Author Archives: BrianKrebs

Voice Phishers Targeting Corporate VPNs

Posted on by

The COVID-19 epidemic has brought a wave of email phishing attacks that try to trick work-at-home employees into giving away credentials needed to remotely access their employers’ networks. But one increasingly brazen group of crooks is taking your standard phishing attack to the next level, marketing a voice phishing service that uses a combination of one-on-one phone calls and custom phishing sites to steal VPN credentials from employees. Continue reading Voice Phishers Targeting Corporate VPNs→

Why & Where You Should You Plant Your Flag

Posted on by

Several stories here have highlighted the importance of creating accounts online tied to your various identity, financial and communications services before identity thieves do it for you. This post examines some of the key places where everyone should plant their virtual flags. Continue reading Why & Where You Should You Plant Your Flag→

Microsoft Patch Tuesday, August 2020 Edition

Posted on by

Microsoft today released updates to plug at least 120 security holes in its Windows operating systems and supported software, including two newly discovered vulnerabilities that are actively being exploited. Yes, good people of the Windows world, it’s … Continue reading Microsoft Patch Tuesday, August 2020 Edition→

Hacked Data Broker Accounts Fueled Phony COVID Loans, Unemployment Claims

Posted on by

A group of thieves thought to be responsible for collecting millions in fraudulent small business loans and unemployment insurance benefits from COVID-19 economic relief efforts gathered personal data on people and businesses they were impersonating by leveraging several compromised accounts at a little-known U.S. consumer data broker, KrebsOnSecurity has learned. Continue reading Hacked Data Broker Accounts Fueled Phony COVID Loans, Unemployment Claims→

Porn Clip Disrupts Virtual Court Hearing for Alleged Twitter Hacker

Posted on by

Perhaps fittingly, a Web-streamed court hearing for the 17-year-old alleged mastermind of the July 15 mass hack against Twitter was cut short this morning after mischief makers injected a pornographic video clip into the proceeding. Continue reading Porn Clip Disrupts Virtual Court Hearing for Alleged Twitter Hacker→

Robocall Legal Advocate Leaks Customer Data

Posted on by

A California company that helps telemarketing firms avoid getting sued for violating a federal law that seeks to curb robocalls has leaked the phone numbers, email addresses and passwords of all its customers, as well as the mobile phone numbers and other data on people who have hired lawyers to go after telemarketers. Continue reading Robocall Legal Advocate Leaks Customer Data→

Three Charged in July 15 Twitter Compromise

Posted on by

Three individuals have been charged for their alleged roles in the July 15 hack on Twitter, an incident that resulted in Twitter profiles for some of the world’s most recognizable celebrities, executives and public figures sending out tweets advertising a bitcoin scam.  Continue reading Three Charged in July 15 Twitter Compromise→

Is Your Chip Card Secure? Much Depends on Where You Bank

Posted on by

Chip-based credit and debit cards are designed to make it infeasible for skimming devices or malware to clone your card when you pay for something by dipping the chip instead of swiping the stripe. But a recent series of malware attacks on U.S.-based merchants suggest thieves are exploiting weaknesses in how certain financial institutions have implemented the technology to sidestep key chip card security features and effectively create usable, counterfeit cards. Continue reading Is Your Chip Card Secure? Much Depends on Where You Bank→