11 stories tagged krebsonsecurity, newest first.
251 points by Bender | 148 comments
KrebsOnSecurity report that federal investigators suspect a U.S. ransomware negotiation firm executive helped run the ShinyHunters group's extortion website.
69 points by speckx | 15 comments
KrebsOnSecurity report that a Jordanian teen suspected of leading ShinyHunters was detained while extorting a former Boeing business unit and is cooperating with the FBI.
369 points by air7 | 196 comments
KrebsOnSecurity blog post explaining that many ransomware strains refuse to install on Windows systems with Russian or other CIS-language virtual keyboards installed.
849 points by todsacerdoti | 457 comments
KrebsOnSecurity article reporting that code linked to DOGE employee Marko Elez matches GitHub repositories cited by an NLRB whistleblower alleging data exfiltration.
584 points by whalesalad | 216 comments
KrebsOnSecurity article on an NLRB security architect's whistleblower claim that DOGE staff exfiltrated gigabytes of sensitive case data using short-lived accounts.
365 points by todsacerdoti | 231 comments
KrebsOnSecurity article reporting that U.S. federal agents linked a $150 million cryptocurrency heist to master passwords cracked from the 2022 LastPass breach.
1519 points by mmsc | 1489 comments
KrebsOnSecurity investigation reporting that a 19-year-old on Musk's DOGE team with access to US government systems was previously part of the cybercrime community 'The Com'.
925 points by todsacerdoti | 228 comments
KrebsOnSecurity article on a MasterCard DNS server misconfiguration, a typo'd nameserver domain that went unnoticed for nearly five years until a researcher registered it.
322 points by todsacerdoti | 323 comments
KrebsOnSecurity article from December 2024 about how a single malicious click led a victim to lose a fortune, likely via phishing and account takeover.
841 points by todsacerdoti | 312 comments
KrebsOnSecurity article reporting that Experian still lets identity thieves hijack consumer accounts by simply re-registering them with a different email address.
374 points by todsacerdoti | 286 comments
KrebsOnSecurity article on Micfo CEO Amir Golestan being sentenced to five years for using shell companies to fraudulently obtain over 735,000 IP addresses from ARIN.