#krebsonsecurity — Public Fediverse posts

#KrebsOnSecurity in New ‘Most Wanted’ #HBOMax Series

A new #documentary series about #cybercrime airing next month on #HBO Max features interviews with Yours Truly. The four-part series follows the #exploits of #JuliusKivimäki , a prolific #Finnish #hacker recently convicted of #leaking tens of thousands of patient records from an online #psychotherapy practice while attempting to #extort the clinic and its patients.
#privacy #security

https://krebsonsecurity.com/2025/08/krebsonsecurity-in-new-most-wanted-hbo-max-series/

Patch Tuesday, April 2025 Edition – Source: krebsonsecurity.com https://ciso2ciso.com/patch-tuesday-april-2025-edition-source-krebsonsecurity-com/ #WindowsRemoteDesktopServices #rssfeedpostgeneratorecho #CommonLogFileSystem #CyberSecurityNews #KrebsonSecurity #KrebsOnSecurity #CVE-2025-26671 #CVE-2025-27480 #CVE-2025-27482 #CVE-2025-29824 #LatestWarnings #TheComingStorm #SecurityTools #SatnamNarang #ChrisGoettl #TimetoPatch #Microsoft #Windows #Ivanti #CLFS

Brian Krebs recent article - Why Phishers Love New TLDs Like .shop, .top and .xyz - begins with a review of Interisle's Cybercrime Suppy Chain 2024 study findings and measurements and dives into an investigative area where he excels: identifying the parties behind the crimes.

Brian reports that "At least some of that increase is likely from a prolific cybercriminal using the nickname Chenlun, who has been selling phishing kits targeting domestic postal services in the United States and at least a dozen other countries."

While the title suggests this post is about TLDs, Brian also calls attention to our findings regarding subdomain providers, noting that "cyberattacks hosted at subdomain provider services can be tough to mitigate, because only the subdomain provider can disable malicious accounts or take down malicious web pages."

Brian caught up to CAUCE president and Interisle's friend and colleague John Levine, who was brutally frank about ICANN’s proposed next round envisions accepting applications for new gTLDs in 2026. #worthreading #krebsonsecurity #cybercrime #domainabuse

Krebs article: @krebsonsecurity

https://krebsonsecurity.com/2024/12/why-phishers-love-new-tlds-like-shop-top-and-xyz/

Cybercrime Supply Chain 2024:

https://interisle.net/insights/cybercrimesupplychain2024

Brazil Arrests ‘USDoD,’ Hacker in FBI Infragard Breach – Source: krebsonsecurity.com https://ciso2ciso.com/brazil-arrests-usdod-hacker-in-fbi-infragard-breach-source-krebsonsecurity-com/ #rssfeedpostgeneratorecho #NationalPublicData #CyberSecurityNews #ALittleSunshine #KrebsonSecurity #KrebsOnSecurity #NeerDoWellNews #DataBreaches #EquationCorp #CrowdStrike #RaidForums #InfraGard #Hackread #Intel471 #Tecmundo #TVGlobo #NetSec #USDoD #fbi

Who Stole 3.6M Tax Records from South Carolina? – Source: krebsonsecurity.com https://ciso2ciso.com/who-stole-3-6m-tax-records-from-south-carolina-source-krebsonsecurity-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #AleksandrErmakov #KrebsonSecurity #KrebsOnSecurity #NeerDoWellNews #MikhailShefel #DataBreaches #targetbreach #Breadcrumbs #Mazafaka #rescator #Verified #Shtazi

Looking at the February-April 2023 phishing activity, one trend stands out. The story...

In March, @briankrebs reported that Meta had filed a lawsuit against Freenom, see https://krebsonsecurity.com/2023/03/sued-by-meta-freenom-halts-domain-registrations/

We’ve observed a significant decline in phishing domains reported in the Freenom commercialized ccTLDs in months surrounding the lawsuit.

Responsible for over 60% of phishing domains reported in November 2022, Freenom’s percentage has dropped to under 15%.

Do you wonder how many targeted organizations could collect a strong case of cybersquatting and infringement against their brands, and why more aren't taking similar actions against TLD operators and registrars?

#cybercrime #domainabuse #cybersquatting #infringement #krebsonsecurity