The Coming Storm – Page 8 – PossibleThreat Articles

FCC Proposes to Fine Wireless Carriers $200M for Selling Customer Location Data

February 28, 2020 0 Comments FCC, Federal Communications Commission, georgetown law institute for technology law and policy, Gigi Sohn, joseph cox, new york times, securus technologies, sen. ron wyden, The Coming Storm, vice.com, wall street journal

Credit to Author: BrianKrebs| Date: Fri, 28 Feb 2020 22:12:10 +0000

The U.S. Federal Communications Commission (FCC) today proposed fines of more than $200 million against the nation’s four largest wireless carriers for selling access to their customers’ location information without taking adequate precautions to prevent unauthorized access to that data. While the fines would be among the largest the FCC has ever levied, critics say the penalties don’t go far enough to deter wireless carriers from continuing to sell customer location data.

Independent Krebs Security

Zyxel Fixes 0day in Network Storage Devices

February 24, 2020 0 Comments 0day, 500mhz, alex holden, cert coordination center, cert/cc, cve-2020-9054, dhs, emotet, Hold Security, Latest Warnings, Ransomware, The Coming Storm, Time to Patch, zero day, zyxel communications corp.

Credit to Author: BrianKrebs| Date: Mon, 24 Feb 2020 17:13:11 +0000

Networking hardware vendor Zyxel today released an update to fix a critical flaw in many of its network attached storage (NAS) devices that can be used to remotely commandeer them. The patch comes 12 days after KrebsOnSecurity alerted the company that precise instructions for exploiting the vulnerability were being sold for $20,000 in the cybercrime underground. Based in Taiwan, Zyxel Communications Corp. (a.k.a “ZyXEL”) is a maker of networking devices, including Wi-Fi routers, NAS products and hardware firewalls. The company has roughly 1,500 employees and boasts some 100 million devices deployed worldwide. While in many respects the class of vulnerability addressed in this story is depressingly common among Internet of Things (IoT) devices, the flaw is notable because it has attracted the interest of groups specializing in deploying ransomware at scale.

Independent Krebs Security

Encoding Stolen Credit Card Data on Barcodes

February 18, 2020 0 Comments A Little Sunshine, The Coming Storm, U.S. Secret Service

Credit to Author: BrianKrebs| Date: Tue, 18 Feb 2020 18:00:29 +0000

Crooks are constantly dreaming up new ways to use and conceal stolen credit card data. According to the U.S. Secret Service, the latest scheme involves stolen card information embedded in barcodes affixed to phony money network rewards cards. The scammers then pay for merchandise by instructing a cashier to scan the barcode and enter the expiration date and card security code.

Independent Krebs Security

Dangerous Domain Corp.com Goes Up for Sale

February 8, 2020 0 Comments active directory, corp.com, dns name devolution, jas global advisors, jeff schmidt, Latest Warnings, microsoft corp., Microsoft Windows, mike o'connor, namespace collision, The Coming Storm, U.S. Department of Homeland Security

Credit to Author: BrianKrebs| Date: Sat, 08 Feb 2020 17:32:04 +0000

As an early domain name investor, Mike O’Connor had by 1994 snatched up several choice online destinations, including bar.com, cafes.com, grill.com, place.com, pub.com and television.com. Some he sold over the years, but for the past 26 years O’Connor refused to auction perhaps the most sensitive domain in his stable — corp.com. It is sensitive because years of testing shows whoever wields it would have access to an unending stream of passwords, email and other proprietary data belonging to hundreds of thousands of systems at major companies around the globe.

Independent Krebs Security

Wawa Breach May Have Compromised More Than 30 Million Payment Cards

January 28, 2020 0 Comments bebe stores breach, buca di beppo breach, Data Breaches, gemini advisory, hilton hotels breach, Joker's stash, krystal breach, mastercard, mcalister's deli breach, moe's breach, scholtzsky's breach, sonic breach, The Coming Storm, visa, wawa breach

Credit to Author: BrianKrebs| Date: Tue, 28 Jan 2020 20:12:16 +0000

In late December 2019, fuel and convenience store chain Wawa Inc. said a nine-month-long breach of its payment card processing systems may have led to the theft of card data from customers who visited any of its 850 locations nationwide. Now, fraud experts say the first batch of card data stolen from Wawa customers is being sold at one of the underground’s most popular crime shops, which claims to have 30 million records to peddle from a new nationwide breach.

Independent Krebs Security

Does Your Domain Have a Registry Lock?

January 24, 2020 0 Comments arno vis, csc, dnspionage, dnssec, e-hawk, e-hawk.net, Latest Warnings, openprovider, pdr, peter cholnoky, public domain registry, raymond dijkxhoorn, registrar lock, registry lock, The Coming Storm, Web Fraud 2.0, whatsapp

Credit to Author: BrianKrebs| Date: Fri, 24 Jan 2020 16:37:11 +0000

If you’re running a business online, few things can be as disruptive or destructive to your brand as someone stealing your company’s domain name and doing whatever they wish with it. Even so, most major Web site owners aren’t taking full advantage of the security tools available to protect their domains from being hijacked. Here’s the story of one recent victim who was doing almost everything possible to avoid such a situation and still had a key domain stolen by scammers.

Independent Krebs Security

Tricky Phish Angles for Persistence, Not Passwords

January 7, 2020 0 Comments jeff jones, Latest Warnings, login.microsoftonline.com, michael tyler, microsoft office 365, microsoftonline.com, phishlabs, The Coming Storm, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Tue, 07 Jan 2020 21:35:40 +0000

Late last year saw the re-emergence of a nasty phishing tactic that allows the attacker to gain full access to a user’s data stored in the cloud without actually stealing the account password. The phishing lure starts with a link that leads to the real login page for a cloud email and/or file storage service. Anyone who takes the bait will inadvertently forward a digital token to the attackers that gives them indefinite access to the victim’s email, files and contacts — even after the victim has changed their password.

Independent Krebs Security

The Hidden Cost of Ransomware: Wholesale Password Theft

January 6, 2020 0 Comments A Little Sunshine, alex holden, Hold Security, karen christianson, mark schafer, Ransomware, ryuk, sva consulting, The Coming Storm, vcpi

Credit to Author: BrianKrebs| Date: Mon, 06 Jan 2020 18:17:21 +0000

Organizations in the throes of cleaning up after a ransomware outbreak typically will change passwords for all user accounts that have access to any email systems, servers and desktop workstations within their network. But all too often, ransomware victims fail to grasp that the crooks behind these attacks can and frequently do siphon every single password stored on each infected endpoint. The result of this oversight may offer attackers a way back into the affected organization, access to financial and healthcare accounts, or — worse yet — key tools for attacking the victim’s various business partners and clients.

Independent Krebs Security

Ransomware Gangs Now Outing Victim Businesses That Don’t Pay Up

December 16, 2019 0 Comments bleepingcomputer, lawrence abrams, maze ransomware, Ransomware, revil, Sodinokibi, The Coming Storm

Credit to Author: BrianKrebs| Date: Tue, 17 Dec 2019 02:21:23 +0000

As if the scourge of ransomware wasn’t bad enough already: Several prominent purveyors of ransomware have signaled they plan to start publishing data stolen from victims who refuse to pay up. To make matters worse, one ransomware gang has now created a public Web site identifying recent victim companies that have chosen to rebuild their operations instead of acquiescing to their tormentors.