Collaborate Disseminate
What do the numbers say about Cybercrime? Not much. No one is using them.
There is a popular quote often mis-attributed to the hero of Total Quality Management, Edward Deming: “If you can’t measure it, you can’t manage i… Continue reading FBI’s Crime Data Explorer: What the Numbers Say about Cybercrime
One of the things I’ve learned in twenty-nine years investigating malware is that MOST bad guys are lazy and cheap. One of the main ways that shows up is in the reuse of infrastructure. Or as one of my criminology friends says it “most crim… Continue reading Dangerous Invoices and Dangerous Infrastructure
I recently had the pleasure of bumping into some of my Canadian friends at a Law Enforcement conference. So when I saw someone mention a “National Bank of Canada” phish, I thought I would pull on the string a bit and see if it was actually an “In… Continue reading Interac: One Phish to Phish Them All
Back in 2016 we blogged about a major set of arrests in India and the United States related to a call center scam imitating the IRS. (See “Major Call Center Scam Revealed – 56 Indicted”)
This post is to just share an update on that case. T… Continue reading IRS Call Scammers Sentenced in Texas
A couple years ago I was doing some phishing investigations training at the Police School in Santiago, Chile. One module in my training was called “Logs Don’t Lie” which pointed out that in most cases we have everything we need to prioritize a ph… Continue reading Android Malware Intercepts SMS 2FA: We have the Logs!
On August 10th, many American Financial Institutions received a warning from the FBI that the Bureau had found evidence that criminals were plotting an “Unlimited Operation.” We’ve written about these Unlimited Attacks a number of times in the pa… Continue reading India’s Cosmos Bank Suffers Unlimited ATM Attack
Today I saw a tweet quoting Mark Guzdial’s blog saying “In last five years, little progress in increasing the fraction of American CS BS degree recipients who are African Americans.” It is a problem I’ve given quite a bit of thought to, but in my… Continue reading Computer Science and Diversity
For the past twenty years, one of the main pieces of advice our industry gave to people regarding their email was “don’t open attachments from people you don’t know.” But what if your JOB is opening attachments from people you don’t know?
On Augu… Continue reading Fin7 and the Perfect Phish
This weekend I received an email forwarded from a stranger. They had received a threatening email and had shared it with a former student of mine to ask advice. Fortunately, the correct advice in this case was “Ignore it.” But they s… Continue reading Porn Extortion Email tied to Password Breach
According to Chinese-language publication Legal Daily police in two districts of China have arrested 20 people for their roles in a major crypto currency mining operation that earned the criminals more than 15 million yuan (currently about $2M USD… Continue reading Chinese arrest 20 in major Crypto Currency Mining scam