Smashing Security

295: Slushygate, sextortion, and nano-targeting

What is slushygate and how does it link to sextortion in the States? What is the most impersonated brand when it comes to delivering phishing emails?  And what the flip is nano-targeting? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley [https://www.smashingsecurity.com/hosts/graham-cluley/] and Carole Theriault [https://www.smashingsecurity.com/hosts/carole-theriault/], joined this week by fan favourite Maria Varmazis. Warning: This podcast may contain nuts, adult themes, and rude language. No contortionists were hurt during the making of this episode. Episode links: * Memorandum of sentencing of Bryan Wilson [https://www.documentcloud.org/documents/23132920-wilson-sentencing] - United States District Court Western District Court of Kentucky at Louisville. * Accurint for Law Enforcement [https://risk.lexisnexis.com/products/accurint-for-law-enforcement] - LexisNexis. * LexisNexis illegally collected and sold people's personal data, lawsuit alleges [https://www.cbsnews.com/news/lexisnexis-lawsuit-collected-sold-personal-data-immigration-advocates-allege/] - CBS News. * Ex-cop abused police tool in Snapshot sextortion plot that stole sexually explicit photos and videos [https://www.bitdefender.com/blog/hotforsecurity/ex-cop-abused-police-tool-in-snapshot-sextortion-plot-that-stole-sexually-explicit-photos-and-videos/] - Bitdefender. * Congress should consider enhancing protections around scores used to rank consumers [https://www.gao.gov/assets/gao-22-104527.pdf] (PDF) - Government Accountability Office. * Online Shoppers Beware: Scammers Most Likely to Impersonate DHL [https://blog.checkpoint.com/2022/10/24/online-shoppers-beware-scammers-most-likely-to-impersonate-dhl/] - Check Point. * Why Am I Seeing That Political Ad? Check Your ‘Trump Resistance’ Score [https://www.nytimes.com/2022/10/23/technology/voter-targeting-trump-score.html]- New York Times. * I Got Access to My Secret Consumer Score. Now You Can Get Yours, Too [https://www.nytimes.com/2022/10/23/technology/voter-targeting-trump-score.html] - New York Times. * Mixed Idioms [https://mixedidioms.co.uk/]. * Apollo Remastered [https://www.apolloremastered.com/]. * Cosmic Background [https://cosmicbackground.io/]. * Death of an Artist [https://podcasts.apple.com/gb/podcast/death-of-an-artist/id1628639926] - Pushkin podcasts. * Smashing Security merchandise (t-shirts, mugs, stickers and stuff) [https://www.smashingsecurity.com/store/] Sponsored by: * Kolide [https://www.smashingsecurity.com/kolide] – the SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack. * Bitwarden [https://bitwarden.com/smashing/] – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing. * Sealit [https://www.smashingsecurity.com/sealit] - Zero Trust Data Protection: protect, share, and monitor confidential emails and files - without passwords. Integrated with Gmail, Outlook, and file systems. Learn more and take advantage of Sealit's special offer to "Smashing Security" listeners. Support the show: You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts [https://apple.co/2J1YMCu] or Podchaser [https://www.podchaser.com/podcasts/smashing-security-244729]. Become a Patreon supporter [https://www.patreon.com/smashingsecurity] for ad-free episodes and our early-release feed! Follow us: Follow the show on Twitter at @SmashinSecurity [https://twitter.com/smashinsecurity], or on the Smashing Security subreddit [https://www.reddit.com/r/smashingsecurity], or visit our website [https://www.smashingsecurity.com/] for more episodes. Thanks: Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks.

