Collaborate Disseminate
Three Americans were charged this week with stealing more than $400 million in a November 2022 SIM-swapping attack. The U.S. government did not name the victim organization, but there is every indication that the money was stolen from the now-defunct cryptocurrency exchange FTX, which had just filed for bankruptcy on that same day. Continue reading Arrests in $400M SIM-Swap Tied to Heist at FTX?
On Jan. 9, 2024, U.S. authorities arrested a 19-year-old Florida man charged with wire fraud, aggravated identity theft, and conspiring with others to use SIM-swapping to steal cryptocurrency. Sources close to the investigation tell KrebsOnSecurity the accused was a key member of a criminal hacking group blamed for a string of cyber intrusions at major U.S. technology companies during the summer of 2022. Continue reading Fla. Man Charged in SIM-Swapping Spree is Key Suspect in Hacker Groups Oktapus, Scattered Spider
Okta expands scope of October breach, saying hackers stole names and email addresses of all its customer support system users.
The post Okta Broadens Scope of Data Breach: All Customer Support Users Affected appeared first on SecurityWeek.
Continue reading Okta Broadens Scope of Data Breach: All Customer Support Users Affected
The financially motivated UNC3944 group that hacked MGM has hit at least 100 organizations, mainly in the US and Canada.
The post MGM Hackers Broadening Targets, Monetization Strategies appeared first on SecurityWeek.
Continue reading MGM Hackers Broadening Targets, Monetization Strategies
Coinbase was recently targeted in a sophisticated phishing attack and the cryptocurrency exchange linked the hack to the 0ktapus group.
The post Coinbase Attack Linked to Group Behind Last Year’s Twilio, Cloudflare Hacks appeared first on Securi… Continue reading Coinbase Attack Linked to Group Behind Last Year’s Twilio, Cloudflare Hacks
Phishers are enjoying remarkable success using text messages to steal remote access credentials and one-time passcodes from employees at some of the world’s largest technology companies and customer support firms. A recent spate of SMS phishing attacks from one cybercriminal group has spawned a flurry of breach disclosures from affected companies, which are all struggling to combat the same lingering security threat: The ability of scammers to interact directly with employees through their mobile devices. Continue reading How 1-Time Passcodes Became a Corporate Liability