A look at the booming market for bots that steal 2FA codes, often using SMS services like Twilio, to break into Coinbase, Amazon, PayPal, and bank accounts
The bots convincingly and effortlessly help hackers break into Coinbase, Amazon, PayPal, and bank accounts. — Joseph Cox Tweets: @josephfcox , @motherboard , @rzol , @josephfcox , @josephfcox , @jos...
Internal docs: Amazon plans to monitor keyboard strokes and mouse movements of customer service staff to stop rogue workers or hackers accessing customer data
An internal document also mentions cases where imposters have stolen Amazon customer data. — Joseph Cox Tweets: @sarahbmyers , @lainnafader , @cdibona , @josephfcox , @josephfcox , @josephfcox , and...
A look at so-called Russian, encrypted, or “white” SIMs, used by criminals to spoof phone numbers, add voice manipulation to calls in real-time, and more
Criminals use so-called Russian, encrypted, or white SIMs to change their phone number, add voice manipulation to their calls … Tweets: @josephfcox , @brianroemmele , @lorenzofb , @kevincollier , @jos...
Investigation into a “supply chain” of people who scrape OnlyFans content en masse before reposting it for free, often on other adult websites or Discord
In late February, rumors of a massive database of adult content stolen from OnlyFans subscription-only accounts spread through social media. Tweets: @josephfcox , @motherboard , @bigblackjacobin , @jo...
Overview of the ongoing efforts by the US to modernize its spy operations, to contain the damage from the 2014 OPM breach, be more resilient to tracking, more
When hackers began slipping into computer systems at the Office of Personnel Management in the spring of 2014 … Tweets: @edwardlucas , @sanhotree , @zachsdorfman , @inteloperator , @artyomlukin , @kim...
UK court sentences Thomas White, who ran Silk Road 2 as Dread Pirate Roberts 2 and became a privacy activist after his arrest in 2014, to 5+ years in prison
For years, the arrest and case has been kept under-wraps. Friday, a court sentenced Thomas White to 5 years and 4 months for his role … Tweets: @breakermag , @josephfcox , @josephfcox , @josephfcox ,...
Sources: a common practice among bounty hunters and stalkers is to impersonate cops and claim there's a crisis to get real-time cell location data from telcos
In several cases, a stalker impersonated a US Marshal and reported a fake kidnapping in order to get telecom companies to give them real-time cell phone location data. Tweets: @timkarr , @motherboard ...
Investigation finds ~70 “creepshot” Tumblr blogs including one with ~11K followers and 53K+ interactions; Tumblr hasn't removed any blogs found in investigation
After Reddit famously banned the creepshots sub-reddit, which shared non-consensual, revealing photos of women … Tweets: @cindygallop , @josephfcox , @josephfcox , @josephfcox , @josephfcox , @josephf...
Sources detail Azimuth Security, a boutique hacking shop finding 0-days for Tor, iOS, Android, more, which counts agencies from Five Eyes countries as clients
Motherboard : Tweets: @lorenzofb , @josephfcox , @josephfcox , @josephfcox , @lorenzofb , @josephfcox , @josephfcox , @motherboard , @lorenzofb , @lorenzofb , @cauchon , @lorenzofb , @mattbraga , @ja...