AT&T – Computer Security Articles

Hacker in Snowflake Extortions May Be a U.S. Soldier

November 26, 2024 admin A Little Sunshine, AT&T, boxfan, buttholio, connor riley moucka, cyb3rph4nt0m, ddos-for-hire, john erin binns, judische, kiberphant0m, naver, Ne'er-Do-Well News, proman557, ransomware, reverseshell, shi-bot, snowflake, South korea, telekomterrorist, The Coming Storm, vars_secc, Verizon, waifu

Credit to Author: BrianKrebs| Date: Wed, 27 Nov 2024 00:45:48 +0000

Two men have been arrested for allegedly stealing data from and extorting dozens of companies that used the cloud data storage company Snowflake, but a third suspect — a prolific hacker known as Kiberphant0m — remains at large and continues to publicly extort victims. However, this person’s identity may not remain a secret for long: A careful review of Kiberphant0m’s daily chats across multiple cybercrime personas suggests they are a U.S. Army soldier who is or was recently stationed in South Korea.

Independent Krebs

The Dark Nexus Between Harm Groups and ‘The Com’

September 13, 2024 admin 2992, 303, 404, 545, 555, 6996, 7997, 8884, advance auto parts, ali winston, alphv, aspertaine, AT&T, beige group, black cat, Bloomberg, breachforums, Breadcrumbs, chumlul, court, CrowdStrike, cultist, cvlt, Der Spiegel, discord, Doxbin, ea games, h3ll, harm nation, james thomas andrew mccarty, judische, kalana limkin, kaskar, kayte, kingbob, kt, kya christian nelson, leak society, lending tree, Mandiant, mark rasch, mgm resorts, microsoft, Minecraft, Ne'er-Do-Well News, neiman marcus, nicholas "convict" ceraolo, nmk, noah michael urban, nvidia, Okta, owen david flowers, pompompurin, RCMP, recorder, roblox, Royal Canadian Mounted Police, sagar "weep" singh, Samsung, santander bank, scattered spider, SIM swapping, slit town, snowflake, sosa, star chat, steam, SWATting, T-Mobile, telegram, the com, The Washington Post, ticketmaster, Twitch, u.s. department of justice, u.s. drug enforcement agency, unc5537, unit 221b, vile, violence-as-a-service, vsphere, waifu, Web Fraud 2.0, wired

Credit to Author: BrianKrebs| Date: Fri, 13 Sep 2024 12:16:45 +0000

A cyberattack that shut down some of the top casinos in Las Vegas last year quickly became one of the most riveting security stories of 2023: It was the first known case of native English-speaking hackers in the United States and Britain teaming up with ransomware gangs based in Russia. But that made-for-Hollywood narrative has eclipsed a far more hideous trend: Many of these young, Western cybercriminals are also members of fast-growing online groups that exist solely to bully, stalk, harass and extort vulnerable teens into physically harming themselves and others.

MalwareBytes Security

A week in security (July 8 – July 14)

July 15, 2024 admin AT&T, atommic stealer, crystalray, mspy, news, peloton, rockyou2024, shopify, taylor swift

A list of topics we covered in the week of July 8 to July 14 of 2024

MalwareBytes Security

“Nearly all” AT&T customers had phone records stolen in new data breach disclosure

July 12, 2024 admin AT&T, news, privacy, records, snowflake

AT&T has told customers about yet another data breach. This time call and text records of nearly all customers were stolen.

Independent Krebs

FCC Fines Major U.S. Wireless Carriers for Selling Customer Location Data

April 29, 2024 admin AT&T, LocationSmart, Ne'er-Do-Well News, Securus Technologies, Sprint, T-Mobile, U.S. Federal Communications Commission, Verizon

Credit to Author: BrianKrebs| Date: Mon, 29 Apr 2024 20:56:42 +0000

The U.S. Federal Communications Commission (FCC) today levied fines totaling nearly $200 million against the four major carriers — including AT&T, Sprint, T-Mobile and Verizon — for illegally sharing access to customers’ location information without consent.

Independent Krebs

Why You Should Opt Out of Sharing Data With Your Mobile Provider

March 20, 2023 admin A Little Sunshine, AT&T, CCPA, cpni, custom experience plus, customer proprietary network information, data breaches, Electronic Privacy Information Center, enhanced relevant advertising program, FCC, Federal Communications Commission, gavin wright, maids, mashable, mobile advertising ids, T-Mobile, techtarget, Verizon, verizon custom experience plus, verizon selects, Verizon Wireless

Credit to Author: BrianKrebs| Date: Mon, 20 Mar 2023 14:47:56 +0000

A new breach involving data from nine million AT&T customers is a fresh reminder that your mobile provider likely collects and shares a great deal of information about where you go and what you do with your mobile device — unless and until you affirmatively opt out of this data collection. Here’s a primer on why you might want to do that, and how. Certain questions might be coming to mind right now, like “What the heck is CPNI?” And, ‘If it’s so ‘customer proprietary,’ why is AT&T sharing it with marketers?” Also maybe, “What can I do about it?” Read on for answers to all three questions.

Independent Krebs

It Might Be Our Data, But It’s Not Our Breach

August 11, 2022 admin A Little Sunshine, alex holden, AT&T, at&t internet, bellsouth.net, Bleeping Computer, data breaches, databreaches.net, Hold Security, Lawrence Abrams, new jersey cybersecurity & communications integration cell, sbcglobal.net, shinyhunters, T-Mobile, The Coming Storm, u-verse, white house market

Credit to Author: BrianKrebs| Date: Thu, 11 Aug 2022 17:45:31 +0000

A cybersecurity firm says it has intercepted a large, unique stolen data set containing the names, addresses, email addresses, phone numbers, Social Security Numbers and dates of birth on nearly 23 million Americans. The firm’s analysis of the data suggests it corresponds to current and former customers of AT&T. The telecommunications giant stopped short of saying the data wasn’t theirs, but it maintains the records do not appear to have come from its systems and may be tied to a previous data incident at another company.

Independent Krebs

Fighting Fake EDRs With ‘Credit Ratings’ for Police

April 27, 2022 admin A Little Sunshine, apple, AT&T, Coinbase, discord, emergency data request, FBI, GitHub, google, kodex, LinkedIn, matt donahue, meta, microsoft, snapchat, T-Mobile, The Coming Storm, TikTok, twilio, Twitter, Verizon, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Wed, 27 Apr 2022 14:27:35 +0000

When KrebsOnSecurity last month explored how cybercriminals were using hacked email accounts at police departments worldwide to obtain warrantless Emergency Data Requests (EDRs) from social media and technology providers, many security experts called it a fundamentally unfixable problem. But don’t tell that to Matt Donahue, a former FBI agent who recently quit the agency to launch a startup that aims to help tech companies do a better job screening out phony law enforcement data requests — in part by assigning trustworthiness or “credit ratings” to law enforcement authorities worldwide.

← Previous