Phishers Spoof USPS, 12 Other Natl’ Postal Services

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

The fake USPS phishing page. Recent weeks have seen a sizable uptick in the number of phishing scams targeting U.S. Postal Service (USPS) customers. Here’s a look at an extensive SMS phishing operation that tries to steal personal and financial …

Don’t Let Zombie Zoom Links Drag You Down

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Many organizations — including quite a few Fortune 500 firms — have exposed web links that allow anyone to initiate a Zoom video conference meeting as a valid employee. These company-specific Zoom links, which include a permanent user ID number …

A Closer Look at the Snatch Data Ransom Group

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Earlier this week, KrebsOnSecurity revealed that the darknet website for the Snatch ransomware group was leaking data about its users and the crime gang’s internal operations. Today, we’ll take a closer look at the history of Snatch, its alleged founder, …

‘Snatch’ Ransom Group Exposes Visitor IP Addresses

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

The victim shaming site operated by the Snatch ransomware group is leaking data about its true online location and internal operations, as well as the Internet addresses of its visitors, KrebsOnSecurity has found. The leaked data suggest that Snatch is …

LastPass: ‘Horse Gone Barn Bolted’ is Strong Password

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

September 22, 2023 0 Comments The password manager service LastPass is now forcing some of its users to pick longer master passwords. LastPass says the changes are needed to ensure all customers are protected by their latest security improvements. But …

Who’s Behind the 8Base Ransomware Website?

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

September 18, 2023 0 Comments The victim shaming website operated by the cybercriminals behind 8Base — currently one of the more active ransomware groups — was until earlier today leaking quite a bit of information that the crime group probably …

FBI Hacker Dropped Stolen Airbus Data on 9/11

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

In December 2022, KrebsOnSecurity broke the news that a cybercriminal using the handle “USDoD” had infiltrated the FBI‘s vetted information sharing network InfraGard, and was selling the contact information for all 80,000 members. The FBI responded by reverifying all InfraGard …

Adobe, Apple, Google & Microsoft Patch 0-Day Bugs

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Microsoft today issued software updates to fix at least five dozen security holes in Windows and supported software, including patches for two zero-day vulnerabilities that are already being exploited. Also, Adobe, Google Chrome and Apple iOS users may have their …

Experts Fear Crooks are Cracking Keys Stolen in LastPass Breach

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

September 5, 2023 0 Comments In November 2022, the password manager service LastPass disclosed a breach in which hackers stole password vaults containing both encrypted and plaintext data for more than 25 million users. Since then, a steady trickle of …

Why is .US Being Used to Phish So Many of Us?

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Domain names ending in “.US” — the top-level domain for the United States — are among the most prevalent in phishing scams, new research shows. This is noteworthy because .US is overseen by the U.S. government, which is frequently the …