Brian Krebs

Independent Investigative Journalist at Freelance

Independent investigative journalist. Author of 'Spam Nation,' a NYT bestseller. Former Washington Post reporter. Mastodon: https://t.co/fTKNavlMwp

Articles

U.S. Secret Service Archives

1 week ago | securityboulevard.com | Richi Jennings |Mark Rasch |Alina Bizga |Brian Krebs
Juice jacking Archives

1 week ago | securityboulevard.com | Tom Eston |Casey Crane |Teri Robinson |Brian Krebs
Inside a Dark Adtech Empire Fed by Fake CAPTCHAs

2 weeks ago | krebsonsecurity.com | Brian Krebs

Late last year, security researchers made a startling discovery: Kremlin-backed disinformation campaigns were bypassing moderation on social media platforms by leveraging the same malicious advertising technology that powers a sprawling ecosystem of online hucksters and website hackers. A new report on the fallout from that investigation finds this dark ad tech industry is far more resilient and incestuous than previously known.
Patch Tuesday, June 2025 Edition

2 weeks ago | krebsonsecurity.com | Brian Krebs

Microsoft today released security updates to fix at least 67 vulnerabilities in its Windows operating systems and software. Redmond warns that one of the flaws is already under active attack, and that software blueprints showing how to exploit a pervasive Windows bug patched this month are now public.
Proxy Services Feast on Ukraine’s IP Address Exodus

3 weeks ago | krebsonsecurity.com | Brian Krebs

Ukraine has seen nearly one-fifth of its Internet space come under Russian control or sold to Internet address brokers since February 2022, a new study finds. The analysis indicates large chunks of Ukrainian Internet address space are now in the hands of shadowy proxy and anonymity services that are nested at some of America’s largest Internet service providers (ISPs).
U.S. Sanctions Cloud Provider ‘Funnull’ as Top Source of ‘Pig Butchering’ Scams

4 weeks ago | krebsonsecurity.com | Brian Krebs

The U.S. government today imposed economic sanctions on Funnull Technology Inc., a Philippines-based company that provides computer infrastructure for hundreds of thousands of websites involved in virtual currency investment scams known as “pig butchering.” In January 2025, KrebsOnSecurity detailed how Funnull was being used as a content delivery network that catered to cybercriminals seeking to route their traffic through U.S.-based cloud providers.
Pakistan Arrests 21 in ‘Heartsender’ Malware Service

1 month ago | krebsonsecurity.com | Brian Krebs

Authorities in Pakistan have arrested 21 individuals accused of operating “Heartsender,” a once popular spam and malware dissemination service that operated for more than a decade. The main clientele for HeartSender were organized crime groups that tried to trick victim companies into making payments to a third party, and its alleged proprietors were publicly identified by KrebsOnSecurity in 2021 after they inadvertently infected their computers with malware.
DanaBot malware devs infected their own PCs

1 month ago | threatbeat.com | Brian Krebs

Skip to content NEW Security news and analysis brought to you by the McCrary Institute | READ MORE → By Brian Krebs • May 23, 2025 The U.S. government has unsealed criminal charges against 16 individuals accused of operating and selling DanaBot, a prolific strain of information-stealing malware that has been sold on Russian cybercrime forums since 2018.
Oops: DanaBot Malware Devs Infected Their Own PCs

1 month ago | krebsonsecurity.com | Brian Krebs

The U.S. government today unsealed criminal charges against 16 individuals accused of operating and selling DanaBot, a prolific strain of information-stealing malware that has been sold on Russian cybercrime forums since 2018. The FBI says a newer version of DanaBot was used for espionage, and that many of the defendants exposed their real-life identities after accidentally infecting their own systems with the malware.
KrebsOnSecurity hit with near-record 6.3 Tbps DDoS

1 month ago | threatbeat.com | Brian Krebs

By Brian Krebs • May 21, 2025 KrebsOnSecurity last week was hit by a near record distributed denial-of-service (DDoS) attack that clocked in at more than 6.3 terabits of data per second (a terabit is one trillion bits of data). The brief attack appears to have been a test run for a massive new Internet of Things (IoT) botnet capable of launching crippling digital assaults that few web destinations can withstand.