krebsonsecurity

6 ms·

31.
by krebsonsecurity 6y ago
The story was clear that this was only an estimate of damages. It also stated clearly that the investigators were somewhat constrained by the fact that Ngo's services did not keep reliable records of sales -- only what customers search
32.
by krebsonsecurity 6y ago
Spend a few minutes looking at the spam list threads linked in the article. This is not just a few people complaining. E.g.: https://www.mail-archive.com/search?l=mailop%40mailop.org&q=... There was a ton of material I
33.
by krebsonsecurity 6y ago
With the exception of Amex and Discover and a few others that issue their own cards, Visa and MasterCard don't issue the cards. Thousands of banks and credit unions do. They're the ones responsible for managing fraud on those acco
34.
by krebsonsecurity 6y ago
It was meant as a joke. From the caption: "Yes, I realize hooded hacker stock photos have become a meme, but that’s the point."
35.
by krebsonsecurity 7y ago
This appears to be related: https://twitter.com/InternetIntel/status/1247100092575813635 https://www.ripe.net/support/service-announcements/accidenta... Last week a large BGP routing lea
36.
by krebsonsecurity 7y ago
This story looks familiar. Oh wait: https://krebsonsecurity.com/2019/05/a-tough-week-for-ip-addr...
37.
by krebsonsecurity 7y ago
Thank you for your comment. Made me recall an important bit of reporting that I somehow omitted from the original story (now updated and rectified). O'Connor told me that several years back he got a $20k offer from Microsoft for the do
38.
by krebsonsecurity 7y ago
This kind of reply reminds me of the vitriolic replies that companies leveled back in the day against the guys who registered donotreply.com. They would try to alert companies using a domain they didn't own for communications to their
39.
by krebsonsecurity 7y ago
I never took offense at victims lashing out. If my notifications were at all perfunctory, it was because time was of the essence, and on any given day there were multiple victims to notify. I often spent huge chunks of my workday on the pho
40.
by krebsonsecurity 7y ago
It would be nice if that were the case, but in my experience it just isn't so. Very few police departments have the resources or expertise to tackle complex cybercrime cases, and all of the examples mentioned in the story are multi-jur
41.
by krebsonsecurity 7y ago
I can attest that the FBI has in fact been tracking these guys for more than a decade, and some of them were indicted previously. What I can't understand is why it took so long for this latest, more broad action, and why there is such