Ars Technica – Computer Security Articles

Arrests in $400M SIM-Swap Tied to Heist at FTX?

February 1, 2024 admin 0ktapus, A Little Sunshine, alphv ransomware, Ars Technica, blackcat ransomware, carter rohn, cisa, data breaches, elliptic, emily hernandez, FBI, ftx, kroll, Ne'er-Do-Well News, nick bax, powell sim swapping crew, r$, robert powell, scattered spider, SIM swapping, tom robinson, unciphered

Credit to Author: BrianKrebs| Date: Thu, 01 Feb 2024 18:41:37 +0000

Three Americans were charged this week with stealing more than $400 million in a November 2022 SIM-swapping attack. The U.S. government did not name the victim organization, but there is every indication that the money was stolen from the now-defunct cryptocurrency exchange FTX, which had just filed for bankruptcy on that same day.

Independent Krebs

Experts Fear Crooks are Cracking Keys Stolen in LastPass Breach

September 5, 2023 admin 1password, A Little Sunshine, adblock plus, Ars Technica, chainalysis, data breaches, karim toubba, lastpass breach, metamask, Nicholas Weaver, nick bax, plex, taylor monahan, The Coming Storm, unciphered, Web Fraud 2.0, wladimir palant

Credit to Author: BrianKrebs| Date: Wed, 06 Sep 2023 00:21:07 +0000

In November 2022, the password manager service LastPass disclosed a breach in which hackers stole password vaults containing both encrypted and plaintext data for more than 25 million users. Since then, a steady trickle of six-figure cryptocurrency heists targeting security-conscious people throughout the tech industry has led some security experts to conclude that crooks likely have succeeded at cracking open some of the stolen LastPass vaults.

Independent Krebs

How Malicious Android Apps Slip Into Disguise

August 3, 2023 admin A Little Sunshine, aleksandr eremin, anatsa, Android malware, Ars Technica, Google Play, The Coming Storm, threatfabric, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Thu, 03 Aug 2023 11:22:55 +0000

Researchers say mobile malware purveyors have been abusing a bug in the Google Android platform that lets them sneak malicious code into benign mobile apps and evade security scanning tools. Google says it has updated its app malware detection mechanisms in response to the new research.

Independent Krebs

Actions Target Russian Govt. Botnet, Hydra Dark Market

April 7, 2022 admin Ars Technica, ASUS, beserk bear, cyclops blink, Dan Goodin, dragonfly 2.0, FBI, federal security service, garantex, german federal criminal police office, gru, hydra market, main intelligence directorate, Ne'er-Do-Well News, NotPetya, ransomware, russian fsb, sandworm, trisis, triton, u.s. department of justice, u.s. department of treasury, voodoo bear, VPNFilter, watchguard, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Thu, 07 Apr 2022 22:03:45 +0000

The U.S. Federal Bureau of Investigation (FBI) says it has disrupted a giant botnet built and operated by a Russian government intelligence unit known for launching destructive cyberattacks against energy infrastructure in the United States and Ukraine. Separately, law enforcement agencies in the U.S. and Germany moved to decapitate “Hydra,” a billion-dollar Russian darknet drug bazaar that also helped to launder the profits of multiple Russian ransomware groups.

Independent Krebs

Microsoft Patch Tuesday, February 2022 Edition

February 8, 2022 admin Allan Liska, andrew cunningham, Ars Technica, cve-2022-21989, cve-2022-21996, cve-2022-22005, Greg Wiseman, immersive labs, kevin breen, print spooler, Rapid7, Recorded Future, Time to Patch, win32k

Credit to Author: BrianKrebs| Date: Tue, 08 Feb 2022 22:38:16 +0000

Microsoft today released software updates to plug security holes in its Windows operating systems and related software. This month’s relatively light patch batch is refreshingly bereft of any zero-day threats, or even scary critical vulnerabilities. But it does fix four dozen flaws, including several that Microsoft says will likely soon be exploited by malware or malcontents.

Independent Krebs

Iowa Prosecutors Drop Charges Against Men Hired to Test Their Security

January 31, 2020 admin A Little Sunshine, Ars Technica, chad leonard, chris nickerson, coalfire, dallas county, dallas county attorney charles sinnard, Dan Goodin, gary demercurio, justin wynn, matthew linholm, sen. zach whiting, state sen. amy sinclair, tom mcandrew

Credit to Author: BrianKrebs| Date: Fri, 31 Jan 2020 21:06:18 +0000

On Sept. 11, 2019, two security experts at a company that had been hired by the state of Iowa to test the physical and network security of its judicial system were arrested while probing the security of an Iowa county courthouse, jailed in orange jumpsuits, charged with burglary, and held on $100,000 bail. On Thursday Jan. 30, prosecutors in Iowa announced they had dropped the criminal charges. The news came while KrebsOnSecurity was conducting a video interview with the two accused (featured below).

MalwareBytes Security