Hacker And The Fed

This week on Hacker And The Fed the US hunts Chinese malware that could disrupt American Military operations, a year in review of zero-day exploits, a study finds no evidence that ransomware victims with cyber insurance pay up more often, there's fighting words between Tenable CEO and Microsoft, and we answer listener questions from a listener in Greece, Holland, and a new minted NSA hacker.

Links from the episode:

U.S. Hunts Chinese Malware That Could Disrupt American Military Operations

https://dnyuz.com/2023/07/29/u-s-hunts-chinese-malware-that-could-disrupt-american-military-operations/

The Ups and Downs of 0-days: A Year in Review of 0-days Exploited In-the-Wild in 2022

https://security.googleblog.com/2023/07/the-ups-and-downs-of-0-days-year-in.html

No evidence ransomware victims with cyber insurance pay up more often

https://therecord.media/ransomware-cyber-insurance-payments-uk-report

Tenable CEO accuses Microsoft of negligence in addressing security flaw

https://cyberscoop.com/tenable-microsoft-negligence-security-flaw/

https://twitter.com/MalwareJake/status/1686869818912202755

https://www.wired.com/2002/01/bill-gates-trustworthy-computing/

SMS Traffic Pumping Fraud

https://support.twilio.com/hc/en-us/articles/8360406023067-SMS-Traffic-Pumping-Fraud

New acoustic attack steals data from keystrokes with 95% accuracy

https://www.bleepingcomputer.com/news/security/new-acoustic-attack-steals-data-from-keystrokes-with-95-percent-accuracy/

Get your Hacker and the Fed merchandise at hackerandthefed.com

This week on Hacker And The Fed what authentication attacks might look like in a phishing resistant future, the SEC now requires companies to disclose cyber attacks, there are many more US government domains in the .com world than you might think, and other news stories from this week in cyber security.

Links from the episode:

What might authentication attacks look like in a phishing-resistant future?

https://blog.talosintelligence.com/what-might-authentication-attacks-look-like-in-a-phishing-resistant-future/

The Messaging Layer Security (MLS) Protocol

https://datatracker.ietf.org/doc/html/rfc9420

List of public government managed domains that exist outside of the top-level .gov and .mil domains

https://github.com/GSA/govt-urls/blob/main/1_govt_urls_full.csv

Top level domain operator wants out of the business

https://domainnamewire.com/2023/07/26/top-level-domain-operator-wants-out-of-the-business/

Network giants unite to fight security risks

https://www.networkworld.com/article/3703233/network-giants-unite-to-fight-security-risks.html

Cybersecurity Agencies Warn Against IDOR Bugs Exploited for Data Breaches

https://thehackernews.com/2023/07/cybersecurity-agencies-warn-against.html

Norwegian government IT systems hacked using zero-day flaw

https://www.bleepingcomputer.com/news/security/norwegian-government-it-systems-hacked-using-zero-day-flaw/

https://www.dss.dep.no/aktuelle-saker/departementer-utsatt-for-dataangrep/

https://www.wsj.com/articles/critical-infrastructure-companies-warned-to-watch-for-ongoing-cyberattack-76508d83

Satellites Are Rife With Basic Security Flaws

https://www.wired.com/story/satellites-basic-security-flaws/

Support our sponsors:

Go to hellofresh.com/50hatf code 50hatf for 50% off plus free shipping

Get your Hacker and the Fed merchandise at hackerandthefed.com

Get your Hacker and the Fed merchandise at hackerandthefed.com

This week on Hacker And The Fed new cyber security labels proposed by the US government could help us buy our new devices, an employee exposes thousands of intelligence and defense employees, Google may be restricting internet access to some employees to reduce their cyber attack risk, a hacker infects his own computer, and Google says an Apple employee found a zero-day but didn't report it, and we answer listener questions about our phones getting searched and email encryption.

Links from the episode: 

White House teams with Amazon, Google and Qualcomm on cybersecurity labels for gadgets

https://www.cnbc.com/2023/07/18/us-cyber-trust-labels-will-help-consumers-pick-safer-smart-devices.html

Google exposes intelligence and defense employee names in VirusTotal leak

https://therecord.media/virustotal-user-email-addresses-leaked-google-military-intelligence

Google restricting internet access to some employees to reduce cyberattack risk

https://www.cnbc.com/2023/07/18/google-restricting-internet-access-to-some-employees-for-security.html

Black Hat Hacker Exposes Real Identity After Infecting Own Computer With Malware

https://www.securityweek.com/black-hat-hacker-exposes-real-identity-after-infecting-own-computer-with-malware/

