Author Archives: BrianKrebs

NCR Barred Mint, QuickBooks from Banking Platform During Account Takeover Storm

Posted on by

Banking industry giant NCR Corp. [NYSE: NCR] late last month took the unusual step of temporarily blocking third-party financial data aggregators Mint and QuicBooks Online from accessing Digital Insight, an online banking platform used by hundreds of financial institutions. That ban, which came in response to a series of bank account takeovers in which cybercriminals used aggregation sites to surveil and drain consumer accounts, has since been rescinded. But the incident raises fresh questions about the proper role of digital banking platforms in fighting password abuse. Continue reading NCR Barred Mint, QuickBooks from Banking Platform During Account Takeover Storm→

Takeaways from the $566M BriansClub Breach

Posted on by

Reporting on the exposure of some 26 million stolen credit cards leaked from a top underground cybercrime store highlighted some persistent and hard truths. Most notably, that the world’s largest financial institutions tend to have a much better idea of which merchants and bank cards have been breached than do the thousands of smaller banks and credit unions across the United States. Also, a great deal of cybercrime seems to be perpetrated by a relatively small number of people. Continue reading Takeaways from the $566M BriansClub Breach→

Cachet Financial Reeling from MyPayrollHR Fraud

Posted on by

When NY based cloud payroll provider MyPayrollHR unexpectedly shuttered its doors last month and disappeared with $26 million worth of customer payroll deposits, its payments processor Cachet Financial Services ended up funding the bank accounts of MyPayrollHR client company employees anyway, graciously eating a $26 million loss which it is now suing to recover. Continue reading Cachet Financial Reeling from MyPayrollHR Fraud→

Ransomware Hits B2B Payments Firm Billtrust

Posted on by

Business-to-business payments provider Billtrust is still recovering from a ransomware attack that began last week.  The company said it is in the final stages of bringing all of its systems back online from backups.
The post Ransomware Hits B2B P… Continue reading Ransomware Hits B2B Payments Firm Billtrust→

Avast, NordVPN Breaches Tied to Phantom User Accounts

Posted on by

Antivirus and security giant Avast and virtual private networking (VPN) software provider NordVPN each today disclosed months-long network intrusions that — while otherwise unrelated — shared a common cause: Forgotten or unknown user accounts that granted remote access to internal systems with little more than a password. Continue reading Avast, NordVPN Breaches Tied to Phantom User Accounts→

When Card Shops Play Dirty, Consumers Win

Posted on by

Cybercrime forums have been abuzz this week over news that BriansClub — one of the underground’s largest shops for stolen credit and debit cards — had been hacked, and its inventory of 26 million cards leaked to security contacts in the banking industry. Now it appears this brazen heist may have been the result of one of BriansClub’s longtime competitors trying to knock out a rival. Continue reading When Card Shops Play Dirty, Consumers Win→

“BriansClub” Hack Rescues 26M Stolen Cards

Posted on by

“BriansClub,” a popular underground store for buying stolen credit card data that uses Yours Truly’s likeness in its advertising, has itself been hacked. The data stolen from BriansClub encompasses more than 26 million credit and debit card records taken from hacked online and brick-and-mortar retailers over the past four years, including almost eight million records uploaded to the shop in 2019 alone. Continue reading “BriansClub” Hack Rescues 26M Stolen Cards→

Patch Tuesday Lowdown, October 2019 Edition

Posted on by

On Tuesday Microsoft issued software updates to fix almost five dozen security problems in Windows and software designed to run on top of it. By most accounts, it’s a relatively light patch batch this month. Here’s a look at the highlights. Continue reading Patch Tuesday Lowdown, October 2019 Edition→

Mariposa Botnet Author, Darkcode Crime Forum Admin Arrested in Germany

Posted on by

A Slovenian man convicted of authoring the destructive and once-prolific Mariposa botnet and running the infamous Darkode cybercrime forum has been arrested in Germany on request from prosecutors in the United States, who’ve recently re-indicted him on related charges. Continue reading Mariposa Botnet Author, Darkcode Crime Forum Admin Arrested in Germany→