Author: Erich Kron

This week, Javvad and Erich discuss the campaign the Lazarus group is using against US energy companies, surveillance camera access for sale, and how credential stuffing compromised almost 200k accounts at North Face. All this and more!

Stories from the show:

Cybercriminals Are Selling Access to Chinese Surveillance Cameras
https://threatpost.com/cybercriminals-are-selling-access-to-chinese-surveillance-cameras/180478/

200,000 North Face accounts hacked in credential stuffing attack
https://www.bleepingcomputer.com/news/security/200-000-north-face-accounts-hacked-in-credential-stuffing-attack/

North Korea’s Lazarus hackers are exploiting Log4j flaw to hack US energy companies
https://techcrunch.com/2022/09/08/north-korea-lazarus-united-states-energy/

How the ‘man in black’ was exposed by the Russian women he terrorised

https://www.bbc.com/news/world-europe-62799246

In this episode, Javvad and Erich discussa crafty coinminer malware that lays dormant for a while, Okta credential thefts, a huge increase in potential victims of a ransomware attack, and a possible device that allows bad actors to simulate swipes and taps on phones from under a table. 

All this and more!

Accepted the Risk Video:
https://www.youtube.com/watch?v=9IG3zqvUqJY

Stories from the show:

Twilio Hackers Scarf 10K Okta Credentials in Sprawling Supply-Chain Attack
https://www.darkreading.com/remote-workforce/twilio-hackers-okta-credentials-sprawling-supply-chain-attack

Windows malware delays coinminer install by a month to evade detection
https://www.bleepingcomputer.com/news/security/windows-malware-delays-coinminer-install-by-a-month-to-evade-detection/

Individuals affected by vendor ransomware attack reaches 2.7M
https://www.beckershospitalreview.com/cybersecurity/vendor-ransomware-attack-affects-2-7m-healthcare-organizations.html

Hacking device can secretly swipe and tap your smartphone screen
https://www.newscientist.com/article/2335970-hacking-device-can-secretly-swipe-and-tap-your-smartphone-screen/

In this episode, Erich is on the road in Dallas for the Podcast Movement conference, but him and Javvad still take the time out to discuss some major stories on cybersecurity this week. 

Stories from the show:

LastPass developer systems hacked to steal source code
https://www.bleepingcomputer.com/news/security/lastpass-developer-systems-hacked-to-steal-source-code/

Twitter whistleblower alleges ‘egregious deficiencies’ in security measures
https://www.theguardian.com/technology/2022/aug/23/twitter-whistleblower-peiter-zatko-mudge-security

Cyber attackers disrupt services at French hospital, demand $10 million ransom
https://www.france24.com/en/europe/20220823-cyber-attackers-disrupt-services-at-french-hospital-demand-10-million-ransom

Researchers Find Counterfeit Phones with Backdoor to Hack WhatsApp Accounts
https://thehackernews.com/2022/08/researchers-find-counterfeit-phones.html

In this episode, Javvad and Erich talk about the Cisco hack and wrap up the 2022 Black Hat experience.

Stories from the show:

Las Vegas slammed with more flash floods as iconic strip, casinos under water again
https://nypost.com/2022/08/12/las-vegas-slammed-with-more-flash-floods-as-iconic-strip-casinos-under-water-again/

Smishing Attack Led to Major Twilio Breach
https://www.infosecurity-magazine.com/news/smishing-attack-led-to-major/

Cloudflare: Someone tried to pull the Twilio phishing tactic on us too
https://www.theregister.com/2022/08/10/cloudflare_twilio_phishing/

Cisco Talos shares insights related to recent cyber attack on Cisco
https://blog.talosintelligence.com/2022/08/recent-cyber-attack.html

Erich and Javvad discuss a crypto currency theft of around $190mil, FEMA warns about patching emergency alerts systems and macros have become a top way to spread ransomware, plus more stories of the week. 

Join us live and chat with us on LinkedIn

Stories from the show:

Hack of US cryptocurrency firm Nomad leads to $190 million loss in bridge attack
https://www.scmagazine.com/analysis/breach/hack-of-us-cryptocurrency-firm-nomad-leads-to-190-million-loss-in-bridge-attack

87% of the ransomware found on the dark web has been delivered via malicious macros
https://www.helpnetsecurity.com/2022/08/03/ransomware-malicious-macros/

FEMA warns emergency alert systems could be hacked to transmit fake messages unless software is updated
https://www.cnn.com/2022/08/03/politics/fema-emergency-alert-software-warning/index.html

Ex-T-Mobile US store owner phished staff, raked in $25m from unlocking phones
https://www.theregister.com/2022/08/03/tmobile_unlock_prison_phone/

In this episode Erich and Javvad discuss cyber attacks on the Port of Los Angeles, the value T-Mobile places on your data and much more!

T-Mobile Pitches $4-Per-Customer Settlement for Data Leak Impacting 80M People

https://www.darkreading.com/application-security/t-mobile-pitches-4-per-customer-settlement-for-data-leak

Cyber-attacks on Port of Los Angeles have doubled since pandemic

https://www.bbc.com/news/business-62260272

In this episode, Javvad and Erich discuss a Florida man charged with selling fake Cisco gear, a phish designed to get around MFA, ransomware gangs allow searching of dumped data and Google updates their password manager.

Stories from the show:

Florida man charged with selling fake Cisco equipment in $1 billion scheme
https://www.reuters.com/world/us/florida-man-charged-with-selling-fake-cisco-equipment-1-bln-scheme-2022-07-08/

This big phish can swim around MFA, says Microsoft Security
https://www.theregister.com/2022/07/13/aitm-phishing-microsoft/

Ransomware gang now lets you search their stolen data
https://www.bleepingcomputer.com/news/security/ransomware-gang-now-lets-you-search-their-stolen-data/

Google Updates Password Manager With New Security, Management Tools 
https://uk.pcmag.com/password-managers/141268/google-updates-password-manager-with-new-security-management-tools

India: How a fake ‘IPL’ cricket league ran for Russian punters
https://www.bbc.com/news/world-asia-india-62123966