IT Security Analyst Jailed for Impersonating as a Hacker in Own Company

https://cybersecuritynews.com/it-security-analyst-jailed/

Google says Apple employee found a zero-day but did not report it

https://techcrunch.com/2023/07/20/google-says-apple-employee-found-a-zero-day-but-did-not-report-it/

https://news.ycombinator.com/item?id=36803537

Microsoft Cybersecurity Analyst Professional Certificate

https://www.coursera.org/professional-certificates/microsoft-cybersecurity-analyst

Cybersecurity Expert Kevin David Mitnick died

https://www.dignitymemorial.com/obituaries/las-vegas-nv/kevin-mitnick-11371668

Listener Questions:

https://www.theverge.com/2021/8/18/22630439/apple-csam-neuralhash-collision-vulnerability-flaw-cryptography

Support our sponsors:

Go to JoinDeleteMe.com/FED and use the code FED20 for 20% off

Go to drata.com/partner/hacker-fed and get 10% off Drata and waived implementation fees

Get your Hacker and the Fed merchandise at hackerandthefed.com

This week on Hacker And The Fed you can't always count on Google for the right telephone number for an airline, an American cloud based directory as a service platform announces that they were hacked by a state sponsored threat actor, millions of US military emails may be ending up in the wrong hands, a new ransomware looks like a windows update, we answer listener questions, and Hector tells a fascinating story about a hacking methodology.

Links from the episode:

Airline Fake Contact Number on Google Maps

https://twitter.com/Shmuli/status/1680669938468499458

https://twitter.com/SwiftOnSecurity/status/1680926780599812098

JumpCloud discloses breach by state-backed APT hacking group

https://www.bleepingcomputer.com/news/security/jumpcloud-discloses-breach-by-state-backed-apt-hacking-group/

JumpClouds IOCs - https://jumpcloud.com/support/july-2023-iocs

Domains like army․ml, pentagon․ml, navy․ml and af․ml all have Mail Exchange records pointing to 'handle․catchemail․ml'

https://twitter.com/mikko/status/1680947795862200325

Watch out for this new malicious ransomware disguised as Windows updates

https://www.foxnews.com/tech/watch-out-new-malicious-ransomware-disguised-windows-updates

https://www.trendmicro.com/en_id/research/23/g/tailing-big-head-ransomware-variants-tactics-and-impact.html

Listener Questions

https://www.lsu.edu/mediacenter/news/2023/06/13-cyber-clinic.php

Support our sponsors:

Go to JoinDeleteMe.com/FED and use the code FED20 for 20% off

Go to drata.com/partner/hacker-fed and get 10% off Drata and waived implementation fees

Get your Hacker and the Fed merchandise at hackerandthefed.com

This week on Hacker And The Fed your lightbulbs may be giving away the location of your house, could Microsoft end ransomware right now? Also, voice authentication may be broken, the latest ransomware attack shows us the important of logistics security, convenience has once again jeopardized Google authenticator security, and a listener shares a wild car theft story.

Links from the episode:

Your lightbulbs may be giving out your exact location

twitter.com/haxrob/status/1676416949499338752

Microsoft Can Fix Ransomware Tomorrow

darkreading.com/vulnerabilities-threats/microsoft-can-fix-ransomware-tomorrow

Cybercriminals can break voice authentication with 99% success rate

helpnetsecurity.com/2023/07/06/voice-authentication-insecurity/

INTERPOL Nabs Hacking Crew OPERA1ER's Leader Behind $11 Million Cybercrime

thehackernews.com/2023/07/interpol-nabs-hacking-crew-opera1ers.html

Japan's biggest port, Nagoya, hit by suspected cyberattack

asia.nikkei.com/Business/Technology/Japan-s-biggest-port-Nagoya-hit-by-suspected-cyberattack

Raising concerns over Google Authenticator’s new features

techradar.com/pro/raising-concerns-over-google-authenticators-new-features

Trinidad and Tobago facing outages after cyberattack

therecord.media/trinidad-tobago-hit-with-cyberattack

Listener Questions

ksltv.com/563455/police-release-images-of-suspect-who-broke-into-familys-car-at-airport-then-their-home/

Support our sponsors:

Go to JoinDeleteMe.com/FED and use the code FED20 for 20% off

Go to drata.com/partner/hacker-fed and get 10% off Drata and waived implementation fees

This week on Hacker And The Fed your car may be collecting up to 25 GB per hour of data about you and a new malware payload vector is using DNS, what is “encryptionless ransomware”. We also answer listener questions about a variety of topics, including how to prepare for a cybersecurity career in the US government, banking security, and hack-backs.

