Fighting Fake EDRs With ‘Credit Ratings’ for Police.

When KrebsOnSecurity last month explored how cybercriminals were using hacked email accounts at police departments worldwide to obtain warrantless Emergency Data Requests (EDRs) from social media and technology providers, many security experts called it a fundamentally unfixable problem. But don'...
krebsonsecurity.com/?p=59232

Leaked Chats Show LAPSUS$ Stole T-Mobile Source Code.

KrebsOnSecurity recently reviewed a copy of the private chat messages between members of the LAPSUS$ cybercrime group in the week leading up to the arrest of its most active members last month. The logs show LAPSUS$ breached T-Mobile multiple times in March, stealing source code for a range of co...
krebsonsecurity.com/?p=59472

Conti’s Ransomware Toll on the Healthcare Industry.

Conti -- one of the most ruthless and successful Russian ransomware groups -- publicly declared during the height of the COVID-19 pandemic that it would refrain from targeting healthcare providers. But new information confirms this pledge was always a lie, and that Conti has launched more than 20...
krebsonsecurity.com/?p=59446

Microsoft Patch Tuesday, April 2022 Edition.

Microsoft on Tuesday released updates to fix roughly 120 security vulnerabilities in its Windows operating systems and other software. Two of the flaws have been publicly detailed prior to this week, and one is already seeing active exploitation, according to a report from the U.S. National Secur...
krebsonsecurity.com/?p=59439

RaidForums Gets Raided, Alleged Admin Arrested.

The U.S. Department of Justice (DOJ) said today it seized the website and user database for RaidForums, an extremely popular English-language cybercrime forum that sold access to more than 10 billion consumer records stolen in some of the world's largest data breaches since 2015. The DOJ also cha...
krebsonsecurity.com/?p=59419

Double-Your-Crypto Scams Share Crypto Scam Host.

Online scams that try to separate the unwary from their cryptocurrency are a dime a dozen, but a great many seemingly disparate crypto scam websites tend to rely on the same dodgy infrastructure providers to remain online in the face of massive fraud and abuse complaints from their erstwhile cust...
krebsonsecurity.com/?p=59326

Actions Target Russian Govt. Botnet, Hydra Dark Market.

The U.S. Federal Bureau of Investigation (FBI) says it has disrupted a giant botnet built and operated by a Russian government intelligence unit known for launching destructive cyberattacks against energy infrastructure in the United States and Ukraine. Separately, law enforcement agencies in the...
krebsonsecurity.com/?p=59305

The Original APT: Advanced Persistent Teenagers.

Many organizations are already struggling to combat cybersecurity threats from ransomware purveyors and state-sponsored hacking groups, both of which tend to take days or weeks to pivot from an opportunistic malware infection to a full blown data breach. But few organizations have a playbook for ...
krebsonsecurity.com/?p=59085

Fake Emergency Search Warrants Draw Scrutiny from Capitol Hill.

On Tuesday, KrebsOnSecurity warned that hackers increasingly are using compromised government and police department email accounts to obtain sensitive customer data from mobile providers, ISPs and social media companies. Today, one of the U.S. Senate's most tech-savvy lawmakers said he was troubl...
krebsonsecurity.com/?p=59209

Hackers Gaining Power of Subpoena Via Fake “Emergency Data Requests”.

There is a terrifying and highly effective "method" that criminal hackers are now using to harvest sensitive customer data from Internet service providers, phone companies and social media firms. It involves compromising email accounts and websites tied to police departments and government agenci...
krebsonsecurity.com/?p=59088

Estonian Tied to 13 Ransomware Attacks Gets 66 Months in Prison.

An Estonian man was sentenced today to more than five years in a U.S. prison for his role in at least 13 ransomware attacks that caused losses of approximately $53 million. Prosecutors say the accused also enjoyed a lengthy career of "cashing out" access to hacked bank accounts worldwide.
krebsonsecurity.com/?p=59083

A Closer Look at the LAPSUS$ Data Extortion Group.

Microsoft and identity management platform Okta both disclosed this week breaches involving LAPSUS$, a relatively new cybercrime group that specializes in stealing data from big companies and threatening to publish the information unless a ransom demand is paid. Here's a closer look at LAPSUS$, a...
krebsonsecurity.com/?p=59041

Pro-Ukraine ‘Protestware’ Pushes Antiwar Ads, Geo-Targeted Malware.

Researchers are tracking a number of open-source "protestware" projects on GitHub that have recently altered their code to display "Stand with Ukraine" messages for users, or basic facts about the carnage in Ukraine. The group also is tracking several code packages that were recently modified to ...
krebsonsecurity.com/?p=58969

Lawmakers Probe Early Release of Top RU Cybercrook.

Aleksei Burkov, a cybercriminal who long operated two of Russia's most exclusive underground hacking forums, was arrested in 2015 by Israeli authorities. The Russian government fought Burkov's extradition to the U.S. for four years -- even arresting and jailing an Israeli woman to force a prisone...
krebsonsecurity.com/?p=58917

Report: Recent 10x Increase in Cyberattacks on Ukraine.

As their cities suffered more intense bombardment by Russian military forces this week, Ukrainian Internet users came under renewed cyberattacks, with one Internet company providing service there saying they blocked ten times the normal number of phishing and malware attacks targeting Ukrainians.
krebsonsecurity.com/?p=58886

Microsoft Patch Tuesday, March 2022 Edition.

Microsoft on Tuesday released software updates to plug at least 70 security holes in its Windows operating systems and related software. For the second month running, there are no scary zero-day threats looming for Windows users (that we know of), and relatively few "critical" fixes. And yet we k...
krebsonsecurity.com/?p=58876

Internet Backbone Giant Lumen Shuns .RU.

Lumen Technologies, an American company that operates one of the largest Internet backbones and carries a significant percentage of the world's Internet traffic, said today it will stop routing traffic for organizations based in Russia. Lumen's decision comes just days after a similar exit by bac...
krebsonsecurity.com/?p=58854

Conti Ransomware Group Diaries, Part IV: Cryptocrime.

Three stories here last week pored over several years’ worth of internal chat records stolen from the Conti ransomware group, the most profitable ransomware gang in operation today. The candid messages revealed how Conti evaded law enforcement and intelligence agencies, what it was like on a ty...
krebsonsecurity.com/?p=58766

Conti Ransomware Group Diaries, Part III: Weaponry.

Part I of this series examined newly-leaked internal chats from the Conti ransomware group, and how the crime gang dealt with its own internal breaches. Part II explored what it's like to be an employee of Conti's sprawling organization. Today's Part III looks at how Conti abused a panoply of pop...
krebsonsecurity.com/?p=58724

Conti Ransomware Group Diaries, Part II: The Office.

Earlier this week, a Ukrainian security researcher leaked almost two years’ worth of internal chat logs from Conti, one of the more rapacious and ruthless ransomware gangs in operation today. Tuesday’s story examined how Conti dealt with its own internal breaches and attacks from private secu...
krebsonsecurity.com/?p=58690

Show older
Noc.Social

Open Source Social Network. Focused on technology, networking, linux, privacy and security, but open to anyone. Civil discourse, polite and open. Managed by the noc.org team.