data breaches – Page 5 – Computer Security Articles

Google Suspends Chinese E-Commerce App Pinduoduo Over Malware

March 22, 2023 admin A Little Sunshine, breachforums, bytedance, darknavy, data breaches, google, Latest Warnings, liu huafang, pdd holdings, pinduoduo, project zero, temu, TikTok, Web Fraud 2.0, weibo

Credit to Author: BrianKrebs| Date: Wed, 22 Mar 2023 23:11:08 +0000

Google says it has suspended the app for the Chinese e-commerce giant Pinduoduo after malware was found in versions of the app. The move comes just weeks after Chinese security researchers published an analysis suggesting the popular e-commerce app sought to seize total control over affected devices by exploiting multiple security vulnerabilities in a variety of Android-based smartphones.

Independent Krebs

Why You Should Opt Out of Sharing Data With Your Mobile Provider

March 20, 2023 admin A Little Sunshine, AT&T, CCPA, cpni, custom experience plus, customer proprietary network information, data breaches, Electronic Privacy Information Center, enhanced relevant advertising program, FCC, Federal Communications Commission, gavin wright, maids, mashable, mobile advertising ids, T-Mobile, techtarget, Verizon, verizon custom experience plus, verizon selects, Verizon Wireless

Credit to Author: BrianKrebs| Date: Mon, 20 Mar 2023 14:47:56 +0000

A new breach involving data from nine million AT&T customers is a fresh reminder that your mobile provider likely collects and shares a great deal of information about where you go and what you do with your mobile device — unless and until you affirmatively opt out of this data collection. Here’s a primer on why you might want to do that, and how. Certain questions might be coming to mind right now, like “What the heck is CPNI?” And, ‘If it’s so ‘customer proprietary,’ why is AT&T sharing it with marketers?” Also maybe, “What can I do about it?” Read on for answers to all three questions.

Independent Krebs

Two U.S. Men Charged in 2022 Hacking of DEA Portal

March 14, 2023 admin A Little Sunshine, convict, data breaches, Doxbin, emergency data request, kt, Ne'er-Do-Well News, nicholas ceraolo, ominus, Phobia, Ryan Stevenson, sagar steven singh, u.s. drug enforcement agency, vile, Web Fraud 2.0, weep

Credit to Author: BrianKrebs| Date: Wed, 15 Mar 2023 01:25:20 +0000

Two U.S. men have been charged with hacking into a U.S. Drug Enforcement Agency (DEA) online portal that taps into 16 different federal law enforcement databases. Both are alleged to be part of a larger criminal organization that specializes in using fake emergency data requests from compromised police and government email accounts to publicly threaten and extort their victims.

Independent Krebs

Hackers Claim They Breached T-Mobile More Than 100 Times in 2022

February 28, 2023 admin A Little Sunshine, Allison Nixon, data breaches, International Computer Science Institute, Minecraft, Nicholas Weaver, roblox, Security Keys, SIM swapping, T-Mobile, tmo up, unit 221b, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Tue, 28 Feb 2023 16:14:57 +0000

Three different cybercriminal groups claimed access to internal networks at communications giant T-Mobile in more than 100 separate incidents throughout 2022, new data suggests. In each case, the goal of the attackers was the same: Phish T-Mobile employees for access to internal company tools, and then convert that access into a cybercrime service that could be hired to divert any T-Mobile user’s text messages and phone calls to another device.

Independent Krebs

Experian Glitch Exposing Credit Files Lasted 47 Days

January 25, 2023 admin A Little Sunshine, data breaches, Experian, Experian breach, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Wed, 25 Jan 2023 19:58:46 +0000

On Dec. 23, 2022, KrebsOnSecurity alerted big-three consumer credit reporting bureau Experian that identity thieves had worked out how to bypass its security and access any consumer’s full credit report — armed with nothing more than a person’s name, address, date of birth, and Social Security number. Experian fixed the glitch, but remained silent about the incident for a month. This week, however, Experian acknowledged that the security failure persisted for nearly seven weeks, between Nov. 9, 2022 and Dec. 26, 2022.

Independent Krebs

New T-Mobile Breach Affects 37 Million Accounts

January 19, 2023 admin 2023 t-mobile breach, data breaches, Latest Warnings, optus, t-mobile breach, The Coming Storm

Credit to Author: BrianKrebs| Date: Fri, 20 Jan 2023 04:09:22 +0000

T-Mobile today disclosed a data breach affecting tens of millions of customer accounts, its second major data exposure in as many years. In a filing with federal regulators, T-Mobile said an investigation determined that someone abused its systems to harvest subscriber data tied to approximately 37 million current customer accounts.

Independent Krebs

Identity Thieves Bypassed Experian Security to View Credit Reports

January 9, 2023 admin A Little Sunshine, annualcreditreport.com, data breaches, Experian, jenya kushnir, Ne'er-Do-Well News, Sen. Ron Wyden, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Mon, 09 Jan 2023 14:05:15 +0000

Identity thieves have been exploiting a glaring security weakness in the website of Experian, one of the big three consumer credit reporting bureaus. Normally, Experian requires that those seeking a copy of their credit report successfully answer several multiple choice questions about their financial history. But until the end of 2022, Experian’s website allowed anyone to bypass these questions and go straight to the consumer’s report. All that was needed was the person’s name, address, birthday and Social Security number.

Independent Krebs

The Equifax Breach Settlement Offer is Real, For Now

December 20, 2022 admin data breaches, Equifax breach, equifax class action settlement, myprepaidcenter.com, Other

Credit to Author: BrianKrebs| Date: Tue, 20 Dec 2022 20:08:40 +0000

Millions of people likely just received an email or snail mail notice saying they’re eligible to claim a class action payment in connection with the 2017 megabreach at consumer credit bureau Equifax. Given the high volume of reader inquiries about this, it seemed worth pointing out that while this particular offer is legit (if paltry), scammers are likely to soon capitalize on public attention to the settlement money.