Arrests in Tap-to-Pay Scheme Powered by Phishing – Krebs on Security
Authorities in at least two U.S. states last week independently announced arrests of Chinese nationals accused of perpetrating a novel form of tap-to-pay fraud using…
Category: Krebson
Email Us Your Personal Data – Krebs on Security
A message posted on Monday to the homepage of the U.S. Cybersecurity & Infrastructure Security Agency (CISA) is the latest exhibit in the Trump administration’s…
How to Infect Your PC in Three Easy Steps – Krebs on Security
A clever malware deployment scheme first spotted in targeted attacks last year has now gone mainstream. In this scam, dubbed “ClickFix,” the visitor to a…
6 Zero-Days in March 2025 Patch Tuesday – Krebs on Security
Microsoft today issued more than 50 security updates for its various Windows operating systems, including fixes for a whopping six zero-day vulnerabilities that are already…
Alleged Co-Founder of Garantex Arrested in India – Krebs on Security
Authorities in India today arrested the alleged co-founder of Garantex, a cryptocurrency exchange sanctioned by the U.S. government in 2022 for facilitating tens of billions…
Feds Link $150M Cyberheist to 2022 LastPass Hacks – Krebs on Security
In September 2023, KrebsOnSecurity published findings from security researchers who concluded that a series of six-figure cyberheists across dozens of victims resulted from thieves cracking…
Who is the DOGE and X Technician Branden Spikes? – Krebs on Security
At 49, Branden Spikes isn’t just one of the oldest technologists who has been involved in Elon Musk’s Department of Government Efficiency (DOGE). As the…
Notorious Malware, Spam Host “Prospero” Moves to Kaspersky Lab – Krebs on Security
One of the most notorious providers of abuse-friendly “bulletproof” web hosting for cybercriminals has started routing its operations through networks run by the Russian antivirus…
U.S. Soldier Charged in AT&T Hack Searched “Can Hacking Be Treason” – Krebs on Security
A U.S. Army soldier who pleaded guilty last week to leaking phone records for high-ranking U.S. government officials searched online for non-extradition countries and for…
How Phished Data Turns into Apple & Google Wallets – Krebs on Security
Carding — the underground business of stealing, selling and swiping stolen payment card data — has long been the dominion of Russia-based hackers. Happily, the…
Nearly a Year Later, Mozilla is Still Promoting OneRep – Krebs on Security
In mid-March 2024, KrebsOnSecurity revealed that the founder of the personal data removal service Onerep also founded dozens of people-search companies. Shortly after that investigation…
Microsoft Patch Tuesday, February 2025 Edition – Krebs on Security
Microsoft today issued security updates to fix at least 56 vulnerabilities in its Windows operating systems and supported software, including two zero-day flaws that are…