Links from the episode:

How Your New Car Tracks You

https://www.wired.com/story/car-data-privacy-toyota-honda-ford/

DNS TXT Records Can Be Used by Hackers to Execute Malware

https://cybersecuritynews.com/dns-txt-records-to-execute-malware/?amp

Encryption-less ransomware: Warning issued over emerging attack method for threat actors

https://www.itpro.com/security/ransomware/encryption-less-ransomware-warning-issued-over-emerging-attack-method-for-threat-actors

Support our sponsors:

Go to JoinDeleteMe.com/FED and use the code FED20 for 20% off

Go to drata.com/partner/hacker-fed and get 10% off Drata and waived implementation fees

This week on Hacker And The Fed a CEO did a hack back and was sentenced to prison, Reddit hackers demanded a price roll back, repo jacking and fake Github repositories, and we answer listener questions about Hector's old hacks and VPNs.

Links from the episode:

I Was Sentenced to 18 Months in Prison for Hacking Back - My Story

twitter.com/silascutler/status/1671144482769608705 -> https://hackernoon.com/i-was-sentenced-to-18-months-in-prison-for-hacking-back-my-story

Reddit hackers demand $4.5 million ransom and API pricing changes

theverge.com/2023/6/19/23765895/reddit-hack-phishing-leak-api-pricing-steve-huffman

GitHub Dataset Research Reveals Millions Potentially Vulnerable to RepoJacking

blog.aquasec.com/github-dataset-research-reveals-millions-potentially-vulnerable-to-repojacking

Attackers Create Synthetic Security Researchers to Steal IP

darkreading.com/attacks-breaches/attackers-create-synthetic-security-researchers

Google announces $20 million investment for cyber clinics

cyberscoop.com/google-investment-cyber-clinics/

Listener Questions

https://fidoalliance.org/

Support our sponsors:

Go to JoinDeleteMe.com/FED and use the code FED20 for 20% off

This week on Hacker And The Fed a ransomware group hacked a widely used file transfer software and began leaking stolen data, Google claims it caught Chinese government hackers red-handed breaking into hundreds of networks, the Feds arrest a ransomware perpetrator in Arizona, and we nerd out on security researchers taking over various countries domains.

Links from the episode:

MOVEit Cyber Attack: Personal Data Of Millions Stolen From Oregon, Louisiana, U.S. Agency

forbes.com/sites/maryroeloffs/2023/06/16/moveit-cyber-attack-personal-data-of-millions-stolen-from-oregon-louisiana-us-agency/?sh=3cf2b1b46b05

US govt offers $10 million bounty for info on Clop ransomware

bleepingcomputer.com/news/security/us-govt-offers-10-million-bounty-for-info-on-clop-ransomware/amp/

Google claims it caught China government hackers redhanded breaking into hundreds of networks around the world

fortune.com/2023/06/15/china-hacking-networks-cybersecurity-google-mandiant/amp/

20-Year-Old Russian LockBit Ransomware Affiliate Arrested in Arizona

thehackernews.com/2023/06/20-year-old-russian-lockbit-ransomware.html

Can I speak to your manager? hacking root EPP servers to take control of zones

hackcompute.com/hacking-epp-servers/

Darknet Parliament is now a thing

cybernews.com/security/darknet-parliament-killnet-hackers/

--

Support our sponsor:

Go to JoinDeleteMe.com/FED and use the code FED20 for 20% off

--

For more information on Chris and his current work visit naxo.com and follow him on LinkedIn.

Follow Hector @hxmonsegur

This week on Hacker And The Fed we discuss the latest development in the Tik Tok controversy, how to detect and mitigate a new phishing and email takeover campaign, Google's new top-level domain, and some interesting statistics in the new Verizon breach investigation report.

Links from the episode:

Former exec at TikTok's parent company says Communist Party members had a 'god credential' that let them access Americans' data

businessinsider.com/communist-party-god-credential-data-bytedance-tiktok-former-executive-alleges-2023-6

Detecting and mitigating a multi-stage AiTM phishing and BEC campaign

microsoft.com/en-us/security/blog/2023/06/08/detecting-and-mitigating-a-multi-stage-aitm-phishing-and-bec-campaign/

America’s Most Cybersecure Companies

forbes.com/lists/most-cybersecure-companies

Hackers claim to have crippled Russia’s banking system

cybernews.com/cyber-war/infotel-hack-impacts-russian-banks/

Verizon 2023 Data Breach Investigations Report

verizon.com/business/resources/reports/dbir/

--

Support our sponsors:

Go to JoinDeleteMe.com/FED and use the code FED20 for 20% off

--

For more information on Chris and his current work visit naxo.com and follow him on LinkedIn.

