Author Archives: BrianKrebs

FBI, CISA Echo Warnings on ‘Vishing’ Threat

Posted on by

The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) on Thursday issued a joint alert to warn about the growing threat from voice phishing or “vishing” attacks targeting companies. The advisory came less than 24 hours after KrebsOnSecurity published an in-depth look at a crime group offering a service that people can hire to steal VPN credentials and other sensitive data from employees working remotely during the Coronavirus pandemic. Continue reading FBI, CISA Echo Warnings on ‘Vishing’ Threat→

FBI, CISA Echo Warnings on ‘Vishing’ Threat

Posted on by

The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) on Thursday issued a joint alert to warn about the growing threat from voice phishing or “vishing” attacks targeting companies. The advisory came less than 24 hours after KrebsOnSecurity published an in-depth look at a crime group offering a service that people can hire to steal VPN credentials and other sensitive data from employees working remotely during the Coronavirus pandemic. Continue reading FBI, CISA Echo Warnings on ‘Vishing’ Threat→

Voice Phishers Targeting Corporate VPNs

Posted on by

The COVID-19 epidemic has brought a wave of email phishing attacks that try to trick work-at-home employees into giving away credentials needed to remotely access their employers’ networks. But one increasingly brazen group of crooks is taking your standard phishing attack to the next level, marketing a voice phishing service that uses a combination of one-on-one phone calls and custom phishing sites to steal VPN credentials from employees. Continue reading Voice Phishers Targeting Corporate VPNs→

Why & Where You Should You Plant Your Flag

Posted on by

Several stories here have highlighted the importance of creating accounts online tied to your various identity, financial and communications services before identity thieves do it for you. This post examines some of the key places where everyone should plant their virtual flags. Continue reading Why & Where You Should You Plant Your Flag→

Microsoft Patch Tuesday, August 2020 Edition

Posted on by

Microsoft today released updates to plug at least 120 security holes in its Windows operating systems and supported software, including two newly discovered vulnerabilities that are actively being exploited. Yes, good people of the Windows world, it’s … Continue reading Microsoft Patch Tuesday, August 2020 Edition→

Hacked Data Broker Accounts Fueled Phony COVID Loans, Unemployment Claims

Posted on by

A group of thieves thought to be responsible for collecting millions in fraudulent small business loans and unemployment insurance benefits from COVID-19 economic relief efforts gathered personal data on people and businesses they were impersonating by leveraging several compromised accounts at a little-known U.S. consumer data broker, KrebsOnSecurity has learned. Continue reading Hacked Data Broker Accounts Fueled Phony COVID Loans, Unemployment Claims→

Porn Clip Disrupts Virtual Court Hearing for Alleged Twitter Hacker

Posted on by

Perhaps fittingly, a Web-streamed court hearing for the 17-year-old alleged mastermind of the July 15 mass hack against Twitter was cut short this morning after mischief makers injected a pornographic video clip into the proceeding. Continue reading Porn Clip Disrupts Virtual Court Hearing for Alleged Twitter Hacker→

Robocall Legal Advocate Leaks Customer Data

Posted on by

A California company that helps telemarketing firms avoid getting sued for violating a federal law that seeks to curb robocalls has leaked the phone numbers, email addresses and passwords of all its customers, as well as the mobile phone numbers and other data on people who have hired lawyers to go after telemarketers. Continue reading Robocall Legal Advocate Leaks Customer Data→