Thu, 1 July 2021
For the 208th episode of the Kaspersky Transatlantic Cable podcast, Dave’s gone missing, and Ahmed and I debate whether it is leisure or if something more nefarious is going on. We don’t quite get to the bottom of it, but we do cover a wide array of topics, from a political sex tape leaked on OnlyFans to PS3 leaks and ransomware in US schools.
We start with the electoral scene in New York state, where a user on Onlyfans and Twitter leaked a BDSM video of politician Zack Weiner and a partner. Both platforms took down the video and banned the user, but the reply from Weiner is what caught our attention as a standup response to a truly personal doxing.
From there, we have to mention Ahmed’s complete quiz game dominance. Sadly, I am not able to overtake David’s massive lead, and we move on to a story of PS3 hacking for online gaming.
In the next segment, I sit down with Kurt Baumgartner to discuss the latest on school ransomware in the United States, the government reclaiming funds from ransomware crooks, and more. We continue with news of a potentially new scraping of data from 700 million LinkedIn users before closing out with a new government joining Have I Been Pwned.
If you liked what you heard, please consider subscribing and sharing with your friends.
Direct download: KL_Podcast_208.mp3
Category:technology -- posted at: 10:45am EDT
Thu, 24 June 2021
Welcome to the 207th edition of the Kaspersky Transatlantic Cable podcast! This week, Dave, Ahmed, and I chat about a number of topics — and we also have some changes to our big board of quiz points.
We kick things off with a pair of stories about AI and surveillance. The first is from the UK, where AI can now tell authorities if people were adhering to social distancing guidelines. The next is about a Chinese company using smile recognition for employees entering the office. Smile for the camera.
After a short break for a tip from Ahmed, we’re on to the first round of the week’s quiz game. I won’t spoil it here, but let’s just say there is a bit of a shocker. Following the fun, we get back to business, discussing recent APT activity from the Persian-speaking Ferocious Kitten group with researchers Mark Lechtik and Aseel Kayal.
After the interview, we look at the insecurity of America’s water facilities before wrapping up with a discussion of consent and the COVID-19 app in Massachusetts.
Direct download: KL_Podcast_207.mp3
Category:technology -- posted at: 6:29am EDT
Thu, 17 June 2021
This week, Jeff, Ahmed, and I kick off episode 206 of the Transatlantic Cable podcast with a discussion about Ireland’s change in stop and search law, including a new law allowing police to force people to unlock digital devices such as phones and tablets.
From there, we move on to further discussion of ransomware and the recent G7 talks, with US President Biden seeking tougher stances on ransomware gangs. We also touch on the JBS meat processing company’s recent decision to pay ransom to REvil.
To wrap up, we talk about the recent EA hack and Facebook’s singing about WhatsApp privacy cred in a new advertisement.
Direct download: KL_Podcast_206_320.mp3
Category:technology -- posted at: 5:36am EDT
Thu, 10 June 2021
This week on the Transatlantic Cable podcast, Jeff, Ahmed, and I look at how the DarkSide gang was able to use an old VPN account to breach the Colonial pipeline network. Moving on, we also chat about two related stories, including one in which lawmakers try to force companies to disclose attacks and one about the FBI reclaiming some of the $4.4 million ransom DarkSide has collected.
We also discuss a story about Apple AirTags, which the company is planning to update based on fears that stalkers could use them to track victims. Finally, we have an interesting discussion about daters adding COVID vaccine stickers to their dating app profiles.
Direct download: KL_Podcast-205_128.mp3
Category:technology -- posted at: 6:58am EDT
Thu, 3 June 2021
We open the show with a hidden gem of a crime. British authorities thought they were pursuing a cannabis operation only to find a mining operation. The next story is a look at the FBI integration with Have I Been Pwned and some new site features worth looking into.
After that, I sit down with Rainer Bock of our team at Tomorrow Unlocked to learn about their latest — some cool videos are on the way, including an interactive one on Carbanak. Unfortunately, we also have to discuss the latest from SolarWinds and why the problem may not be going away as soon as we’d all like.
