“Within days, the company edited the numerous blog posts and white papers on its website that …

Some of more tech-savvy Democrats in the U.S. Senate are asking the Federal Trade Commission (FTC) …

Millions of U.S. government employees and contractors have been issued a secure smart ID card that …

The U.S. Drug Enforcement Administration (DEA) says it is investigating reports that hackers gained …

Microsoft today released updates to fix at least 74 separate security problems in its Windows …

Apple , Google and Microsoft announced this week they will soon support an approach to …

Image: Proxima Studios, via Shutterstock.
Faced with a brain drain of smart people fleeing the …

Google said this week it is expanding the types of data people can ask to have removed from search …

When KrebsOnSecurity recently explored how cybercriminals were using hacked email accounts at police …

In one chat, the LAPSUS$ leader — a 17-year-old from the U.K. who goes by the nicknames “ White ,” “ …

KrebsOnSecurity recently reviewed a copy of the private chat messages between members of the LAPSUS$ …

Conti — one of the most ruthless and successful Russian ransomware groups — publicly declared during …

Microsoft on Tuesday released updates to fix roughly 120 security vulnerabilities in its Windows …

The U.S. Federal Bureau of Investigation (FBI) says it has disrupted a giant botnet built and …

Many organizations are already struggling to combat cybersecurity threats from ransomware purveyors …

On Tuesday, KrebsOnSecurity warned that hackers increasingly are using compromised government and …

There is a terrifying and highly effective “method” that criminal hackers are now using to harvest …

An Estonian man was sentenced today to more than five years in a U.S. prison for his role in at …

Microsoft and identity management platform Okta both this week disclosed breaches involving LAPSUS$ …

“Russia has strict regulations against processing for the gambling business,” Horohorin said. “While …

Pavel Vrublevsky , founder of the Russian payment technology firm ChronoPay and the antagonist in my …

Researchers are tracking a number of open-source “ protestware ” projects on GitHub that have …

Aleksei Burkov, seated second from right, attends a hearing in Jerusalem in 2015. Image: Andrei …

“While our overall traffic dropped in Kyiv — and slightly increased in Warsaw due to infrastructure …

As their cities suffered more intense bombardment by Russian military forces this week, Ukrainian …

“I am trying to make a p2p network in Rust,” Van told “ Demon ” on Feb. 19, 2022 [Demon appears to …

Microsoft on Tuesday released software updates to plug at least 70 security holes in its Windows …

Lumen Technologies , an American company that operates one of the largest Internet backbones and …

Three stories here last week pored over several years’ worth of internal chat records stolen from …

Part I of this series examined newly-leaked internal chats from the Conti ransomware group, and how …

Part I of this series examined newly-leaked internal chats from the Conti ransomware group, and how …

On July 30, 2021, Mango tells stern the payroll has increased to 87 salaried employees, with more …

Earlier this week, a Ukrainian security researcher leaked almost two years’ worth of internal chat …

A Ukrainian security researcher this week leaked several years of internal chat logs and other …

President Biden joined European leaders this week in enacting economic sanctions against Russia in …

The U.S. Internal Revenue Service (IRS) said Monday that taxpayers are no longer required to provide …

Update, 2:00 p.m., ET: The ICRC just published an update to its FAQ on the breach . The ICRC now …

A network intrusion at the International Committee for the Red Cross (ICRC) in January led to the …

In January, KrebsOnSecurity examined clues left behind by “ Wazawaka ,” the hacker handle chosen by …

Russian authorities have arrested six men accused of operating some of the most active online …

Microsoft today released software updates to plug security holes in its Windows operating systems …

Since my credentials at the IRS will soon no longer work, I opted to create an ID.me account and …

The Internal Revenue Service (IRS) said today it will be transitioning away from requiring biometric …

If you received a link to LinkedIn.com via email, SMS or instant message, would you click it? …

Several articles here have delved into the history of John Bernard , the pseudonym used by a fake …

That same ToX ID was claimed by a user called “ smiseo ” on the Russian forum BHF, in which smiseo …

