Krebs – Page 15 – Computer Security Articles

Kroll Employee SIM-Swapped for Crypto Investor Data

August 25, 2023 admin A Little Sunshine, blockfi, data breaches, ftx, kroll breach, Latest Warnings, SIM swapping, T-Mobile

Credit to Author: BrianKrebs| Date: Fri, 25 Aug 2023 18:05:10 +0000

Security consulting giant Kroll disclosed today that a SIM-swapping attack against one of its employees led to the theft of user information for multiple cryptocurrency platforms that are relying on Kroll services in their ongoing bankruptcy proceedings. And there are indications that fraudsters may already be exploiting the stolen data in phishing attacks. Cryptocurrency lender BlockFi and the now-collapsed crypto trading platform FTX each disclosed data breaches this week thanks to a recent SIM-swapping attack targeting an employee of Kroll — the company handling both firms’ bankruptcy restructuring.

Independent Krebs

Tourists Give Themselves Away by Looking Up. So Do Most Network Intruders.

August 22, 2023 admin assetnote, canary tokens, Cisco Talos, haroon meer, hazel burton, ransomware, Security Tools, shubham shah, The Coming Storm, thinkst

Credit to Author: BrianKrebs| Date: Tue, 22 Aug 2023 17:45:28 +0000

In large metropolitan areas, tourists are often easy to spot because they’re far more inclined than locals to gaze upward at the surrounding skyscrapers. Security experts say this same tourist dynamic is a dead giveaway in virtually all computer intrusions that lead to devastating attacks like ransomware, and that more organizations should set simple virtual tripwires that sound the alarm when authorized users and devices are spotted exhibiting this behavior.

Independent Krebs

Karma Catches Up to Global Phishing Service 16Shop

August 17, 2023 admin 16shop, Akamai, bandungxploiter, Breadcrumbs, constella intelligence, cyberthread.id, devilscream, FBI, Interpol, McAfee, Ne'er-Do-Well News, riswanda noor supatra, rizky mauluna sidik, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Thu, 17 Aug 2023 19:58:56 +0000

You’ve probably never heard of “16Shop,” but there’s a good chance someone using it has tried to phish you. Last week, the international police organization INTERPOL said it had shuttered the notorious 16Shop, a popular phishing-as-a-service platform launched in 2017 that made it simple for even complete novices to conduct complex and convincing phishing scams. INTERPOL said authorities in Indonesia arrested the 21-year-old proprietor and one of his alleged facilitators, and that a third suspect was apprehended in Japan.

Independent Krebs

Diligere, Equity-Invest Are New Firms of U.K. Con Man

August 14, 2023 admin ardelis solutions, codes2you, diligere, equity-invest, john bernard, john clifton davies, Ne'er-Do-Well News, the inside knowledge

Credit to Author: BrianKrebs| Date: Mon, 14 Aug 2023 20:13:22 +0000

John Clifton Davies, a convicted fraudster estimated to have bilked dozens of technology startups out of more than $30 million through phony investment schemes, has a brand new pair of scam companies that are busy dashing startup dreams: A fake investment firm called Equity-Invest[.]ch, and Diligere[.]co.uk, a scam due diligence company that Equity-Invest insists all investment partners use. A native of the United Kingdom, Mr. Davies absconded from justice before being convicted on multiple counts of fraud in 2015. Prior to his conviction, Davies served 16 months in jail before being cleared on suspicion of murdering his third wife on their honeymoon in India.

Independent Krebs

Microsoft Patch Tuesday, August 2023 Edition

August 8, 2023 admin adobe, cve-2023-21709, cve-2023-36884, cve-2023-36910, cve-2023-38180, immersive labs, microsoft, microsoft patch tuesday august 2023, nikolas cemerikic, Satnam Narang, Security Tools, Tenable, Time to Patch

Credit to Author: BrianKrebs| Date: Wed, 09 Aug 2023 02:22:57 +0000

Microsoft Corp. today issued software updates to plug more than 70 security holes in its Windows operating systems and related products, including a patch that addresses multiple zero-day vulnerabilities currently being exploited in the wild.

Independent Krebs

Meet the Brains Behind the Malware-Friendly AI Chat Service ‘WormGPT’

August 8, 2023 admin A Little Sunshine, arctic stealer, Breadcrumbs, chatgpt, daniel kelley, dcrat, google bard, Hackforums, large language models, llms, rafael morais, ruiunashackers, The Coming Storm, wormgpt

Credit to Author: BrianKrebs| Date: Tue, 08 Aug 2023 17:37:23 +0000

WormGPT, a private new chatbot service advertised as a way to use Artificial Intelligence (AI) to help write malicious software without all the pesky prohibitions on such activity enforced by ChatGPT and Google Bard, has started adding restrictions on how the service can be used. Faced with customers trying to use WormGPT to create ransomware and phishing scams, the 23-year-old Portuguese programmer who created the project now says his service is slowly morphing into “a more controlled environment.” The large language models (LLMs) made by ChatGPT parent OpenAI or Google or Microsoft all have various safety measures designed to prevent people from abusing them for nefarious purposes — such as creating malware or hate speech. In contrast, WormGPT has promoted itself as a new LLM that was created specifically for cybercrime activities.

Independent Krebs

Teach a Man to Phish and He’s Set for Life

August 4, 2023 admin A Little Sunshine, check point software, Latest Warnings, LinkedIn, microsoft, Microsoft 365, phishing, right to left override, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Fri, 04 Aug 2023 13:49:15 +0000

One frustrating aspect of email phishing is the frequency with which scammers fall back on tried-and-true methods that really have no business working these days. Like attaching a phishing email to a traditional, clean email message, or leveraging link redirects on LinkedIn, or abusing an encoding method that makes it easy to disguise booby-trapped Microsoft Windows files as relatively harmless documents.

Independent Krebs

How Malicious Android Apps Slip Into Disguise

August 3, 2023 admin A Little Sunshine, aleksandr eremin, anatsa, Android malware, Ars Technica, Google Play, The Coming Storm, threatfabric, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Thu, 03 Aug 2023 11:22:55 +0000

Researchers say mobile malware purveyors have been abusing a bug in the Google Android platform that lets them sneak malicious code into benign mobile apps and evade security scanning tools. Google says it has updated its app malware detection mechanisms in response to the new research.