Breadcrumbs – PossibleThreat Articles

DSLRoot, Proxies, and the Threat of ‘Legal Botnets’

August 26, 2025 0 Comments A Little Sunshine, aliaksandr holas, andrei holas, blackhatworld, Breadcrumbs, constella intelligence, domaintools.com, dslroot, globalsolutions, incorptoday, incorptoday@gmail.com, intel 471, internet of things (iot), Latest Warnings, lloyd davies, prepaidsolutions@yahoo.com, reddit, reveng.ai, ryzhik777@gmail.com, sacapoopie, usproxyking, webhostingtalk

Credit to Author: BrianKrebs| Date: Tue, 26 Aug 2025 14:05:12 +0000

The cybersecurity community on Reddit responded in disbelief this month when a self-described Air National Guard member with top secret security clearance began questioning the arrangement they’d made with company called DSLRoot, which was paying $250 a month to plug a pair of laptops into the Redditor’s high-speed Internet connection in the United States. This post examines the history and provenance of DSLRoot, one of the oldest “residential proxy” networks with origins in Russia and Eastern Europe.

Independent Krebs

Who Got Arrested in the Raid on the XSS Crime Forum?

August 6, 2025 0 Comments 9588693, anton gannadievich medvedovskiy, anton viktorovich avdeev, Breadcrumbs, constella intelligence, conti, damagelab, domaintools.com, europol, exploit.in, flycracker, hack-all, intel 471, lockbit, lockbitsupp, n0klos, Ne'er-Do-Well News, paranoidlab.com, qiliin, Ransomware, revil, sbu, sergeii vovnenko, sonic, The Coming Storm, toha, toschka2003@yandex.ru, xss[.]is

Credit to Author: BrianKrebs| Date: Wed, 06 Aug 2025 12:12:37 +0000

On July 22, 2025, the European police agency Europol said a long-running investigation led by the French Police resulted in the arrest of a 38-year-old administrator of XSS, a Russian-language cybercrime forum with more than 50,000 members. The action has triggered an ongoing frenzy of speculation and panic among XSS denizens about the identity of the unnamed suspect, but the consensus is that he is a pivotal figure in the crime forum scene who goes by the hacker handle “Toha.” Here’s a deep dive on what’s knowable about Toha, and a short stab at who got nabbed.

Independent Krebs

Phishers Target Aviation Execs to Scam Customers

July 25, 2025 0 Comments A Little Sunshine, association for financial professionals, BEC, Breadcrumbs, business email compromise, domaintools, financial fraud kill chain, internet crime complaint center, justy john, Ne'er-Do-Well News, palo alto networks, roomservice801@gmail.com, silverterrier, target: small businesses, unit 42

Credit to Author: BrianKrebs| Date: Thu, 24 Jul 2025 17:57:06 +0000

KrebsOnSecurity recently heard from a reader whose boss’s email account got phished and was used to trick one of the company’s customers into sending a large payment to scammers. An investigation into the attacker’s infrastructure points to a long-running Nigerian cybercrime group that is actively targeting established companies in the transportation and aviation industries.

Independent Krebs Security

U.S. Soldier Charged in AT&T Hack Searched “Can Hacking Be Treason”

February 28, 2025 0 Comments AT&T, Breadcrumbs, cameron john wagenius, connor riley moucka, john erin binns, kiberphant0m, Ne'er-Do-Well News

Credit to Author: BrianKrebs| Date: Thu, 27 Feb 2025 03:39:25 +0000

A U.S. Army soldier who pleaded guilty last week to leaking phone records for high-ranking U.S. government officials searched online for non-extradition countries and for an answer to the question “can hacking be treason?” prosecutors in the case said Wednesday. The government disclosed the details in a court motion to keep the defendant in custody until he is discharged from the military.

Independent Krebs Security

Who’s Behind the Seized Forums ‘Cracked’ & ‘Nulled’?

February 4, 2025 0 Comments 1337 services gmbh, A Little Sunshine, as210558, Breadcrumbs, constella intelligence, cracked, domaintools, dreamdrive gmbh, finn alexander grimpe, finn@shoppy.gg, finndev, florian, florian marzahl, hrb 164175, intel 471, lucas sohn, northdata.com, nulled, olivia.messla@outlook.de, operation talent, sellix, shoppy ecommerce ltd, starkrdp

Credit to Author: BrianKrebs| Date: Tue, 04 Feb 2025 17:09:16 +0000

The FBI joined authorities across Europe last week in seizing domain names for Cracked and Nulled, English-language cybercrime forums with millions of users that trafficked in stolen data, hacking tools and malware. An investigation into the history of these communities shows their apparent co-founders quite openly operate an Internet service provider and a pair of e-commerce platforms catering to buyers and sellers on both forums.

