help

WebAssembly opens up new possibilities for browser fingerprinting: code execution characteristics can be used to analyze the underlying hardware environment and detect VMs, VPSs, and server hardware. Let’s explore how JavaScript + WASM work together to create a fingerprint, how this technology...

Cybercriminals also accidentally left in the public domain more than 184 thousand stolen payment card data. Over the past three years, the Keeper cybercrime group has carried out about 570 hacking e-commerce...

Diebold Nixdorf experts have warned of a new variation of the black box attacks on ATMs, which began to be used by attackers in Belgium. Black box attacks are a form of jackpotting attacks in which cybercriminals literally force an ATM to spit out money. Such an attack can be carried out using...

A previously harmless Linux botnet has been updated to include a suite of malicious and exploitative components. The unimaginatively named "P2PInfect" is a worm that leverages the Redis in-memory database application to spread across networks in a peer-to-peer, worm-like manner, creating a...

A number of cybercriminal innovations are making it easier for scammers to cash in on your upcoming travel plans. This story examines a recent spear-phishing campaign that ensued when a California hotel had its booking.com credentials stolen. We’ll also explore an array of cybercrime services...

A new malicious package called SteelFox mines for cryptocurrency and steals credit card data by using the “bring your own vulnerable driver” technique to get SYSTEM privileges on Windows machines. The malware bundle dropper is distributed through forums and torrent trackers as a crack tool that...

The business contact information for 122 million people circulating since February 2024 is now confirmed to have been stolen from a B2B demand generation platform. The data comes from DemandScience (formerly Pure Incubation), a B2B demand generation company that aggregates data. Data aggregation...

Albanian law enforcement has seized the Rydox cybercrime marketplace and arrested three administrators in collaboration with international partners. Kosovo nationals Ardit Kutleshi, Jetmir Kutleshi, and Shpend Sokoli were arrested on Thursday by Kosovo law enforcement and Albania's Special...

In January 2022, KrebsOnSecurity identified a Russian man named Mikhail Matveev as “Wazawaka,” a cybercriminal who was deeply involved in the formation and operation of multiple ransomware groups. The U.S. government indicted Matveev as a top ransomware purveyor a year later, offering $10...

Researchers at cybersecurity company ESET have identified malware masquerading as cryptocurrency trading applications and distributed among macOS users. twitter.com Attackers copied the interface of the...

Europol announced the dismantling of the Manson Market and the arrest of two of its leaders. During a joint operation involving law enforcement from 6 countries, more than 50 servers used by the marketplace, as well as associated fake online stores involved in phishing campaigns, were seized...

A global law enforcement operation targeting the Phobos ransomware gang has led to the arrest of four suspected hackers in Phuket, Thailand, and the seizure of 8Base’s dark web sites. The suspects are accused of conducting cyberattacks on over 1,000 victims worldwide. The arrested individuals...

Carding — the underground business of stealing, selling and swiping stolen payment card data — has long been the dominion of Russia-based hackers. Happily, the broad deployment of more secure chip-based payment cards in the United States has weakened the carding market. But a flurry of...

A new variant of the Vo1d malware botnet has grown to 1,590,299 infected Android TV devices across 226 countries, recruiting devices as part of anonymous proxy server networks. This is according to an investigation by Xlab, which has been tracking the new campaign since last November, reporting...

An active campaign from a threat actor potentially linked to Russia is targeting Microsoft 365 accounts of individuals at organizations of interest using device code phishing. The targets are in the government, NGO, IT services and technology, defense, telecommunications, health, and energy/oil...

A hacker claims to have stolen thousands of internal documents with user records and employee data after breaching the systems of Orange Group, a leading French telecommunications operator and digital service provider. The threat actor published on a hacker forum details about the stolen data...

The man operated under the aliases ALTDOS, DESORDEN, GHOSTR, and 0mid16B, and had been one of the most active cybercriminals in the Asia-Pacific region since 2021. According to Group-IB, the attacks resulted in the leak of over 90 databases containing 13 terabytes of confidential information...

Indian authorities arrested Aleksej Besciokov, the co-founder and one of the administrators of the Russian Garantex crypto-exchange while vacationing with his family in Varkala, India. As infosec journalist Brian Krebs first reported on Tuesday, the 46-year-old Lithuanian national and Russian...

According to Telegram Info, the messaging app Telegram will soon be able to block the accounts of violators. During the imposition of restrictions, users will be able to log into their accounts but will not be able to send messages or perform other actions within the service. In the source code...

An invisible web of nodes has ensnared thousands of devices worldwide... Since July 2024, cybercriminals have been conducting an active phishing campaign targeting users in Poland and Germany. The attacks are organized by a financially motivated group that uses malware such as Agent Tesla...