Author: admin

IndependentKrebs

Crafty Web Skimming Domain Spoofs “https”

Credit to Author: BrianKrebs| Date: Thu, 12 Mar 2020 00:28:57 +0000

Earlier today, KrebsOnSecurity alerted the 10th largest food distributor in the United States that one of its Web sites had been hacked and retrofitted with code that steals credit card and login data. While such Web site card skimming attacks are not new, this intrusion leveraged a sneaky new domain that hides quite easily in a hacked site’s source code: “http[.]ps” (the actual malicious domain does not include the brackets, which are there to keep readers from being able to click on it).

Read More
MalwareBytesSecurity

The effects of climate change on cybersecurity

Credit to Author: Pieter Arntz| Date: Fri, 13 Mar 2020 18:55:13 +0000

We explore the relationship between climate change and cybersecurity, two of the major issues of our time. Does cybersecurity actually contribute to global warming? Or can climate change illicit an uptick in cybercrime? We take a look.

Categories:

Tags:

(Read more…)

The post The effects of climate change on cybersecurity appeared first on Malwarebytes Labs.

Read More
MalwareBytesSecurity

Coronavirus impacts security conferences and events: check your schedule

Credit to Author: Christopher Boyd| Date: Thu, 12 Mar 2020 18:02:04 +0000

We look at upcoming cancellations, postponements, and moves to virtual for security conferences in the wake of the coronavirus pandemic.

Categories:

Tags:

(Read more…)

The post Coronavirus impacts security conferences and events: check your schedule appeared first on Malwarebytes Labs.

Read More
MalwareBytesSecurity

RemoteSec: achieving on-prem security levels with cloud-based remote teams

Credit to Author: Dan Macharia| Date: Thu, 12 Mar 2020 16:53:43 +0000

Times are quickly changing and many teams are scrambling to embrace a shift to remote work. How will security protocols change? Time to move from on-prem to RemoteSec.

Categories:

Tags:

(Read more…)

The post RemoteSec: achieving on-prem security levels with cloud-based remote teams appeared first on Malwarebytes Labs.

Read More
IndependentKrebs

FBI Arrests Alleged Owner of Deer.io, a Top Broker of Stolen Accounts

Credit to Author: BrianKrebs| Date: Tue, 10 Mar 2020 14:17:42 +0000

FBI officials last week arrested a Russian computer security researcher on suspicion of operating deer.io, a vast marketplace for buying and selling stolen account credentials for thousands of popular online services and stores. Kirill V. Firsov was arrested Mar. 7 after arriving at New York’s John F. Kennedy Airport, according to court documents unsealed Monday. Prosecutors with the U.S. District Court for the Southern District of California allege Firsov was the administrator of deer.io, an online platform that hosted more than 24,000 shops for selling stolen and/or hacked usernames and passwords for a variety of top online destinations.

Read More
MalwareBytesSecurity

Securing the MSP: best practices for vetting cybersecurity vendors

Credit to Author: William Tsing| Date: Wed, 11 Mar 2020 15:44:33 +0000

How do you spot the unicorn cybersecurity vendors amongst the bad apples? We show MSPs the ins and outs of vendor vetting.

Categories:

Tags:

(Read more…)

The post Securing the MSP: best practices for vetting cybersecurity vendors appeared first on Malwarebytes Labs.

Read More
IndependentKrebs

U.S. Govt. Makes it Harder to Get .Gov Domains

Credit to Author: BrianKrebs| Date: Sat, 07 Mar 2020 15:01:21 +0000

The federal agency in charge of issuing .gov domain names is enacting new requirements for validating the identity of people requesting them. The additional measures come less than four months after KrebsOnSecurity published research suggesting it was relatively easy for just about anyone to get their very own .gov domain. In November’s piece It’s Way Too Easy to Get a .gov Domain Name, an anonymous source detailed how he obtained one by impersonating an official at a small town in Rhode Island that didn’t already have its own .gov.

Read More