A Little Sunshine – Page 22 – Computer Security Articles

RaidForums Gets Raided, Alleged Admin Arrested

April 12, 2022 admin A Little Sunshine, diogo santos coelho, Europol, FBI, National Crime Agency, Ne'er-Do-Well News, Omnipotent, operation tourniquet, raidforums seizure, subvirt, t-mobile breach, u.s. department of justice, unrivaled@pm.me, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Tue, 12 Apr 2022 17:29:33 +0000

The U.S. Department of Justice (DOJ) said today it seized the website and user database for RaidForums, an extremely popular English-language cybercrime forum that sold access to more than 10 billion consumer records stolen in some of the world’s largest data breaches since 2015. The DOJ also charged the alleged administrator of RaidForums — 21-year-old Diogo Santos Coelho, of Portugal — with six criminal counts, including conspiracy, access device fraud and aggravated identity theft.

Independent Krebs

Double-Your-Crypto Scams Share Crypto Scam Host

April 11, 2022 admin +7.9914500893, A Little Sunshine, arkinvest, crypto investment scams, cryptohost, fintelegram, Latest Warnings, lightning-network, mark tepterev, polkadot, sergei orlovets, smartape, ulanikirill52@gmail.com, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Mon, 11 Apr 2022 15:26:40 +0000

Online scams that try to separate the unwary from their cryptocurrency are a dime a dozen, but a great many seemingly disparate crypto scam websites tend to rely on the same dodgy infrastructure providers to remain online in the face of massive fraud and abuse complaints from their erstwhile customers. Here’s a closer look at hundreds of phony crypto investment schemes that are all connected through a hosting provider which caters to people running crypto scams.

Independent Krebs

The Original APT: Advanced Persistent Teenagers

April 6, 2022 admin A Little Sunshine, advanced persistent teenagers, amit yoran, APT, cisa, FBI, lapsus$, microsoft, Ne'er-Do-Well News, nvidia, Okta, Samsung, Tenable, The Coming Storm, twitter hack, vishing, voice phishing, wired

Credit to Author: BrianKrebs| Date: Wed, 06 Apr 2022 17:55:38 +0000

Many organizations are already struggling to combat cybersecurity threats from ransomware purveyors and state-sponsored hacking groups, both of which tend to take days or weeks to pivot from an opportunistic malware infection to a full blown data breach. But few organizations have a playbook for responding to the kinds of virtual “smash and grab” attacks we’ve seen recently from LAPSUS$, a juvenile data extortion group whose short-lived, low-tech and remarkably effective tactics are putting some of the world’s biggest corporations on edge.

Independent Krebs

Fake Emergency Search Warrants Draw Scrutiny from Capitol Hill

March 31, 2022 admin A Little Sunshine, apple, Bloomberg, bug, discord, Facebook, instagram, lapsus$, meta, Ne'er-Do-Well News, Sen. Ron Wyden, snapchat, Twitter, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Thu, 31 Mar 2022 22:54:45 +0000

On Tuesday, KrebsOnSecurity warned that hackers increasingly are using compromised government and police department email accounts to obtain sensitive customer data from mobile providers, ISPs and social media companies. Today, one of the U.S. Senate’s most tech-savvy lawmakers said he was troubled by the report and is now asking technology companies and federal agencies for information about the frequency of such schemes.

Independent Krebs

A Closer Look at the LAPSUS$ Data Extortion Group

March 23, 2022 admin A Little Sunshine, Ne'er-Do-Well News, SIM swapping

Credit to Author: BrianKrebs| Date: Wed, 23 Mar 2022 22:00:43 +0000

Microsoft and identity management platform Okta both disclosed this week breaches involving LAPSUS$, a relatively new cybercrime group that specializes in stealing data from big companies and threatening to publish the information unless a ransom demand is paid. Here’s a closer look at LAPSUS$, and some of the low-tech but high-impact methods the group uses to gain access to targeted organizations.

Independent Krebs

Conti Ransomware Group Diaries, Part IV: Cryptocrime

March 7, 2022 admin A Little Sunshine, athens university school of information sciences and technolog, begemot, bloodrush, chainalysis, conti ransomware, ddos, demon, ghost, Gizmodo, jeffrey ladish, mango, matt novak, Ne'er-Do-Well News, pump-and-dump, ransomware, squid, stern, van

Credit to Author: BrianKrebs| Date: Tue, 08 Mar 2022 01:38:36 +0000

Three stories here last week pored over several years’ worth of internal chat records stolen from the Conti ransomware group, the most profitable ransomware gang in operation today. The candid messages revealed how Conti evaded law enforcement and intelligence agencies, what it was like on a typical day at the Conti office, and how Conti secured the digital weaponry used in their attacks. This final post on the Conti conversations explores different schemes that Conti pursued to invest in and steal cryptocurrencies.

Independent Krebs

Conti Ransomware Group Diaries, Part III: Weaponry

March 4, 2022 admin A Little Sunshine, alarm, bentley, bio, bloodrush, chainalysis, cobalt strike, conti, grant, kaktus, lemans corporation, Ne'er-Do-Well News, pin, ransomware, reshaev, revers, salamandra, skippy, the spaniard, tramp, trickbotleaks, Trump

Credit to Author: BrianKrebs| Date: Fri, 04 Mar 2022 20:20:29 +0000

Part I of this series examined newly-leaked internal chats from the Conti ransomware group, and how the crime gang dealt with its own internal breaches. Part II explored what it’s like to be an employee of Conti’s sprawling organization. Today’s Part III looks at how Conti abused a panoply of popular commercial security services to undermine the security of their targets, as well as how the team’s leaders strategized for the upper hand in ransom negotiations with victims.

Independent Krebs

Conti Ransomware Group Diaries, Part II: The Office

March 2, 2022 admin A Little Sunshine, bentley, Bleeping Computer, conti, emotet, hof, Lawrence Abrams, mango, Ne'er-Do-Well News, Palo Alto Networks, ransomware, reverse, ryuk, stern, The Coming Storm, trickbot

Credit to Author: BrianKrebs| Date: Wed, 02 Mar 2022 17:49:52 +0000

Earlier this week, a Ukrainian security researcher leaked almost two years’ worth of internal chat logs from Conti, one of the more rapacious and ruthless ransomware gangs in operation today. Tuesday’s story examined how Conti dealt with its own internal breaches and attacks from private security firms and governments. In Part II of this series we’ll explore what it’s like to work for Conti, as described by the Conti employees themselves.