Credit to Author: BrianKrebs| Date: Mon, 09 Oct 2023 20:39:43 +0000
Recent weeks have seen a sizable uptick in the number of phishing scams targeting U.S. Postal Service (USPS) customers. Here’s a look at an extensive SMS phishing operation that tries to steal personal and financial data by spoofing the USPS, as well as postal services in at least a dozen other countries worldwide.
Read moreCategories: Threat Intelligence Tags: malvertising Tags: google Tags: usps Tags: phishing Next time you need to track a package, be aware that malicious ads could be leading you to sites that steal your banking information. |
The post Malicious ad for USPS fishes for banking credentials appeared first on Malwarebytes Labs.
Read more
Credit to Author: BrianKrebs| Date: Tue, 02 May 2023 22:08:35 +0000
A sprawling online company based in Georgia that has made tens of millions of dollars purporting to sell access to jobs at the United States Postal Service (USPS) has exposed its internal IT operations and database of nearly 900,000 customers. The leaked records indicate the network’s chief technology officer in Pakistan has been hacked for the past year, and that the entire operation was created by the principals of a Tennessee-based telemarketing firm that has promoted USPS employment websites since 2016.
Read moreCredit to Author: Malwarebytes Labs| Date: Mon, 18 Apr 2022 11:27:24 +0000
The most important and interesting stories in security from the last 7 days
The post A week in security (April 11 – 17) appeared first on Malwarebytes Labs.
Read moreCredit to Author: Christopher Boyd| Date: Tue, 12 Apr 2022 10:37:35 +0000
We look at an SMS which claims you have a USPS redelivery needing to be rescheduled, and explain why it’s not what it seems.
The post USPS “Your package could not be delivered” text is a smishing scam appeared first on Malwarebytes Labs.
Read more
Credit to Author: BrianKrebs| Date: Thu, 08 Nov 2018 07:28:45 +0000
A year ago, KrebsOnSecurity warned that “Informed Delivery,” a new offering from the U.S. Postal Service (USPS) that lets residents view scanned images of all incoming mail, was likely to be abused by identity thieves and other fraudsters unless the USPS beefed up security around the program and made it easier for people to opt out. This week, the U.S. Secret Service issued an internal alert warning that many of its field offices have reported crooks are indeed using Informed Delivery to commit various identity theft and credit card fraud schemes.
Read more
Credit to Author: BrianKrebs| Date: Mon, 26 Feb 2018 19:28:41 +0000
In October 2017, KrebsOnSecurity warned that ne’er-do-wells could take advantage of a relatively new service offered by the U.S. Postal Service that provides scanned images of all incoming mail before it is slated to arrive at its destination address. We advised that stalkers or scammers could abuse this service by signing up as anyone in the household, because the USPS wasn’t at that point set up to use its own unique communication system — the U.S. mail — to alert residents when someone had signed up to receive these scanned images. The USPS recently told this publication that beginning Feb. 16 it started alerting all households by mail whenever anyone signs up to receive these scanned notifications of mail delivered to that address. The notification program, dubbed “Informed Delivery,” includes a scan of the front and back of each envelope or package destined for a specific address.
Read more
Credit to Author: BrianKrebs| Date: Mon, 02 Oct 2017 16:32:33 +0000
A free new service from the U.S. Postal Service that provides scanned images of incoming mail days before it is slated to arrive at its destination address is raising eyebrows among security experts who worry about the service’s potential for misuse by private investigators, identity thieves, stalkers or abusive ex-partners. The USPS says it hopes to have changes in place by early next year that could help blunt some of those concerns.
Read more