Collaborate Disseminate
One question I get asked often is, “Chris, isn’t it legit to use fear as part of my pretext in a social engineering exercise? I mean, after all, the bad guys are doing it. Wouldn’t it be realistic?” Well I can’t argu… Continue reading Is It Legit to Use Fear as Part of My Pretext?
Twitter admitted it broke the rules when it handed over control of the student’s account to college administrators. Continue reading Twitter hands over student’s account to his college
Relax: Nic Cage deepfakes aren’t going anywhere. It’s only “maliciously misleading” impersonations that are now verboten. Continue reading Reddit bans ‘impersonation,’ but satire and parody are still OK
There’s a new, practical, collision attack against SHA-1: In this paper, we report the first practical implementation of this attack, and its impact on real-world security with a PGP/GnuPG impersonation attack. We managed to significantly reduce the co… Continue reading New SHA-1 Attack
There’s a new, practical, collision attack against SHA-1: In this paper, we report the first practical implementation of this attack, and its impact on real-world security with a PGP/GnuPG impersonation attack. We managed to significantly reduce the complexity of collisions attack against SHA-1: on an Nvidia GTX 970, identical-prefix collisions can now be computed with a complexity of 261.2rather than264.7,… Continue reading New SHA-1 Attack
He and co-conspirators stole 50 gigs of music and leaked some of it onto the internet. Continue reading Austin Man Indicted for Stealing Unreleased Music from Artists
The campaign is consistent with emerging tactics from bad actors to use increasingly sophisticated social engineering and spoofing to deliver malware. Continue reading Threat Actor Impersonates USPS to Deliver Backdoor Malware
Attacks are targeting international companies in the financial sector, demanding that victims pay ransom in Bitcoin. Continue reading Cybercriminals Impersonate Russian APT ‘Fancy Bear’ to Launch DDoS Attacks
Scammers are targeting those hoping for #CashAppFriday “blessings.” Continue reading Cash App Twitter Giveaway a Haven for Stealing Money
This seems to be an identity theft first: Criminals used artificial intelligence-based software to impersonate a chief executive’s voice and demand a fraudulent transfer of €220,000 ($243,000) in March in what cybercrime experts described as an unusual case of artificial intelligence being used in hacking. Another news article…. Continue reading Fabricated Voice Used in Financial Fraud