Cyber Risks · Krebs on Security

Spy Service Exposes Nigerian ‘Yahoo Boys’

Summary: A web-based keylogging service called BestRecovery, which charged $25 to $33 per month, was hacked and its database of more than 3,000 paying customers was exposed, along with the keylog records customers kept on the service. The user list was recoverable with little more than a web browser, and most customers signed up with yahoo.com addresses and appeared to be Nigerian 419 scammers, many of whose own machines carried the note 'Yahoo Boys'.

What you should know: The same service was used both to infect victims and to spy on scammers, and the logs show romance-scam operators disguising the keylogger as pictures to infect victims in the United States, with roughly ten percent of user email addresses tied to active Facebook accounts.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related