Direct download: KL_Podcast-204-128.mp3
Category:technology -- posted at: 10:59am EDT
Thu, 27 May 2021
Dave and I cover a lot of ground this week on the Transatlantic Cable podcast, from how obscure movies are holding up to surviving COVID-19, plus SolarWinds and more.
We kick off the show with the latest on SolarWinds — not media speculation but straight from the horse’s mouth. In this article, our old colleague Dennis Fisher recaps a talk given by Sudhakhar Ramakrishna, SolarWinds CEO, on the attack and what they have learned. Then, heading across the pond, we reflect on three years of GDPR and the biggest fines levied to date.
For our third story, we take a look at Conti ransomware’s recent attacks on first responder and healthcare institutions. After that, Robby Cataldo, the managing director of Kaspersky North America, joins us to discuss RSA 2021, Cataldo’s bout with COVID-19, and how businesses have had to adapt to the pandemic. To close things out, we look at the fallout from a breach at Air India.
Direct download: KL_Podcast_203_20210526.mp3
Category:technology -- posted at: 5:50am EDT
Thu, 20 May 2021
Welcome to episode 202 of the Kaspersky Transatlantic Cable podcast. While much of the cyberworld will be juggling sales pitches and panels at RSA, we’re focusing on stories that will have more of an immediate impact on your security needs.
We open the episode discussing the latest with DarkSide. Are they dead? Did they hit Toshiba?
Moving along, we discuss the reemergence of Fin7 and its posing as a legitimate cybersecurity research firm. Staying on the topic of crime, but in sunny Brazil, the LatAm arm of our Global Research and Analysis team (GReAT) takes a look at an emergent financial Trojan called Bizarro. I chat with Fabio Assolini from the team to see why people should care and why the region is such a hotbed of financial crime.
Then it’s the latest in the DC Police vs. Babuk. It seems police tried to negotiate a ransom, but the crooks were not too interested. We then take a look at the need for patching at home and the office with Maria Namestnikova of GReAT Russia.
To close out the podcast we discuss a new texting scam involving deliveries in the UK and a lot of money lost.
Direct download: KL-Podcast_202.mp3
Category:technology -- posted at: 10:48am EDT
Tue, 11 May 2021
Episode 201 of the Kaspersky Transatlantic Cable podcast is the extended podcast we teased last week. More changes will come, but this will be a recurring theme and length.
For our first story, Dave and I take a look at yet another cryptoscam involving Elon Musk, whose hosting of Saturday Night Live netted scammers nearly $100K. Come on, Internet friends, we can do better. These scams are just a 2021 version of your cousin the Nigerian prince.
From there, we jump over to a ransomware hit on an entire city: Tulsa, Oklahoma. Staying on the topic of ransomware, Ivan Kwiatkowski joins us from the European arm of GReAT to dive a bit deeper into the interconnected ecosystem of ransomware. One could be forgiven for thinking it’s simply one big attack, but there’s a bit more here than meets the eye.
For our next story, we head to the world of 2FA, where Google is pushing another, more secure, form of the authentication to select users with the goal of eventually reaching all users.
Closing out the news portion of the podcast, we take a look at the latest in the saga of ransomware hitting the Colonial Pipeline in the USA. It’s clear a lot has yet to emerge. To close out the podcast, we chat with Dmitry Galov about the darknet component of ransomware.
Direct download: tcp_201_-_Copy.mp3
Category:technology -- posted at: 5:55am EDT
Thu, 6 May 2021
It’s here — episode 200 of the Kaspersky Transatlantic Cable has landed! This week, Dave and Jeff chat about a new ransomware taskforce whose purpose is to stem the surge of ransomware attacks. From there, they look at issues surrounding Google’s ad network and scams — and why Google just can’t seem to get control over them. Following that, they briefly touch on doxing and how everybody can protect themselves from attack.
To wrap up, it’s a uniquely Canadian story: Beavers managed to chew through fiber optic cables for a small village in Western Canada.
Direct download: 20210506_KL_Podcast_200.mp3
Category:technology -- posted at: 5:06am EDT
Thu, 29 April 2021
Dave and I start episode 199 of the Kaspersky Transatlantic Cable podcast with some good news in the infosec space: a researcher and his friend hunting bugs to help a family member pay for surgery. It’s not often we get a chance to talk about positive news, so this one is a bit of a breath of fresh air.
