Security Affairs

MAY 10, 2022

“Frappo” acts as a Phishing-as-a-Service and enables cybercriminals the ability to host and generate high-quality phishing pages which impersonate major online banking, e-commerce, popular retailers, and online-services to steal customer data. Detailed analysis of the Phishing-As-A-Service Frappo is available here: [link].

Phishing 72

Phishing Retail Financial Services Data breaches 72

Security Affairs

SEPTEMBER 25, 2018

According to Akamai report titled “[state of the internet] / security CREDENTIAL STUFFING ATTACKS “ the credential stuffing attacks are a growing threat and often underestimated. This kind of attacks is very efficient due to the bad habit of users of reusing the same password over multiple services.

Passwords 79

Passwords Data breaches Financial Services Retail 79

The Last Watchdog

JANUARY 30, 2019

Turn the corner into 2019 and we find Citigroup, CapitalOne, Wells Fargo and HSBC Life Insurance among a host of firms hitting the crisis button after their customers’ records turned up on a database of some 24 million financial and banking documents found parked on an Internet-accessible server — without so much as password protection.

Risk 147

Risk Financial Services Insurance Cybersecurity 147

Krebs on Security

AUGUST 22, 2018

When a victim experiences a fraudulent SIM swap, their phone suddenly has no service and all incoming calls and text messages are sent to the attacker’s device. This includes any one-time codes sent via text message or automated phone call that many companies use to supplement passwords for their online accounts.

Blockchain 137

Blockchain Retail Financial Services Access 137

CGI

DECEMBER 2, 2016

One of the hottest topics at this year’s Sibos conference in Geneva, Switzerland was open APIs (application programming interfaces), and how their introduction is causing concern among some financial institutions, while offering promising opportunities for early adopters. Balancing ease of use versus security. Why is Uber successful?

Financial Services 40

Financial Services Digital transformation Marketing Data structuring 40

ForAllSecure

JANUARY 19, 2022

Passwords are everywhere, but they probably weren't intended to be used as much as they are today. Is there something more secure? Maybe you are at an organization that requires you to change your passwords every 90 days or so, and so you have password fatigue -- there are only so many variations you can do every 90 days or so.

Passwords 52

Passwords Authentication Access Data breaches 52

The Last Watchdog

JULY 7, 2021

Credential stuffing is a type of advanced brute force hacking that leverages software automation to insert stolen usernames and passwords into web page forms, at scale, until the attacker gains access to a targeted account. I had the chance to discuss this with Akamai security researcher Steve Ragan, the author of the report.

Passwords 257

Passwords Authentication Marketing Access 257

Krebs on Security

DECEMBER 14, 2023

retail giant Target was battling a wide-ranging computer intrusion that compromised more than 40 million customer payment cards over the previous month. However, in a classic failure of operational security, many of these employees had their MegaPlan account messages automatically forwarded to their real ChronoPay email accounts.

Computer and Electronics 231

Computer and Electronics Marketing Sales Healthcare 231