Independent Krebs Security

FBI, Dutch Police Disrupt ‘Manipulaters’ Phishing Gang

January 31, 2025 0 Comments A Little Sunshine, bec fraud, Breadcrumbs, business email compromise, cracked, domaintools, dutch national police, FBI, fudco, fudpage, fudtools, heartsender, Ne'er-Do-Well News, operation talent, saim raza, sellix, the manipulaters, u.s. department of justice, wecodesolutions

Credit to Author: BrianKrebs| Date: Fri, 31 Jan 2025 18:35:32 +0000

The FBI and authorities in The Netherlands this week seized a number of servers and domains for a hugely popular spam and malware dissemination service operating out of Pakistan. The proprietors of the service, who use the collective nickname “The Manipulaters,” have been the subject of three stories published here since 2015. The FBI said the main clientele are organized crime groups that try to trick victim companies into making payments to a third party.

Independent Krebs Security

Web Hacking Service ‘Araneida’ Tied to Turkish IT Firm

December 19, 2024 0 Comments A Little Sunshine, acunetix, altug sara, altugsara321@gmail.com, araneida scanner, bilitro yazilim, Breadcrumbs, domaintools, Fin7, invicti security, matt sciberras, Ne'er-Do-Well News, neil roseman, ori0nbusiness@protonmail.com, silent push, The Coming Storm, u.s. department of health and human services, zach edwards

Credit to Author: BrianKrebs| Date: Thu, 19 Dec 2024 17:07:30 +0000

Cybercriminals are selling hundreds of thousands of credential sets stolen with the help of a cracked version of Acunetix, a powerful commercial web app vulnerability scanner, new research finds. The cracked software is being resold as a cloud-based attack tool by at least two different services, one of which KrebsOnSecurity traced to an information technology firm based in Turkey.

Independent Krebs Security

How Cryptocurrency Turns to Cash in Russian Banks

December 11, 2024 0 Comments A Little Sunshine, Binance, blaven technologies, Breadcrumbs, chainalysis, CloudFlare, cryptomus, ctv news, fintrac, icon tech sro, investigative journalism foundation, mezhundarondnaya ibu sro, peter german, pq hosting, rcmp, richard sanders, russia's war on ukraine, vira krychka, Web Fraud 2.0, ws management and advisory corporation ltd, xeltox enterprises

Credit to Author: BrianKrebs| Date: Wed, 11 Dec 2024 21:38:48 +0000

A financial firm registered in Canada has emerged as the payment processor for dozens of Russian cryptocurrency exchanges and websites hawking cybercrime services aimed at Russian-speaking customers, new research finds. Meanwhile, an investigation into the Vancouver street address used by this company shows it is home to dozens of foreign currency dealers, money transfer businesses, and cryptocurrency exchanges — none of which are physically located there.

Independent Krebs Security

Canadian Man Arrested in Snowflake Data Extortions

November 5, 2024 0 Comments A Little Sunshine, advance auto parts, alexander antonin moucka, at&t breach, atomwaffen division, bharat sanchar nigam ltd, Breadcrumbs, connor riley moucka, court, intelsecrets, irdev, john erin binns, judische, kiberphant0m, leak society, lending tree, mandiant, Ne'er-Do-Well News, rapelash, Satori, SIM swapping, snowflake, Ticketmaster, unc5537, verizon, waifu

Credit to Author: BrianKrebs| Date: Tue, 05 Nov 2024 17:10:04 +0000

A 26-year-old man in Ontario, Canada has been arrested for allegedly stealing data from and extorting more than 160 companies that used the cloud data service Snowflake. On October 30, Canadian authorities arrested Alexander Moucka, a.k.a. Connor Riley Moucka of Kitchener, Ontario, on a provisional arrest warrant from the United States. Bloomberg first reported Moucka’s alleged ties to the Snowflake hacks on Monday. At the end of 2023, malicious hackers learned that many large companies had uploaded huge volumes of sensitive customer data to Snowflake accounts that were protected with little more than a username and password (no multi-factor authentication required). After scouring darknet markets for stolen Snowflake account credentials, the hackers began raiding the data storage repositories used by some of the world’s largest corporations.

Independent Krebs Security

Lamborghini Carjackers Lured by $243M Cyberheist

October 9, 2024 0 Comments A Little Sunshine, angel "chi chi" borrero, anydesk, Breadcrumbs, gemini, jeandiel "box" serrano, malone "greavys" lam, Ne'er-Do-Well News, pantic, reynaldo "rey" diaz, SIM swapping, swag, the com, veer chetal, Web Fraud 2.0, wiz, zachxbt

Credit to Author: BrianKrebs| Date: Wed, 09 Oct 2024 17:36:27 +0000

The parents of a 19-year-old Connecticut honors student accused of taking part in a $243 million cryptocurrency heist in August were carjacked a week later, while out house-hunting in a brand new Lamborghini. Prosecutors say the couple was beaten and briefly kidnapped by six young men who traveled from Florida as part of a botched plan to hold the parents for ransom.

← Previous