Search results

Tor is one of the most widely used and powerful technologies for online anonymity. It lets users hide their identity and location, providing privacy and protecting data. However, like any system, Tor has vulnerabilities that can be exploited to undermine user anonymity. This article outlines...

Still trusting random forum “experts”? Or willing to put your security in someone’s hands just because they have a "moderator" or "arbiter" badge? Maybe in the next webinar I should explain how one well-known "authority figure" completely set up a cash-out operator and handed him over this...

A honeypot is usually software, a server or a website designed as a lure for a specific group or individual in order to capture their traffic, personal data, messages, files, logs and other materials that can be used for deanonymization or as evidence of illicit activity. Honeypots also exist...

A fake VPN in this scheme doesn’t work as a way to bypass censorship; it’s a trap for people trying to hide from surveillance. Analysts at Insikt Group, the research arm of Recorded Future, identified new infrastructure used by the TAG-182 group to distribute the spyware tool MarkiRAT to...

In this lesson we’ll examine how user identification is performed via DNS servers. What many overlook or ignore is actually a powerful means of identification and deanonymization. We’ll provide real-world examples and review techniques for correctly configuring DNS within a system.

The myth of absolute anonymity in the darknet is stubborn. It's sustained by the marketing of marketplace platforms, fragmentary guides and the confidence that Tor by itself solves all problems. In practice, however, most deanonimizatons happen not because Tor was hacked, but because of systemic...

WebAssembly opens up new possibilities for browser fingerprinting: code execution characteristics can be used to analyze the underlying hardware environment and detect VMs, VPSs, and server hardware. Let’s explore how JavaScript + WASM work together to create a fingerprint, how this technology...

Why It Matters Stock Android is a product of a company that makes money from your data. Every 4.5 minutes, a phone sends data to Google’s servers even without active use - this is a documented finding from a Trinity College Dublin study. A custom ROM removes this layer completely. A cheap phone...

I want to examine a messenger that few people know about, even though its architecture offers a level of anonymity unattainable by most popular apps - including those commonly considered "secure". The problem even good messengers don’t solve Signal encrypts the contents of messages end to...

Are you sure you know how Canvas Fingerprinting actually works? Most users — and even developers of anti-detect browsers — tend to look at Canvas the same way: generate a hash, spoof it, check it on BrowserLeaks, and if the fingerprint changes, assume everything works. But the reality of...

Cybercriminals also accidentally left in the public domain more than 184 thousand stolen payment card data. Over the past three years, the Keeper cybercrime group has carried out about 570 hacking e-commerce...

Diebold Nixdorf experts have warned of a new variation of the black box attacks on ATMs, which began to be used by attackers in Belgium. Black box attacks are a form of jackpotting attacks in which cybercriminals literally force an ATM to spit out money. Such an attack can be carried out using...

A previously harmless Linux botnet has been updated to include a suite of malicious and exploitative components. The unimaginatively named "P2PInfect" is a worm that leverages the Redis in-memory database application to spread across networks in a peer-to-peer, worm-like manner, creating a...

The U.S. Department of Justice has officially charged two individuals, whom investigators refer to as administrators of the WWH forum. They are Kazakhstan citizen Alexander Khodyrev and Russian Pavel Kublitsky. "They are charged with conspiracy to commit fraud using access devices and...

Even if you disable the activity tracking function in the web and applications in the settings, Google still monitors activity. Google captures user interactions with applications, even if they set their...

A number of cybercriminal innovations are making it easier for scammers to cash in on your upcoming travel plans. This story examines a recent spear-phishing campaign that ensued when a California hotel had its booking.com credentials stolen. We’ll also explore an array of cybercrime services...

A new malicious package called SteelFox mines for cryptocurrency and steals credit card data by using the “bring your own vulnerable driver” technique to get SYSTEM privileges on Windows machines. The malware bundle dropper is distributed through forums and torrent trackers as a crack tool that...

The business contact information for 122 million people circulating since February 2024 is now confirmed to have been stolen from a B2B demand generation platform. The data comes from DemandScience (formerly Pure Incubation), a B2B demand generation company that aggregates data. Data aggregation...

Albanian law enforcement has seized the Rydox cybercrime marketplace and arrested three administrators in collaboration with international partners. Kosovo nationals Ardit Kutleshi, Jetmir Kutleshi, and Shpend Sokoli were arrested on Thursday by Kosovo law enforcement and Albania's Special...

In January 2022, KrebsOnSecurity identified a Russian man named Mikhail Matveev as “Wazawaka,” a cybercriminal who was deeply involved in the formation and operation of multiple ransomware groups. The U.S. government indicted Matveev as a top ransomware purveyor a year later, offering $10...