🦜 Krebs on Security
@krebsonsecurity.com@rss-parrot.net
I'm an automated parrot! I relay a website's RSS feed to the Fediverse. Every time a new post appears in the feed, I toot about it. Follow me to get all new posts in your Mastodon timeline!
Brought to you by the RSS Parrot.
---
In-depth security news and investigation
Your feed and you don't want it here? Just
e-mail the birb.
Sextortion Scams Now Include Photos of Your Home
https://krebsonsecurity.com/2024/09/sextortion-scams-now-include-photos-of-your-home/
Published: September 3, 2024 15:45
An old but persistent email scam known as "sextortion" has a new personalized touch: The missives, which claim that malware has captured webcam footage of recipients pleasuring themselves, now include a photo of the target's home in a bid to make threats…
Owners of 1-Time Passcode Theft Service Plead Guilty
https://krebsonsecurity.com/2024/09/owners-of-1-time-passcode-theft-service-plead-guilty/
Published: September 2, 2024 16:46
Three men in the United Kingdom have pleaded guilty to operating otp[.]agency, a once popular online service that helped attackers intercept the one-time passcodes (OTPs) that many websites require as a second authentication factor in addition to…
When Get-Out-The-Vote Efforts Look Like Phishing
https://krebsonsecurity.com/2024/08/when-get-out-the-vote-efforts-look-like-phishing/
Published: August 28, 2024 23:55
Multiple media reports this week warned Americans to be on guard against a new phishing scam that arrives in a text message informing recipients they are not yet registered to vote. A bit of digging reveals the missives were sent by a California political…
New 0-Day Attacks Linked to China’s ‘Volt Typhoon’
https://krebsonsecurity.com/2024/08/new-0-day-attacks-linked-to-chinas-volt-typhoon/
Published: August 27, 2024 14:26
Malicious hackers are exploiting a zero-day vulnerability in Versa Director, a software product used by many Internet and IT service providers. Researchers believe the activity is linked to Volt Typhoon, a Chinese cyber espionage group focused on…
Local Networks Go Global When Domain Names Collide
https://krebsonsecurity.com/2024/08/local-networks-go-global-when-domain-names-collide/
Published: August 23, 2024 14:12
The proliferation of new top-level domains (TLDs) has exacerbated a well-known security weakness: Many organizations set up their internal Microsoft authentication systems years ago using domain names in TLDs that didn't exist at the time. Meaning, they…
National Public Data Published Its Own Passwords
https://krebsonsecurity.com/2024/08/national-public-data-published-its-own-passwords/
Published: August 19, 2024 16:23
New details are emerging about a breach at National Public Data (NPD), a consumer data broker that recently spilled hundreds of millions of Americans' Social Security Numbers, addresses, and phone numbers online. KrebsOnSecurity has learned that another…
NationalPublicData.com Hack Exposes a Nation’s Data
https://krebsonsecurity.com/2024/08/nationalpublicdata-com-hack-exposes-a-nations-data/
Published: August 15, 2024 22:38
A great many readers this month reported receiving alerts that their Social Security Number, name, address and other personal information were exposed in a breach at a little-known but aptly-named consumer data broker called NationalPublicData.com. This…
Six 0-Days Lead Microsoft’s August 2024 Patch Push
https://krebsonsecurity.com/2024/08/six-0-days-lead-microsofts-august-2024-patch-push/
Published: August 13, 2024 21:43
Microsoft today released updates to fix at least 90 security vulnerabilities in Windows and related software, including a whopping six zero-day flaws that are already being actively exploited by attackers.
Cybercrime Rapper Sues Bank over Fraud Investigation
https://krebsonsecurity.com/2024/08/cybercrime-rapper-sues-bank-over-fraud-investigation/
Published: August 7, 2024 19:01
In January, KrebsOnSecurity wrote about rapper Punchmade Dev, whose music videos sing the praises of a cybercrime lifestyle. That story showed how Punchmade's social media profiles promoted Punchmade-themed online stores selling bank account and payment…
Low-Drama ‘Dark Angels’ Reap Record Ransoms
https://krebsonsecurity.com/2024/08/low-drama-dark-angels-reap-record-ransoms/
Published: August 5, 2024 19:52
A ransomware group called Dark Angels made headlines this past week when it was revealed the crime group recently received a record $75 million data ransom payment from a Fortune 50 company. Security experts say the Dark Angels have been around since 2021,…