Follow Hector @hxmonsegur

This week on Hacker And The Fed we discuss another zero-click exploit attacking iPhones via the iMessage app, millions of PC motherboards may be downloading malware, the FTC slams another company for violations, security researchers find a vulnerability in Gmail's checkmark system that is already being abused. And the Dutch government now mandates an easy way to contact website administrators.

Links from the episode:

Operation Triangulation: iOS devices targeted with previously unknown malware

securelist.com/operation-triangulation/109842/

thehackernews.com/2023/06/new-zero-click-hack-targets-ios-users.html 

Millions of PC motherboards were sold with a firmware backdoor

arstechnica.com/security/2023/06/millions-of-pc-motherboards-were-sold-with-a-firmware-backdoor/

FTC Slams Amazon with $30.8M Fine for Privacy Violations Involving Alexa and Ring

thehackernews.com/2023/06/ftc-slams-amazon-with-308m-fine-for.html

Bug in Gmail

twitter.com/chrisplummer/status/1664075886545575941

twitter.com/ChristopheDary/status/1664907465924681728

linkedin.com/posts/christophe-dary-85330561_spf-dmarc-bimi-activity-7070510499196489728-pPTh?utm_source=share&utm_medium=member_desktop

Security.txt now mandatory for Dutch government websites

netherlands.postsen.com/trends/198695/Securitytxt-now-mandatory-for-Dutch-government-websites.html

securitytxt.org

--

Support our sponsors:

Go to HelloFresh.com/hatf16 and use code hatf16 for 16 free meals plus free shipping!

Go to JoinDeleteMe.com/FED and use the code FED20 for 20% off

--

For more information on Chris and his current work visit naxo.com and follow him on LinkedIn.

Follow Hector @hxmonsegur

This week on Hacker And The Fed we dive into the world of ransomware. An insider exploits a ransomware attack for personal gain and a CISO's biggest lessons from quarterbacking a ransomware attack. We discuss AI generated photos and what happened to the stock market. And then we answer listener questions about geopolitics, Hector's hack on the Indonesian government and victims keeping their hacks a secret. 

Links from the episode:

IT employee impersonates ransomware gang to extort employer

bleepingcomputer.com/news/security/it-employee-impersonates-ransomware-gang-to-extort-employer/

AI Generated Photos

twitter.com/jsrailton/status/1660679743266607105

Suspicion stalks Genesis Market’s competitors following FBI takedown

therecord.media/genesis-market-russian-market-2easy-shop-cybercrime-fraud

FBI releases warning about fake crypto job advertisements

ic3.gov/Media/Y2023/PSA230522

Bridgestone CISO: Lessons From Ransomware Attack Include Acting, Not Thinking

darkreading.com/ics-ot/bridgestone-ciso-lessons-ransomware-attack-acting-thinking

This week on Hacker And The Fed we speak with Erin West, a Santa Clara County Deputy District Attorney, Founder of the “Crypto Coalition”, an over 800-member group of active law enforcement partners sharing cryptocurrency crime-fighting techniques, and the very tip of the spear for Pig Butchering – the latest online romance scam. We learn about the incredible work Erin is doing via Operation Shamrock and how we can protect ourselves and our loved ones from being victimized.

Links from the episode:

SCARS: Society of Citizens Against Relationship Scams

againstscams.org

Advocating Against Romance Scammers

advocatingforu.com

This podcast is sponsored by BetterHelp. Visit BetterHelp.com/HATF today to get 10% off your first month.

--

For more information on Chris and his current work visit naxo.com and follow him on LinkedIn at inkedin.com/in/chris-tarbell-20b129278/.

Follow Hector @hxmonsegur

This week on Hacker And The Fed, up to 10 years of your location data may have been exposed if you’ve driven vehicles from a certain manufacturer, stolen private keys may lead to insecure boot ups of your computer, Congress gets another notification of a US government breach, and we answer more listener questions about failed hacks and intentional exploits. And we talk about D. B. Cooper!

Links from the episode:

Toyota: Car location data of 2 million customers exposed for ten years

bleepingcomputer.com/news/security/toyota-car-location-data-of-2-million-customers-exposed-for-ten-years/

Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Security

securityonline.info/intel-oem-private-key-leak-a-blow-to-uefi-secure-boot-security/

Data of 237,000 US government employees breached

reuters.com/world/us/data-237000-us-government-employees-breached-2023-05-12/

Mastermind Behind Twitter 2020 Hack Pleads Guilty and Faces up to 70 Years in Prison

ustice.gov/opa/pr/uk-citizen-extradited-and-pleads-guilty-cyber-crime-offenses

T-Mobile Worker Joked About Adding Extra Phone Lines and Tablet to a Customer’s Account Without Them Knowing

twistedsifter.com/2023/05/a-t-mobile-worker-joked-about-adding-2-extra-phone-lines-and-a-tablet-to-a-customers-account-without-them-knowing/

Google Cybersecurity Certificate

grow.google/certificates/cybersecurity/#?modal_active=none

--

For more information on Chris and his current work visit naxo.com and follow him on LinkedIn.

