Jump to content

Brian Krebs

From Wikipedia, the free encyclopedia

This is an old revision of this page, as edited by Citation bot (talk | contribs) at 22:05, 23 August 2022 (Alter: template type, title. Add: newspaper. Removed parameters. Some additions/deletions were parameter name changes. | Use this bot. Report bugs. | Suggested by BrownHairedGirl | #UCB_webform 978/3824). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

Brian Krebs
Born1972 (age 51–52)
Alabama
NationalityAmerican
EducationB.A. in International Relations, George Mason University, 1994
Occupation(s)Security journalist
Investigative reporter
OrganizationThe Washington Post (1995–2009)
Known forCoverage of profit-seeking cybercriminals
Interviewing hacker 0x80
Websitekrebsonsecurity.com

Brian Krebs (born 1972) is an American journalist and investigative reporter. He is best known for his coverage of profit-seeking cybercriminals.[1] Krebs is the author of a daily blog, KrebsOnSecurity.com, covering computer security and cybercrime. From 1995 to 2009, Krebs was a reporter for The Washington Post and covered tech policy, privacy and computer security as well as authoring the Security Fix blog. He is also known for interviewing hacker 0x80.[2]

Early life and education

Born in 1972 in Alabama,[1] Krebs earned a B.A. in International Relations from George Mason University in 1994.[3] His interest in cybercriminals grew after a computer worm locked him out of his own computer in 2001.[1]

Career

1999–2007

Krebs started his career at The Washington Post in the circulation department. From there, he obtained a job as a copy aide in the Post newsroom, where he split his time between sorting mail and taking dictation from reporters in the field. Krebs also worked as an editorial aide for the editorial department and the financial desk. In 1999, Krebs went to work as a staff writer for Newsbytes.com, a technology newswire owned by The Washington Post.[4]

When the Post sold Newsbytes in 2002, Krebs transitioned to Washingtonpost.com in Arlington, Virginia as a full-time staff writer. Krebs's stories appeared in both the print edition of the paper and Washingtonpost.com. In 2005, Krebs launched the Security Fix blog, a daily blog centered around computer security, cyber crime and tech policy. In December 2009, Krebs left Washingtonpost.com and launched KrebsOnSecurity.com.

Krebs has focused his reporting at his blog on the fallout from the activities of several organized cybercrime groups operating out of eastern Europe that have stolen tens of millions of dollars from small to mid-sized businesses through online banking fraud.[5] Krebs has written more than 75 stories about small businesses and other organizations that were victims of online banking fraud, an increasingly costly and common form of cybercrime.

Krebs wrote a series of investigative stories that culminated in the disconnection or dissolution of several Internet service providers that experts said catered primarily to cyber criminals. In August 2008, a series of articles he wrote for The Washington Post's Security Fix blog led to the unplugging of a northern California based hosting provider known as Intercage or Atrivo.[6]

During that same time, Krebs published a two-part investigation on illicit activity at domain name registrar EstDomains, one of Atrivo's biggest customers, showing that the company's president, Vladimir Tšaštšin, recently had been convicted of credit card fraud, document forgery and money laundering.[7] Two months later, the Internet Corporation for Assigned Names and Numbers (ICANN), the entity charged with overseeing the domain registration industry, revoked EstDomains' charter, noting that Tšaštšin's convictions violated an ICANN policy that prohibits officers of a registrar from having a criminal record.[8] In November 2011, Tšaštšin and five other men would be arrested by Estonian authorities and charged with running a massive click fraud operation with the help of the DNS Changer Trojan.[9]

2008–2012

In November 2008, Krebs published an investigative series that led to the disconnection of McColo, another northern California hosting firm that experts said was home to control networks for most of the world's largest botnets.[10] As a result of Krebs' reporting, both of McColo's upstream Internet providers disconnected McColo from the rest of the Internet, causing an immediate and sustained drop in the volume of junk e-mail sent worldwide. Estimates of the amount and duration of the decline in spam due to the McColo takedown vary, from 40 percent to 70 percent, and from a few weeks to several months.[11]

Krebs is credited with being the first journalist, in 2010, to report on the malware that would later become known as Stuxnet.[12] In 2012, he was cited in a follow-up to another breach of credit and debit card data, in this case potentially more than 10 million Visa and MasterCard accounts with transactions handled by Global Payments Inc. of Atlanta, Georgia.[13]

