Author Archives: BrianKrebs

Who is Anna-Senpai, the Mirai Worm Author?

Posted on by

On September 22, 2016, this site was forced offline for nearly four days after it was hit with “Mirai,” a malware strain that enslaves poorly secured Internet of Things (IoT) devices like wireless routers and security cameras into a botnet for use in large cyberattacks. Roughly a week after that assault, the individual(s) who launched that attack — using the name “Anna Senpai” — released the source code for Mirai, spawning dozens of copycat attack armies online.

After months of digging, KrebsOnSecurity is now confident to have uncovered Anna Senpai’s real-life identity, and the identity of at least one co-conspirator who helped to write and modify the malware. Continue reading Who is Anna-Senpai, the Mirai Worm Author?→

Adobe, Microsoft Push Critical Security Fixes

Posted on by

Adobe and Microsoft on Tuesday each released security updates for software installed on hundreds of millions of devices. Adobe issued an update for Flash Player and for Acrobat/Reader. Microsoft released just four updates to plug some 15 security holes in Windows and related software. Continue reading Adobe, Microsoft Push Critical Security Fixes→

Extortionists Wipe Thousands of Databases, Victims Who Pay Up Get Stiffed

Posted on by

Tens of thousands of personal and possibly proprietary databases that were left accessible to the public online have just been wiped from the Internet, replaced with ransom notes demanding payment for the return of the files. Adding insult to injury, it appears that virtually none of the victims who have paid the ransom have gotten their files back because multiple fraudsters are now wise to the extortion attempts and are competing to replace each other’s ransom notes. Continue reading Extortionists Wipe Thousands of Databases, Victims Who Pay Up Get Stiffed→

Extortionists Wipe Thousands of Databases, Victims Who Pay Up Get Stiffed

Posted on by

Tens of thousands of personal and possibly proprietary databases that were left accessible to the public online have just been wiped from the Internet, replaced with ransom notes demanding payment for the return of the files. Adding insult to injury, it appears that virtually none of the victims who have paid the ransom have gotten their files back because multiple fraudsters are now wise to the extortion attempts and are competing to replace each other’s ransom notes. Continue reading Extortionists Wipe Thousands of Databases, Victims Who Pay Up Get Stiffed→

DNI: Putin Led Cyber, Propaganda Effort to Elect Trump, Denigrate Clinton

Posted on by

Russian President Vladimir Putin directed a massive propaganda and cyber attack operation aimed at discrediting Hillary Clinton and getting Donald Trump elected, the top U.S. intelligence agencies said in a remarkable yet unshocking report released on Friday. Continue reading DNI: Putin Led Cyber, Propaganda Effort to Elect Trump, Denigrate Clinton→

Stolen Passwords Fuel Cardless ATM Fraud

Posted on by

Some financial instutitions are now offering so-called “cardless ATM” transactions that allow customers to withdraw cash using nothing more than their mobile phones. But as the following story illustrates, this new technology also creates an avenue for thieves to quickly and quietly convert stolen customer bank account usernames and passwords into cold hard cash. Worse still, fraudulent cardless ATM withdrawals may prove more difficult for customers to dispute because they place the victim at the scene of the crime. Continue reading Stolen Passwords Fuel Cardless ATM Fraud→

Stolen Passwords Fuel Cardless ATM Fraud

Posted on by

Some financial instutitions are now offering so-called “cardless ATM” transactions that allow customers to withdraw cash using nothing more than their mobile phones. But as the following story illustrates, this new technology also creates an avenue for thieves to quickly and quietly convert stolen customer bank account usernames and passwords into cold hard cash. Worse still, fraudulent cardless ATM withdrawals may prove more difficult for customers to dispute because they place the victim at the scene of the crime. Continue reading Stolen Passwords Fuel Cardless ATM Fraud→

The FTC’s Internet of Things (IoT) Challenge

Posted on by

One of the biggest cybersecurity stories of 2016 was the surge in online attacks caused by poorly-secured “Internet of Things” (IoT) devices such as Internet routers, security cameras, digital video recorders (DVRs) and smart appliances. Many readers here have commented with ideas about how to counter vulnerabilities caused by out-of-date software in IoT devices, so why not pitch your idea for money? Who knows, you could win up to $25,000 in a new contest put on by the U.S. Federal Trade Commission (FTC). Continue reading The FTC’s Internet of Things (IoT) Challenge→