verizon – PossibleThreat Articles

Hacker in Snowflake Extortions May Be a U.S. Soldier

November 26, 2024 0 Comments A Little Sunshine, AT&T, boxfan, buttholio, connor riley moucka, cyb3rph4nt0m, DDoS-for-hire, john erin binns, judische, kiberphant0m, naver, Ne'er-Do-Well News, proman557, Ransomware, reverseshell, shi-bot, snowflake, south korea, telekomterrorist, The Coming Storm, vars_secc, verizon, waifu

Credit to Author: BrianKrebs| Date: Wed, 27 Nov 2024 00:45:48 +0000

Two men have been arrested for allegedly stealing data from and extorting dozens of companies that used the cloud data storage company Snowflake, but a third suspect — a prolific hacker known as Kiberphant0m — remains at large and continues to publicly extort victims. However, this person’s identity may not remain a secret for long: A careful review of Kiberphant0m’s daily chats across multiple cybercrime personas suggests they are a U.S. Army soldier who is or was recently stationed in South Korea.

Independent Krebs Security

Canadian Man Arrested in Snowflake Data Extortions

November 5, 2024 0 Comments A Little Sunshine, advance auto parts, alexander antonin moucka, at&t breach, atomwaffen division, bharat sanchar nigam ltd, Breadcrumbs, connor riley moucka, court, intelsecrets, irdev, john erin binns, judische, kiberphant0m, leak society, lending tree, mandiant, Ne'er-Do-Well News, rapelash, Satori, SIM swapping, snowflake, Ticketmaster, unc5537, verizon, waifu

Credit to Author: BrianKrebs| Date: Tue, 05 Nov 2024 17:10:04 +0000

A 26-year-old man in Ontario, Canada has been arrested for allegedly stealing data from and extorting more than 160 companies that used the cloud data service Snowflake. On October 30, Canadian authorities arrested Alexander Moucka, a.k.a. Connor Riley Moucka of Kitchener, Ontario, on a provisional arrest warrant from the United States. Bloomberg first reported Moucka’s alleged ties to the Snowflake hacks on Monday. At the end of 2023, malicious hackers learned that many large companies had uploaded huge volumes of sensitive customer data to Snowflake accounts that were protected with little more than a username and password (no multi-factor authentication required). After scouring darknet markets for stolen Snowflake account credentials, the hackers began raiding the data storage repositories used by some of the world’s largest corporations.

Independent Krebs Security

FCC Fines Major U.S. Wireless Carriers for Selling Customer Location Data

April 29, 2024 0 Comments AT&T, locationsmart, Ne'er-Do-Well News, securus technologies, Sprint, T-Mobile, u.s. federal communications commission, verizon

Credit to Author: BrianKrebs| Date: Mon, 29 Apr 2024 20:56:42 +0000

The U.S. Federal Communications Commission (FCC) today levied fines totaling nearly $200 million against the four major carriers — including AT&T, Sprint, T-Mobile and Verizon — for illegally sharing access to customers’ location information without consent.

Independent Krebs Security

Why You Should Opt Out of Sharing Data With Your Mobile Provider

March 20, 2023 0 Comments A Little Sunshine, AT&T, CCPA, cpni, custom experience plus, customer proprietary network information, Data Breaches, Electronic Privacy Information Center, enhanced relevant advertising program, FCC, Federal Communications Commission, gavin wright, maids, mashable, mobile advertising ids, T-Mobile, techtarget, verizon, verizon custom experience plus, verizon selects, Verizon Wireless

Credit to Author: BrianKrebs| Date: Mon, 20 Mar 2023 14:47:56 +0000

A new breach involving data from nine million AT&T customers is a fresh reminder that your mobile provider likely collects and shares a great deal of information about where you go and what you do with your mobile device — unless and until you affirmatively opt out of this data collection. Here’s a primer on why you might want to do that, and how. Certain questions might be coming to mind right now, like “What the heck is CPNI?” And, ‘If it’s so ‘customer proprietary,’ why is AT&T sharing it with marketers?” Also maybe, “What can I do about it?” Read on for answers to all three questions.

MalwareBytes Security

TrustPid is another worrying, imperfect attempt to replace tracking cookies

June 1, 2022 0 Comments ad fraud, Privacy, supercookie, targeted advertising, tracking cookie, trustpid, verizon

Credit to Author: Pieter Arntz| Date: Wed, 01 Jun 2022 23:20:04 +0000

German ISPs are working on the introduction of TrustPid. A supercookie that is intended to replace tracking cookies.

The post TrustPid is another worrying, imperfect attempt to replace tracking cookies appeared first on Malwarebytes Labs.

Independent Krebs Security

Fighting Fake EDRs With ‘Credit Ratings’ for Police

April 27, 2022 0 Comments A Little Sunshine, Apple, AT&T, Coinbase, discord, emergency data request, FBI, github, Google, kodex, LinkedIn, matt donahue, meta, Microsoft, snapchat, T-Mobile, The Coming Storm, TikTok, twilio, twitter, verizon, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Wed, 27 Apr 2022 14:27:35 +0000

When KrebsOnSecurity last month explored how cybercriminals were using hacked email accounts at police departments worldwide to obtain warrantless Emergency Data Requests (EDRs) from social media and technology providers, many security experts called it a fundamentally unfixable problem. But don’t tell that to Matt Donahue, a former FBI agent who recently quit the agency to launch a startup that aims to help tech companies do a better job screening out phony law enforcement data requests — in part by assigning trustworthiness or “credit ratings” to law enforcement authorities worldwide.

Independent Krebs Security

Sale of 4 Million Stolen Cards Tied to Breaches at 4 Restaurant Chains

November 26, 2019 0 Comments Data Breaches, focus brands, gemini advisory, Joker's stash, krystal breach, mcalister's deli breach, moe's breach, payment card industry security standards, pci, schlotsky's breach, The Coming Storm, verizon

Credit to Author: BrianKrebs| Date: Tue, 26 Nov 2019 13:32:21 +0000

On Nov. 23, one of the cybercrime underground’s largest bazaars for buying and selling stolen payment card data announced the immediate availability of some four million freshly-hacked debit and credit cards. KrebsOnSecurity has learned this latest batch of cards was siphoned from four different compromised restaurant chains that are most prevalent across the midwest and eastern United States.

Security Sophos

Facebook launches $2m suit against alleged phishing, hacking sites

October 30, 2019 0 Comments copyright infringement, cybersquatting, facebook, hacking tools, id shield, Instagram, Law & order, lawsuit, Microsoft, onlinenic, phishing, security threats, trademark, trademark law, typosquatting, verizon

Credit to Author: Lisa Vaas| Date: Wed, 30 Oct 2019 11:33:21 +0000

Facebook is using trademark law to target the operators of sites that imitate or target Facebook and Instagram sites.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/g_OViBXsCtw” height=”1″ width=”1″ alt=””/>