Data Breaches – Page 3 – PossibleThreat Articles

Hackers Stole Access Tokens from Okta’s Support Unit

October 23, 2023 0 Comments A Little Sunshine, beyondtrust, charlotte wylie, Data Breaches, marc maiffret, okta, okta breach

Credit to Author: BrianKrebs| Date: Fri, 20 Oct 2023 18:39:23 +0000

Okta, a company that provides identity tools like multi-factor authentication and single sign-on to thousands of businesses, has suffered a security breach involving a compromise of its customer support unit, KrebsOnSecurity has learned. Okta says the incident affected a “very small number” of customers, however it appears the hackers responsible had access to Okta’s support platform for at least two weeks before the company fully contained the intrusion.

Independent Krebs Security

‘Snatch’ Ransom Group Exposes Visitor IP Addresses

September 27, 2023 0 Comments @htmalgae, 8base ransomware, atomicstealer, Breadcrumbs, Data Breaches, domaintools.com, google.com, malwarebytes, microsoft teams, mihail kolesnikov, Ne'er-Do-Well News, Ransomware, rilide, trustwave spiderlabs

Credit to Author: BrianKrebs| Date: Wed, 27 Sep 2023 11:48:37 +0000

The victim shaming site operated by the Snatch ransomware group is leaking data about its true online location and internal operations, as well as the Internet addresses of its visitors, KrebsOnSecurity has found. The leaked data suggest that Snatch is one of several ransomware groups using paid ads on Google.com to trick people into installing malware disguised as popular free software, such as Microsoft Teams, Adobe Reader, Mozilla Thunderbird, and Discord.

Independent Krebs Security

LastPass: ‘Horse Gone Barn Bolted’ is Strong Password

September 22, 2023 0 Comments A Little Sunshine, Data Breaches, international computer science institute, karim toubba, lastpass breach, nicholas weaver, The Coming Storm, Web Fraud 2.0, wladimir palant

Credit to Author: BrianKrebs| Date: Fri, 22 Sep 2023 23:41:09 +0000

The password manager service LastPass is now forcing some of its users to pick longer master passwords. LastPass says the changes are needed to ensure all customers are protected by their latest security improvements. But critics say the move is little more than a public relations stunt that will do nothing to help countless early adopters whose password vaults were exposed in a 2022 breach at LastPass.

Independent Krebs Security

FBI Hacker Dropped Stolen Airbus Data on 9/11

September 13, 2023 0 Comments A Little Sunshine, airbus, breachforums, Data Breaches, FBI, genesis market, hudson rock, infragard, Microsoft, redline, The Coming Storm, usdod

Credit to Author: BrianKrebs| Date: Thu, 14 Sep 2023 00:22:05 +0000

In December 2022, KrebsOnSecurity broke the news that a cybercriminal using the handle “USDoD” had infiltrated the FBI’s vetted information sharing network InfraGard, and was selling the contact information for all 80,000 members. The FBI responded by reverifying all InfraGard members and by seizing the cybercrime forum where the data was being sold. But on Sept. 11, 2023, USDoD resurfaced after a lengthy absence to leak sensitive employee data stolen from the aerospace giant Airbus, while promising to visit the same treatment on top U.S. defense contractors.

Independent Krebs Security

Experts Fear Crooks are Cracking Keys Stolen in LastPass Breach

September 5, 2023 0 Comments 1password, A Little Sunshine, adblock plus, ars technica, chainalysis, Data Breaches, karim toubba, lastpass breach, metamask, nicholas weaver, nick bax, plex, taylor monahan, The Coming Storm, unciphered, Web Fraud 2.0, wladimir palant

Credit to Author: BrianKrebs| Date: Wed, 06 Sep 2023 00:21:07 +0000

In November 2022, the password manager service LastPass disclosed a breach in which hackers stole password vaults containing both encrypted and plaintext data for more than 25 million users. Since then, a steady trickle of six-figure cryptocurrency heists targeting security-conscious people throughout the tech industry has led some security experts to conclude that crooks likely have succeeded at cracking open some of the stolen LastPass vaults.

