Credit to Author: Pieter Arntz| Date: Wed, 27 Jul 2022 10:32:19 +0000
T-Mobile has proposed to settle its 2021 data breach by paying $350 million, along with an incremental spend of $150 million in security.
The post T-Mobile agrees to pay customers $350 million in settlement over data breach appeared first on Malwarebytes Labs.
Read more
Credit to Author: BrianKrebs| Date: Wed, 27 Apr 2022 14:27:35 +0000
When KrebsOnSecurity last month explored how cybercriminals were using hacked email accounts at police departments worldwide to obtain warrantless Emergency Data Requests (EDRs) from social media and technology providers, many security experts called it a fundamentally unfixable problem. But don’t tell that to Matt Donahue, a former FBI agent who recently quit the agency to launch a startup that aims to help tech companies do a better job screening out phony law enforcement data requests — in part by assigning trustworthiness or “credit ratings” to law enforcement authorities worldwide.
Read more
Credit to Author: BrianKrebs| Date: Fri, 22 Apr 2022 13:09:39 +0000
KrebsOnSecurity recently reviewed a copy of the private chat messages between members of the LAPSUS$ cybercrime group in the week leading up to the arrest of its most active members last month. The logs show LAPSUS$ breached T-Mobile multiple times in March, stealing source code for a range of company projects. T-Mobile says no customer or government information was stolen in the intrusion. LAPSUS$ is known for stealing data and then demanding a ransom not to publish or sell it. But the leaked chats indicate this mercenary activity was of little interest to the tyrannical teenage leader of LAPSUS$, whose obsession with stealing and leaking proprietary computer source code from the world’s largest tech companies ultimately led to the group’s undoing.
Read moreCredit to Author: Jovi Umawing| Date: Tue, 03 Sep 2019 15:26:01 +0000
 | |
| TrickBot’s latest feature allows it to tamper with the web sessions of users from Verizon, T-Mobile, and Sprint mobile carriers. Categories: Tags: 2faaccount takeover fraudATOAuthyC&CDell Secureworksdynamic webinjectdyrezaemotetEternal RomanceEternalBlueEternalChampionGold BlackburnGoogle Authenticatorhasherezadepoint-of-saleport-out fraudPOSSIM hijackingSIM swappingSprintT-MobilethetricktrickbottrickloadertricksterTrojan.TrickBottwo-factor authenticationVerizon Wireless |
The post TrickBot adds new trick to its arsenal: tampering with trusted texts appeared first on Malwarebytes Labs.
Read moreCredit to Author: David Ruiz| Date: Wed, 05 Jun 2019 15:00:00 +0000
 | |
| Unlike a data privacy proposal in the US and a new data privacy law in California, the Maine data privacy bill aimed at Internet Service Providers (ISPs) explicitly shuts down any pay-for-privacy schemes. Categories: Tags: ACLU of MaineAT&TcomcastData privacydata privacy lawsdata privacy legislationfacebookGoogleGWIinternet service providerISPL.D. 946LD 946MaineMaine State Chamber of Commercepay-for-privacyRon WydenSenator Ron WydenSpectrumSprintT-MobileVerizonWyden |
The post Maine inches closer to shutting down ISP pay-for-privacy schemes appeared first on Malwarebytes Labs.
Read moreCredit to Author: Malwarebytes Labs| Date: Mon, 11 Feb 2019 17:05:33 +0000
 | |
| A roundup of security news from February 4 – 8, including Facebook’s secure messaging integration, Google’s changes to URLs, a scam involving the Kindle store and John Wick, and more. Categories: Tags: amazonAppleAT&TAustraliabitcoinbounty hunterscryptocurrencycryptographycybersecurityDo Not TrackebooksfacebookGoogleInstagraminternetJeff BezosJohn wickkindlemessengersafarisecure messagingSprintT-MobileURLswhatsappZcashzero day |
The post A week in security (February 4 – 8) appeared first on Malwarebytes Labs.
Read more
Credit to Author: BrianKrebs| Date: Fri, 09 Nov 2018 20:52:01 +0000
A Connecticut man who’s earned “bug bounty” rewards and public recognition from top telecom companies for finding and reporting security holes in their Web sites secretly operated a service that leveraged these same flaws to sell their customers’ personal data, KrebsOnSecurity has learned.
Read more
Credit to Author: BrianKrebs| Date: Wed, 07 Nov 2018 05:49:37 +0000
KrebsOnSecurity recently had a chance to interview members of the REACT Task Force, a team of law enforcement officers and prosecutors based in Santa Clara, Calif. that has been tracking down individuals engaged in unauthorized “SIM swaps” — a complex form of mobile phone fraud that is often used to steal large amounts of cryptocurrencies and other items of value from victims. Snippets from that fascinating conversation are recounted below, and punctuated by accounts from a recent victim who lost more than $100,000 after his mobile phone number was hijacked.
Read more