ,

    In February, KrebsOnSecurity wrote about a novel cybercrime service that helped attackers intercept the one-time passwords (OTPs) that many websites require as a second authentication factor in addition to passwords. That service quickly went offline, but new research reveals a number of competitors have since launched bot-based services that make it relatively easy for crooks to phish OTPs from targets. …

    Read MoreThe Rise of One-Time Password Interception Bots

    16 Jun, 2021
    Ukrainian Police Nab Six Tied to CLOP Ransomware
    Cybersecurity , , , , , , , , , , , , , , ,

    Authorities in Ukraine this week charged six people alleged to have been part of the CLOP ransomware group, a cybercriminal gang said to have extorted more than half a billion dollars from victims. Some of CLOP’s victims this year alone include Stanford University Medical School, the University of California, and University of Maryland. …

    Read MoreUkrainian Police Nab Six Tied to CLOP Ransomware

    14 May, 2021
    DarkSide Ransomware Gang Quits After Servers, Bitcoin Stash Seized
    Cybersecurity , , , , , , , ,

    The DarkSide ransomware affiliate program responsible for the six-day outage at Colonial Pipeline this week that led to fuel shortages and price spikes across the country is running for the hills. The crime gang announced it was closing up shop after its servers were seized and someone drained funds from an account the group uses to pay affiliates. …

    Read MoreDarkSide Ransomware Gang Quits After Servers, Bitcoin Stash Seized

    11 May, 2021
    A Closer Look at the DarkSide Ransomware Gang
    Cybersecurity , , , , , ,

    The FBI confirmed this week that a relatively new ransomware group known as DarkSide is responsible for an attack that caused Colonial Pipeline to shut down 5,550 miles of pipe, stranding countless barrels of gasoline, diesel and jet fuel on the Gulf Coast. Here’s a closer look at the DarkSide cybercrime gang, as seen through their negotiations with a recent U.S. victim that earns $15 billion in annual revenue. …

    Read MoreA Closer Look at the DarkSide Ransomware Gang

    4 Mar, 2021
    Three Top Russian Cybercrime Forums Hacked
    Cybersecurity , , , , , ,

    Over the past few weeks, three of the longest running and most venerated Russian-language online forums serving thousands of experienced cybercriminals have been hacked. In two of the intrusions, the attackers made off with the forums’ user databases, including email and Internet addresses and hashed passwords. …

    Read MoreThree Top Russian Cybercrime Forums Hacked

    9 Feb, 2021
    Arrest, Raids Tied to ‘U-Admin’ Phishing Kit
    Cybersecurity , , , , , , , , , , ,

    Cyber cops in Ukraine carried out an arrest and several raids last week in connection with the author of a U-Admin, a software package used to administer what’s being called “one of the world’s largest phishing services.” The operation was carried out in coordination with the FBI and authorities in Australia, which was particularly hard hit by phishing scams perpetrated by U-Admin customers. …

    Read MoreArrest, Raids Tied to ‘U-Admin’ Phishing Kit

    9 Feb, 2021
    Arrest, Raids Tied to ‘U-Admin’ Phishing Kit
    Cybersecurity , , , , , , , , , , ,

    Cyber cops in Ukraine carried out an arrest and several raids last week in connection with the author of a U-Admin, a software package used to administer what’s being called “one of the world’s largest phishing services.” The operation was carried out in coordination with the FBI and authorities in Australia, which was particularly hard hit by phishing scams perpetrated by U-Admin customers. …

    Read MoreArrest, Raids Tied to ‘U-Admin’ Phishing Kit

    18 Jan, 2021
    Joker’s Stash Carding Market to Call it Quits
    Cybersecurity , , ,

    Joker’s Stash, by some accounts the largest underground shop for selling stolen credit card and identity data, says it’s closing up shop effective mid-February 2021. The announcement came on the heels of a turbulent year for the major cybercrime store, and just weeks after U.S. and European authorities seized a number of its servers. …

    Read MoreJoker’s Stash Carding Market to Call it Quits

    18 Jan, 2021
    Joker’s Stash Carding Market to Call it Quits
    Cybersecurity , , ,

    Joker’s Stash, by some accounts the largest underground shop for selling stolen credit card and identity data, says it’s closing up shop effective mid-February 2021. The announcement came on the heels of a turbulent year for the major cybercrime store, and just weeks after U.S. and European authorities seized a number of its servers. …

    Read MoreJoker’s Stash Carding Market to Call it Quits

    28 Oct, 2020
    Security Blueprints of Many Companies Leaked in Hack of Swedish Firm Gunnebo
    Cybersecurity , , , , , , , , , , , ,

    In March 2020, KrebsOnSecurity alerted Swedish security giant Gunnebo Group that hackers had broken into its network and sold the access to a criminal group which specializes in deploying ransomware. In August, Gunnebo said it had successfully thwarted a ransomware attack, but this week it emerged that the intruders stole and published online tens of thousands of sensitive documents — including schematics of client bank vaults and surveillance systems. The Gunnebo Group is a Swedish multinational company that provides physical security to a variety of clients globally, including banks, government agencies, airports, casinos, jewelry stores, tax agencies and even nuclear power plants. The company has operations in 25 countries, more than 4,000 employees, and billions in revenue annually. …

    Read MoreSecurity Blueprints of Many Companies Leaked in Hack of Swedish Firm Gunnebo