Breadcrumbs – PossibleThreat Articles

Canadian Man Arrested in Snowflake Data Extortions

November 5, 2024 0 Comments A Little Sunshine, advance auto parts, alexander antonin moucka, at&t breach, atomwaffen division, bharat sanchar nigam ltd, Breadcrumbs, connor riley moucka, court, intelsecrets, irdev, john erin binns, judische, kiberphant0m, leak society, lending tree, mandiant, Ne'er-Do-Well News, rapelash, Satori, SIM swapping, snowflake, Ticketmaster, unc5537, verizon, waifu

Credit to Author: BrianKrebs| Date: Tue, 05 Nov 2024 17:10:04 +0000

A 26-year-old man in Ontario, Canada has been arrested for allegedly stealing data from and extorting more than 160 companies that used the cloud data service Snowflake. On October 30, Canadian authorities arrested Alexander Moucka, a.k.a. Connor Riley Moucka of Kitchener, Ontario, on a provisional arrest warrant from the United States. Bloomberg first reported Moucka’s alleged ties to the Snowflake hacks on Monday. At the end of 2023, malicious hackers learned that many large companies had uploaded huge volumes of sensitive customer data to Snowflake accounts that were protected with little more than a username and password (no multi-factor authentication required). After scouring darknet markets for stolen Snowflake account credentials, the hackers began raiding the data storage repositories used by some of the world’s largest corporations.

Independent Krebs Security

Lamborghini Carjackers Lured by $243M Cyberheist

October 9, 2024 0 Comments A Little Sunshine, angel "chi chi" borrero, anydesk, Breadcrumbs, gemini, jeandiel "box" serrano, malone "greavys" lam, Ne'er-Do-Well News, pantic, reynaldo "rey" diaz, SIM swapping, swag, the com, veer chetal, Web Fraud 2.0, wiz, zachxbt

Credit to Author: BrianKrebs| Date: Wed, 09 Oct 2024 17:36:27 +0000

The parents of a 19-year-old Connecticut honors student accused of taking part in a $243 million cryptocurrency heist in August were carjacked a week later, while out house-hunting in a brand new Lamborghini. Prosecutors say the couple was beaten and briefly kidnapped by six young men who traveled from Florida as part of a botched plan to hold the parents for ransom.

Independent Krebs Security

Timeshare Owner? The Mexican Drug Cartels Want You

September 25, 2024 0 Comments A Little Sunshine, Breadcrumbs, constella intelligence, datasur host, escshieldsecurity network, jalisco drug cartel, Latest Warnings, Ne'er-Do-Well News, telemarketing scams, timeshare scams

Credit to Author: BrianKrebs| Date: Wed, 25 Sep 2024 16:26:12 +0000

The FBI is warning timeshare owners to be wary of a prevalent telemarketing scam involving a violent Mexican drug cartel that tries to trick elderly people into believing someone wants to buy their property. This is the story of a couple who recently lost more than $50,000 to an ongoing timeshare scam that spans at least two dozen phony escrow, title and realty firms.

Independent Krebs Security

Scam ‘Funeral Streaming’ Groups Thrive on Facebook

September 18, 2024 0 Comments 148.251.54.196, A Little Sunshine, apkdownloadweb, Breadcrumbs, constella intelligence, domaintools, facebook funeral scams, Latest Warnings, mohammod abdullah khondokar, mohammod mehedi hasan, Web Fraud 2.0, webhostbd

Credit to Author: BrianKrebs| Date: Wed, 18 Sep 2024 13:43:51 +0000

Scammers are flooding Facebook with groups that purport to offer video streaming of funeral services for the recently deceased. Friends and family who follow the links for the streaming services are then asked to cough up their credit card information. Recently, these scammers have branched out into offering fake streaming services for nearly any kind of event advertised on Facebook. Here’s a closer look at the size of this scheme, and some findings about who may be responsible.

Independent Krebs Security

The Dark Nexus Between Harm Groups and ‘The Com’

September 13, 2024 0 Comments 2992, 303, 404, 545, 555, 6996, 7997, 8884, advance auto parts, ali winston, alphv, aspertaine, AT&T, beige group, black cat, bloomberg, breachforums, Breadcrumbs, chumlul, court, CrowdStrike, cultist, cvlt, der spiegel, discord, doxbin, ea games, h3ll, harm nation, james thomas andrew mccarty, judische, kalana limkin, kaskar, kayte, kingbob, kt, kya christian nelson, leak society, lending tree, mandiant, mark rasch, mgm resorts, Microsoft, minecraft, Ne'er-Do-Well News, neiman marcus, nicholas "convict" ceraolo, nmk, noah michael urban, NVIDIA, okta, owen david flowers, pompompurin, rcmp, recorder, roblox, royal canadian mounted police, sagar "weep" singh, Samsung, santander bank, scattered spider, SIM swapping, slit town, snowflake, sosa, star chat, steam, SWATting, T-Mobile, telegram, the com, the washington post, Ticketmaster, twitch, u.s. department of justice, u.s. drug enforcement agency, unc5537, unit 221b, vile, violence-as-a-service, vsphere, waifu, Web Fraud 2.0, wired

Credit to Author: BrianKrebs| Date: Fri, 13 Sep 2024 12:16:45 +0000

A cyberattack that shut down some of the top casinos in Las Vegas last year quickly became one of the most riveting security stories of 2023: It was the first known case of native English-speaking hackers in the United States and Britain teaming up with ransomware gangs based in Russia. But that made-for-Hollywood narrative has eclipsed a far more hideous trend: Many of these young, Western cybercriminals are also members of fast-growing online groups that exist solely to bully, stalk, harass and extort vulnerable teens into physically harming themselves and others.