294: The Virgin trains swindler, cyber clowns, and AirTag election debacle

Someone's election-fiddling is uncovered with an Apple AirTag, a cyber scandal rocks Germany, and a swindler steals a fortune due to trains being delayed. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley [https://www.smashingsecurity.com/hosts/graham-cluley/] and Carole Theriault [https://www.smashingsecurity.com/hosts/carole-theriault/], joined this week by runZero's Chris Kitsch. Plus don't miss our featured interview with Akamai's Patrick Sullivan talking about how retailers can better thwart bots this holiday season. Warning: This podcast may contain nuts, adult themes, and rude language. Episode links: * The rundown on becoming runZero: What I learned rebranding a company [https://www.runzero.com/blog/rebrand-journey1/] - Chris Kirsch on the runZero blog. * Tweet by Melissa Shusterman [https://twitter.com/MelissaForPA/status/1580216538421899264] - Twitter. * Apple AirTag Used To Find Over 100 Stolen Democratic Campaign Signs, Police Say [https://www.forbes.com/sites/thomasbrewster/2022/10/13/apple-airtag-stolen-democratic-signs-pennsylvania/?sh=3d6fc80b3342] - Forbes. * Wie eine russische Firma ungestört Deutschland hackt [https://www.youtube.com/watch?v=dtZf-A4Qd5k] - ZDF Magazin Royale on YouTube. * German cybersecurity chief investigated over Russia ties [https://apnews.com/article/russia-ukraine-technology-berlin-government-and-politics-b7d3c413308976c3ab05ca7fbb71e476] - AP News. * German cybersecurity chief sacked following reports of Russia ties [https://www.theguardian.com/world/2022/oct/18/germany-cybersecurity-chief-sacked-russia-arne-schonbohm] - The Guardian. * Fraudster swindled Virgin Trains out of £116,000 in 'sophisticated' scam [https://www.msn.com/en-gb/news/world/fraudster-swindled-virgin-trains-out-of-c2-a3116000-in-sophisticated-scam/ar-AA12Ru70] - MSN. * Virgin Trains worker, 37, swindled rail firm out of £116,000 in 'delay and repay' compensation scam by photoshopping tickets to exploit flaw in system [https://www.dailymail.co.uk/news/article-11299587/Virgin-Trains-worker-37-swindled-rail-firm-116-000-delay-repay-compensation-scam.html] - Daily Mail. * Train delays:How to claim if it's late or cancelled [https://www.moneysavingexpert.com/reclaim/train-delays/] - Money Saving Expert. * How many trains arrive on time [https://dataportal.orr.gov.uk/popular-statistics/how-many-trains-arrive-on-time/] - Gov.uk. * Employee swindled Virgin Trains out of £116,000 in delay and repay compensation scam [https://www.birminghammail.co.uk/news/midlands-news/employee-swindled-virgin-trains-out-25207048] - Birmingham Mail. * Fat Bear Week 2022 [https://explore.org/fat-bear-week]. * ‘Fat Bear Week’ Hit By Voter-Fraud Attempt [https://www.rollingstone.com/culture/culture-news/fat-bear-week-voter-fraud-attempt-1234608565/] - Rolling Stone. * PimEyes [https://pimeyes.com/en] - Face search engine. * The Fear of God: 25 Years of the Exorcist [https://www.bbc.co.uk/iplayer/episode/p07r5pwq/the-fear-of-god-25-years-of-the-exorcist] - BBC iPlayer. * Smashing Security merchandise (t-shirts, mugs, stickers and stuff) [https://www.smashingsecurity.com/store/] Sponsored by: * Kolide [https://www.smashingsecurity.com/kolide] – the SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack. * Bitwarden [https://bitwarden.com/smashing/] – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing. * Akamai [https://www.akamai.com/smashing] – Make the most of Cybersecurity Awareness Month by connecting with Akamai’s experts on how you can achieve unmatched security. Where else can you take advantage of insights from 7 trillion DNS queries per day? Support the show: You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts [https://apple.co/2J1YMCu] or Podchaser [https://www.podchaser.com/podcasts/smashing-security-244729]. Become a Patreon supporter [https://www.patreon.com/smashingsecurity] for ad-free episodes and our early-release feed! Follow us: Follow the show on Twitter at @SmashinSecurity [https://twitter.com/smashinsecurity], or on the Smashing Security subreddit [https://www.reddit.com/r/smashingsecurity], or visit our website [https://www.smashingsecurity.com/] for more episodes. Thanks: Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks.

