Author Archives: BrianKrebs

Rise of Darknet Stokes Fear of The Insider

Posted on by

With the proliferation of shadowy black markets on the so-called “darknet” — hidden crime bazaars that can only be accessed through special software that obscures one’s true location online — it has never been easier for disgruntled employees to harm their current or former employer. At least, this is the fear driving a growing stable of companies seeking technical solutions to detect would-be insiders. Continue reading Rise of Darknet Stokes Fear of The Insider→

FBI Raids Spammer Outed by KrebsOnSecurity

Posted on by

Michael A. Persaud, a California man profiled in a Nov. 2014 KrebsOnSecurity story about a convicted junk email artist currently identified by anti-spam activists as one of the world’s Top 10 Worst Spammers, was reportedly raided by the FBI in connection with a federal spam investigation. Continue reading FBI Raids Spammer Outed by KrebsOnSecurity→

Microsoft Patches Dozens of Security Holes

Posted on by

Microsoft today released updates to address more than three dozen security holes in Windows and related software. Meanwhile, Adobe — which normally releases fixes for its ubiquitous Flash Player alongside Microsoft’s monthly Patch Tuesday cycle — said it’s putting off today’s expected Flash patch until the end of this week so it can address an unpatched Flash vulnerability that already is being exploited in active attacks. Continue reading Microsoft Patches Dozens of Security Holes→

ATM Insert Skimmers In Action

Posted on by

KrebsOnSecurity has featured several recent posts on “insert skimmers,” ATM skimming devices made to fit snugly and invisibly inside a cash machine’s card acceptance slot. I’m revisiting the subject again because I’ve recently acquired how-to videos produced by two different insert skimmer peddlers, and these silent movies show a great deal more than words can tell about how insert skimmers do their dirty work. Continue reading ATM Insert Skimmers In Action→

IRS Re-Enables ‘Get Transcript’ Feature

Posted on by

The Internal Revenue Service has re-enabled a service on its Web site that allows taxpayers to get a copy of their previous year’s tax transcript. The renewed effort to beef up taxpayer authentication methods at irs.gov comes more than a year after the agency disabled the transcript service because tax refund fraudsters were using it to steal sensitive data on consumers. Continue reading IRS Re-Enables ‘Get Transcript’ Feature→

There’s the Beef: Wendy’s Breach Numbers About to Get Much Meatier

Posted on by

When news broke last month that the credit card breach at fast food chain Wendy’s impacted fewer than 300 out of the company’s 5,800 locations, the response from many readers was, “Where’s the Breach?” Today, Wendy’s said the number of stores impacted by the breach is “significantly higher” and that the intrusion may not yet be contained. Continue reading There’s the Beef: Wendy’s Breach Numbers About to Get Much Meatier→

Slicing Into a Point-of-Sale Botnet

Posted on by

Last week, KrebsOnSecurity broke the news of an ongoing credit card breach involving CiCi’s Pizza, a restaurant chain in the United States with more than 500 locations. What follows is an exclusive look at a point-of-sale botnet that appears to have enslaved dozens of hacked payment terminals inside of CiCi’s locations that are being relieved of customer credit card data in real time. Continue reading Slicing Into a Point-of-Sale Botnet→

Password Re-user? Get Ready to Get Busy

Posted on by

In the wake of megabreaches at some of the Internet’s most-recognized destinations, don’t be surprised if you receive password reset requests from numerous companies that didn’t experience a breach: Some big name companies — including Facebook and Netflix — are in the habit of combing through huge data leak troves for credentials that match those of their customers and then forcing a password reset for those users. Continue reading Password Re-user? Get Ready to Get Busy→