Follow Hector @hxmonsegur

This week on Hacker And The Fed we discuss private data leaking due to a misconfiguration, and no one is listening to the researchers. We are shown the mindset of hackers during a ransom negotiation, a cell phone provider is hacked for the 9th time in 6 years, there are 50 Chinese state hackers for every FBI cyber agent, and using AI to help hack. And finally, we answer listener questions about .xyz, pen testing tools, and possible Hacker And The Fed swag.

Links from the episode:

Many Public Salesforce Sites are Leaking Private Data

krebsonsecurity.com/2023/04/many-public-salesforce-sites-are-leaking-private-data/

Hackers Claim Vast Access to Western Digital Systems

techcrunch.com/2023/04/13/hackers-claim-vast-access-to-western-digital-systems/

T-Mobile Discloses 2nd Data Breach of 2023, This One Leaking Account PINs and More

arstechnica.com/information-technology/2023/05/t-mobile-discloses-2nd-data-breach-of-2023-this-one-leaking-account-pins-and-more/

Chinese Hackers Outnumber FBI Cyber Personnel 'By At Least 50 to 1,' Wray Testifies

foxnews.com/politics/chinese-hackers-outnumber-fbi-cyber-personnel-wray-testifies

Capturing the Flag with GPT-4

micahflee.com/2023/04/capturing-the-flag-with-gpt-4/

The Cyber Police Exposed an Attacker in the Sale of Databases with Personal Data of Citizens of Ukraine and the EU

cyberpolice.gov.ua/news/kiberpolicziya-vykryla-zlovmysnyka-u-zbuti-baz-iz-personalnymy-danymy-gromadyan-ukrayiny-ta-yes-6598/

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And The Fed we sit down with Michele Chia, Head of Cyber Insurance at Zurich North America. We ask a number of questions including what is cyber insurance? Who needs it? And How much coverage is needed? Does cyber insurance cover an insider threat attack? What does a ransomware attack look like when you have cyber insurance? And finally, we find out how our guest cultivated such a successful career in cyber insurance.

Link from the episode:

zurichna.com/knowledge/experts/michelle-chia

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And The Fed security researchers find a vulnerability allowing them to run code on Search Engine computers, ghost tokens could be used to totally control Search Engine Workplace accounts, we let you know what a Pumpkin Sandstorm and a Spandex Tempest are, how long does it take to crack your password in 2023, we answer listener questions about the FBI and diversity in cyber security appliances, and we talk about Anna Kournikova.

Links from the episode:

Remote Code Execution Vulnerability in Google They Are Not Willing To Fix

giraffesecurity.dev/posts/google-remote-code-execution/

'GhostToken' Opens Google Accounts to Permanent Infection

darkreading.com/remote-workforce/-ghosttoken-opens-google-accounts-to-permanent-infection

Hacker Group Names Are Now Absurdly Out of Control

wired.com/story/hacker-naming-schemes-spandex-tempest/amp

How Long It Would Take A Hacker To Brute Force Your Password In 2023

hivesystems.io/blog/are-your-passwords-in-the-green

Support this episode's sponsors:

DeleteMe: Visit JoinDeleteMe.com/FED and use promo code FED20 

BetterHelp: Visit BetterHelp.com/HATF and get 10% off your first month

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And The Fed internet videos may be able to silently hack your phone with a "Near Ultrasound Inaudible Trojan” (NUIT). Companies have more access to your data than you may know, including pictures of you. We also discuss how better access controls may have prevented the recent classified documents leak and share a story about a hacker getting hacked.

Links from the episode:

Hey Siri, use this ultrasound attack to disarm a smart-home system

https://www.theregister.com/2023/04/04/siri_alexa_cortana_google_nuit/

Tesla workers shared sensitive images recorded by customer cars

https://www.reuters.com/technology/tesla-workers-shared-sensitive-images-recorded-by-customer-cars-2023-04-06/

Hacked: Russian GRU officer wanted by the FBI, leader of the hacker group APT 2

https://informnapalm.org/en/hacked-russian-gru-officer/

Support this episode's sponsors:

DeleteMe: Visit JoinDeleteMe.com/FED and use promo code: FED20

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And The Fed a researcher gains access to millions of Office 365 accounts, cyber criminals are stealing and selling your internet bandwidth, and now hackers can remotely open your garage door and start your car in order to steal it.

Links from the episode:

Researcher gained access to millions of Office365 accounts:

https://twitter.com/hillai/status/1641146508639600646

https://www.wiz.io/blog/azure-active-directory-bing-misconfiguration

 Cybercriminals may be stealing and selling your Internet bandwidth:

https://sysdig.com/blog/proxyjacking-attackers-log4j-exploited/

And now hackers can remotely open your garage and start your car in order to steal it:

https://www.vice.com/en/article/pkadqy/hackers-can-remotely-open-smart-garage-doors-across-the-world-simpaltek

https://kentindell.github.io/2023/04/03/can-injection/

Finally the FBI has taken down another hacking forum full of stolen credentials:

https://finance.yahoo.com/news/fbi-seizes-genesis-market-notorious-123039527.html?guccounter=1

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And The Fed we speak with Kelly Moan, who serves as the Chief Information Security Officer (CISO) of New York City. We talk trends and cyber threats against the city. She also details the significant volume of attacks against the city on a weekly basis and gives us tips for getting into cyber security.

Links from the episode:

nyc.gov/content/oti/pages/meet-the-team/cyber-command

nyc.gov/jobs

More info on the JSOC + Cyber Command’s authorities via Executive Order 10:

• nyc.gov/office-of-the-mayor/news/088-22/mayor-adams-governor-hochul-joint-security-operations-center-combat-cybersecurity#/0
• nyc.gov/office-of-the-mayor/news/010-002/executive-order-10

Support this episode's sponsor:

HelloFresh: Visit HelloFresh.com/hatf50 and use code hatf50 for 50% off, plus your first box ships free!

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And The Fed we discuss what email security should look like over the next 12 months, who has the ability to read your emails, and law enforcement busting people using DDoS for hire.

Links from the episode:

Email Security Nightmare as 75% Of CISOs Expect a Severe Email-Borne Attack in the Next 12 Months

cpomagazine.com/cyber-security/email-security-nightmare-as-75-of-cisos-expect-a-severe-email-borne-attack-in-the-next-12-months/

Who reads your email?

twitter.com/jschauma/status/1634032554603945984

netmeister.org/blog/mx-diversity.html

Fake ChatGPT Chrome Browser Extension Caught Hijacking Facebook Accounts

thehackernews.com/2023/03/fake-chatgpt-chrome-browser-extension.html

U.K. National Crime Agency Sets Up Fake DDoS-For-Hire Sites to Catch Cybercriminals

thehackernews.com/2023/03/uk-national-crime-agency-sets-up-fake.html

Support this episode's sponsor:

BetterHelp: Hacker and the Fed is sponsored by BetterHelp. Visit BetterHelp.com/HATF today to get 10% off your first month.

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And The Fed we catch up on some questions from our listeners: we discuss what a red teamer does, how the FBI works with other law enforcement agencies, how to upgrade your personal cyber security once you’ve got the basics down, and protecting children on the Internet.

Support this episode's sponsors:

Drata: Listeners of Hacker and the Fed can get 10% off Drata and waived implementation fees at drata.com/partner/hacker-fed

BetterHelp: Hacker and the Fed is sponsored by BetterHelp. Visit BetterHelp.com/HATF today to get 10% off your first month.

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And The Fed we sit down with Bill Gardner, professor and Chair Department of Cyber Forensics & Security at Marshall University. Bill offers insight into the professional and academic path into the industry and the future of cybersecurity.

Links from the episode:

Follow Bill Gardner:

Twitter: https://twitter.com/oncee

Linkedin: https://www.linkedin.com/in/304blogs/

Marshall University Prospective Students

Two papers written by Bill Gardner

“I Did What I Believe Is Right”: A Study of Neutralizations among Anonymous Operation Participants

Social Engineering in Non-Linear Warfare

Support this episode's sponsors:

Drata: Get 10% off and waived implementation fees at drata.com/partner/hacker-fed

DeleteMe: Visit JoinDeleteMe.com/FED and use promo code: FED20

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And Fed we discuss fake Google advertisements, law firms under attack from cyber criminals, and the Whitehouse announcing a new national security strategy.

Support this episode's sponsors:

Drata: Get 10% off and waived implementation fees at drata.com/partner/hacker-fed

DeleteMe: Visit JoinDeleteMe.com/FED and use promo code: FED20

Links from the episode:

twitter.com/doctorow/status/1628948906657878016

thehackernews.com/2023/03/cybercriminals-targeting-law-firms-with.html?m=1

twitter.com/dcuthbert/status/1631302488996364288/photo/1

whitehouse.gov/briefing-room/statements-releases/2023/03/02/fact-sheet-biden-harris-administration-announces-national-cybersecurity-strategy/

whitehouse.gov/wp-content/uploads/2023/03/National-Cybersecurity-Strategy-2023.pdf

nbcnews.com/politics/politics-news/major-us-marshals-service-hack-compromises-sensitive-info-rcna72581

twitter.com/nol_tech/status/1629910222746578945

abc7news.com/atm-scam-tap-card-chase-bank-function/12905397/

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And Fed we discuss a leaked ransomware negotiation, how Twitter's new verification system may improve security, and the NSA releases its best practices for securing your home network.