In December 2021, researchers discovered a new ransomware-as-a-service named ALPHV (a.k.a. “ …

What’s worse than finding out that identity thieves took out a 546 percent interest payday loan in …

Up for the “Most Meta Cybercrime Offering” award this year is Accountz Club , a new cybercrime store …

These days, ID.me is perhaps better known as the online identity verification service that many …

If you created an online account to manage your tax records with the U.S. Internal Revenue Service …

“This is Russian ransomware diplomacy,” Alperovitch said on Twitter. “It is a signal to the United …

The Russian government said today it arrested 14 people accused of working for “ REvil ,” a …

In a great many ransomware attacks, the criminals who pillage the victim’s network are not the same …

Microsoft today released updates to plug nearly 120 security holes in Windows and supported …

Many readers were surprised to learn recently that the popular Norton 360 antivirus suite now ships …

Norton 360 , one of the most popular antivirus products on the market today, has installed a …

KrebsOnSecurity.com celebrates its 12th anniversary today! Maybe “celebrate” is too indelicate a …

“Basically the perfect ending to cybersecurity in 2021 is a 90s style Java vulnerability in an open …

A 24-year-old New York man who bragged about helping to steal more than $20 million worth of …

John Hultquist , vice president of intelligence analysis at Mandiant , said the company has seen …

Microsoft , Adobe , and Google all issued security updates to their products today. The Microsoft …

A 31-year-old Canadian man has been arrested and charged with fraud in connection with numerous …

Rarely do cybercriminal gangs that deploy ransomware gain the initial access to the target …

In January 2021, technology vendor Ubiquiti Inc. [NYSE:UI] disclosed that a breach at a third party …

“If such an attack were successful, it would result in customer IP address blocks being filtered and …

All except Level 3 Communications , a major Internet backbone provider acquired by …

A visualization of the Internet made using network routing data. Image: Barrett Lyon, opte.org. …

On Friday, Nigerian police arrested Medayedupin. The investigator says formal charges will be levied …

In August, KrebsOnSecurity warned that scammers were contacting people and asking them to unleash …

To “verify the identity” of the customer, the fraudster asks for their online banking username, and …

One of the more common ways cybercriminals cash out access to bank accounts involves draining the …

In a 2020 interview, Golestan told KrebsOnSecurity that Micfo was at one point responsible for …

The CEO of a South Carolina technology firm has pleaded guilty to 20 counts of wire fraud in …

Late in the evening on Nov. 12 ET, tens of thousands of emails began flooding out from the FBI …

The Federal Bureau of Investigation (FBI) confirmed today that its fbi.gov domain name and Internet …

Most of us have probably heard the term “smishing” — which is a portmanteau for traditional ph …

Microsoft Corp. today released updates to quash at least 55 security bugs in its Windows operating …

Exhibit #1: Yaroslav Vasinskyi , the 22-year-old Ukrainian national accused of being REvil Affiliate …

The U.S. Department of Justice today announced the arrest of Ukrainian man accused of deploying …

The holiday shopping season always means big business for phishers, who tend to find increased …

Virtually all compilers — programs that transform human-readable source code into …

In December 2018, bling vendor Signet Jewelers fixed a weakness in their Kay Jewelers and Jared …

U.S. federal investigators today raided the Florida offices of PAX Technology , a Chinese provider …

The Conti ransomware affiliate program appears to have altered its business plan recently. …

On Wednesday, the St. Louis Post-Dispatch ran a story about how its staff discovered and reported a …

A recent phishing campaign targeting Coinbase users shows thieves are getting smarter about phishing …

A recent phishing campaign targeting Coinbase users shows thieves are getting cleverer about …

Firstly, Apple has released iOS 15.0.2 and iPadOS 15.0.2 to fix a zero-day vulnerability …

Microsoft today issued updates to plug more than 70 security holes in its Windows operating systems …

Several different domain registration companies today listed the domain Facebook.com as up for sale. …

Update, 7:46 p.m. ET: Facebook says its domains are slowly coming back online for most users. In a …

