Owners of 1-Time Passcode Theft Service Plead Guilty

by | Sep 8, 2024 | A Little Sunshine, Aza Siddeeque, Callum Picari, National Crime Agency, Ne'er-Do-Well News, otp agency, RaidForums, SMSRanger, Vijayasidhurshan Vijayanathan, Web Fraud 2.0

Three men in the United Kingdom have pleaded guilty to operating otp[.]agency, a once popular online service that helped attackers intercept the one-time passcodes (OTPs) that many websites require as a second authentication factor in addition to passwords. Launched...

Local Networks Go Global When Domain Names Collide

by | Sep 8, 2024 | A Little Sunshine, Active Directory, Andorra, DNS name devolution, Latest Warnings, Memphis Real-Time Crime Center, memrtcc.ad, Mike Barlow, Mike O'Connor, namespace collision, Philippe Caturegli, Seralys, The Coming Storm, Web Fraud 2.0, Web Proxy Auto-Discovery Protocol, wpad.ad, wpad.dk

The proliferation of new top-level domains (TLDs) has exacerbated a well-known security weakness: Many organizations set up their internal Microsoft authentication systems years ago using domain names in TLDs that didn’t exist at the time. Meaning, they are...

Mozilla Drops Onerep After CEO Admits to Running People-Search Networks

by | Mar 23, 2024 | A Little Sunshine, Dimitiri Shelest, Firefox, Firefox Monitor, HaveIBeenPwned, HaveIBeenPwned.com, Mozilla Foundation, Mozilla Monitor, Ne'er-Do-Well News, Nuwber, OneRep, Spamit, Troy Hunt, Web Fraud 2.0

The nonprofit organization that supports the Firefox web browser said today it is winding down its new partnership with Onerep, an identity protection service recently bundled with Firefox that offers to remove users from hundreds of people-search sites. The move...

Fla. Man Charged in SIM-Swapping Spree is Key Suspect in Hacker Groups Oktapus, Scattered Spider

by | Feb 29, 2024 | 0ktapus, A Little Sunshine, Breadcrumbs, Elijah, grails, Group-IB, King Bob, lastpass, lastpass breach, Mailchimp, Ne'er-Do-Well News, Noah Michael Urban, okta, Plex, Scattered Spider, Signal, SIM Swapping, Sosa, Twilio, Web Fraud 2.0

On Jan. 9, 2024, U.S. authorities arrested a 19-year-old Florida man charged with wire fraud, aggravated identity theft, and conspiring with others to use SIM-swapping to steal cryptocurrency. Sources close to the investigation tell KrebsOnSecurity the accused was a...