Independent Krebs Security

Kroll Employee SIM-Swapped for Crypto Investor Data

August 25, 2023 0 Comments A Little Sunshine, blockfi, Data Breaches, ftx, kroll breach, Latest Warnings, SIM swapping, T-Mobile

Credit to Author: BrianKrebs| Date: Fri, 25 Aug 2023 18:05:10 +0000

Security consulting giant Kroll disclosed today that a SIM-swapping attack against one of its employees led to the theft of user information for multiple cryptocurrency platforms that are relying on Kroll services in their ongoing bankruptcy proceedings. And there are indications that fraudsters may already be exploiting the stolen data in phishing attacks. Cryptocurrency lender BlockFi and the now-collapsed crypto trading platform FTX each disclosed data breaches this week thanks to a recent SIM-swapping attack targeting an employee of Kroll — the company handling both firms’ bankruptcy restructuring.

Independent Krebs Security

LeakedSource Owner Quit Ashley Madison a Month Before 2015 Hack

July 18, 2023 0 Comments A Little Sunshine, abusewithus, agentjags, ashley madison hack, ashleymadison.com, constella intelligence, Data Breaches, domaintools, eric malek, hulu, impact team, jordan evan bloom, leakedsource, Ne'er-Do-Well News, near-reality.com, noel biderman, ownagegaming1@gmail.com, pictrace, royal canadian mounted police, runescape, trevor sykes

Credit to Author: BrianKrebs| Date: Tue, 18 Jul 2023 14:57:04 +0000

[This is Part III in a series on research conducted for a recent Hulu documentary on the 2015 hack of marital infidelity website AshleyMadison.com.] In 2019, a Canadian company called Defiant Tech Inc. pleaded guilty to running LeakedSource[.]com, a service that sold access to billions of passwords and other data exposed in countless data breaches. KrebsOnSecurity has learned that the owner of Defiant Tech, a 32-year-old Ontario man named Jordan Evan Bloom, was hired in late 2014 as a developer for the marital infidelity site AshleyMadison.com. Bloom resigned from AshleyMadison citing health reasons in June 2015 — less than one month before unidentified hackers stole data on 37 million users — and launched LeakedSource three months later.

Independent Krebs Security

SEO Expert Hired and Fired By Ashley Madison Turned on Company, Promising Revenge

July 13, 2023 0 Comments A Little Sunshine, ashley madison hack, Data Breaches, hulu, impact team, Ne'er-Do-Well News, william webster harrison

Credit to Author: BrianKrebs| Date: Thu, 13 Jul 2023 21:45:02 +0000

[This is Part II of a story published here last week on reporting that went into a new Hulu documentary series on the 2015 Ashley Madison hack.] It was around 9 p.m. on Sunday, July 19, when I received a message through the contact form on KrebsOnSecurity.com that the marital infidelity website AshleyMadison.com had been hacked. The message contained links to confidential Ashley Madison documents, and included a manifesto that said a hacker group calling itself the Impact Team was prepared to leak data on all 37 million users unless Ashley Madison and a sister property voluntarily closed down within 30 days.

MalwareBytes Security

BreachForums to be shut down after all for fear of law enforcement infiltration

March 23, 2023 0 Comments breachforums, dark web, Data Breaches, FBI, news, pompompurin

Categories: News

Tags: BreachForums

Tags: Pompompurin

Tags: FBI

Tags: Dark Web

Tags: data breaches

After the arrest of the administrator of the Dark Web site BreachForums there was talk about keeping it alive, but now the forums will be shut down for fear of law enforcement infiltration.

Independent Krebs Security

Google Suspends Chinese E-Commerce App Pinduoduo Over Malware

March 22, 2023 0 Comments A Little Sunshine, breachforums, bytedance, darknavy, Data Breaches, Google, Latest Warnings, liu huafang, pdd holdings, pinduoduo, Project Zero, temu, TikTok, Web Fraud 2.0, weibo

Credit to Author: BrianKrebs| Date: Wed, 22 Mar 2023 23:11:08 +0000

Google says it has suspended the app for the Chinese e-commerce giant Pinduoduo after malware was found in versions of the app. The move comes just weeks after Chinese security researchers published an analysis suggesting the popular e-commerce app sought to seize total control over affected devices by exploiting multiple security vulnerabilities in a variety of Android-based smartphones.