Latest Warnings – Page 6 – PossibleThreat Articles

U.S. Govt. Apps Bundled Russian Code With Ties to Mobile Malware Developer

November 28, 2022 0 Comments A Little Sunshine, arello-mobile, army times, constella intelligence, foreign adtech, intelligence authorization act for 2023, Latest Warnings, max konev, national training center, pincer trojan, pushwoosh, reuters, The Coming Storm, u.s. army, yuri shmakov, zach edwards

Credit to Author: BrianKrebs| Date: Mon, 28 Nov 2022 22:08:21 +0000

A recent scoop by Reuters revealed that mobile apps for the U.S. Army and the Centers for Disease Control and Prevention (CDC) were integrating software that sends visitor data to a Russian company called Pushwoosh, which claims to be based in the United States. But that story omitted an important historical detail about Pushwoosh: In 2013, one of its developers admitted to authoring the Pincer Trojan, malware designed to surreptitiously intercept and forward text messages from Android mobile devices.

Independent Krebs Security

Microsoft Patch Tuesday, October 2022 Edition

October 11, 2022 0 Comments caitlin condon, cve-2022-37968, cve-2022-41033, immersive labs, kevin breen, Latest Warnings, microsoft patch tuesday october 2022, rapid7, satnam narang, tenable, Time to Patch

Credit to Author: BrianKrebs| Date: Tue, 11 Oct 2022 21:06:23 +0000

Microsoft today released updates to fix at least 85 security holes in its Windows operating systems and related software, including a new zero-day vulnerability in all supported versions of Windows that is being actively exploited. However, noticeably absent from this month’s Patch Tuesday are any updates to address a pair of zero-day flaws being exploited this past month in Microsoft Exchange Server.

Independent Krebs Security

Microsoft: Two New 0-Day Flaws in Exchange Server

September 30, 2022 0 Comments cve-2022-41040, cve-2022-41082, gtsc, Latest Warnings, microsoft exchange server zero-day, steven adair, The Coming Storm, Time to Patch, volexity, zimbra collaboration suite

Credit to Author: BrianKrebs| Date: Fri, 30 Sep 2022 16:51:57 +0000

Microsoft Corp. is investigating reports that attackers are exploiting two previously unknown vulnerabilities in Exchange Server, a technology many organizations rely on to send and receive email. Microsoft says it is expediting work on software patches to plug the security holes. In the meantime, it is urging a subset of Exchange customers to enable a setting that could help mitigate ongoing attacks.

Independent Krebs Security

PayPal Phishing Scam Uses Invoices Sent Via PayPal

August 18, 2022 0 Comments A Little Sunshine, Latest Warnings, Paypal, paypal business, paypayl invoice scam, Web Fraud 2.0, zelle fraud scam

Credit to Author: BrianKrebs| Date: Thu, 18 Aug 2022 15:27:53 +0000

Scammers are using invoices sent through PayPal.com to trick recipients into calling a number to dispute a pending charge. The missives — which come from Paypal.com and include a link at Paypal.com that displays an invoice for the supposed transaction — state that the user’s account is about to be charged hundreds of dollars. Recipients who call the supplied toll-free number to contest the transaction are soon asked to download software that lets the scammers assume remote control over their computer.

Independent Krebs Security

Sounding the Alarm on Emergency Alert System Flaws

August 12, 2022 0 Comments A Little Sunshine, comcast, cybir, david mcguire, Defcon, department of homeland security, digital alert systems, emergency alert system, ken pyle, Latest Warnings, monroe electronics, The Coming Storm

Credit to Author: BrianKrebs| Date: Fri, 12 Aug 2022 15:26:58 +0000

The Department of Homeland Security (DHS) is urging states and localities to beef up security around proprietary devices that connect to the Emergency Alert System — a national public warning system used to deliver important emergency information, such as severe weather and AMBER alerts. The DHS warning came in advance of a workshop to be held this weekend at the DEFCON security conference in Las Vegas, where a security researcher is slated to demonstrate multiple weaknesses in the nationwide alert system.

Independent Krebs Security

Scammers Sent Uber to Take Elderly Lady to the Bank

August 4, 2022 0 Comments elder scams, email scam, FBI, Latest Warnings, The Coming Storm, travis hardaway, uber, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Thu, 04 Aug 2022 15:41:09 +0000

Email scammers sent an Uber to the home of an 80-year-old woman who responded to a well-timed email scam, in a bid to make sure she went to the bank and wired money to the fraudsters. In this case, the woman figured out she was being scammed before embarking for the bank, but her story is a chilling reminder of how far crooks will go these days to rip people off.

Independent Krebs Security

Massive Losses Define Epidemic of ‘Pig Butchering’

July 21, 2022 0 Comments A Little Sunshine, chainalysis, courtney nolan, employment fraud, erin west, FBI, ic3.gov, justin maile, Latest Warnings, pig butchering, react task force, The Coming Storm, vice news, Web Fraud 2.0, whatsapp, xtb-market

Credit to Author: BrianKrebs| Date: Thu, 21 Jul 2022 16:35:28 +0000

U.S. state and federal investigators are being inundated with reports from people who’ve lost hundreds of thousands or millions of dollars in connection with a complex investment scam known as “pig butchering,” wherein people are lured by flirtatious strangers online into investing in cryptocurrency trading platforms that eventually seize any funds when victims try to cash out.

Independent Krebs Security

Experian, You Have Some Explaining to Do

July 10, 2022 0 Comments A Little Sunshine, arthur rishi, emory roan, Equifax, experian, john turner, Latest Warnings, nicholas weaver, privacyrights.org, transunion, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Mon, 11 Jul 2022 04:07:15 +0000

Twice in the past month KrebsOnSecurity has heard from readers who’ve had their accounts at big-three credit bureau Experian hacked and updated with a new email address that wasn’t theirs. In both cases the readers used password managers to select strong, unique passwords for their Experian accounts. Research suggests identity thieves were able to hijack the accounts simply by signing up for new accounts at Experian using the victim’s personal information and a different email address.

Independent Krebs Security

Microsoft Patch Tuesday, April 2022 Edition

April 13, 2022 0 Comments Latest Warnings, security tools, Time to Patch

Credit to Author: BrianKrebs| Date: Wed, 13 Apr 2022 15:01:24 +0000

Microsoft on Tuesday released updates to fix roughly 120 security vulnerabilities in its Windows operating systems and other software. Two of the flaws have been publicly detailed prior to this week, and one is already seeing active exploitation, according to a report from the U.S. National Security Agency (NSA).

Independent Krebs Security

Double-Your-Crypto Scams Share Crypto Scam Host

April 11, 2022 0 Comments +7.9914500893, A Little Sunshine, arkinvest, crypto investment scams, cryptohost, fintelegram, Latest Warnings, lightning-network, mark tepterev, polkadot, sergei orlovets, smartape, ulanikirill52@gmail.com, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Mon, 11 Apr 2022 15:26:40 +0000

Online scams that try to separate the unwary from their cryptocurrency are a dime a dozen, but a great many seemingly disparate crypto scam websites tend to rely on the same dodgy infrastructure providers to remain online in the face of massive fraud and abuse complaints from their erstwhile customers. Here’s a closer look at hundreds of phony crypto investment schemes that are all connected through a hosting provider which caters to people running crypto scams.