CrazyMusicians

That's a pretty decent list of breaches. Never seen it before. Thanks for sharing. I can't believe they didn't mention the Ashley Madison breach, which affected more than 30 million people, ended countless marriages, and led to more than a few suicides.

with the devices mentioned in the article, there is no consent requested, and the malicious apps are installed either before the box is sold or after as a requirement for getting the streaming services to work.

You very much can not be aware of it. Consider what happens when you're simswapped at 2 am. Are you going to notice that? Probably not. And maybe not after you get up and check your phone. Because your phone may be connected to the internet via your home wifi and you don't even notice your phone has no bars and no service because you're still able to browse the web and check email.

There were a series of scams late last year where the scammers targeting eldery people sent Ubers to pick up cash from victims.

https://www.tampabay.com/news/crime/2021/12/10/hillsborough-...

It's possible many network operators don't know everyone who's on their networks unless someone specifically brings it to their attention. That seems to be the case here.

Bingo! Their tagline should be, if you're here, you already know you're screwed.

You're absolutely right. Here's one high-profile example:

https://www.thedailybeast.com/feds-say-bounty-hunter-matthew...

From: https://twitter.com/briankrebs/status/1508819347963363329

Some backstory that's not in the piece. I originally started reporting this about six months ago, when an anonymous tip suggested people were creating fake police department .org domains and sending requests from there. Spent ridiculous amt of time chasing that to no end.

As part of that research I looked at all new police dept domains in the last year. Found so many I was sure were fake. They were all real. Some were half-done. Some completely wide open, security-wise. It was depressing to learn after that there are > 18k police depts nationwide.

These are all good ideas. It seems to me part of the problem with these ransom attacks is the intruders aren't pouncing the minute they get inside the victim's network. They take their time, figure out where everything is (including backups) and then only force-spread the ransom malware after they have staged everything just-so.

This story was originally reported by American journalist brian krebs

http://krebsonsecurity.com/2016/09/israeli-online-attack-ser...

http://krebsonsecurity.com/2016/09/alleged-vdos-proprietors-...

Actually, freezing your credit does nothing to stop the bureaus from selling, mining, combining or otherwise doing what they want with the data they hold about you.