From there, we head back to the world of law enforcement and surveillance. In this story, a Florida law enforcement team was caught flying a surveillance drone over a protest/press conference reacting to a police shooting.
Our third story is about the latest from the REvil ransomware gang and its attempted extortion of Apple. Staying on the topic of ransomware, we talk about how that malicious action affected the world in 2020, and a new report from Kaspersky.
Closing out the podcast, we take a look at the news that an enterprise-level password manager has asked users to reset all passwords.
Direct download: 20210428_KL_Podcast199.mp3
Category:technology -- posted at: 6:02am EDT
Wed, 21 April 2021
For this week’s episode of the Kaspersky Transatlantic Cable podcast, Dave and Jeff snagged some time with Adam Dodge, CEO of EndTab, and Vladislav Tushkanov, a privacy expert here at Kaspersky, to talk about doxing. During our wide-ranging discussion, we talked about issues around doxing and why it’s a growing problem.
Direct download: 20210421_KL_Podcast_198.mp3
Category:technology -- posted at: 5:49am EDT
Thu, 15 April 2021
This week, Jeff and I chat with Ivan Kwiatkowski from Kaspersky’s GReAT to talk about the recent controversy surrounding Google’s decision to “burn” a zero-day exploit in use by US spies. We also talk briefly about another zero-day discovery: Kaspersky found it, and it requires IT teams’ immediate attention.
Moving on, we discuss data breaches in Facebook, LinkedIn, and Clubhouse that could affect users’ privacy for years to come. From there we turn our attention to a story looking at the “average” UK hacker and how one person wanted to take out 70% of the Internet by destroying three Amazon server centers.
If all that floats your boat, be sure to subscribe. For more information on the stories we covered, see the links below:
Direct download: 197_final.mp3
Category:technology -- posted at: 12:39pm EDT
Wed, 7 April 2021
With Easter holidays in the UK, we gave David the day off for recording the 196th episode of the Kaspersky Transatlantic Cable podcast. Instead, I am joined by two of my colleages from our Global Research and Analyst Team (GReAT).
Last week, Dmitry Bestuzhev and Fabio Assolini hosted a webinar on the threat landscape in the financial sector. During our conversation, we touch on the state of financial threats, how Covid impacted the online threats and more.
Direct download: 196_final.mp3
Category:technology -- posted at: 5:04am EDT
Wed, 31 March 2021
For the 195th edition of the Kaspersky Transatlantic Cable podcast, Dave and I focus on crime. Now this ranges from everything from dumb criminals to statistics and ransomware.
The first story we look at travels from Italy to the Dominican Republic and back again. In this case we have a mafia member who was on the run from Italian law enforcement and living in the Caribbean. The problem was that this fugitive had a love for cooking. So much so that he broadcast his cooking on YouTube. The problem for him was that despite hiding his face, he left his tattoos exposed. I guess they were memorable as it led to his arrest and extradition.
From there, we look at a recent report from Canalys that outlines the sheer volume of leaked and stolen data that is circulating across the web due to data breaches. The third story is ransomware turned extortion after a criminal gang finds a slew of pornography on an IT worker’s computer. To close things out, we discuss the latest school to fall victim to ransomware.
Direct download: podcast_195_mixdown_1.mp3
Category:technology -- posted at: 5:06am EDT
Thu, 25 March 2021
We are slowly chipping away towards the second century mark for the Kaspersky Transatlantic Cable podcast. During our conversation, Dave and I go everywhere from the courtroom to the streets to the home.
To kick off the 194th edition, we move to the intersect of military and automotive. In this story from Joseph Cox, we look at a contractor looking to sell the location data of billions of cars to the US military. This one has a lot of question marks and what ifs when it comes to what could go wrong. From there, we head to the courtroom where Zoom calls are making compelling theater for the world of reddit. The question here though is what really should we be watching.
For our third story, we head to an emerging story of people renting out unused bandwidth for profit to anyone in the world. Is this a VPN? Is it a DDoS for hire? They say it will NOT be used for illicit activities, but I for one am not convinced. We close out the podcast by looking at the case of a hacked NHS employee account that turned into a PS5 scam.
