Krebs on Security

Krebs on Security
Name	Krebs on Security
Creator	Brian Krebs
Launch date	2009
Genre	Cybersecurity, Computer security
Website type	Blog

Krebs on Security is a widely read and influential blog focused on cybersecurity, computer security, and cybercrime investigations. Founded in 2009 by journalist Brian Krebs, the site is renowned for its in-depth investigative reporting on hacker groups, data breaches, malware operations, and online fraud schemes. It has become a primary source for security professionals, law enforcement agencies, and the general public seeking detailed analysis of major digital threats.

History and Background

The blog emerged from the investigative work of its founder, Brian Krebs, who previously covered internet security and cybercrime for The Washington Post. After leaving the newspaper in 2009, Krebs launched his independent site to continue deep-dive reporting on the underground economy and cybercriminal enterprises. The blog's genesis is closely tied to his early reporting on major threats like the Conficker worm and the operations of the Russian Business Network. Its growth paralleled the increasing prevalence of high-profile incidents such as the Target Corporation data breach and the rise of ransomware gangs like REvil.

Content and Coverage

The blog provides exhaustive analysis of cyber attack methodologies, software vulnerabilities, and the infrastructure supporting malicious activities. Regular content includes forensic breakdowns of phishing campaigns, denial-of-service attacks, and point-of-sale malware used against retailers like Home Depot and Sony. Krebs frequently publishes detailed profiles on cybercriminal actors and groups, often tracing their activities to specific forums on the dark web or services in countries like Ukraine and Romania. The site also covers significant legal actions by entities such as the Federal Bureau of Investigation and the Department of Justice.

Notable Investigations and Impact

Krebs on Security has broken numerous major stories that have led to tangible real-world consequences. A landmark investigation into the Mirai botnet helped identify its creators and detailed its role in massive attacks on Dyn and OVH. The blog's relentless coverage of the credit card BIN attack service Brian's Clubs directly preceded its seizure by international law enforcement. Its reporting on the Carbanak cybercrime group and the Equation Group leak attributed to the Shadow Brokers provided critical insights into state-sponsored espionage. These investigations have frequently prompted action from agencies like the United States Secret Service and Europol.

Recognition and Awards

The blog and its founder have received significant acclaim within the journalism and cybersecurity communities. Brian Krebs was awarded the Gerald Loeb Award for his reporting on the Target Corporation breach. The site's work has been recognized by organizations such as the National Press Foundation, which honored Krebs with an award for excellence in technology journalism. His contributions to public understanding of cyber threats have also been cited in testimonies before the United States Congress and have influenced policy discussions at institutions like the Atlantic Council.

Business Model and Operations

Krebs on Security operates primarily as an independent, advertising-supported publication, though it has experimented with subscription models. The site maintains a strict policy against accepting sponsored content or payments from the subjects of its reporting to ensure editorial independence. Its operations are notably lean, with Brian Krebs serving as the principal reporter and editor, occasionally collaborating with external researchers from firms like Mandiant or analysts from CrowdStrike. The blog's infrastructure has itself been the target of massive retaliation attacks, including a record-setting DDoS attack allegedly launched by the same actors behind the Mirai botnet.

Criticism and Controversies

The blog's aggressive investigative tactics have occasionally drawn criticism from within the security community. Some have argued that its detailed reporting on vulnerabilities or criminal methodologies could serve as an instructional guide for other malicious actors. The site has also faced legal threats, including libel lawsuits, from individuals and companies named in its reports, such as the anti-virus software firm Kaspersky Lab. Furthermore, its role in the 2021 publication of data purportedly linked to the Conti ransomware group sparked debate over the ethics of disseminating potentially sensitive information.

Category:Computer security websites Category:American blogs Category:Cybersecurity