293: Massive crypto bungle, and the slave scammers

A couple unexpectedly find $10.5 million in their cryptocurrency account, and in Cambodia people are being forced to commit scams. All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley [https://www.smashingsecurity.com/hosts/graham-cluley/] and Carole Theriault [https://www.smashingsecurity.com/hosts/carole-theriault/], who are flying solo again this week. Warning: This podcast may contain nuts, adult themes, and rude language. Episode links: * DeFi bug accidentally gives $90 million to users, founder begs them to return it [https://www.cnbc.com/2021/10/01/defi-protocol-compound-mistakenly-gives-away-millions-to-users.html] - CNBC. * Compound boss begs users to return $90 million worth of cryptocurrency they were accidentally gifted [https://twitter.com/rleshner/status/1443730726751506432] - Robert Leshner on Twitter. * Couple mistakenly given $10.5m from Crypto.com thought they had won contest, court hears [https://www.theguardian.com/technology/2022/oct/11/crypto-com-accidental-transfer-10-5-million-trial-australia-couple-cryptocurrency] - The Guardian. * Mother accused of spending spree after mistakenly receiving $10 million in crypto bungle heads to trial [https://www.9news.com.au/national/thevamanogari-manivel-accused-spending-spree-mistakenly-receiving-10-million-dollars-heads-trial/49cc01fd-dbbe-4633-bc07-1d626ba51ada] - 9 News. * Sold to gangs, forced to run online scams: inside Cambodia’s cybercrime crisis [https://www.theguardian.com/world/2022/oct/10/sold-to-gangs-forced-to-run-online-scams-inside-cambodias-cybercrime-crisis] - The Guardian. * ZÈRTZ game [https://www.gipf.com/zertz/]. * ZÈRTZ [https://en.wikipedia.org/wiki/Z%C3%88RTZ] - Wikipedia. * GIPF project [https://en.wikipedia.org/wiki/GIPF_project] - Wikipedia. * The Capture [https://www.bbc.co.uk/programmes/m00085sx] - BBC iPlayer. * Smashing Security merchandise (t-shirts, mugs, stickers and stuff) [https://www.smashingsecurity.com/store/] Sponsored by: * Kolide [https://www.smashingsecurity.com/kolide] – the SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack. * Bitwarden [https://bitwarden.com/smashing/] – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing. Support the show: You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts [https://apple.co/2J1YMCu] or Podchaser [https://www.podchaser.com/podcasts/smashing-security-244729]. Become a Patreon supporter [https://www.patreon.com/smashingsecurity] for ad-free episodes and our early-release feed! Follow us: Follow the show on Twitter at @SmashinSecurity [https://twitter.com/smashinsecurity], or on the Smashing Security subreddit [https://www.reddit.com/r/smashingsecurity], or visit our website [https://www.smashingsecurity.com/] for more episodes. Thanks: Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks.

292: Trussterflucks and eBay stalking

Has new UK prime minister Liz Truss been careless with her mobile phone, and hear the most extraordinary story of corporate cyberstalking. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley [https://www.smashingsecurity.com/hosts/graham-cluley/] and Carole Theriault [https://www.smashingsecurity.com/hosts/carole-theriault/], joined this week by nobody for reasons that will become obvious. Warning: This podcast may contain nuts, adult themes, and rude language. Episode links: * Prison for ex-eBay staff who aggressively cyberstalked company's critics with Craigslist sex party ads and funeral wreaths [https://www.bitdefender.com/blog/hotforsecurity/prison-for-ex-ebay-staff-who-aggressively-cyberstalked-companys-critics-with-craigslist-sex-party-ads-and-funeral-wreaths-2/] - Bitdefender. * Two Former eBay Executives Sentenced to Prison for Cyberstalking [https://www.justice.gov/usao-ma/pr/two-former-ebay-executives-sentenced-prison-cyberstalking] - US Department of Justice. * Jonathan Pie: Welcome to Britain. Everything is Terrible [https://www.youtube.com/watch?v=m5aWtcx02ZI] -  NYT Opinion. * UK Supermarket’s Loans-for-Groceries Offer Attracts Huge Take Up [https://www.bloomberg.com/news/articles/2022-09-02/uk-supermarket-s-loans-for-groceries-offer-attracts-huge-take-up] - Bloomberg. * Liz Truss' mobile number is being sold online for £6.49 [https://www.dailymail.co.uk/news/article-11271019/Liz-Truss-mobile-number-sold-online-6-49.html] - Daily Mail. * How to Cook a Soft Boiled Egg Perfectly Every Time [https://www.youtube.com/watch?v=uD9Iy_pXJdM] - YouTube. * 11 Best Twitter Bots to Follow to Boost Productivity [https://gadgetstouse.com/blog/2021/06/11/best-twitter-bots/] - Gadgetshouse. * Smashing Security merchandise (t-shirts, mugs, stickers and stuff) [https://www.smashingsecurity.com/store/] Sponsored by: * Kolide [https://www.smashingsecurity.com/kolide] – the SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack. * Bitwarden [https://bitwarden.com/smashing/] – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing. * Akamai [https://www.akamai.com/smashing] - Make the most of Cybersecurity Awareness Month by connecting with Akamai’s experts on how you can achieve unmatched security. Where else can you take advantage of insights from 7 trillion DNS queries per day? Support the show: You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts [https://apple.co/2J1YMCu] or Podchaser [https://www.podchaser.com/podcasts/smashing-security-244729]. Become a Patreon supporter [https://www.patreon.com/smashingsecurity] for ad-free episodes and our early-release feed! Follow us: Follow the show on Twitter at @SmashinSecurity [https://twitter.com/smashinsecurity], or on the Smashing Security subreddit [https://www.reddit.com/r/smashingsecurity], or visit our website [https://www.smashingsecurity.com/] for more episodes. Thanks: Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks.