Support this episode's sponsor, Drata. For 10% off and waived implementation fees visit drata.com/partner/hacker-fed.

Links from the episode:

pwndefend.com/2023/02/15/lockbit-3-0-and-royal-mail-chats-published/

dice.com/career-advice/cybercriminals-increase-recruiting-tech-and-it-pros-across-the-darknet

gizmodo.com/facebook-instagram-verified-elon-musk-was-right-twitter-1850139933

media.defense.gov/2023/Feb/22/2003165170/-1/-1/0/CSI_BEST_PRACTICES_FOR_SECURING_YOUR_HOME_NETWORK.PDF

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And Fed we update a story from a few episodes ago about a woman driving with a suspicious eavesdropping device near the embassies in Paris, Credit Suisse suffers a insider threat attack, an old attack methodology is updated to steal cryptocurrency, a hacker utilizes screen-capturing malware to cherry-pick their victims, regulators propose a rule to have cyber educated board members, Hector receives a phishing email that turns out to be a much larger issue, and finally Hector pays off his losing Super Bowl bet.

Links from the episode:

francetvinfo.fr/faits-divers/escroquerie-aux-sms-de-l-assurance-maladie-les-suspects-volaient-les-numeros-de-telephone-depuis-leur-voiture_5665943.html

efinancialcareers.com/news/2023/02/credit-suisse-employee-data-leak

blog.phylum.io/phylum-discovers-revived-crypto-wallet-address-replacement-attack

thehackernews.com/2023/02/hackers-targeting-us-and-german-firms.html

cfr.org/blog/walk-and-chew-gum-cisos-communicating-boards-have-speak-their-language

venturebeat.com/security/4-misconceptions-about-data-exfiltration/amp/

bleepingcomputer.com/news/security/namecheaps-email-hacked-to-send-metamask-dhl-phishing-emails/

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And Fed Reddit suffers a phishing attack, the FBI offers "Ritz Carlton" level customer service, Texas bans TikTok on state owned devices, and a researcher documents the methodology of finding a major network flaw.

Links from the episode:

reddit.com/r/reddit/comments/10y427y/we_had_a_security_incident_heres_what_we_know/

govconwire.com/2022/10/bryan-vorndran-outlines-tenets-of-fbi-role-in-cyber-ecosystem/

beckershospitalreview.com/legal-regulatory-issues/fbi-aiming-to-protect-give-ritz-carlton-level-customer-service-to-companies-that-report-cyberattacks.html

gov.texas.gov/news/post/governor-abbott-announces-statewide-plan-banning-use-of-tiktok

eaton-works.com/2023/02/06/toyota-gspims-hack/

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And The Fed we discuss how Search Engine Ads are being used to spread malware through "malvertising". We also cover the impact of a breach involving data for over 20,000 individuals stolen from a firm that aggregates public records and sells background checks online.

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And Fed we discuss the FBI's takedown of Hive, the Ransomware group with over 100 million in ransom payments. We also talk about the FBI's insider threat brochure, giving companies indicators on what to look for internally. And finally, Hector asks Chris some questions about the FBI.

Links from the episode:

justice.gov/opa/pr/us-department-justice-disrupts-hive-ransomware-variant

fbi.gov/file-repository/insider_threat_brochure.pdf

cisa.gov/insider-threat-cyber

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And Fed Hector makes some predictions of the hacks we will see in 2023. We also discuss bug bounty hunters, how they're not getting paid what they deserve and why they may take their exploits to the dark web. We touch on another big API data leak and Hector tells a story of a hack he did on Super Bowl Sunday. And finally we help a listener with spoofed calls and text messages.

T-Mobile Filed Form 8-K with the US SEC

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker and the Fed we discuss a variety of recent news stories, including a report of a messaging service selling access to user data, bootleg network devices being sold through certified vendors, Gmail offering end-to-end encryption, lessons learned from a not so secure encrypted messaging application, cell phone software that was stolen and made public, and a password problem at a major US executive department.

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And Fed we discuss Twitter's data leak, explaining APIs and how to better protect ourselves. We also touch on the Russian hacking crew "Cold River" and answer some listener questions.

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And Fed we tackle IMSI Catchers, or cell phone eavesdropping devices after one was found by French authorities in the back of a vehicle near the US embassy in Paris. We also cover Hector's PBS Hack, his thought process and attack vector. And finally we have a conversation about Botnets and some of the risks they present.

