• Search for:
    23 Apr, 2020
    When in Doubt: Hang Up, Look Up, & Call Back
    Cybersecurity , ,

    Many security-conscious people probably think they’d never fall for a phone-based phishing scam. But if your response to such a scam involves anything other than hanging up and calling back the entity that claims to be calling, you may be in for a rude awakening. Here’s how one security and tech-savvy reader got taken for more than $10,000 in an elaborate, weeks-long ruse. …

    Read MoreWhen in Doubt: Hang Up, Look Up, & Call Back

    16 Apr, 2020
    Sipping from the Coronavirus Domain Firehose
    Cybersecurity , , , , , , , , , , , , , , , , , ,

    Security experts are poring over thousands of new Coronavirus-themed domain names registered each day, but this often manual effort struggles to keep pace with the flood of domains invoking the virus to promote malware and phishing sites, as well as non-existent healthcare products and charities. As a result, domain name registrars are under increasing pressure to do more to combat scams and misinformation during the COVID-19 pandemic. …

    Read MoreSipping from the Coronavirus Domain Firehose

    10 Apr, 2020
    New IRS Site Could Make it Easy for Thieves to Intercept Some Stimulus Payments
    Cybersecurity , , , , , ,

    The U.S. federal government is now in the process of sending Economic Impact Payments by direct deposit to millions of Americans. Most who are eligible for payments can expect to have funds direct-deposited into the same bank accounts listed on previous years’ tax filings sometime next week. Today, the Internal Revenue Service (IRS) stood up a site to collect bank account information from the many Americans who don’t usually file a tax return. The question is, will those non-filers have a chance to claim their payments before fraudsters do? …

    Read MoreNew IRS Site Could Make it Easy for Thieves to Intercept Some Stimulus Payments

    1 Apr, 2020
    Phish of GoDaddy Employee Jeopardized Escrow.com, Among Others
    Cybersecurity , , , , , , , ,

    A spear-phishing attack this week hooked a customer service employee at GoDaddy.com, the world’s largest domain name registrar, KrebsOnSecurity has learned. The incident gave the phisher the ability to view and modify key customer records, access that was used to briefly hijack domains for a half-dozen GoDaddy customers, including transaction brokering site escrow.com. …

    Read MorePhish of GoDaddy Employee Jeopardized Escrow.com, Among Others

    20 Mar, 2020
    Zyxel Flaw Powers New Mirai IoT Botnet Strain
    Cybersecurity , , , , , , ,

    In February, hardware maker Zyxel fixed a zero-day vulnerability in its routers and VPN firewall products after KrebsOnSecurity told the company the flaw was being abused by attackers to break into devices. This week, security researchers said they spotted that same vulnerability being exploited by a new variant of Mirai, a malware strain that targets vulnerable Internet of Things (IoT) devices for use in large-scale attacks and as proxies for other cybercrime activity. …

    Read MoreZyxel Flaw Powers New Mirai IoT Botnet Strain

    17 Mar, 2020
    Coronavirus Widens the Money Mule Pool
    Cybersecurity , , , , , , , , , , ,

    With many people being laid off or working from home thanks to the Coronavirus pandemic, cybercrooks are almost certain to have more than their usual share of recruitable “money mules” — people who get roped into money laundering schemes under the pretense of a work-at-home job offer. Here’s the story of one upstart mule factory that spoofs a major nonprofit and tells new employees they’ll be collecting and transmitting donations for an international “Coronavirus Relief Fund.” …

    Read MoreCoronavirus Widens the Money Mule Pool

    12 Mar, 2020
    Live Coronavirus Map Used to Spread Malware
    Cybersecurity , , , , , ,

    Cybercriminals constantly latch on to news items that captivate the public’s attention, but usually they do so by sensationalizing the topic or spreading misinformation about it. Recently, however, cybercrooks have started disseminating real-time, accurate information about global infection rates tied to the Coronavirus/COVID-19 pandemic in a bid to infect computers with malicious software.  …

    Read MoreLive Coronavirus Map Used to Spread Malware

    26 Feb, 2020
    Zyxel 0day Affects its Firewall Products, Too
    Cybersecurity , , , , ,

    On Monday, networking hardware maker Zyxel released security updates to plug a critical security hole in its network attached storage (NAS) devices that is being actively exploited by crooks who specialize in deploying ransomware. Today, Zyxel acknowledged the same flaw is present in many of its firewall products. …

    Read MoreZyxel 0day Affects its Firewall Products, Too

    24 Feb, 2020
    Zyxel Fixes 0day in Network Storage Devices
    Cybersecurity , , , , , , , , , , , , , ,

    Networking hardware vendor Zyxel today released an update to fix a critical flaw in many of its network attached storage (NAS) devices that can be used to remotely commandeer them. The patch comes 12 days after KrebsOnSecurity alerted the company that precise instructions for exploiting the vulnerability were being sold for $20,000 in the cybercrime underground. Based in Taiwan, Zyxel Communications Corp. (a.k.a “ZyXEL”) is a maker of networking devices, including Wi-Fi routers, NAS products and hardware firewalls. The company has roughly 1,500 employees and boasts some 100 million devices deployed worldwide. While in many respects the class of vulnerability addressed in this story is depressingly common among Internet of Things (IoT) devices, the flaw is notable because it has attracted the interest of groups specializing in deploying ransomware at scale. …

    Read MoreZyxel Fixes 0day in Network Storage Devices

    8 Feb, 2020
    Dangerous Domain Corp.com Goes Up for Sale
    Cybersecurity , , , , , , , , , , ,

    As an early domain name investor, Mike O’Connor had by 1994 snatched up several choice online destinations, including bar.com, cafes.com, grill.com, place.com, pub.com and television.com. Some he sold over the years, but for the past 26 years O’Connor refused to auction perhaps the most sensitive domain in his stable — corp.com. It is sensitive because years of testing shows whoever wields it would have access to an unending stream of passwords, email and other proprietary data belonging to hundreds of thousands of systems at major companies around the globe. …

    Read MoreDangerous Domain Corp.com Goes Up for Sale