291: Deepfake dangers, AI image opt out, and controlling your urges

Anti-porn "shameware" apps take a privacy pounding, is your image already being used by AI, and deepfake danger continues to deepen. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley [https://www.smashingsecurity.com/hosts/graham-cluley/] and Carole Theriault [https://www.smashingsecurity.com/hosts/carole-theriault/], joined this week by Host Unknown's Thom Langford. Warning: This podcast may contain nuts, adult themes, and rude language. Episode links: * The Ungodly Surveillance of Anti-Porn ‘Shameware’ Apps [https://www.wired.com/story/covenant-eyes-anti-porn-accountability-monitoring-apps/] - WIRED. * Covenant Eyes [https://www.covenanteyes.com/]. * Sick and tired of trying to quit porn? You’re not alone [https://www.youtube.com/watch?v=VRBlv8Pc05E] - Covenant Eyes promotional video. * Fortify [https://www.joinfortify.com/]. * AI Is Probably Using Your Images and It's Not Easy to Opt Out [https://www.vice.com/en/article/3ad58k/ai-is-probably-using-your-images-and-its-not-easy-to-opt-out] - Vice. * ISIS Executions and Non-Consensual Porn Are Powering AI Art [https://www.vice.com/en/article/93ad75/isis-executions-and-non-consensual-porn-are-powering-ai-art] - Vice. * Have I been trained? [https://haveibeentrained.com/] * The Deepfake Danger: When It Wasn’t You On That Zoom Call [https://www.csoonline.com/article/3674151/the-deepfake-danger-when-it-wasn-t-you-on-that-zoom-call.html] - CSO Online. * Deepfake Audio Has A Tell – Researchers Use Fluid Dynamics To Spot Artificial Imposter Voices [https://theconversation.com/deepfake-audio-has-a-tell-researchers-use-fluid-dynamics-to-spot-artificial-imposter-voices-189104] - The Conversation. * Deephy: On Deepfake Phylogeny [https://arxiv.org/pdf/2209.09111v1.pdf] - Cornell University. * On The Horizon: Interactive And Compositional Deepfakes [https://arxiv.org/pdf/2209.01714.pdf]- Microsoft. * Detect DeepFakes: How to counteract misinformation created by AI [https://www.media.mit.edu/projects/detect-fakes/overview/] - MIT University. * New Deepfake Threats Loom, Says Microsoft’s Chief Science Officer [https://venturebeat.com/ai/new-deepfake-threats-loom-says-microsofts-chief-science-officer/] - Venture Beat. * The Joy of Sets [https://www.bbc.co.uk/archive/empty_sets_collection/zfvy382] - BBC Archive. * Steam Deck [https://www.steamdeck.com/en/]. * Am I Being Unreasonable? [https://www.bbc.co.uk/programmes/m001c3f9] - BBC iPlayer. * Smashing Security merchandise (t-shirts, mugs, stickers and stuff) [https://www.smashingsecurity.com/store/] Sponsored by: * Kolide [https://www.smashingsecurity.com/kolide] – the SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack. * Bitwarden [https://bitwarden.com/smashing/] – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing. * The Cyber Security Inside podcast [https://cybersecurityinside.com/smashing] – Relevant cybersecurity topics in clear, easy-to-understand language. With every episode, you’ll walk away smarter about cybersecurity, and have fun while you’re at it! Support the show: You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts [https://apple.co/2J1YMCu] or Podchaser [https://www.podchaser.com/podcasts/smashing-security-244729]. Become a Patreon supporter [https://www.patreon.com/smashingsecurity] for ad-free episodes and our early-release feed! Follow us: Follow the show on Twitter at @SmashinSecurity [https://twitter.com/smashinsecurity], or on the Smashing Security subreddit [https://www.reddit.com/r/smashingsecurity], or visit our website [https://www.smashingsecurity.com/] for more episodes. Thanks: Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks.