Author Archives: BrianKrebs

Experts in Lather Over ‘gSOAP’ Security Flaw

Posted on by

Axis Communications — a maker of high-end security cameras whose devices can be found in many high-security areas — recently patched a dangerous coding flaw in virtually all of its products that an attacker could use to remotely seize control over or crash the devices.

The problem wasn’t specific to Axis, which seems to have reacted far more quickly than competitors to quash the bug. Rather, the vulnerability resides in open-source, third-party computer code that has been used in countless products and technologies (including a great many security cameras), meaning it may be some time before most vulnerable vendors ship out a fix — and even longer before users install it. Continue reading Experts in Lather Over ‘gSOAP’ Security Flaw→

Porn Spam Botnet Has Evil Twitter Twin

Posted on by

Last month KrebsOnSecurity published research into a large distributed network of apparently compromised systems being used to relay huge blasts of junk email promoting “online dating” programs — affiliate-driven schemes traditionally overrun with automated accounts posing as women. New research suggests that another bot-promoting botnet of more than 80,000 automated female Twitter accounts has been pimping the same dating scheme and ginning up millions of clicks from Twitter users in the process. Continue reading Porn Spam Botnet Has Evil Twitter Twin→

Porn Spam Botnet Has Evil Twitter Twin

Posted on by

Last month KrebsOnSecurity published research into a large distributed network of apparently compromised systems being used to relay huge blasts of junk email promoting “online dating” programs — affiliate-driven schemes traditionally overrun with automated accounts posing as women. New research suggests that another bot-promoting botnet of more than 80,000 automated female Twitter accounts has been pimping the same dating scheme and ginning up millions of clicks from Twitter users in the process. Continue reading Porn Spam Botnet Has Evil Twitter Twin→

Thieves Used Infrared to Pull Data from ATM ‘Insert Skimmers’

Posted on by

A greater number of ATM skimming incidents now involve so-called “insert skimmers,” wafer-thin fraud devices made to fit snugly and invisibly inside a cash machine’s card acceptance slot. New evidence suggests that at least some of these insert skimmers — which record card data and store it on a tiny embedded flash drive are — equipped with technology allowing it to transmit stolen card data wirelessly via infrared, the same technology built into a television remote control. Continue reading Thieves Used Infrared to Pull Data from ATM ‘Insert Skimmers’→

Thieves Used Infrared to Pull Data from ATM ‘Insert Skimmers’

Posted on by

A greater number of ATM skimming incidents now involve so-called “insert skimmers,” wafer-thin fraud devices made to fit snugly and invisibly inside a cash machine’s card acceptance slot. New evidence suggests that at least some of these insert skimmers — which record card data and store it on a tiny embedded flash drive are — equipped with technology allowing it to transmit stolen card data wirelessly via infrared, the same technology built into a television remote control. Continue reading Thieves Used Infrared to Pull Data from ATM ‘Insert Skimmers’→

Adobe, Microsoft Push Critical Security Fixes

Posted on by

It’s Patch Tuesday, again. That is, if you run Microsoft Windows or Adobe products. Microsoft issued a dozen patch bundles to fix at least 54 security flaws in Windows and associated software. Separately, Adobe’s got a new version of its Flash Player available that addresses at least three vulnerabilities. Continue reading Adobe, Microsoft Push Critical Security Fixes→

Self-Service Food Kiosk Vendor Avanti Hacked

Posted on by

Avanti Markets, a company whose self-service payment kiosks sit beside shelves of snacks and drinks in thousands of corporate breakrooms across America, has suffered of breach of its internal networks in which hackers were able to push malicious software out to those payment devices, the company has acknowledged. The breach may have jeopardized customer credit card accounts as well as biometric data, Avanti warned. Continue reading Self-Service Food Kiosk Vendor Avanti Hacked→

B&B Theatres Hit in 2-Year Credit Card Breach

Posted on by

B&B Theatres, a company that owns and operates the 7th-largest theater chain in America, says it is investigating a breach of its credit card systems. The acknowledgment comes just days after KrebsOnSecurity reached out to the company for comment on reports from financial industry sources who said they suspected the cinema chain has been leaking customer credit card data to cyber thieves for the past two years. Continue reading B&B Theatres Hit in 2-Year Credit Card Breach→

Who is the GovRAT Author and Mirai Botmaster ‘Bestbuy’?

Posted on by

In February 2017, authorities in the United Kingdom arrested a 29-year-old U.K. man on suspicion of knocking more than 900,000 Germans offline in an attack tied to Mirai, a malware strain that enslaves Internet of Things (IoT) devices like security cameras and Internet routers for use in large-scale cyberattacks. Investigators haven’t yet released the man’s name, but news reports suggest he may be better known by the hacker handle “Bestbuy.” This post will follow a trail of clues back to one likely real-life identity of Bestbuy. Continue reading Who is the GovRAT Author and Mirai Botmaster ‘Bestbuy’?→

Is it Time to Can the CAN-SPAM Act?

Posted on by

Regulators at the U.S. Federal Trade Commission (FTC) are asking for public comment on the effectiveness of the CAN-SPAM Act, a 14-year-old federal law that seeks to crack down on unsolicited commercial email. Judging from an unscientific survey by this author, the FTC is bound to get an earful. Continue reading Is it Time to Can the CAN-SPAM Act?→