2fa – Computer Security Articles

Has two-factor authentication been defeated? A spotlight on 2FA’s latest challenge

January 21, 2019 admin 0 Comments 2fa, 2FA modlishka, Amnesty International, CERTFA, cybercrime, defeat 2FA, mantis, modlishka, password manager, PGP, Social engineering, the return of charming kitten, totp, two-factor authentication

Credit to Author: Malwarebytes Labs| Date: Mon, 21 Jan 2019 16:15:30 +0000

While many tech-savvy folks are familiar with two-factor authentication (2FA), more are unaware that there are several ways around it. A tactic called Modlishka, the English pronunciation for the Polish word for “mantis,” is the latest in this list.

Categories:

Tags: 2fa 2FA modlishka Amnesty International CERTFA defeat 2FA mantis modlishka password manager PGP Social Engineering the return of charming kitten totp two-factor authentication

MalwareBytes Security

A week in security (January 7 – 13)

January 14, 2019 admin 2fa, Android, Ars Technica, Bloomberg, Data Security, Deletion, Facebook, Hacker One, hackers, Help Net Security, Naked Security, PA Daily post, Password reuse, passwords, pentest, ransom, ransomware, rogue apps, ryuk, Ryuk Ransomware, Security world, Trend Micro, USA Today, Vietnam, Vietnam News, Week in security

Credit to Author: Malwarebytes Labs| Date: Mon, 14 Jan 2019 16:45:37 +0000

A roundup of last week’s security news from January 7 to 13, including breaches, takedowns, bug fixes, and social media issues.

Categories:

Tags: 2fa Android Ars Technica Bloomberg data security Deletion facebook Hacker One hackers Help Net Security Naked Security PA Daily post Password reuse passwords pentest ransom ransomware rogue apps ryuk Ryuk ransomware Trend Micro USA Today Vietnam Vietnam News

(Read more…)

The post A week in security (January 7 – 13) appeared first on Malwarebytes Labs.

MalwareBytes Security

Australia’s Early Warning Network compromised

January 7, 2019 admin 2fa, compromise, cybercrime, danger, early warning network, early warning system, email, login, Pagasa, Phivolcs, phonemail, privacy, sms, two-factor authentication, Weather

Credit to Author: Christopher Boyd| Date: Mon, 07 Jan 2019 17:59:03 +0000

An Australian Early Warning System notifying subscribers of severe weather alerts was compromised over the weekend, with messages sent across a variety of formats. What did the hackers get up to? And why did they do it?

Categories:

Tags: 2fa compromise danger early warning network early warning system email login PAGASA PHIVOLCS phonemail sms two-factor authentication weather

(Read more…)

The post Australia’s Early Warning Network compromised appeared first on Malwarebytes Labs.

MalwareBytes Security

Humble Bundle alerts customers to subscription reveal bug

December 4, 2018 admin 2-Step Verification, 2fa, breach, bug, cybercrime, games, Gaming, humble bundle, phish, phishing, Social engineering, spear phishing, two-factor authentication, video games

Credit to Author: Christopher Boyd| Date: Tue, 04 Dec 2018 17:20:27 +0000

Humble Bundle is sending emails to subscribers due to information being revealed by a bug. How bad it is? We take a look.

Categories:

Tags: 2-Step Verification 2fa breach bug games gaming humble bundle phish phishing spear phishing two-factor authentication video games

Kaspersky Security

Why you should never reuse passwords

December 4, 2018 admin 2fa, password manager, passwords, Story, Tips, two-factor authentication

Credit to Author: Alex Perekalin| Date: Tue, 04 Dec 2018 08:42:34 +0000

Designer Mark used the same password for all of his accounts — and lived to regret it. Here’s his story.

MalwareBytes Security

Business email compromise scam costs Pathé $21.5 million

November 19, 2018 admin 2fa, authentication, bec, Business Email Compromise, CEO, CFO, cybercrime, mfa, pathe, phish, SCAM, Social engineering, two-factor authentication

Credit to Author: Christopher Boyd| Date: Mon, 19 Nov 2018 16:00:23 +0000

Recently released court documents show European-based cinema chain Pathé lost a small fortune to a business email compromise (BEC) scam in March 2018. The attack cost the company $21.5 million—that’s 10 percent of its total earnings. Learn how to avoid BEC scams and keep your company in the black.

Categories:

Tags: 2fa authentication bec Business Email Compromise CEO CFO mfa pathe phish scam two-factor authentication

Kaspersky Security

SMS-based two-factor authentication is not safe — consider these alternative 2FA methods instead

October 16, 2018 admin 2fa, authenticators, privacy, Tips, two-factor authentication, U2F

Credit to Author: Alex Drozhzhin| Date: Tue, 16 Oct 2018 13:50:18 +0000

Why SMS isn’t the best choice for two-factor authentication, and what alternative types of 2FA you should consider.

MalwareBytes Security

A week in security (September 10 – 16)

September 17, 2018 admin 2fa, a week in security, Android, android browser, banking Trojan, banking trojans, botnets, hmrc phish, microsoft, omnichannel fraud, phishing, portable router, Project Verify, ram nit, Ramnit Trojan, ransomware, recap, recon malware, Scammer, security of portable router, Security world, tech support scam, tech support scams, Tor, Trojan, two-factor authentication, Week in security, weekly blog roundup

Credit to Author: Malwarebytes Labs| Date: Mon, 17 Sep 2018 15:56:14 +0000

A roundup of the security news from September 10–16, including omnichannel fraud, ways to get back at scammers, the security of 2FA, and partnerstrokas.

Categories:

Tags: 2fa a week in security Android android browser banking Trojan banking Trojans botnets hmrc phish microsoft omnichannel fraud phishing portable router project verify ram nit Ramnit Trojan ransomware recap recon malware scammer security of portable router tech support scam tech support scams tor trojan two-factor authentication weekly blog roundup