Live data from Hacker News

How are cyber criminals rolling in 2025?

vin01.github.io

41–50 of 97 posts

Re: How are cyber criminals rolling in 2025?

#41

Is it just me or is cybersecurity... Calming down? I feel like a few years ago there was constant news of ransomware, intrusions, vulnerabilities, etc, but more recently the defensive side seems to have the upper hand.

You only hear about the offensive side winning when the company can't prevent it from leaking. Rest assured, the only thing "calming down" in cybersecurity is the nihilism that nothing involving a human will ever be secure.

Re: How are cyber criminals rolling in 2025?

#42

john wick site:europa.eu https://www.google.com/search?q=john+wick+site%3Aeuropa.eu&h... gta 5 site:europa.eu https://www.google.com/search?q=gta+5+site%3Aeuropa.eu&hl=en Watch full site:europa.eu https://www.google.com/search?q=Watch+full+site%3Aeuropa.eu&...

When clicked, all show: page not found

So, fixed now?

Re: How are cyber criminals rolling in 2025?

#43

Earlier quoted context omitted.

At my old university ~15 years ago, all IPs of all computers were public IPV4 addresses . Any computer plugged in to any ethernet port on campus was given such a "quasi-static" IP address. All normal ports were open - ssh, http(s), you name it. It was the OG zero trust architecture.

> At my old university ~15 years ago, all IPs of all computers were public IPV4 addresses. Any computer plugged in to any ethernet port on campus was given such a "quasi-static" IP address. Well that's fine; my school did the same thing and other than feeling wasteful there was no- > All normal ports were open - ssh, http(s), you name it. It was the OG zero trust architecture. Oh. Yeah, open ports by default is... an…

When you're living in the residences and there's a DC++ server running, it's pretty sweet. Ours had a whole 1.5TB of stuff on it!

Re: How are cyber criminals rolling in 2025?

#44
post #18

Earlier quoted context omitted.

How desperate one has to be...

Have you tried getting ticketing support from Ticketmaster? Even a sketchy phone number is better than no option at all…

I don't mean reaching for support. I mean setting up a scam like this. It seems so bottom of the barrel scummy, creative too, but mostly scummy.

Imagine you have the creativity and criminal energy to conceptualize and operate something like this (and the rat tail of justice evasion, laundering money, etc). It seems so much easier to make money in the honest economy.

Unless of course you're operating for a rogue state...

Re: How are cyber criminals rolling in 2025?

#45
post #44

Earlier quoted context omitted.

Have you tried getting ticketing support from Ticketmaster? Even a sketchy phone number is better than no option at all…

I don't mean reaching for support. I mean setting up a scam like this. It seems so bottom of the barrel scummy, creative too, but mostly scummy. Imagine you have the creativity and criminal energy to conceptualize and operate something like this (and the rat tail of justice evasion, laundering money, etc). It seems so much easier to make money in the honest economy. Unless of course you're operating for a rogue state…

You've got a shocking amount of faith in the honest economy for this moment in time

Re: How are cyber criminals rolling in 2025?

#46

Among the common vulnerabilities listed: > Outdated Wordpress plugins and CMS systems No surprise, having worked in edu the following scenario was very common: 1) Researcher gets a grant for a project 2) Grad student sets up a Drupal site for the project 3) Things are maintained and updated for a couple of years 4) Grant runs out, project wraps up, student graduates, everyone forgets about the server which sits unatt…

At my old university ~15 years ago, all IPs of all computers were public IPV4 addresses . Any computer plugged in to any ethernet port on campus was given such a "quasi-static" IP address. All normal ports were open - ssh, http(s), you name it. It was the OG zero trust architecture.

My university does the same, except they understand the concept of "firewalls"

Re: How are cyber criminals rolling in 2025?

#48

Earlier quoted context omitted.

So, I craft a search where the search query is “call 1 800 scam”, then I buy a google ad with key word of “ticketmaster help”, the ad links to real ticketmaster with my query, and google shows that ad to someone having trouble and hey presto they call my scam line at 4 quid a minute from their mobile? Yuck all round. I mean ticketmaster is just a sin eater for greedy popstars but yuck ..

But why does google allow unverified owners of a domain to buy ads for it? Surely only ticketmaster or agencies approved by ticket master should be allowed to do this?

There was a time when you search for WhatsApp in Google the first sponsored result is a scam site

Re: How are cyber criminals rolling in 2025?

#49

I am surprised no one mentioned using LLMs to spell and grammar check their emails and vibe-code bank landing-pages to continue a more polished version of scamming elderly people out of their life savings.

The misspellings/shitty grammar are on purpose.

Re: How are cyber criminals rolling in 2025?

#50

Earlier quoted context omitted.

But why does google allow unverified owners of a domain to buy ads for it? Surely only ticketmaster or agencies approved by ticket master should be allowed to do this?

There was a time when you search for WhatsApp in Google the first sponsored result is a scam site

If you search for "HP Support" or "Dell Phone Number" you will get a scam site 50% of the time now.
Post reply on HN