Facebook and its sister properties Instagram and WhatsApp are suffering from ongoing, global …

The U.S. Federal Communications Commission (FCC) is asking for feedback on new proposed rules to …

In February, KrebsOnSecurity wrote about a novel cybercrime service that helped attackers intercept …

Despite admitting to FBI agents that he ran these booter services (and turning over plenty of …

The new $30 AirTag tracking device from Apple has a feature that allows anyone who finds one of …

In October 2016, media outlets reported that data collected by some of the world’s most renowned …

As recounted in this 2018 New Yorker story , New York Times journalist Eric Lichtblau met with FBI …

In October 2016, media outlets reported that data collected by some of the world’s most renowned …

It happens all the time: Organizations get hacked because there isn’t an obvious way for security …

A jury in California today reached a guilty verdict in the trial of Matthew Gatrel , a St. Charles, …

TTEC , [ NASDAQ: TTEC ], a company used by some of the world’s largest brands to help manage …

Microsoft today pushed software updates to plug dozens of security holes in Windows and related …

While last night’s Meris attack on this site was far smaller than the recent Cloudflare DDoS, it was …

On Thursday evening, KrebsOnSecurity was the subject of a rather massive (and mercifully brief) …

Microsoft Corp. warns that attackers are exploiting a previously unknown vulnerability in Windows 10 …

In May 2015, KrebsOnSecurity briefly profiled “ The Manipulaters ,” the name chosen by a prolific …

Bill’s data also shows that this gang is so aggressively going after gift card data that it will …

Some of the most successful and lucrative online scams employ a “low-and-slow” approach — avoiding …

Over the past 15 years, a cybercrime anonymity service known as VIP72 has enabled countless …

Error: Server Error
The server encountered a temporary error and could not complete your request. …

In 2018, Andrew Schober was digitally mugged for approximately $1 million worth of bitcoin. After …

In 2018, Andrew Schober was digitally mugged for approximately $1 million worth of bitcoin. After …

Man Robbed of 16 Bitcoin Sues Young Thieves’ Parents

---

In 2018, Andrew Schober was digitally mugged …

Wanted: Disgruntled Employees to Deploy Ransomware

---

Criminal hackers will try almost anything to get …

T-Mobile: Breach Exposed SSN/DOB of 40M+ People

---

T-Mobile is warning that a data breach has exposed …

Communications giant T-Mobile said today it is investigating the extent of a breach that hackers …

T-Mobile Investigating Claims of Massive Data Breach

---

Communications giant T-Mobile said today it is …

“Worried about dirty funds in your BTC address? Come check out Antinalysis, the new address risk …

New Anti Anti-Money Laundering Services for Crooks

---

A new dark web service is marketing to …

Microsoft today released software updates to plug at least 44 security vulnerabilities in its …

Phishing Sites Targeting Scammers and Thieves

---

I was preparing to knock off work for the week on a …

Ransomware Gangs and the Name Game Distraction

---

It’s nice when ransomware gangs have their bitcoin …

The Life Cycle of a Breached Database

---

Every time there is another data breach, we are asked to …

PlugwalkJoe Does the Perp Walk

---

Joseph “PlugwalkJoe” O’Connor, in a photo from a paid press release …

Thinking of a Cybersecurity Career?
Read this.

Serial Swatter Who Caused Death Gets Five Years in Prison

---

A 18-year-old Tennessee man who helped …

Spam Kingpin Peter Levashov Gets Time Served

---

Peter Levashov, appearing via Zoom at his sentencing …

Don’t Wanna Pay Ransom Gangs? Test Your Backups.