Independent Krebs Security

When Get-Out-The-Vote Efforts Look Like Phishing

September 12, 2024 0 Comments A Little Sunshine, all-vote.com, Breadcrumbs, debra cleaver, domaintools.com, movement labs, vote america, votewin.org, wdiv, yoni landau

Credit to Author: BrianKrebs| Date: Wed, 28 Aug 2024 23:55:17 +0000

Multiple media reports this week warned Americans to be on guard against a new phishing scam that arrives in a text message informing recipients they are not yet registered to vote. A bit of digging reveals the missives were sent by a California political consulting firm as part of a well-meaning but potentially counterproductive get-out-the-vote effort that had all the hallmarks of a phishing campaign.

Independent Krebs Security

National Public Data Published Its Own Passwords

August 19, 2024 0 Comments A Little Sunshine, atlas data privacy corp., Breadcrumbs, creationnext, Data Breaches, national public data breach, npd.pentester.com, npdbreach.com, salvatore verini, The Coming Storm, usinfosearch.com

Credit to Author: BrianKrebs| Date: Mon, 19 Aug 2024 16:23:31 +0000

New details are emerging about a breach at National Public Data (NPD), a consumer data broker that recently spilled hundreds of millions of Americans’ Social Security Numbers, addresses, and phone numbers online. KrebsOnSecurity has learned that another NPD data broker which shares access to the same consumer records inadvertently published the passwords to its back-end database in a file that was freely available for download from its homepage until today.

Independent Krebs Security

The Not-So-Secret Network Access Broker x999xx

July 3, 2024 0 Comments Breadcrumbs, cobalt strike, cobaltforce, constella intelligence, dashin2008@yahoo.com, flashpoint, intel 471, kirtsov@telecom.ozersk.ru, lockbit, maksim georgievich kirtsov, maksya@icloud.com, maxnmalias-1@yahoo.com, mikhail matveev, Ne'er-Do-Well News, operation endgame, osint.industries, ozersk technological institute national research nuclear university, recorded future, u.s. department of justice, wazawaka, x999xx, Кирцов Максим Георгиевич

Credit to Author: BrianKrebs| Date: Wed, 03 Jul 2024 16:41:34 +0000

Most accomplished cybercriminals go out of their way to separate their real names from their hacker handles. But among certain old-school Russian hackers it is not uncommon to find major players who have done little to prevent people from figuring out who they are in real life. A case study in this phenomenon is “x999xx,” the nickname chosen by a venerated Russian hacker who specializes in providing the initial network access to various ransomware groups.

Independent Krebs Security

KrebsOnSecurity Threatened with Defamation Lawsuit Over Fake Radaris CEO

June 20, 2024 0 Comments 617-794-0001, A Little Sunshine, aleksej gubarev, andtop company, atlas data privacy corp., barsky.com, better business bureau, bitseller expert limited, boston law group, Breadcrumbs, buzzfeed, constella intelligence, difive.com, dmitry lubarsky, domaintools.com, gary norden, gn@difive.com, humanbook, igor lubarsky, pavel kaydash, radaris, radaris.com, steele dossier, trustoria.com, val gurvits, webzilla, xbt holding

Credit to Author: BrianKrebs| Date: Thu, 20 Jun 2024 19:16:01 +0000

On March 8, 2024, KrebsOnSecurity published a deep dive on the consumer data broker Radaris, showing how the original owners are two men in Massachusetts who operated multiple Russian language dating services and affiliate programs, in addition to a dizzying array of people-search websites. The subjects of that piece are threatening to sue KrebsOnSecurity for defamation unless the story is retracted. Meanwhile, their attorney has admitted that the person Radaris named as the CEO from its inception is a fabricated identity.

Independent Krebs Security

Stark Industries Solutions: An Iron Hammer in the Cloud

May 23, 2024 0 Comments A Little Sunshine, andrey nesterenko, arbor, as44477, blue charlie, Breadcrumbs, callisto group, coldriver, comcast cable communications, computer technologies institute ltd, constella intelligence, correctiv.org, DDoS-for-hire, ddosia, dfyz, dfyz_bk@bk.ru, don chicho, egihosting, eset, federal state autonomous educational establishment of additional professional education center of realization of state educational policy and informational technologies, green floid llc, information technology laboratories group, innovation it solutions corp, integrated technologies laboratory, intel 471, internet research agency, itl llc, jeffrey carr, lockbit, max tulyev, mercenaries team, mirhosting, netassist, netscout, noname057(16), perfect quality hosting, pq hosting plus s.r.l., prolocation, proxyline, raymond dijkxhoorn, recorded future, richard hummel, russia's war on ukraine, seaborgium, serverius-as, spamhaus, stark industries solutions, surbl, team cymru, ukrinform

Credit to Author: BrianKrebs| Date: Thu, 23 May 2024 23:32:43 +0000

Two weeks before Russia invaded Ukraine in February 2022, a large, mysterious new Internet hosting firm called Stark Industries Solutions materialized and quickly became the epicenter of massive distributed denial-of-service (DDoS) attacks on government and commercial targets in Ukraine and Europe. An investigation into Stark Industries reveals it is being used as a global proxy network that conceals the true source of cyberattacks and disinformation campaigns against enemies of Russia.

← Previous