2013–present

On March 14, 2013, Krebs became one of the first journalists to become a victim of swatting.[14] On December 18, 2013, Krebs broke the story that Target Corporation had been breached of 40 million credit cards. Six days later, Krebs identified a Ukrainian man who Krebs said was behind a primary black market site selling Target customers' credit and debit card information for as much as US$100 apiece.[15] In 2014, Krebs published a book called Spam Nation: The Inside Story of Organized Cybercrime—from Global Epidemic to Your Front Door, which went on to win a 2015 PROSE Award.[16]

In 2016, Krebs's blog was the target of one of the largest ever DDoS attacks,[17] apparently in retaliation for Krebs's role in investigating the vDOS botnet.[18][19][20] Akamai, which was hosting the blog on a pro bono basis, quit hosting his blog as a result of the attack, causing it to shut down.[21] As of September 25, 2016, Google's Project Shield had taken over the task of protecting his site, also on a pro-bono basis.[22]

An article by Krebs on 27 March 2018 on KrebsOnSecurity.com about the mining software company and script "Coinhive" where Krebs published the names of admins of the German imageboard pr0gramm, as a former admin is the inventor of the script and owner of the company, was answered by an unusual protest action by the users of that imageboard. Using the pun of "Krebs" meaning "Cancer" in German, they donated to charitable organisations fighting against those diseases, collecting more than 200,000 Euro (245,000 USD) of donations until the evening of 28 March to the Deutsche Krebshilfe charity.[23]

Prior to 2021, his investigation of First American Financial's prior data breach led to an SEC investigation that concluding that "ensuing company disclosures preceded executives’ knowledge of unaddressed, months-old IT security reports."[24]

Awards and recognition

  • 2004 – Carnegie Mellon CyLab Cybersecurity Journalism Award of Merit[25]
  • 2005 – CNET News.com listed Security Fix as one of the top 100 blogs, saying "Good roundup of significant security issues. The Washington Post's Brian Krebs offers a userful, first-person perspective".[26]
  • 2009 – Winner of Cisco Systems' 1st Annual "Cyber Crime Hero" Award[27]
  • 2010 – Security Bloggers Network, "Best Non-Technical Security Blog"[28]
  • 2010 – SANS Institute Top Cybersecurity Journalist Award[29]
  • 2011 – Security Bloggers Network, "Blog That Best Represents the Industry"[30]
  • 2014 – National Press Foundation, "Chairman's Citation Award"[31]
  • 2017 – ISSA's President’s Award For Public Service[32]
  • 2019 – CISO MAG’s Cybersecurity Person of the Year[33]

Media appearances

Krebs speaks on computer security and cybercrime topics.

In October 2011, he gave keynote addresses at GOVCERT.NL [nl] in Rotterdam,[34][non-primary source needed] Secure 2011 in Warsaw, Poland,[35][non-primary source needed] SecTor 2011, in Toronto, Ontario, Canada,[36][non-primary source needed] and FIRST 2011 in Vienna, Austria.[37][non-primary source needed]