---

Browse the comments on virtually any story about a …

Microsoft today released updates to patch at least 116 security holes in its Windows operating …

“One of the things they found out during the arrest was the people wanting to be in the gang were …

Spike in “Chain Gang” Destructive Attacks on ATMs

---

Last summer, financial institutions throughout …

Last week cybercriminals deployed ransomware to 1,500 organizations, including many that provide IT …

Michael Sanders , executive vice president of account management at Kaseya, confirmed that the …

Kaseya Left Customer Portal Vulnerable to 2015 Flaw in its Own Software

---

Last week cybercriminals …

Microsoft’s out-of-band update may not completely fix the PrinterNightmare vulnerability. Security …

Microsoft Issues Emergency Patch for Windows Flaw

---

Microsoft on Tuesday issued an emergency software …

Another 0-Day Looms for Many Western Digital Users

---

Some of Western Digital’s MyCloud-based data …

Intuit to Share Payroll Data from 1.4M Small Businesses With Equifax

---

Financial services giant …

MyBook Users Urged to Unplug Devices from Internet

---

Hard drive giant Western Digital is urging users …

The shimmers were an innovation that caused concern on multiple levels. For starters, chip-based …

How Cyber Sleuths Cracked an ATM Shimmer Gang

---

In 2015, police departments worldwide started finding …

How Cyber Safe is Your Drinking Water Supply?

---

Amid multiple recent reports of hackers breaking into …

First American Financial Pays Farcical $500K Fine

---

In May 2019, KrebsOnSecurity broke the news that …

Ukrainian Police Nab Six Tied to CLOP Ransomware

---

Authorities in Ukraine this week charged six …

How Does One Get Hired by a Top Cybercrime Gang?

---

The U.S. Department of Justice (DOJ) last week …

Microsoft Patches Six Zero-Day Security Holes

---

Microsoft today released another round of security …

Justice Dept. Claws Back $2.3M Paid by Colonial Pipeline to Ransomware Gang

---

The U.S. Department of …

This appears to be the case regardless of which Russian government site you visit. According to …

Adventures in Contacting the Russian FSB

---

KrebsOnSecurity recently had occasion to contact the …

Using Fake Reviews to Find Dangerous Extensions

---

Fake, positive reviews have infiltrated nearly …

Last week, someone began posting classified notices on LinkedIn for different design consulting jobs …

Erica Siegel was particularly excited about the possibility of working in a creative director role …

How to Tell a Job Offer from an ID Theft Trap

---

One of the oldest scams around — the fake job …

Recycle Your Phone, Sure, But Maybe Not Your Number

---

1 Comment

---

Many online services allow users to …

DarkSide, like a great many other malware strains, has a hard-coded do-not-install list of countries …

Try This One Weird Trick Russian Hackers Hate

---

In a Twitter discussion last week on ransomware …

“A few hours ago, we lost access to the public part of our infrastructure,” the message continues, …

“Hosting support, apart from information ‘at the request of law enforcement agencies,’ does not …

DarkSide Ransomware Gang Quits After Servers, Bitcoin Stash Seized

---

The DarkSide ransomware …

Microsoft today released fixes to plug at least 55 security holes in its Windows operating systems …

Like other ransomware platforms, DarkSide adheres to the current badguy best practice of double …

A Closer Look at the DarkSide Ransomware Gang

---

The FBI confirmed this week that a relatively new …

Fintech Startup Offers $500 for Payroll Passwords

---

How much is your payroll data worth? Probably a …

Investment Scammer John Davies Reinvents Himself?

---

John Bernard , a pseudonym used by a convicted …

Malicious Office 365 Apps Are the Ultimate Insiders

---

Phishers targeting Microsoft Office 365 users …

The Wages of Password Re-use: Your Money or Your Life

---

When normal computer users fall into the …

In a 81-page report delivered to the Biden administration this week, top executives from Amazon , …

Task Force Seeks to Disrupt Ransomware Payments

---

Some of the world’s top tech firms are backing a …

Advertisement
Skip to content

---

Home

---

About the Author

---

Advertising/Speaking

---

Experian API Exposed …

G o o g l e
Sorry…
We're sorry…
… but your computer or network may be sending …

The best part about this lax authentication process is that one can enter any email address to …

Experian’s Credit Freeze Security is Still a Joke

---

In 2017, KrebsOnSecurity showed how easy it is …

Note to Self: Create Non-Exhaustive List of Competitors

---

What was the best news you heard so far …