MalwareBytesSecurity

Partnerstroka: Large tech support scam operation features latest browser locker

Credit to Author: Jérôme Segura| Date: Thu, 13 Sep 2018 15:00:00 +0000

Tech support scammers belonging to the Partnerstroka group are once again abusing browsers, this time with a new browlock feature to reel in more victims, in one of the biggest campaigns we’ve ever tracked.

Categories:

Tags:

(Read more…)

The post Partnerstroka: Large tech support scam operation features latest browser locker appeared first on Malwarebytes Labs.

Read More
ComputerWorldIndependent

Throwback Thursday: Just one more thing to worry about

Credit to Author: Sharky| Date: Thu, 13 Sep 2018 03:00:00 -0700

This pilot fish and his wife are planning a long-overdue vacation to an all-inclusive resort — one of those places where you don’t have to worry about things like meals or tipping.

“I log onto the resort’s website in order to make some reservations ahead of our arrival,” fish says, “and am presented with the standard registration page.”

He enters his information on the page, which also asks “for security reasons” that he set up a password.

It’s not until after he has clicked “OK” that fish looks at the icon in his web browser and realizes the page isn’t encrypted. He does a quick browse of the source code for the page, and finds that there’s no SSL anywhere securing the data he’s just typed in.

To read this article in full, please click here

Read More
IndependentKrebs

U.S. Mobile Giants Want to be Your Online Identity

Credit to Author: BrianKrebs| Date: Wed, 12 Sep 2018 20:58:31 +0000

The four major U.S. wireless carriers today detailed a new initiative that may soon let Web sites eschew passwords and instead authenticate visitors by leveraging data elements unique to each customer’s phone and mobile subscriber account, such as location, customer reputation, and physical attributes of the device. Here’s a look at what’s coming, and the potential security and privacy trade-offs of trusting the carriers to handle online authentication on your behalf.

Read More