Jump to content

Recommended Posts

Posted

https://www.npr.org/2021/07/03/1012849198/ransomware-cyber-attack-revil-attack-huntress-labs

 A ransomware attack paralyzed the networks of at least 200 U.S. companies on Friday, according to a cybersecurity researcher whose company was responding to the incident.

 

Some cybersecurity experts predicted that it might be hard for the gang to handle the ransom negotiations, given the large number of victims — though the long U.S. holiday weekend might give it more time to start working through the list.

Guest Lobo
Posted

The Russians only got the internet and code-breaking ransomeware capabilities in the last 5 months.  It's not like this was some pre-meditated collaborative attack

Posted
  On 7/3/2021 at 11:29 PM, Lobo said:

The Russians only got the internet and code-breaking ransomeware capabilities in the last 5 months.  It's not like this was some pre-meditated collaborative attack

Expand  

Can you expand on this? I do not understand what this means.

Guest Lobo
Posted

Maybe not this particular incident was not all Russia, but it does seem like Russia has had a hand in attacks like this as of late.  It may have been influenced by geopolitics.  Maybe.   

Posted
  On 7/3/2021 at 11:21 PM, NeverMarryAStripper said:

It’s long past time to use the full power and force this country can muster to deal with these fucksticks

Expand  

Drone strike on the building the fucksticks are operating out of is pretty easy to justify. Russia is at war with us, we're just pretending it's ok because it's not physical.

  • Hook 'Em 2
Posted

If there's money to be made hacking, people will hack. We can nuke Russia and the hacks will come from somewhere else. Same reason people still rob banks. The reality is there are too many stupid people working in corporations clicking on phishing emails, etc....

I work for a software company and have to complete monthly cybersecurity awareness e-learning modules. And instead of just listing the do's and dont"s, the modules are wrapped in cheesy sitcom like  vignettes or games, because otherwise, apparently they an trust people to participate. It's clear our company leadership is paranoid as fu k about this shit happening to us. Which makes the rumor that our CEO got fished more amusing. 

  • Hook 'Em 2
Posted
  On 7/4/2021 at 12:52 AM, CooterBrown said:

We get fake phishing emails all the time from our IT security and they’ve gotten very good at crafting them to look real. Used to be on the 3rd strike you’d have to take extra training. Now the first strike wipes out your next scheduled raise. 2nd time and you’re fired. A random attack is one of the major fears at our company and they’re no longer fucking around with dumb ass employees.

Damn that’s pretty hard core
Posted
  On 7/4/2021 at 12:27 AM, Blotto said:

If there's money to be made hacking, people will hack. We can nuke Russia and the hacks will come from somewhere else. Same reason people still rob banks. The reality is there are too many stupid people working in corporations clicking on phishing emails, etc....

I work for a software company and have to complete monthly cybersecurity awareness e-learning modules. And instead of just listing the do's and dont"s, the modules are wrapped in cheesy sitcom like  vignettes or games, because otherwise, apparently they an trust people to participate. It's clear our company leadership is paranoid as fu k about this shit happening to us. Which makes the rumor that our CEO got fished more amusing. 

Expand  

I used to work for a Fortune 500 company.  My boss’ brother was head of cyber security.  Over drinks he told us that the CEO fell for every fake phishing email sent to him.  They were not subtle, I identified every one in 2 seconds by reading the subject line.

Posted (edited)
  On 7/4/2021 at 1:07 AM, conVINCEd said:

I used to work for a Fortune 500 company.  My boss’ brother was head of cyber security.  Over drinks he told us that the CEO fell for every fake phishing email sent to him.  They were not subtle, I identified every one in 2 seconds by reading the subject line.

Expand  

to be fair, most IT departments have become much, much better at sending non-obvious phishing traps.       Its not " Clikc here Mr empoylee, free vacaton" anymore. 

 

in the last year I have emails that purport to be from the HR team asking for company feedback... but the clue was  to preview the link provided, which was taking you to a 3rd party page that didnt seem right. (and the email was from a "one letter difference" domain)   Or emails from THE CEO that name the company CEO telling everyone to check on their upcoming raises..... that one got like half the fucking company.      never underestimate the complete lack of intelligence re: security when good old fashioned greed gets involved.  IT had to explain to everyone that the CEO name is easily found and any phisher worth a damn would be able to try that. 

Important to note that we are tested on exact copies of phish emails have actually WORKED for real in the real world (at other companies) which is how they got the template.

 

Our team gets graded on how many times we mark the emails as phish spam.... every so often someone gets got.... but, other than the money one, we do very well..... except.... we've got a 69/70 year old lady whos worked for the company for 20+ years on our team....  She is so kind, and helps out anytime you ask her and shes always mentoring new hires.  But,she has basically been caught every single time.   Shes gone through at least 5 trainings lasting more than 2 hours showing her what to look for, but she gets so behind every morning, that by the end of the day shes opening emails without even bothering to see who the fuck they are from and double clicking every attachment or link.   

I dont even think firing her is on the table... but its amazing how she gets tricked on every fucking test, every month. 

Edited by AUS-97HORN
  • Hook 'Em 3
Posted
  On 7/3/2021 at 11:12 PM, Poolflood said:

https://www.npr.org/2021/07/03/1012849198/ransomware-cyber-attack-revil-attack-huntress-labs

 A ransomware attack paralyzed the networks of at least 200 U.S. companies on Friday, according to a cybersecurity researcher whose company was responding to the incident.

Some cybersecurity experts predicted that it might be hard for the gang to handle the ransom negotiations, given the large number of victims — though the long U.S. holiday weekend might give it more time to start working through the list.

Expand  

at some point, even actual journalism shops like npr will learn to stop writing sensational headlines and learn to distinguish the difference between one attack on the ecosystem of a single company (in this case kaseya), and a simultaneous attack on 200 companies, which this is not.

  • Hook 'Em 2
Posted
  On 7/4/2021 at 1:22 AM, AUS-97HORN said:

to be fair, most IT departments have become much, much better at sending non-obvious phishing traps.       Its not " Clikc here Mr empoylee, free vacaton" anymore. 

 

in the last year I have emails that purport to be from the HR team asking for company feedback... but the clue was  to preview the link provided, which was taking you to a 3rd party page that didnt seem right. (and the email was from a "one letter difference" domain)   Or emails from THE CEO that name the company CEO telling everyone to check on their upcoming raises..... that one got like half the fucking company.      never underestimate the complete lack of intelligence re: security when good old fashioned greed gets involved.  IT had to explain to everyone that the CEO name is easily found and ny phisher worth a damn would be able to try that. 

Important to note that we are tested on exact copies of phish emails have actually WORKED for real in the real world (at other companies) which is how they got the template.

 

Our team gets graded on how many times we mark the emails as phish spam.... every so often someone gets got.... but, other than the money one, we do very well..... except.... we've got a 70 year old lady whos worked for the company for 20+ years on our team.... she has basically been caught every single time.   Shes gone through at least 5 trainings lasting more than 2 hours showing her what to look for, but she gets so behind every morning, that by the end of the day shes opening emails without even bothering to see who the fuck they are from and double clicking every attachment or link.   

I dont even think firing her is on the table... but its amazing how she gets tricked on every fucking test, every month. 

Expand  

This was about 5 years ago.  They were obvious.  The CEO was a moron who stumbled his way up the corporate ladder.  If I got hammered and took out a police cruiser and impregnated my assistant within a 6 month span I would’ve been shown the door.  He was teflon.  He had the goods on a few people.

  • Like 1
Posted
  On 7/4/2021 at 12:27 AM, Blotto said:

If there's money to be made hacking, people will hack. We can nuke Russia and the hacks will come from somewhere else. Same reason people still rob banks. The reality is there are too many stupid people working in corporations clicking on phishing emails, etc....

I work for a software company and have to complete monthly cybersecurity awareness e-learning modules. And instead of just listing the do's and dont"s, the modules are wrapped in cheesy sitcom like  vignettes or games, because otherwise, apparently they an trust people to participate. It's clear our company leadership is paranoid as fu k about this shit happening to us. Which makes the rumor that our CEO got fished more amusing. 

Expand  

we get fake emails at least once a month.  Deliberate phishy type emails from our IT dept..

 

If shit doesn't look right, I delete it.  If it's important, they'll send it again.  If it's really important( and proper) they'll list a phone number and I can verify who the fuck they are.

Guest Lobo
Posted
  On 7/4/2021 at 1:50 AM, staboner said:

lets build more bombs, planes, walls and shit. that'll do it!

Expand  

Crack wise all you want, but firewalls prevent these types of cyber attacks.  If Texas can pony up the cash to finish it, a border firewall will keep attacks like this from happening from our south.  Our most vulnerable points in Texas, and really nationwide, are our Southern borders.  Also, the Yukon.  

Posted
  On 7/4/2021 at 12:27 AM, Blotto said:

If there's money to be made hacking, people will hack. We can nuke Russia and the hacks will come from somewhere else. Same reason people still rob banks. The reality is there are too many stupid people working in corporations clicking on phishing emails, etc....

I work for a software company and have to complete monthly cybersecurity awareness e-learning modules. And instead of just listing the do's and dont"s, the modules are wrapped in cheesy sitcom like  vignettes or games, because otherwise, apparently they an trust people to participate. It's clear our company leadership is paranoid as fu k about this shit happening to us. Which makes the rumor that our CEO got fished more amusing. 

Expand  

If instead of getting paid you got a drone strike up your ass I think a lot fewer people would try it

  • Hook 'Em 1
  • Haha 1
Posted
  On 7/4/2021 at 3:20 AM, washparkhorn said:
Characteristics of REvil that appear to be operational security mistakes by the malware authors enabled CTU researchers to technically link the REvil and GandCrab ransomware families. This link indicates that the malware authors have shifted their focus from GandCrab to REvil.
~ https://www.secureworks.com/blog/revil-the-gandcrab-connection

Tried to trick us with that link huh?
Posted
  On 7/4/2021 at 12:52 AM, CooterBrown said:


We get fake phishing emails all the time from our IT security and they’ve gotten very good at crafting them to look real. Used to be on the 3rd strike you’d have to take extra training. Now the first strike wipes out your next scheduled raise. 2nd time and you’re fired. A random attack is one of the major fears at our company and they’re no longer fucking around with dumb ass employees.

Expand  

Damn not sure my company would have anyone left. I can't believe how dumb some end users are 

  • Haha 1
Posted
  On 7/4/2021 at 1:26 AM, Hagbard Celine said:

at some point, even actual journalism shops like npr will learn to stop writing sensational headlines and learn to distinguish the difference between one attack on the ecosystem of a single company (in this case kaseya), and a simultaneous attack on 200 companies, which this is not.

Expand  

Neurotic People's Radio

National Paranoia Radio

Posted
  On 7/3/2021 at 11:44 PM, Lobo said:

Maybe not this particular incident was not all Russia, but it does seem like Russia has had a hand in attacks like this as of late.  It may have been influenced by geopolitics.  Maybe.   

Expand  

Most of these are run by Russian organized crime. It's their business model and it brings in hundreds of millions of dollars for a relatively small investment. They have been doing this for a long time.

Basically they are criminals doing criminal things. Geopolitics doesn't need to be a motivation just a lot of money.

 

  • Hook 'Em 2
Posted
  On 7/4/2021 at 1:07 AM, conVINCEd said:

I used to work for a Fortune 500 company.  My boss’ brother was head of cyber security.  Over drinks he told us that the CEO fell for every fake phishing email sent to him.  They were not subtle, I identified every one in 2 seconds by reading the subject line.

Expand  

"CLICK HERE TO GROW YOUR COCK TO AN 8 INCH ARMADILLO"

  • Haha 3
Posted
  On 7/4/2021 at 3:58 AM, Gil Bang said:

"CLICK HERE TO GROW YOUR COCK TO AN 8 INCH ARMADILLO"

Expand  

If you would like to settle for an armadillo cock go right ahead.  The offerings at my local convenience store would lead me to believe that the rhino is the unofficial animal mascot for a longer, harder dick.

Posted
  On 7/4/2021 at 4:06 AM, conVINCEd said:

If you would like to settle for an armadillo cock go right ahead.  The offerings at my local convenience store would lead me to believe that the rhino is the unofficial animal mascot for a longer, harder dick.

Expand  

You must not like curing leprosy. Panty dropping at its finest...along with an arm.

Posted
  On 7/4/2021 at 1:30 AM, conVINCEd said:

This was about 5 years ago.  They were obvious.  The CEO was a moron who stumbled his way up the corporate ladder.  If I got hammered and took out a police cruiser and impregnated my assistant within a 6 month span I would’ve been shown the door.  He was teflon.  He had the goods on a few people.

Expand  

GIF by Giffffr

  • Hook 'Em 1
Posted

Didn't hear anything about this over the weekend, WSJ has an article about it today

https://www.wsj.com/articles/ransomware-hackers-demand-70-million-to-unlock-computer-in-widespread-attack-11625524076?mod=hp_lead_pos4


 

  Reveal hidden contents

 

Posted
  On 7/4/2021 at 1:22 AM, AUS-97HORN said:

to be fair, most IT departments have become much, much better at sending non-obvious phishing traps.       Its not " Clikc here Mr empoylee, free vacaton" anymore. 

 

in the last year I have emails that purport to be from the HR team asking for company feedback... but the clue was  to preview the link provided, which was taking you to a 3rd party page that didnt seem right. (and the email was from a "one letter difference" domain)   Or emails from THE CEO that name the company CEO telling everyone to check on their upcoming raises..... that one got like half the fucking company.      never underestimate the complete lack of intelligence re: security when good old fashioned greed gets involved.  IT had to explain to everyone that the CEO name is easily found and any phisher worth a damn would be able to try that. 

Important to note that we are tested on exact copies of phish emails have actually WORKED for real in the real world (at other companies) which is how they got the template.

 

Our team gets graded on how many times we mark the emails as phish spam.... every so often someone gets got.... but, other than the money one, we do very well..... except.... we've got a 69/70 year old lady whos worked for the company for 20+ years on our team....  She is so kind, and helps out anytime you ask her and shes always mentoring new hires.  But,she has basically been caught every single time.   Shes gone through at least 5 trainings lasting more than 2 hours showing her what to look for, but she gets so behind every morning, that by the end of the day shes opening emails without even bothering to see who the fuck they are from and double clicking every attachment or link.   

I dont even think firing her is on the table... but its amazing how she gets tricked on every fucking test, every month. 

Expand  

Sounds like she shouldn't have email. Seriously. A valuable employee who could take the company down because she just doesn't understand one thing, so take the one thing away from her. Hell, she'd probably be happier not having to check email. Is printing stuff out for her not an option?

  • Like 1
Guest Lobo
Posted

My Carrier Pigeon service finally get funding this morning!  

Moments later though, an impostor pigeon showed up to my office with the correct password, but different tail markings.  

As a show of force, we cut off its head and had one of our pigeons fly it back to wherever it came from.

Posted

IT security is like the old adage, "You don't have to be faster than the bear, only faster than your slowest friend". Or the simple act of just locking your car door.

 

If you take a pretty much "just-over-the-bare-minimum" approach to securing your shit, the hackers will likely move on to one of the plethora of agencies/companies that don't lift a damn finger.

If you have a bunch of fucksticks that fall for phishing, there is literally no excuse whatsoever to have not implemented a two factor authentication at this point.

Simply applying patches to your servers and endpoints in a timely manner is probably putting a network ahead of the vast majority of the masses.

Its a giant case of the ID Ten-T error.

 

 

  • Hook 'Em 1
Posted (edited)
  On 7/4/2021 at 12:52 AM, CooterBrown said:


We get fake phishing emails all the time from our IT security and they’ve gotten very good at crafting them to look real. Used to be on the 3rd strike you’d have to take extra training. Now the first strike wipes out your next scheduled raise. 2nd time and you’re fired. A random attack is one of the major fears at our company and they’re no longer fucking around with dumb ass employees.

Expand  

Is IT following the same termination rules when they or one of their selected vendors screw up?  :)

Seems like the CIO should be willing to quit without contractual benefits when his group make a mistake.

Edited by Nice Guy Eddie
Posted
  On 7/4/2021 at 2:02 AM, Lobo said:

Crack wise all you want, but firewalls prevent these types of cyber attacks.  If Texas can pony up the cash to finish it, a border firewall will keep attacks like this from happening from our south.  Our most vulnerable points in Texas, and really nationwide, are our Southern borders.  Also, the Yukon.  

Expand  

Actually no, firewalls do not prevent this kind of attack.

I won't comment much about your wall comment other than it's the same as a company firewall. Sure, a firewall (wall) will help keep your infrastructure (border) safe to an extent, but there is a hell of a lot more investment and security needed to keep your organization safe.

Posted
  On 7/4/2021 at 1:30 AM, conVINCEd said:

This was about 5 years ago.  They were obvious.  The CEO was a moron who stumbled his way up the corporate ladder.  If I got hammered and took out a police cruiser and impregnated my assistant within a 6 month span I would’ve been shown the door.  He was teflon.  He had the goods on a few people.

Expand  

Was That Wrong? | Epsilon Theory

Posted
  On 7/6/2021 at 6:21 PM, Lobo said:

No, see.  My firewall will be an actual wall so no viruses or ransomware can infiltrate our private enterprise, our state agencies, our power grid.  It's a literal wall that'll be impenetrable (unlike South Austin's Mom).  $18.4bn and we are totally safe from outside threats.  

Expand  

can you lite it on fire? I like this fire-wall idea. Very medieval. 

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.



×
×
  • Create New...