June 16, 2022

Crazy story of the Indian police and hacking and all.

Thomas Rid @RidT

Absolutely wild story that has it all: hacking, an extraordinary integrity attack, with forged and planted evidence, (ethical) leaking to help expose (unethical) law enforcement active measures — and hugely creative, collaborative threat hunting

wired.comPolice Linked to Hacking Campaign to Frame Indian ActivistsNew details connect police in India to a plot to plant evidence on victims’ computers that led to their arrest.

1:26 PM ∙ Jun 16, 2022

---

29Likes22Retweets

-

Master of Shannanigans @fancy_4n6

How do you protect your yubikey?

11:02 PM ∙ Jun 14, 2022

---

1,488Likes146Retweets

-

Cyber Shield 2022 features ‘large man in a ghillie suit’ hacking

A seven-foot tall man took ‘Incognito mode’ to a new level by wearing a ghillie suit to the military's Cyber Shield 2022 exercise.

-

Russian spy evicted from the Netherlands. Be sure to check out the PDF which contains his entire cover story, probably written by himself to help him memorise and review.

The Russian intelligence officer purported to be Brazilian citizen Viktor Muller Ferreira (born on 4 April 1989), when in fact his real name is Sergey Vladimirovich Cherkasov (born 11 September 1985). Cherkasov used a well-constructed cover identity by which he concealed all his ties with Russia in general, and the GRU in particular.

AIVD disrupts activities of Russian intelligence officer targeting the International Criminal Court | News item | AIVD

The AIVD prevented a Russian intelligence officer from gaining access as an intern to the International Criminal Court (ICC) in The Hague. The person in question works for the Russian Military Intelligence Service GRU, but he used a Brazilian cover identity to travel from Brazil to the Netherlands. 

Full details of his cover story are included here:

https://english.aivd.nl/binaries/aivd-en/documenten/publications/2022/06/16/cover-identity-of-russian-intelligence-officer/Enclosed+document+with+cover+identity+of+Russian+intelligence+officer-English+version.pdf

-

Matthew Green @matthew_d_green

Wow. I did not realize that Intel sat on Hertzbleed from Q3 2021 to June 2022 without fixing anything. During this attack another set of authors independently scooped them. That’s pretty frustrating.

3:02 PM ∙ Jun 15, 2022

---

316Likes74Retweets

Luca De Feo @luca_defeo

@matthew_d_green Uh? If it's about our work, I would not call it scooping. We happen to have one algebraic technique in common, but the two works are substantially different, and I don't think our work appearing online has impacted the chances of Hertzbleed being accepted in any way.

3:13 PM ∙ Jun 15, 2022

---

21Likes1Retweet

-

Victory reimagined: Toward a more cohesive US cyber strategy - Atlantic Council

US policy is on two potentially divergent paths: one that prioritizes the protection of American infrastructure through the pursuit of US cyber superiority, and one that seeks an open, secure cyber ecosystem.

And Dave Aitel’s review

CyberSecPolitics: The Atlantic Council Paper and Defending Forward

Paper linked here . One thing I liked about the new Cyber Statecraft paper is it had some POETRY to the language for once! Usually these thi...

-

Tim Misiak @timmisiak

I finally got around to integrating the WinDbg disassembly window with the awesome disassembler that @wmessmer wrote. If you have symbols, it will resolve registers and memory locations to names. It also does some color coding on conditional/jumps/rets.

6:28 PM ∙ Jun 15, 2022

---

117Likes21Retweets

-

Corey Quinn @QuinnyPig

If you want knockoff @Cartier, your best option remains Amazon Basics.

Amazon News @amazonnews

Amazon’s Counterfeit Crimes Unit has stopped a social media influencer from selling knockoff @Cartier.

The criminal concealed their iconic motifs & brand name as generic products in our store while promoting the fakes on social media—and was caught. https://t.co/0yIQIhfxAv