Credit to Author: BrianKrebs| Date: Wed, 29 Jan 2020 19:02:56 +0000
Fresh on the heels of a disclosure that Microsoft Corp. leaked internal customer support data to the Internet, mobile provider Sprint has addressed a mix-up in which posts to a private customer support community were exposed to the Web.
Read moreCredit to Author: Jovi Umawing| Date: Tue, 03 Sep 2019 15:26:01 +0000
 | |
| TrickBot’s latest feature allows it to tamper with the web sessions of users from Verizon, T-Mobile, and Sprint mobile carriers. Categories: Tags: 2faaccount takeover fraudATOAuthyC&CDell Secureworksdynamic webinjectdyrezaemotetEternal RomanceEternalBlueEternalChampionGold BlackburnGoogle Authenticatorhasherezadepoint-of-saleport-out fraudPOSSIM hijackingSIM swappingSprintT-MobilethetricktrickbottrickloadertricksterTrojan.TrickBottwo-factor authenticationVerizon Wireless |
The post TrickBot adds new trick to its arsenal: tampering with trusted texts appeared first on Malwarebytes Labs.
Read moreCredit to Author: David Ruiz| Date: Wed, 05 Jun 2019 15:00:00 +0000
 | |
| Unlike a data privacy proposal in the US and a new data privacy law in California, the Maine data privacy bill aimed at Internet Service Providers (ISPs) explicitly shuts down any pay-for-privacy schemes. Categories: Tags: ACLU of MaineAT&TcomcastData privacydata privacy lawsdata privacy legislationfacebookGoogleGWIinternet service providerISPL.D. 946LD 946MaineMaine State Chamber of Commercepay-for-privacyRon WydenSenator Ron WydenSpectrumSprintT-MobileVerizonWyden |
The post Maine inches closer to shutting down ISP pay-for-privacy schemes appeared first on Malwarebytes Labs.
Read moreCredit to Author: Malwarebytes Labs| Date: Mon, 11 Feb 2019 17:05:33 +0000
 | |
| A roundup of security news from February 4 – 8, including Facebook’s secure messaging integration, Google’s changes to URLs, a scam involving the Kindle store and John Wick, and more. Categories: Tags: amazonAppleAT&TAustraliabitcoinbounty hunterscryptocurrencycryptographycybersecurityDo Not TrackebooksfacebookGoogleInstagraminternetJeff BezosJohn wickkindlemessengersafarisecure messagingSprintT-MobileURLswhatsappZcashzero day |
The post A week in security (February 4 – 8) appeared first on Malwarebytes Labs.
Read moreCredit to Author: BrianKrebs| Date: Wed, 12 Sep 2018 20:58:31 +0000
The four major U.S. wireless carriers today detailed a new initiative that may soon let Web sites eschew passwords and instead authenticate visitors by leveraging data elements unique to each customer’s phone and mobile subscriber account, such as location, customer reputation, and physical attributes of the device. Here’s a look at what’s coming, and the potential security and privacy trade-offs of trusting the carriers to handle online authentication on your behalf.
Read more
Credit to Author: BrianKrebs| Date: Thu, 16 Aug 2018 17:01:36 +0000
An entrepreneur and virtual currency investor is suing AT&T for $224 million, claiming the wireless provider was negligent when it failed to prevent thieves from hijacking his mobile account and stealing millions of dollars in cryptocurrencies. Increasingly frequent, high-profile attacks like these are prompting some experts to say the surest way to safeguard one’s online accounts may be to disconnect them from the mobile providers entirely.
Read more
Credit to Author: BrianKrebs| Date: Fri, 22 Jun 2018 20:30:13 +0000
The U.S. Supreme Court today ruled that the government needs to obtain a court-ordered warrant to gather location data on mobile device users. The decision is a major development for privacy rights, but experts say it may have limited bearing on the selling of real-time customer location data by the wireless carriers to third-party companies.
Read more
Credit to Author: BrianKrebs| Date: Tue, 19 Jun 2018 18:03:44 +0000
In the wake of a scandal involving third-party companies leaking or selling precise, real-time location data on virtually all Americans who own a mobile phone, the four major wireless carriers have responded to requests from a U.S. senator for more details about how the carriers are managing access to this extremely sensitive information. While three out of four providers said they had cancelled data sharing agreements with some of the offending companies, only one — Verizon — pledged to terminate all of them and initiate a wholesale review of their location data-sharing practices.
Read more