‘Starkiller’ Phishing Service Proxies Real Login Pages, MFA – Krebs on Security
Most phishing websites are little more than static copies of login pages for popular online destinations, and they are often quickly taken down by anti-abuse…
Category: Krebson
Kimwolf Botnet Swamps Anonymity Network I2P – Krebs on Security
For the past week, the massive “Internet of Things” (IoT) botnet known as Kimwolf has been disrupting The Invisible Internet Project (I2P), a decentralized, encrypted…
Patch Tuesday, February 2026 Edition – Krebs on Security
Microsoft today released updates to fix more than 50 security holes in its Windows operating systems and other software, including patches for a whopping six…
Who Operates the Badbox 2.0 Botnet? – Krebs on Security
The cybercriminals in control of Kimwolf — a disruptive botnet that has infected more than 2 million devices — recently shared a screenshot indicating they’d…
Please Don’t Feed the Scattered Lapsus ShinyHunters – Krebs on Security
A prolific data ransom gang that calls itself Scattered Lapsus ShinyHunters (SLSH) has a distinctive playbook when it seeks to extort payment from victim firms:…
Kimwolf Botnet Lurking in Corporate, Govt. Networks – Krebs on Security
A new Internet-of-Things (IoT) botnet called Kimwolf has spread to more than 2 million devices, forcing infected systems to participate in massive distributed denial-of-service (DDoS)…
Patch Tuesday, January 2026 Edition – Krebs on Security
Microsoft today issued patches to plug at least 113 security holes in its various Windows operating systems and supported software. Eight of the vulnerabilities earned…
Who Benefited from the Aisuru and Kimwolf Botnets? – Krebs on Security
Our first story of 2026 revealed how a destructive new botnet called Kimwolf has infected more than two million devices by mass-compromising a vast number…
Happy 16th Birthday, KrebsOnSecurity.com! – Krebs on Security
KrebsOnSecurity.com celebrates its 16th anniversary today! A huge “thank you” to all of our readers — newcomers, long-timers and drive-by critics alike. Your engagement this…
Most Parked Domains Now Serving Malicious Content – Krebs on Security
Direct navigation — the act of visiting a website by manually typing a domain name in a web browser — has never been riskier: A…
Microsoft Patch Tuesday, December 2025 Edition – Krebs on Security
Microsoft today pushed updates to fix at least 56 security flaws in its Windows operating systems and supported software. This final Patch Tuesday of 2025…
How Russia’s Largest Private University is Linked to a $25M Essay Mill – Krebs on Security
A sprawling academic cheating network turbocharged by Google Ads that has generated nearly $25 million in revenue has curious connections to a Kremlin-connected oligarch whose…