U.S. Hacks QakBot, Quietly Removes Botnet Infections

Credit to Author: BrianKrebs| Date: Tue, 29 Aug 2023 18:35:25 +0000

The U.S. government today announced a coordinated crackdown against QakBot, a complex malware family used by multiple cybercrime groups to lay the groundwork for ransomware infections. The international law enforcement operation involved seizing control over the botnet’s online infrastructure, and quietly removing the Qakbot malware from tens of thousands of infected Microsoft Windows computer systems.

Read more

Karma Catches Up to Global Phishing Service 16Shop

Credit to Author: BrianKrebs| Date: Thu, 17 Aug 2023 19:58:56 +0000

You’ve probably never heard of “16Shop,” but there’s a good chance someone using it has tried to phish you. Last week, the international police organization INTERPOL said it had shuttered the notorious 16Shop, a popular phishing-as-a-service platform launched in 2017 that made it simple for even complete novices to conduct complex and convincing phishing scams. INTERPOL said authorities in Indonesia arrested the 21-year-old proprietor and one of his alleged facilitators, and that a third suspect was apprehended in Japan.

Read more

Beware malware posing as beta versions of legitimate apps, warns FBI

Categories: News

Tags: FBI

Tags: warning

Tags: beta-testing

Tags: malicious code

Tags: crypto recovery

Tags: scammers

The FBI has issued a warning about two related types of fraud, malicious beta-testing apps and crypto recovery schemes.

(Read more…)

The post Beware malware posing as beta versions of legitimate apps, warns FBI appeared first on Malwarebytes Labs.

Read more

Warning: Victims’ faces placed on explicit images in sextortion scam

Categories: Personal

Tags: sextortion

Tags: deepfake

Tags: FBI

Tags: blackmail

Tags: extortion

Tags: fake

Tags: fakes

Tags: synthetic

We take a look at some new developments in sextortion cases via a warning issued by the FBI.

(Read more…)

The post Warning: Victims’ faces placed on explicit images in sextortion scam appeared first on Malwarebytes Labs.

Read more

Feds Take Down 13 More DDoS-for-Hire Services

Credit to Author: BrianKrebs| Date: Tue, 09 May 2023 14:05:44 +0000

The U.S. Federal Bureau of Investigation (FBI) this week seized 13 domain names connected to “booter” services that let paying customers launch crippling distributed denial-of-service (DDoS) attacks. Ten of the domains are reincarnations of DDoS-for-hire services the FBI seized in December 2022, when it charged six U.S. men with computer crimes for allegedly operating booters.

Read more

How to protect your small business from social engineering

Categories: Personal

Tags: Small Business Week 2023

Tags: Small Business Week

Tags: phishing

Tags: pretexting

Tags: baiting

Tags: tailgating

Tags: BEC

Tags: CEO fraud

Tags: business email compromise

Tags: O’Neill Bragg & Staffin

Tags: 2022 Internet Crime Report

Tags: FBI

Tags: most reported fraud

Tags: most damaging fraud

Small businesses are frequent targets of social engineering. Here’s what it is and how to protect against it.

(Read more…)

The post How to protect your small business from social engineering appeared first on Malwarebytes Labs.

Read more

A week in security (April 10 – 16)

Categories: News

Tags: Lock and Code S04E09

Tags: Bennett Cyphers

Tags: Apple vulnerability

Tags: phone charging station

Tags: FBI

Tags: Yum! Brands

Tags: KFC

Tags: Pizza Hut

Tags: Patch Tuesday

Tags: sextortion

Tags: malvertising

Tags: Weebly

Tags: AI

Tags: virtual kidnapping

Tags: ransomware review

Tags: ransomware in the UK

Tags: ransomware in France

The most interesting security related news from the week of April 10 – 16.

(Read more…)

The post A week in security (April 10 – 16) appeared first on Malwarebytes Labs.

Read more

Why is ‘Juice Jacking’ Suddenly Back in the News?

Credit to Author: BrianKrebs| Date: Fri, 14 Apr 2023 20:27:56 +0000

KrebsOnSecurity received a nice bump in traffic this week thanks to tweets from the Federal Bureau of Investigation (FBI) and the Federal Communications Commission (FCC) about “juice jacking,” a term first coined here in 2011 to describe a potential threat of data theft when one plugs their mobile device into a public charging kiosk. It remains unclear what may have prompted the alerts, but the good news is that there are some fairly basic things you can do to avoid having to worry about juice jacking.

Read more