Direct download: 194_final.mp3
Category:technology -- posted at: 6:07am EDT
Thu, 18 March 2021
We kick off the 193rd edition of the Kaspersky Transatlantic Cable podcast with a bit of a PSA from Facebook. The social giant is rolling out tools to help people get the Covid-19 vaccine.
While Dave and I have some misgivings about the “public” service here from Facebook, we both agree that you should get a vaccine. From there, we sit down and talk with Vladimir Kuskov, Head of Advanced Threat Research and Software Classification at Kaspersky, on what the latest is with the Microsoft Exchange zero days and their exploitation. We then head to the world of deepfakes for a pair of stories. The first takes a look at some machine vs. machine battle. A new software is able to identify whether a video is a deepfake or real McCoy based upon reflections in the eyes. The second story of the deepfakes takes a look at woman in Pennsylvania who created pictures and videos of rivals to her daughter on the cheerleading team.
We then cross the pond to discuss a hoovering campaign by the Home Office. Sure it was an “experiment,” but is it really? To close out the show, we look at Nvidia’s battle against cryptomining.
Direct download: 193_final.mp3
Category:technology -- posted at: 6:46am EDT
Thu, 11 March 2021
In episode 193 of the Transatlantic Cable, Dave and Jeff look at news around a new ransomware attack that hit a bank in the US, which also included a doxing angle few expected.
From there, there’s discussion on DeepFakes and the business opportunities they may hold, along with the concerns that people still have with them. To wrap up, They briefly touch on a breaking news story around the European Banking Authority being hit by a Microsoft Exchange attack.
Direct download: Podcast_192new.mp3
Category:technology -- posted at: 5:37am EDT
Thu, 4 March 2021
Welcome to the 191st iteration of the Kaspersky Transatlantic Cable Podcast. On this week’s episode, Dave and I discuss fines, privacy, doxing and more.
To kick things off, we look at a pair of stories that discuss fines levied on social networking sites. The first pertains to TikTok and minors, while the second one discusses Illinois ruling against Facebook in a class action suit. From there, we stay on the social media train and discuss a recent move from Twitter to flag false information pertaining to Covid-19 vaccines.
From there, we hop into an interview that David did with our HR team about the future of work, state of HR and more. We close out the podcast talking about a doxing that comes for users of Gab from a hacktivist group.
Direct download: podcast_191_2.mp3
Category:technology -- posted at: 5:49am EDT
Thu, 25 February 2021
For the 190th episode of the Kaspersky Transatlantic Cable Podcast, Dave and I focus on two main topics: Facebook vs. Australia (and EU) & Clubhouse.
We kick things off in the spot the cool kids are raving about on the Internets: Clubhouse. The invite-only, audio-focused iOS App has taken Silicone Valley and the social network conversation by storm, not for all the right reasons though. In these two stories, we look at a developer who created an android app to use Clubhouse and also a short-lived site that scraped content of the site and published it for anyone to see. So needless to say, privacy is a wee bit of a concern. From there, we jump into a recent announcement from Nvidia looking to alter some graphic cards to dissuade cyrpto-mining.
To close out the podcast, we take a look at the current showdown between Australia and Facebook. We discuss the current situation, the history as well as how this could impact other countries or Unions (See, Europe). I also give my take which is not overly a popular one, but maybe some of you agree with it.
Direct download: 190_final.mp3
Category:technology -- posted at: 4:35am EDT
Thu, 18 February 2021
In episode 189 of the Kaspersky Transatlantic Cable, Jeff and myself talk a look at some stories you might have missed this week. We start by taking a look at a recent story from Threatpost, which looks at recent research that health apps are vulnerable to different forms of attack. From there, we take a dive into a story looking at iMessage, drug-deals and the police – hint: the story doesn’t end well for the bad-guys.
We then move onto a concerning story around a former employee of a firm, who’s accused of lacing the company network with ransomware after being let go. Talk about holding a grudge.
We end on a fun note with the recent “I’m not a cat” zoom call blunder. Remember, on the internet nobody knows you’re a cat.
Direct download: podcast_189_mixdown.mp3
Category:technology -- posted at: 4:31am EDT