Mad Squirrel Tech

In this episode, Erich and Javvad discuss the weekly hot infosec topics, including ransomware without the encryption, angry ex-employees turned insider threat at a flight school, “super” passwords to not use, and whether or not “It was a deepfake” is the new, “The dog ate my homework”. 

All of this and more!

Remember to like, subscribe and share!

Stories from the show:

30 Mins or Less: Rapid Attacks Extort Orgs Without Ransomware:
https://threatpost.com/rapid-attacks-extort-ransomware/175445/

Woman, 26, is arrested ‘for hacking into Florida flight training school’s system and tampering with airplane information, including clearing some aircraft with maintenance issues for takeoff’: Cops say attack was in retaliation after father was fired:
https://www.newsbreak.com/news/2400876442542/woman-26-is-arrested-for-hacking-into-florida-flight-training-school-s-system-and-tampering-with-airplane-information-including-clearing-some-aircraft-with-maintenance-issues-for-takeoff-cops-say-attack-was-in-retaliation-after-father-was-fired

Superman, Not to Rescue: Passwords With Superhero Names Are Most Hacked:
https://www.news18.com/news/buzz/superman-not-to-rescue-passwords-with-superhero-names-are-most-hacked-4317128.html

Fraudsters Cloned Company Director’s Voice In $35 Million Bank Heist, Police Find:
https://www.forbes.com/sites/thomasbrewster/2021/10/14/huge-bank-fraud-uses-deep-fake-voice-tech-to-steal-millions/?sh=18cc26697559

In this episode, Erich channels his deep inner anger about some government follies that have impacted individuals and organizations alike. Javvad mostly nods along for effect. 

Remember to Like, Share and Subscribe! 

Stories from the show:

FBI Withholding Kaseya Ransomware Decryption Key Had ‘No Bearing’ on REvil:
https://www.channelfutures.com/security/fbi-withholding-kaseya-ransomware-decryption-key-had-no-bearing-on-revil

Four months on from a sophisticated cyberattack, Alaska’s health department is still recovering:
https://www.zdnet.com/article/four-months-on-from-sophisticated-cyber-attack-alaskas-health-services-is-still-recovering/

Investigation launched after MoD email blunder:
https://www.computerweekly.com/news/252506972/Investigation-launched-after-MoD-email-blunder

Erich Kron is out this week so the award-winning Host Unknown stepping in and took matters into their own hands. 

Follow host unknown on hostunknown.tv @hostunknowntv
Listen to the host unknown podcast on your favourite podcast player

Stories from the show: 
‘Significant threat’: cyber attacks increasingly targeting Australia’s critical infrastructure
https://www.theguardian.com/technology/2021/sep/15/significant-threat-cyber-attacks-increasingly-targeting-australias-critical-infrastructure

Microsoft: Windows 10 2004 reaches end of service in December
https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-10-2004-reaches-end-of-service-in-december/

HP patches severe OMEN driver privilege escalation vulnerability
https://www.zdnet.com/article/hp-patches-omen-driver-privilege-escalation-vulnerability/

Apple Issues Emergency Fix for NSO Zero-Click Zero Day
https://threatpost.com/apple-emergency-fix-nso-zero-click-zero-day/169416/

Over 60 million wearable, fitness tracking records exposed via unsecured database
https://www.zdnet.com/article/over-60-million-records-exposed-in-wearable-fitness-tracking-data-breach-via-unsecured-database/

Follow host unknown on hostunknown.tv
Listen to the host unknown podcast on your favourite podcast player

In this episode, Javvad messes up by starting the recording early, then hem and Erich discuss a new threat from a ransomware gang about dumping data if the victim calls the cops, the REvil servers mysteriously being resurrected from the dead, claiming a ransomware payment as a tax deduction and a whole bunch of VPN passwords being stolen.

All of this and more, in this episode of The Jerich Show (complete with a reworked logo)

Remember to Like, Share and Subscribe!

Stories From the Show:

Ransomware gang threatens to leak data if victim contacts FBI, police:
https://www.bleepingcomputer.com/news/security/ransomware-gang-threatens-to-leak-data-if-victim-contacts-fbi-police/

Hit by a ransomware attack? Your payment may be deductible:
https://www.independent.co.uk/news/hit-by-a-ransomware-attack-your-payment-may-be-deductible-irs-fbi-pms-washington-ransomware-b1868907.html

REvil ransomware’s servers mysteriously come back online:
https://www.bleepingcomputer.com/news/security/revil-ransomwares-servers-mysteriously-come-back-online/

Hackers Leak VPN Account Passwords From 87,000 Fortinet FortiGate Devices:
https://thehackernews.com/2021/09/hackers-leak-vpn-account-passwords-from.html

Show Contents:
00:00 – 01:42  Javvad Messes Up the Intro
01:42 – 07:17 Ragnar Locker Threats if the Victim Calls the Cops or Negotiators
07:17 – 09:02 Is Your Ransom Payment a Tax Deduction?
09:02 – 15:32 REvil Servers Raise Their Ugly Heads Again
15:32 – 20:42 VPN Accounts Leaked From Fortigate Devices
20:42 – 20:50 Outro

It’s been a couple of weeks, but Javvad and Erich are back from a little break and far more grumpy than you might assume. That’s OK, because, as evidenced by the stories, they are grumpy because nobody fixed the internet while they were gone. 

Check out what they are so grumpy about and don’t forget to Like, Share and Subscribe!

Stories from the show:

Attackers Can Remotely Disable Fortress Wi-Fi Home Security Alarms:
https://thehackernews.com/2021/08/attackers-can-remotely-disable-fortress.html

Scam artists are recruiting English speakers for business email campaigns:

https://www.zdnet.com/article/scam-artists-are-recruiting-english-speakers-for-business-email-campaigns

LockBit gang leaks Bangkok Airways data, hits Accenture customers:
https://www.bleepingcomputer.com/news/security/lockbit-gang-leaks-bangkok-airways-data-hits-accenture-customers/

Twitter creates ‘Safety Mode’ to temporarily block accounts caught insulting users:
https://www.zdnet.com/article/twitter-creates-safety-mode-to-temporarily-block-accounts-caught-insulting-users/

In this episode, Erich reminisces about Blackhat and DEFCON, comparing past years to 2021 and Javvad and him discuss some crazy news stories, including one where a cyber thief actually returns $260 million and a new UK governement software that adds a button to report emails to the ‘Ministry of Phishy Things’, or some such government entity. 

Don’t forget to Like, Subscribe and Share for more fun looks at very serious topics.

Stories from the show:

Cryptocurrency heist hacker returns $260m in funds:
https://www.bbc.com/news/business-58180692

New one-click button will flag dodgy emails directly to cyber experts:
https://news.sky.com/story/new-one-click-button-will-flag-dodgy-emails-directly-to-cyber-experts-12379104

Flight attendant interview video:
https://www.youtube.com/watch?v=XFoXmnBuLw0

Show Contents:
00:00 – 1:00 Intro
01:00 – 13:30 Blackhat and DEFCON recap
13:30 –  18:27 Cryptocurrency heist hacker returns $260m in funds
18:27 – 28:49 New one-click button will flag dodgy emails directly to cyber experts
28:49 – 30:39 Smelling like regret (https://www.youtube.com/watch?v=XFoXmnBuLw0)
30:39 – 31:04 Outro

In this quick daily recap, Erich and Javvad talk about the closing day of Black Hat and the start of DEFCON, conference speaking and much more.

In this episode, Javvad and Erich discuss the first day at Black Hat 2021. They discuss the low attendance at Black Hat, the topics and big vendors at the show and other observations from the show.

In addition they discuss a ransomware attack on a school, a huge amount of data leaked by a mystery company, security issues with a hotel capsule, and more. 

Look out for more updates from Vegas this year!

Like, share and subscribe! 

Stories from the show:

Report: Over 63 Million US Citizens Exposed in Massive Data Leak:
https://www.vpnmentor.com/blog/report-onemorelead-leak/

Isle of Wight schools hit by ransomware attack:
https://www.bbc.com//uk-england-hampshire-58078670

Black Hat: Security Bugs Allow Takeover of Capsule Hotel Rooms:
https://threatpost.com/security-bugs-takeover-capsule-hotel/168376/