Facebook launches $2m suit against alleged phishing, hacking sites

Facebook is using trademark law to target the operators of sites that imitate or target Facebook and Instagram sites. Continue reading Facebook launches $2m suit against alleged phishing, hacking sites

Should I buy nonsense domains just to make sure my clients don’t visit a misspelled domain?

I have my new website to be published (it’s called buysteel.com). I will have thousands of clients visiting my site every month, and I would like to protect them around and at the site. Is it worth buying nonsense domains tha… Continue reading Should I buy nonsense domains just to make sure my clients don’t visit a misspelled domain?

Block newly-registered domains to reduce security threats in your organisation

Security researchers propose that there might be an additional simple step your company might like to take to better defend your users against threats: aggressively block all domains less than one month old.
Read more in my article on the Tripwire Stat… Continue reading Block newly-registered domains to reduce security threats in your organisation

After €24 million stolen by typosquatting a cryptocurrency exchange, six people arrested

European police have arrested six people as part of an investigation into a theft which saw €24 million (US $27 millon) stolen from users of cryptocurrency exchange.
Read more in my article on the Tripwire State of Security blog.
Continue reading After €24 million stolen by typosquatting a cryptocurrency exchange, six people arrested

After €24 million stolen by typosquatting a cryptocurrency exchange, six people arrested

European police have arrested six people as part of an investigation into a theft which saw €24 million (US $27 millon) stolen from users of cryptocurrency exchange.
The post After €24 million stolen by typosquatting a cryptocurrency exchan… Continue reading After €24 million stolen by typosquatting a cryptocurrency exchange, six people arrested

‘Typosquatting’ campaign imitated news outlets to spread propaganda for years, report says

Researchers have uncovered a years-long disinformation campaign in which suspected Iranian operatives masqueraded as well known international media outlets and used fake Twitter accounts to amplify fabricated news articles. The group, dubbed Endless Mayfly, published some 135 news articles on sites meant to look like Bloomberg, The Guardian, The Atlantic, Politico and others, according to findings published Tuesday by Citizen Lab, the team of researchers at the University of Toronto. The group impersonated outlets via a technique known as “typosquatting,” in which it used websites like “theatlatnic.com” instead of “theatlantic.com” to avoid detection. Endless Mayfly would use this method to push anti-Saudi narratives and other fabrications that would be picked up on social media and legitimate news outlets, Citizen Lab said. It also involved the use of 11 Twitter personas since 2016. The effort demonstrates how propagandists have adopted the SEO and social media tactics that media outlets and other organizations […]

The post ‘Typosquatting’ campaign imitated news outlets to spread propaganda for years, report says appeared first on CyberScoop.

Continue reading ‘Typosquatting’ campaign imitated news outlets to spread propaganda for years, report says

Historical OSINT – Yet Another Massive Scareware Serving Campaign Courtesy of the Koobface Gang

It’s 2010 and I’ve recently intercepted a currently circulating malicious and fraudulent scareware-serving campaign courtesy of the Koobface Gang this time successfully typosquatting my name within its command and control infrastructure.

In this post … Continue reading Historical OSINT – Yet Another Massive Scareware Serving Campaign Courtesy of the Koobface Gang