The Coming Storm – Computer Security Articles

Phish of GoDaddy Employee Jeopardized Escrow.com, Among Others

March 31, 2020 admin 0 Comments A Little Sunshine, chris ueland, escrow.com, godaddy.com, Latest Warnings, Let's Encrypt, matt barrie, SecurityTrails, The Coming Storm

Credit to Author: BrianKrebs| Date: Wed, 01 Apr 2020 03:30:46 +0000

A spear-phishing attack this week hooked a customer service employee at GoDaddy.com, the world’s largest domain name registrar, KrebsOnSecurity has learned. The incident gave the phisher the ability to view and modify key customer records, access that was used to briefly hijack domains for a half-dozen GoDaddy customers, including transaction brokering site escrow.com.

Independent Krebs

The Web’s Bot Containment Unit Needs Your Help

March 17, 2020 admin Cisco Systems, richard perlotto, shadowserver foundation, The Coming Storm

Credit to Author: BrianKrebs| Date: Mon, 16 Mar 2020 12:55:01 +0000

Anyone who’s seen the 1984 hit movie Ghostbusters likely recalls the pivotal scene where a government bureaucrat orders the shutdown of the ghost containment unit, effectively unleashing a pent-up phantom menace on New York City. Now, something similar is in danger of happening in cyberspace: Shadowserver.org, an all-volunteer nonprofit organization that works to help Internet service providers (ISPs) identify and quarantine malware infections and botnets, has lost its longtime primary source of funding.

Independent Krebs

Live Coronavirus Map Used to Spread Malware

March 17, 2020 admin AZORult, coronavirus malware, coronavirus map, covid-19 malware, johns hopkins university, Latest Warnings, The Coming Storm

Credit to Author: BrianKrebs| Date: Thu, 12 Mar 2020 15:53:26 +0000

Cybercriminals constantly latch on to news items that captivate the public’s attention, but usually they do so by sensationalizing the topic or spreading misinformation about it. Recently, however, cybercrooks have started disseminating real-time, accurate information about global infection rates tied to the Coronavirus/COVID-19 pandemic in a bid to infect computers with malicious software.

Independent Krebs

Crafty Web Skimming Domain Spoofs “https”

March 17, 2020 admin .ps, A Little Sunshine, Akamai, cheney bros. inc., content security policy, denis sinegubko, grandwesternsteaks.com, Jerome Segura, Malwarebytes, privacy.com, publicwww, ryan barnett, subresource integrity, The Coming Storm, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Thu, 12 Mar 2020 00:28:57 +0000

Earlier today, KrebsOnSecurity alerted the 10th largest food distributor in the United States that one of its Web sites had been hacked and retrofitted with code that steals credit card and login data. While such Web site card skimming attacks are not new, this intrusion leveraged a sneaky new domain that hides quite easily in a hacked site’s source code: “http[.]ps” (the actual malicious domain does not include the brackets, which are there to keep readers from being able to click on it).

Independent Krebs

FCC Proposes to Fine Wireless Carriers $200M for Selling Customer Location Data

February 28, 2020 admin FCC, Federal Communications Commission, Georgetown Law Institute for Technology Law and Policy, Gigi Sohn, Joseph Cox, New York Times, Securus Technologies, Sen. Ron Wyden, The Coming Storm, vice.com, Wall Street Journal

Credit to Author: BrianKrebs| Date: Fri, 28 Feb 2020 22:12:10 +0000

The U.S. Federal Communications Commission (FCC) today proposed fines of more than $200 million against the nation’s four largest wireless carriers for selling access to their customers’ location information without taking adequate precautions to prevent unauthorized access to that data. While the fines would be among the largest the FCC has ever levied, critics say the penalties don’t go far enough to deter wireless carriers from continuing to sell customer location data.

Independent Krebs

Zyxel Fixes 0day in Network Storage Devices

February 24, 2020 admin 0day, 500mhz, alex holden, cert coordination center, cert-cc, cve-2020-9054, DHS, emotet, Hold Security, Latest Warnings, ransomware, The Coming Storm, Time to Patch, Zero-Day, zyxel communications corp.

Credit to Author: BrianKrebs| Date: Mon, 24 Feb 2020 17:13:11 +0000

Networking hardware vendor Zyxel today released an update to fix a critical flaw in many of its network attached storage (NAS) devices that can be used to remotely commandeer them. The patch comes 12 days after KrebsOnSecurity alerted the company that precise instructions for exploiting the vulnerability were being sold for $20,000 in the cybercrime underground. Based in Taiwan, Zyxel Communications Corp. (a.k.a “ZyXEL”) is a maker of networking devices, including Wi-Fi routers, NAS products and hardware firewalls. The company has roughly 1,500 employees and boasts some 100 million devices deployed worldwide. While in many respects the class of vulnerability addressed in this story is depressingly common among Internet of Things (IoT) devices, the flaw is notable because it has attracted the interest of groups specializing in deploying ransomware at scale.

Independent Krebs

Encoding Stolen Credit Card Data on Barcodes

February 18, 2020 admin A Little Sunshine, The Coming Storm, U.S. Secret Service

Credit to Author: BrianKrebs| Date: Tue, 18 Feb 2020 18:00:29 +0000

Crooks are constantly dreaming up new ways to use and conceal stolen credit card data. According to the U.S. Secret Service, the latest scheme involves stolen card information embedded in barcodes affixed to phony money network rewards cards. The scammers then pay for merchandise by instructing a cashier to scan the barcode and enter the expiration date and card security code.

← Previous