Independent cybersecurity news site run by journalist Brian Krebs, known for investigative reporting on data breaches, cybercrime, and online fraud.
In December 2024, KrebsOnSecurity reported analyst Richard Sanders's finding that all 122 cybercrime services he tested took payments through Cryptomus. The processor listed a Vancouver address, where a CTV and IJF count found at least 90 registrations.
Reality
Britain sanctioned Cryptomus, also operating as Heleket, on October 8, freezing its assets at UK banks and barring British firms from dealing with it. Canada's CAD $176 million fine did not stop the platform; analyst Richard Sanders says sanctions do.
Reality
Dutch police detained an alleged ShinyHunters leader on September 15, seven days before the group defaced the FBI's jobs website. The FBI says it is still chasing the rest of the group, so the vendor services and web portals it has used to get in remain the exposure to manage.
Perspective Coverage
3 publishersReality
Army soldier Cameron Wagenius got 70 months in prison for extorting AT&T with call records taken from Snowflake accounts that lacked MFA. His group got in with exposed credentials alone, and AT&T's $370,000 ransom did not stop the leaks that followed.
Perspective Coverage
7 publishersReality
Atlas Data Privacy Corp sued the people-search broker Radaris under Daniel's Law, filed twice, and now holds an order transferring radaris.com and more than a dozen related domains to it.
Reality
IDScan.net is notifying people about names and ID numbers and offering credit monitoring, while the records Brian Krebs examined each carried infrared and ultraviolet captures, the layer that document authentication actually tests.
Perspective Coverage
4 publishersReality
KrebsOnSecurity traced the records toward New Orleans ID-verification vendor IDScan after nine people matched timestamps on their stolen scans to the day they handed a license over. The FBI's New Orleans field office says it is looking into the incident.
Reality
IDScan.net sells the compliance layer behind age and ID checks at thousands of dispensaries and at Hertz, and Techdirt notes its trust page stayed up for days after the dark web store opened. The FBI is now asking where the images came from.
Reality
Australian Federal Police arrested two men over malicious code the agency estimates reached more than 1,000 organisations. What identified the alleged leader was a screen name he kept using on other platforms.
Reality
DecryptAds cross-references ads.txt, app-ads.txt and sellers.json into one searchable view. In ESPN's files it counts 143 ad partners and 19 registered data broker domains.
Reality