Fla. Man Charged in SIM-Swapping Spree is Key Suspect in Hacker Groups Oktapus, Scattered Spider

On Jan. 9, 2024, U.S. authorities arrested a 19-year-old Florida man charged with wire fraud, aggravated identity theft, and conspiring with others to use SIM-swapping to steal cryptocurrency. Sources close to the investigation tell KrebsOnSecurity the accused was a key member of a criminal hacking group blamed for a string of cyber intrusions at major U.S. technology companies during the summer of 2022. Continue reading Fla. Man Charged in SIM-Swapping Spree is Key Suspect in Hacker Groups Oktapus, Scattered Spider

How Do Some Companies Get Compromised Again and Again?

Hack me once, shame on thee. Hack me twice, shame on me. The popular email marketing company, MailChimp, suffered a data breach last year after cyberattackers exploited an internal company tool to gain access to customer accounts. The criminals were able to look at around 300 accounts and exfiltrate data on 102 customers. They also […]

The post How Do Some Companies Get Compromised Again and Again? appeared first on Security Intelligence.

Continue reading How Do Some Companies Get Compromised Again and Again?

FanDuel gamblers warned of phishing threat after data breach at Mailchimp

The important thing to realise about the most recently-reported data breach at email newsletter service Mailchimp is that it’s not just Mailchimp’s customer data that was put at risk.

Even if you’re not personally a customer of Mailchimp, even if yo… Continue reading FanDuel gamblers warned of phishing threat after data breach at Mailchimp

Mailchimp slips up again, suffers security breach after falling on social engineering banana skin

For the second time in less than a year, email newsletter service Mailchimp has found itself in the embarrassing position of admitting it has suffered a data breach, putting its customers’ subscribers at risk. Continue reading Mailchimp slips up again, suffers security breach after falling on social engineering banana skin

How 1-Time Passcodes Became a Corporate Liability

Phishers are enjoying remarkable success using text messages to steal remote access credentials and one-time passcodes from employees at some of the world’s largest technology companies and customer support firms. A recent spate of SMS phishing attacks from one cybercriminal group has spawned a flurry of breach disclosures from affected companies, which are all struggling to combat the same lingering security threat: The ability of scammers to interact directly with employees through their mobile devices. Continue reading How 1-Time Passcodes Became a Corporate Liability

Smashing Security podcast #269: Trezor Deep Throat, a CCTV stalker, and Amazon’s list of banned words

There’s monkey business involving cryptocurrency thieves and MailChimp, a stalker exploits his ex-partner’s CCTV cameras, and what are the naughty words Amazon doesn’t want its staff using?

All this and much more is discussed in the latest edition o… Continue reading Smashing Security podcast #269: Trezor Deep Throat, a CCTV stalker, and Amazon’s list of banned words

Mailchimp expands from email to full marketing platform, says it will make $700M in 2019

Mailchimp, a bootstrapped startup out of Atlanta, Georgia, is known best as a popular tool for organizations to manage their customer-facing email activities — a profitable business that its CEO told TechCrunch has now grown to around 11 million customers and is on track for $700 million in revenue in 2019. To help hit that […] Continue reading Mailchimp expands from email to full marketing platform, says it will make $700M in 2019