Top IT Security Bloggers

Krebs on Security

  • Lizard Kids: A Long Trail of Fail

    Krebs on Security
    The Lizard Squad, a band of young hooligans that recently became Internet famous for launching crippling distributed denial-of-service (DDoS) attacks against the largest online gaming networks, is now advertising own Lizard-branded DDoS-for-hire service. Read on for a decidedly different take on this offering than what's being portrayed in the mainstream media.

  • Banks: Card Breach at Some Chick-fil-A’s

    Krebs on Security
    Sources at several U.S. financial institutions say they have traced a pattern of credit card fraud back to accounts that all were used at different Chick-fil-A fast food restaurants around the country. Chick-fil-A told KrebsOnSecurity that it has received similar reports and is working with IT security firms and law enforcement in an ongoing investigation.

  • Target Hackers Hit OneStopParking.com

    Krebs on Security
    Parking services have taken a beating this year at the hands of hackers bent on stealing credit and debit card data. This week's victim -- onestopparking.com -- comes compliments of the same organized crime gang thought to be responsible for stealing tens of millions of card numbers from shoppers at Target and Home Depot.

  • Happy 5th Birthday, KrebsOnSecurity!

    Krebs on Security
    It's hard to believe, but KrebsOnSecurity turns five years old today! How time flies!

  • Who’s in the Lizard Squad?

    Krebs on Security
    The core members of a group calling itself "Lizard Squad" -- which took responsibility for attacking Sony's Playstation and Microsoft's Xbox networks and knocking them offline for Christmas Day -- want very much to be recognized for their actions. So, here's a closer look at two young men who appear to be anxious to let the world know they are closely connected to the attacks.

  • Cowards Attack Sony PlayStation, Microsoft xBox Networks

    Krebs on Security
    A gaggle of young misfits that has long tried to silence this Web site now is taking credit for preventing millions of users from playing Sony Playstation and Microsoft Xbox Live games this holiday season. The group, which calls itself LizardSquad, started attacking the gaming networks on or around Christmas Day. Various statements posted by self-described LizardSquad members […]

  • Payday Loan Network Sold Info to Scammers

    Krebs on Security
    The Federal Trade Commission announced this week it is suing a consumer data broker that sold payday loan application data to scammers who used the information to pull money out consumer bank accounts. The scam brings to mind an underground identity theft service I wrote about in 2012 that was gathering its data from a network of payday loan sites.

  • The Case for N. Korea’s Role in Sony Hack

    Krebs on Security
    There are still many unanswered questions about the recent attack on Sony Pictures Entertainment, such as how the attackers broke in, how long they were inside Sony's network, whether they had inside help, and how the attackers managed to steal terabytes of data without notice. To date, a sizable number of readers remain unconvinced about the one conclusion that many security experts and the U.S. government now agree upon: The North Korea was to blame. This post examines some compelling evidence from past such attacks that has helped inform that conclusion.

  • Alleged Counterfeiter “Willy Clock” Arrested

    Krebs on Security
    In September 2014, I wrote about receiving a package of $500 in counterfeit U.S. currency from an unknown sender, after mentioning in a blog post about a rash of funny money resellers flooding underground cybercrime markets. Last week, U.S. authorities announced the arrest of a Texas man charged with leading the international counterfeit currency operation from a location in the Republic of Uganda.

  • Gang Hacked ATMs from Inside Banks

    Krebs on Security
    An organized gang of hackers from Russia and Ukraine has broken into internal networks at dozens of financial institutions and installed malicious software that allowed the gang to drain bank ATMs of cash. While none of the victim institutions were in the United States or Western Europe, experts say the stealthy methods used by the attackers in these heists would likely work across a broad range of western banks.