• Search for:
    19 Aug, 2020
    Voice Phishers Targeting Corporate VPNs
    Cybersecurity , , , , , , , , , , , ,

    The COVID-19 epidemic has brought a wave of email phishing attacks that try to trick work-at-home employees into giving away credentials needed to remotely access their employers’ networks. But one increasingly brazen group of crooks is taking your standard phishing attack to the next level, marketing a voice phishing service that uses a combination of one-on-one phone calls and custom phishing sites to steal VPN credentials from employees. …

    Read MoreVoice Phishers Targeting Corporate VPNs

    19 Aug, 2020
    Voice Phishers Targeting Corporate VPNs
    Cybersecurity , , , , , , , , , , , ,

    The COVID-19 epidemic has brought a wave of email phishing attacks that try to trick work-at-home employees into giving away credentials needed to remotely access their employers’ networks. But one increasingly brazen group of crooks is taking your standard phishing attack to the next level, marketing a voice phishing service that uses a combination of one-on-one phone calls and custom phishing sites to steal VPN credentials from employees. …

    Read MoreVoice Phishers Targeting Corporate VPNs

    22 Jul, 2020
    Twitter Hacking for Profit and the LoLs
    Cybersecurity , , , , , , , , , , , , , , , , , , , ,

    The New York Times last week ran an interview with several young men who claimed to have had direct contact with those involved in last week’s epic hack against Twitter. These individuals said they were only customers of the person who had access to Twitter’s internal employee tools, and were not responsible for the actual intrusion or bitcoin scams that took place that day. But new information suggests that at least two of them operated a service that resold access to Twitter employees for the purposes of modifying or seizing control of prized Twitter profiles. …

    Read MoreTwitter Hacking for Profit and the LoLs

    16 Jul, 2020
    Who’s Behind Wednesday’s Epic Twitter Hack?
    Cybersecurity , , , , , , , , , ,

    Twitter was thrown into chaos on Wednesday after accounts for some of the world’s most recognizable public figures, executives and celebrities starting tweeting out links to bitcoin scams. Twitter says the attack happened because someone tricked or coerced an employee into providing access to internal Twitter administrative tools. This post is an attempt to lay out some of the timeline of this attack, and point to clues about who may have been behind it. …

    Read MoreWho’s Behind Wednesday’s Epic Twitter Hack?

    14 Jun, 2020
    Privnotes.com Is Phishing Bitcoin from Users of Private Messaging Service Privnote.com
    Cybersecurity , , , ,

    For the past year, a site called Privnotes.com has been impersonating Privnote.com, a legitimate, free service that offers private, encrypted messages which self-destruct automatically after they are read. Until recently, I couldn’t quite work out what Privnotes was up to, but today it became crystal clear: Any messages containing bitcoin addresses will be automatically altered to include a different bitcoin address, as long as the Internet addresses of the sender and receiver of the message are not the same. …

    Read MorePrivnotes.com Is Phishing Bitcoin from Users of Private Messaging Service Privnote.com