-
The story you are reading is a series of scoops nestled inside a far more urgent Internet-wide security advisory. The vulnerability at issue has been exploited for months already, and it’s time for a broader awareness of the threat. The short version is that everything you thought you knew about the security of the internal network behind your Internet router probably is now dangerously out of date.
·
911s5, 922 Proxy, A Little Sunshine, Aisuru, AISURU Botnet, Akamai Technologies, Android Debug Bridge, BadBox 2.0, Ben Brundage, Chad Seaman, DDoS-for-Hire, HUMAN Security, IPidea, Kimwolf, Kimwolf botnet, krebsfiveheadindustries, Latest Warnings, Lindsay Kaye, Oxylabs, Quokka, residential proxy, Riley Kilmer, Spur, Synthient, Uhale app, Web Fraud 2.0, XLab¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
KrebsOnSecurity.com celebrates its 16th anniversary today! A huge “thank you” to all of our readers — newcomers, long-timers and drive-by critics alike. Your engagement this past year here has been tremendous and truly a salve on a handful of dark days. Happily, comeuppance was a strong theme running through our coverage in 2025, with a primary focus on entities that enabled complex and globally-dispersed cybercrime services.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A sprawling academic cheating network turbocharged by Google Ads that has generated nearly $25 million in revenue has curious connections to a Kremlin-connected oligarch whose Russian university builds drones for Russia’s war against Ukraine.
·
A Little Sunshine, Alexander Korsukov, Alexey Pokatilo, AW Tech Limited, Awesome Technologies, Brian Mellor, CLS Research LTD, Filip Perkon, Geekly Solutions Ltd, Livingston Research, Marina Butina, NatInfoSec, North Data, OK Marketing LTD, Olekszij Pokatilo, Proglobal Solutions LTD, Russia’s War on Ukraine, Russian Business Week, Russian Diplomatic Online Club, Synergy, Synergy University, Tweetsquad, Two Sigma Solutions LTD, Vadim Lobov, VLS Research LTD¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
China-based phishing groups blamed for non-stop scam SMS messages about a supposed wayward package or unpaid toll fee are promoting a new offering, just in time for the holiday shopping season: Phishing kits for mass-creating fake but convincing e-commerce websites that convert customer payment card data into mobile wallets from Apple and Google. Experts say these same phishing groups also are now using SMS lures that promise unclaimed tax refunds and mobile rewards points.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
On the surface, the Superbox media streaming devices for sale at retailers like BestBuy and Walmart may seem like a steal: They offer unlimited access to more than 2,200 pay-per-view and streaming services like Netflix, ESPN and Hulu, all for a one-time fee of around $400. But security experts warn these TV boxes require intrusive software that forces the user’s network to relay Internet traffic for others, traffic that is often tied to cybercrime activity such as advertising fraud and…
·
A Little Sunshine, Amazon, ARP poisoning, BadBox 2.0 Enterprise, BestBuy, Censys, Electronic Frontier Foundation, Federal Bureau of Investigation, Grass OpCo (BVI) Ltd, Half Space Labs Limited, Internet of Things (IoT), IPidea, Lower Tribeca Corp., Netcat, Newegg, Riley Kilmer, Spur, Super Media Technology Company Ltd., Superbox, SuperCaja, Synthient, Tcpdump, Walmart, Web Fraud 2.0, Wynd Network¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
In March 2024, Mozilla said it was winding down its collaboration with Onerep — an identity protection service offered with the Firefox web browser that promises to remove users from hundreds of people-search sites — after KrebsOnSecurity revealed Onerep’s founder had created dozens of people-search services and was continuing to operate at least one of them. Sixteen months later, however, Mozilla is still promoting Onerep. This week, Mozilla announced their partnership with Onerep will officially end next month.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶


