OT: Target got got (de facto Bad Cyber Stuff thread)

[dash]

I just received an e-mail in my inbox entitled Malware Protection - Yeah, straight to spam you go, no clicky for you.

 

[forty_three]

Nude Videos of Kids From Hacked Baby Monitors Were Sold on Telegram

Plus: A fitness app may have leaked the location of a murdered submarine captain, the privacy risks of filing taxes online, and how Facebook data was used in an abortion trial.

www.wired.com

Reminder - not everything needs to be connected to your network. In fact, very little actually needs to have access to the Internet. There is no reason for say, a fridge, to be able to communicate with anything else.

If you have any camera system / ring doorbell / Alexa or Siri device assume nothing that happens in your house is private.

 

[forty_three]

https://www.washingtonpost.com/obituaries/2023/07/20/kevin-mitnick-hacker-dies/?utm_source=reddit.com

Cancer Sucks.

While I think his skills were kind of over blown by media panic, it cannot be denied that this guy changed a lot in the world of cybersecurity, especially in the way he made big wigs realize they had to take it seriously. His books are very good.

 

[buffhockey]

https://www.washingtonpost.com/obituaries/2023/07/20/kevin-mitnick-hacker-dies/?utm_source=reddit.com

Cancer Sucks.

While I think his skills were kind of over blown by media panic, it cannot be denied that this guy changed a lot in the world of cybersecurity, especially in the way he made big wigs realize they had to take it seriously. His books are very good.

For some kind of security seminar I did a few years ago, I got one of these. It was his business card.

Had to use it once to unlock a door at the office after the only known key was lost. I was suprised how easy it was.

 

[forty_three]

Forever 21 data breach impacted +500,000 individuals

Fashion retailer Forever 21 disclosed a data breach that exposed the personal information of more than 500,000 individuals.

securityaffairs.com

I know at least one of you actively shops there for your plucky weekday looks, so head's up.

 

[forty_three]

Your Wyze webcam might have let other owners peek into your house

Wyze’s web viewer was showing unexpected feeds.

www.theverge.com

 

[buffhockey]

 

[forty_three]

Are the water levels back to relatively normal in Lake Mead? Asking for a pit boss friend.

 

[buffhockey]

Are the water levels back to relatively normal in Lake Mead? Asking for a pit boss friend.

Up 20-25 feet, a lot more to go.


Wonder where Danny Ocean is?

 

[buffhockey]

real issues with this:


- and not just Vegas MGM properties...

 

[jstewismybastardson]

consider yourself warned @Comeds

Maker of ‘smart’ chastity cage left users’ emails, passwords, and locations exposed | TechCrunch

A hacker said they breached the maker of internet-connected chastity cages to warn about security flaws that are exposing users' data.

techcrunch.com

 

[Comeds]

consider yourself warned @Comeds

Maker of ‘smart’ chastity cage left users’ emails, passwords, and locations exposed | TechCrunch

A hacker said they breached the maker of internet-connected chastity cages to warn about security flaws that are exposing users' data.

techcrunch.com

Waiting for Forty-Three to lecture us that not everything needs to be connected to the internet. Well, in this case I beg to differ.

 

[buffhockey]

In case anyone was wondering...



and Friday is payday


MGM nationwide - parking is free, no room charges, room keys are not working and on and on...

 

[dash]

In case anyone was wondering...



and Friday is payday


MGM nationwide - parking is free, no room charges, room keys are not working and on and on...

Just crazy that it has dragged on this long

 

[buffhockey]

Just crazy that it has dragged on this long

It sounds like MGM don't want to pay the ransomware fee. Apparently Caesars got hit a little while back and paid $30 Million...

 

[dash]

^

They (MGM) have done a pretty good job keeping this quiet up to this point.

 

[Bloody Brian Burke]

It sounds like MGM don't want to pay the ransomware fee. Apparently Caesars got hit a little while back and paid $30 Million...

Are there any big companies that have been hit with ransomware that haven't wound up paying the ransom? Seems like this is a futile exercise.

 

[forty_three]

Are there any big companies that have been hit with ransomware that haven't wound up paying the ransom? Seems like this is a futile exercise.

Ones with good resilient systems and robust recovery plans.

 

[forty_three]

MGM Grand Cyberattack Allegedly Caused by 10-Minute Phone Call

Ransomware group ALPHV claims to have used common social engineering tactics to get into the casino's systems.

gizmodo.com

If true - holy shit.

 

[forty_three]

Looking worse and worse for MGM by the day

Seems they responded to a cut on their hand by shooting themselves in the face.

They refused to communicate via the methods and terms set aside by the bad guys, but someone has been jumping in the channel who wasn't directly invited. Rogue admin? Feds?