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And Fed we tackle cyber warfare with special guest Jeff Carr. Jeff authored the book "Inside Cyber Warfare: Mapping the Cyber Underworld" and is an expert on how nation-states, groups, and individuals around the world wage digital war on one another. We cover a wide range of topics from how to define "cyber war" to the insider perspective on the war in Ukraine.

Check out Jeff's book here!

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And Fed we select a number of audience questions specifically directed toward Hector, and he answers them from the perspective of his former self, Sabu. We cover questions like "what is a hack?" "What are the hardest security controls to beat?" "What do Hackers do with your stolen data?" And finally, Sabu reveals his coolest hack.

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And The Fed we discuss the infamous Shadow Brokers, a group (or individual hacker) who compromised the NSA back in 2016. We explore and explain this hack from the perspective of a former FBI agent and a former black hat hacker. We also detail Apple's new security posture deploying end-to-end encryption.

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And The Fed we discuss a recent paper published by CISA (The Cybersecurity and Infrastructure Security Agency) detailing how to help secure your small business online. We also answer a number of listener questions. You all have been sending us some great questions in the past week, today we answer a few of our favorites.

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And The Fed we have our first ever guest. Former Black Hat and former member of LulzSec, Cody Kretsinger. Hector and Cody go back nearly 20 years to the earliest days of online hacking when they spent years partnering to infiltrate major computer networks around the world. Despite that long history, they’ve never actually met in the flesh. We cover a lot as they speak together for the first time, from hacking origin stories to life after federal prison.

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And The Fed we discuss Hector's decision to work with the FBI. To change the course of his life and begin the journey to where he is now. We explore his moral considerations as well as the very practical implications of such a decision. We also hear the story of Hector's first hack and answer a listener question on NSO group and high level hacking.

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And The Fed we discuss the recent seizure related to Silk Road, the black market website Chris took down in 2013. Silk Road is back in the news as the IRS just recently caught a man who stole 50,000 bitcoin from the site.

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And The Fed we discuss the recent DropBox hack that relied on a phishing attack to steal credentials as well as multi-factor authentication codes. We also discuss other tactics attackers use to work around multi-factor authentication as well as a technology that may replace the applications and codes you use today. And finally, we respond to a few user questions about the FBI.

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And The Fed we discuss the NSO Group’s zero-click iPhone exploit, also known as Pegasus, a powerful tool that can be used to take full control of a target’s iPhone without their knowledge.

We break down how it all works and how to think about this tool and others like it.

We also answer a question from the audience about Hector’s experience using IRC, an old internet chat tool where Hector had “wars” with other hackers.

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And The Fed we answer audience questions. We discuss the future of cyber security and whether we will ever get ahead of the bad guys. We also detail what it's like to be arrested by the FBI as Hector recounts his experience following the knock on the door. And finally, we respond to a small business owner on how to secure her social media accounts and website from potential threats.

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And The Fed we discuss voice fishing, or "vishing," and the social engineering tactics behind this attack.

You know those spam calls you get? Well sometimes those are actually social engineering attacks aimed at convincing you to send money to scammers. It's a relatively new twist on phishing and it employs many of the same basic tactics.

We detail what these attacks look like, tell a few stories of our own experience with social engineering, and leave you with some key takeaways for how to keep yourself and loved ones safe and secure.

--

Below are several terms Hector and Chris use in the show that some listeners may not be familiar with:

Dox – publish private information about an individual online

APT – advanced persistent threat, e.g. a nation state with sophisticated cyber capabilities

EFNet – an internet chat relay network

API – automated programming interface, a way for two or more computer programs to communicate with each other.

WHOIS – information about an IP address or domain name (e.g. google.com)

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

On this first episode of Hacker And The Fed, Chris and Hector tell their origin story. Hector details the journey from his first time on the internet to becoming a globally infamous black hat hacker. And Chris tells of growing up in Virginia next to the chief of police to ultimately joining the FBI and dedicating his life to fighting cyber crime.

The two outline their story from the moment Chris arrested Hector, ultimately leading to a long time collaboration and lifelong friendship.

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

Former FBI special agent Chris Tarbell and former Anonymous blackhat Hector Monsegur (aka Sabu) first faced-off as adversaries in cyberspace before becoming close friends and podcast co-hosts. Listen to Tarbell, co-founder of an elite cybersecurity firm NAXO, and Monsegur, a top network penetration tester and security engineer, break down the must-know cybersecurity news and topics of the day. You’ll walk away from each episode with unique perspectives on how to keep your family, your company, and your personal cyber footprint safe from attacks.