See also

References

  1. ^ a b c Perlroth, Nicole. "Reporting From the Web's Underbelly." The New York Times. Retrieved February 28, 2014.
  2. ^ Krebs, Brian (December 24, 2009). "Security Fix — Brian Krebs on computer and Internet security". Voices blogs, The Washington Post. Retrieved February 14, 2012.
  3. ^ Krebs, Brian. "Symposium III: Cybersecurity". UC Santa Barbara. Archived from the original on August 17, 2012. Retrieved July 27, 2013.
  4. ^ Weise, Karen (January 16, 2014). "Brian Krebs: The cybersecurity blogger hackers love to hate". Business Week. Retrieved January 17, 2014.
  5. ^ "Target: Small Businesses". Krebs On Security. Archived from the original on February 24, 2017. Retrieved February 23, 2017.
  6. ^ Krebs, Brian. "Security Fix — Report Slams U.S. Host as Major Source of Badware". Voices.washingtonpost.com. Retrieved February 14, 2012.
  7. ^ Krebs, Brian. "Security Fix — EstDomains: A Sordid History and a Storied CEO". Voices.washingtonpost.com. Retrieved February 14, 2012.
  8. ^ Krebs, Brian. "Security Fix — ICANN De-Accredits EstDomains for CEO's Fraud Convictions". Voices.washingtonpost.com. Retrieved February 14, 2012.
  9. ^ "The United States Department of Justice — United States Attorney's Office". Justice.gov. November 9, 2011. Retrieved February 14, 2012.[permanent dead link‍]
  10. ^ Krebs, Brian (November 11, 2008). "Major Source of Online Scams and Spams Knocked Offline". The Washington Post.
  11. ^ "McColo Outage". Cbl.abuseat.org. Archived from the original on December 18, 2008. Retrieved February 14, 2012.
  12. ^ Gross, Michael Joseph (March 2, 2011). "Stuxnet Worm: A Declaration of Cyber-War". Vanity Fair. Retrieved September 25, 2016.
  13. ^ Waters, Jennifer (March 30, 2012). "What to do if you fear your credit card's hacked". MarketWatch.
  14. ^ Jackman, Tom (March 27, 2013). "'SWATing,' the seamy 'underweb,' and award-winning Fairfax cybercrime journalist Brian Krebs". The Washington Post. Retrieved July 27, 2013.
  15. ^ Perlroth, Nicole (December 24, 2013). "Who Is Selling Target's Data?". The New York Times Company. Retrieved December 27, 2013.
  16. ^ PROSE Awards. "PROSE Awards: Winners". proseawards.com.
  17. ^ "The internet of stings". The Economist. October 8, 2016.
  18. ^ Ms. Smith (September 11, 2016). "Krebs' site under attack after alleged owners of DDoS-for-hire service were arrested". Network World. Retrieved September 25, 2016.
  19. ^ "Massive web attack hits security blogger". BBC. September 22, 2016. Retrieved September 25, 2016.
  20. ^ Kovacs, Eduard (September 21, 2016). "Brian Krebs' Blog Hit by 665 Gbps DDoS Attack". Security Week. Retrieved September 25, 2016.
  21. ^ Evans, Steve (September 23, 2016). "Krebs Website Offline After Akamai Withdraws DDoS Protection". Infosecurity Magazine. Retrieved September 23, 2016.
  22. ^ Krebs, Brian (September 25, 2016). "The Democratization of Censorship". Krebs On Security.
  23. ^ Catalin Cimpanu: Angry Users Donate $120K to Cancer Research After Brian Krebs' Coinhive Article. bleepingcomputer.com, 28 March 2018
  24. ^ Noah Barsky (August 31, 2021). "The SEC Exposed Cybersecurity's Fatal Flaw — Executive Resistance To Bad News". Forbes.
  25. ^ "2004 Cybersecurity Journalism Awards :: CyLab". Cylab.cmu.edu. Archived from the original on March 6, 2006. Retrieved February 14, 2012.
  26. ^ "News.com's Blog 100 | CNET News.com". News.com.com. Retrieved February 14, 2012.[permanent dead link‍]
  27. ^ "Security" (PDF). Cisco. July 17, 2015.
  28. ^ "RSA Conference | Security Blogger Meetup | They're all winners". Archived from the original on March 5, 2013. Retrieved January 15, 2014.
  29. ^ "2010 Top Cyber Security Journalist Award Winners". SANS. February 10, 2012. Retrieved February 14, 2012.
  30. ^ "RSA Conference | Security Blogger Meetup | And the Winners Are". 365.rsaconference.com. Archived from the original on February 14, 2012. Retrieved February 14, 2012.
  31. ^ "The 2014 Chairman's Citation Winner". Retrieved November 10, 2015.
  32. ^ "ISSA International Awards".
  33. ^ "Brian Krebs is the CISO MAG Cybersecurity Person of the Year".
  34. ^ "Govcert.nl". Govcert.nl. Archived from the original on December 14, 2011. Retrieved February 14, 2012.
  35. ^ "SECURE 2011". Secure.edu.pl. Archived from the original on March 11, 2012. Retrieved February 14, 2012.
  36. ^ "Security Conference Toronto Canada — Sector 2012 | Schedule". Sector.ca. Archived from the original on March 7, 2012. Retrieved February 14, 2012.
  37. ^ " "23rd Annual FIRST Conference \\ Vienna, Austria \\ 12-17 June 2011". first.org.
Retrieved from "https://en.wikipedia.org/w/index.php?title=Brian_Krebs&oldid=1106266957"