Risky Business #587 -- Full scale of Indian hacking-for-hire revealed

Presented by

Patrick Gray
Patrick Gray

CEO and Publisher

Adam Boileau
Adam Boileau

Technology Editor

On this week’s show Patrick and Adam discuss the week’s security news, including:

  • Full scale of Indian hacker-for-hire firm revealed
  • IBM exits facial recognition
  • Contact tracing apps flop
  • Much, much more

This week’s show is brought to you by AttackIQ.

AttackIQ’s Chris Kennedy will be along in this week’s sponsor interview to talk about how for some organisations threat intelligence has moved from a nice-to-have to being central to blue team efforts. As you’ll hear he says MITRE ATT&CK makes threat intel actionable, and some orgs playing on hard mode are really kicking some goals that way.

You can subscribe to the new Risky Business newsletter, Seriously Risky Business, here.

You can subscribe to our new YouTube channel here.

Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.

Risky Business #587 -- Full scale of Indian hacking-for-hire revealed
0:00 / 0:00

Show notes

Exclusive: Obscure Indian cyber firm spied on politicians, investors worldwide - Reuters

Dark Basin: Uncovering a Massive Hack-For-Hire Operation - The Citizen Lab

Huge Cyberattacks Attempt To Silence Black Rights Movement With DDoS Attacks

Petition · Take down the racist "Chimpmania" website. It attacks our children · Change.org

Cyberattacks since the murder of George Floyd

IBM will no longer offer, develop, or research facial recognition technology - The Verge

Contact tracing bug bounty: France’s StopCovid project launches public program | The Daily Swig

Another online voting system teardown, Big game hunters net Honda and Lion, and more... - Risky Business

Qatar: Contact tracing app exposes personal details of more than one million - Amnesty International Australia

Hackers target senior executives at German company procuring PPE

Why spies are targeting vaccine research - Risky Business

Shoddy US government review of Chinese telcos endangered national security, Senate panel finds

Election security: Democracy Live’s online voting system ‘open to manipulation’ | The Daily Swig

Facebook sues to stop domain scammers from impersonating Instagram, WhatsApp sites

Hackers hijack one of Coincheck's domains for spear-phishing attacks | ZDNet

New CrossTalk attack impacts Intel's mobile, desktop, and server CPUs | ZDNet

Plundering of crypto keys from ultrasecure SGX sends Intel scrambling again | Ars Technica

DARPA invites hackers to break hardware to make it more secure

ST Engineering conducting ‘rigorous review’ of systems after US subsidiary hit by ransomware attack | The Daily Swig

Ransomware gang says it breached one of NASA's IT contractors | ZDNet

Ransomware crooks attack Conduent, another large IT provider

QNAP NAS devices targeted in another wave of ransomware attacks | ZDNet

Florence, Ala. Hit By Ransomware 12 Days After Being Alerted by KrebsOnSecurity — Krebs on Security

Honda puts some manufacturing on hold over computer 'disruption'

Lion hit by cyber attack as hackers target corporate Australia

South African healthcare provider hit by cyber-attack | The Daily Swig

IT-bedrijf moet schade na ransomware-uitbraak vergoeden | Executive People

There’s a new Java ransomware family on the block

Exploit code for wormable flaw on unpatched Windows devices published online | Ars Technica

CallStranger vulnerability lets attacks bypass security systems and scan LANs | ZDNet

Commonwealth Bank to suspend users over abuse in online transaction descriptions

Zoom defenders cite legit reasons to not end-to-end encrypt free calls | Ars Technica

Zoom has partially fixed two new flaws, with other security hurdles ahead

Nintendo now says 300,000 accounts breached by hackers | TechCrunch

Google apps and websites get support for more security keys on iOS devices | ZDNet

Romanian Skimmer Gang in Mexico Outed by KrebsOnSecurity Stole $1.2 Billion — Krebs on Security

RMIScout: New hacking tool brute-forces Java RMI servers for vulnerabilities | The Daily Swig

Spy secret revealed: SIS and MI6 raided Czechoslovakian embassy in Wellington | RNZ News

CVE-2020-13777: TLS 1.3 session resumption works without master key, allowing MITM (#1011) · Issues · gnutls / GnuTLS · GitLab