Krebs – Page 9 – Computer Security Articles

A Close Up Look at the Consumer Data Broker Radaris

March 8, 2024 admin affiliate.ru, american russian media inc., arrestfacts.com, atlas data privacy corp., bitseller expert ltd, bizstanding.com, Breadcrumbs, centeda.com, channel one, clubset.com, consumer reporting agencies, daniel's law, dating factory, difive.com, dmitry lybarsky, epop@comby.com, fact magazine, fair credit reporting act, gary nard, gary norden, gary@barksy.com, gary1@eprofit.com, homeflock.com, homemetry.com, igor lybarsky, instantcheckmate.com, kworld.com, newenglandfacts.com, ntv, persontrust.com, projectlab.com, pub360.com, publicreports.com, radaris.com, radaris.ru, rehold.com, rosconcert.com, trustoria.com, truthfinder, u.s. department of justice, U.S. Federal Communications Commission, u.s. federal trade commission, unipoint technology inc., virtory.com

Credit to Author: BrianKrebs| Date: Fri, 08 Mar 2024 13:02:48 +0000

If you live in the United States, the data broker Radaris likely knows a great deal about you, and they are happy to sell what they know to anyone. But how much do we know about Radaris? Publicly available data indicates that in addition to running a dizzying array of people-search websites, the co-founders of Radaris operate multiple Russian-language dating services and affiliate programs. It also appears many of their businesses have ties to a California marketing firm that works with a Russian state-run media conglomerate currently sanctioned by the U.S. government.

Independent Krebs

BlackCat Ransomware Group Implodes After Apparent $22M Payment by Change Healthcare

March 5, 2024 admin A Little Sunshine, alphv ransomware, blackcat ransomware, change healthcare, data breaches, dmitry smilyanets, emsisoft, fabian wosar, FBI, lockbit, NCA, optum, ramp, ransomware, Recorded Future, wired.com

Credit to Author: BrianKrebs| Date: Wed, 06 Mar 2024 00:22:56 +0000

There are indications that U.S. healthcare giant Change Healthcare has made a $22 million extortion payment to the infamous BlackCat ransomware group (a.k.a. “ALPHV”) as the company struggles to bring services back online amid a cyberattack that has disrupted prescription drug services nationwide for weeks. However, the cybercriminal who claims to have given BlackCat access to Change’s network says the crime gang cheated them out of their share of the ransom, and that they still have the sensitive data that Change reportedly paid the group to destroy. Meanwhile, the affiliate’s disclosure appears to have prompted BlackCat to cease operations entirely.

Independent Krebs

Fulton County, Security Experts Call LockBit’s Bluff

February 29, 2024 admin A Little Sunshine, brett callow, data breaches, emsisoft, FBI, fulton county hack, lockbit, lockbitsupp, NCA, ransomware, redsense, robb pitts

Credit to Author: BrianKrebs| Date: Thu, 29 Feb 2024 22:18:54 +0000

The ransomware group LockBit told officials with Fulton County, Ga. they could expect to see their internal documents published online this morning unless the county paid a ransom demand. Instead, LockBit removed Fulton County’s listing from its victim shaming website this morning, claiming county officials had paid. But county officials said they did not pay, nor did anyone make payment on their behalf. Security experts say LockBit was likely bluffing and probably lost most of the data when the gang’s servers were seized this month by U.S. and U.K. law enforcement.

Independent Krebs

Calendar Meeting Links Used to Spread Mac Malware

February 28, 2024 admin A Little Sunshine, BlueNoroff, chris ueland, hunt.io, kaspersky labs, Latest Warnings, Lazarus Group, mac malware, Recorded Future, Web Fraud 2.0, x-protect

Credit to Author: BrianKrebs| Date: Wed, 28 Feb 2024 16:56:43 +0000

Malicious hackers are targeting people in the cryptocurrency space in attacks that start with a link added to the target’s account at Calendly, a popular free calendar application for scheduling appointments and meetings. The attackers impersonate established cryptocurrency investors and ask to schedule a video conference call. But clicking the meeting link provided by the scammers prompts the user to run a script that quietly installs malware on macOS systems.

Independent Krebs

FBI’s LockBit Takedown Postponed a Ticking Time Bomb in Fulton County, Ga.

February 28, 2024 admin an-security breach, CNN, Donald Trump, Europol, FBI, fulton county hack, george chidi, lockbit, lockbitsupp, National Crime Agency, Ne'er-Do-Well News, ransomware, vx-underground, XSS

Credit to Author: BrianKrebs| Date: Mon, 26 Feb 2024 02:17:55 +0000

The FBI’s takedown of the LockBit ransomware group last week came as LockBit was preparing to release sensitive data stolen from government computer systems in Fulton County, Ga. But LockBit is now regrouping, and the gang says it will publish the stolen Fulton County data on March 2 unless paid a ransom. LockBit claims the cache includes documents tied to the county’s ongoing criminal prosecution of former President Trump, but court watchers say teaser documents published by the crime gang suggest a total leak of the Fulton County data could put lives at risk and jeopardize a number of other criminal trials.

Independent Krebs

New Leak Shows Business Side of China’s APT Menace

February 28, 2024 admin A Little Sunshine, citizen lab, dakota cary, data breaches, i-soon, mei danowski, Ne'er-Do-Well News, poison carp, sentinelone, u.s. department of justice, will thomas, wu haibo

Credit to Author: BrianKrebs| Date: Thu, 22 Feb 2024 13:27:47 +0000

A new data leak that appears to have come from one of China’s top private cybersecurity firms provides a rare glimpse into the commercial side of China’s many state-sponsored hacking groups. Experts say the leak illustrates how Chinese government agencies increasingly are contracting out foreign espionage campaigns to the nation’s burgeoning and highly competitive cybersecurity industry.

Independent Krebs

Feds Seize LockBit Ransomware Websites, Offer Decryption Tools, Troll Affiliates

February 28, 2024 admin artur sungatov, bassterlord, Europol, FBI, ivan gennadievich kondratyev, lockbit, lockbitsupp, mark stockley, mikhail matveev, mikhail vasiliev, NCA, Ne'er-Do-Well News, operation cronos, prodaft, ransomware, ruslan magomedovich astamirov, u.k. national crime agency

Credit to Author: BrianKrebs| Date: Tue, 20 Feb 2024 17:09:00 +0000

U.S. and U.K. authorities have seized the darknet websites run by LockBit, a prolific and destructive ransomware group that has claimed more than 2,000 victims worldwide and extorted over $120 million in payments. Instead of listing data stolen from ransomware victims who didn’t pay, LockBit’s victim shaming website now offers free recovery tools, as well as news about arrests and criminal charges involving LockBit affiliates.

Independent Krebs

U.S. Internet Leaked Years of Internal, Customer Emails

February 14, 2024 admin A Little Sunshine, alex holden, data breaches, Hold Security, Latest Warnings, securence, travis carter, u.s. internet corp.

Credit to Author: BrianKrebs| Date: Wed, 14 Feb 2024 16:45:46 +0000

The Minnesota-based Internet provider U.S. Internet Corp. has a business unit called Securence, which specializes in providing filtered, secure email services to businesses, educational institutions and government agencies worldwide. But until it was notified last week, U.S. Internet was publishing more than a decade’s worth of its internal email — and that of thousands of Securence clients — in plain text out on the Internet and just a click away for anyone with a Web browser.