July 26, 2022

Notes from Dave Aitel correcting a poor analysis on Ukraine cyber conflict.

https://docs.google.com/document/d/13ef8fOXtXW8v7m-Kc-IWPrhrAT07XfeZCGYO6azLsIo/edit

-

Christo Grozev @christogrozev

Today FSB announced that they have “foiled a plot by Ukraine’s intelligence services” to lure Russian military pilots to surrender to Ukraine – with their planes – in return for millions of USD in payments (thread).

-

Vasken @Aimtech9

When the employer asks for 10+ years of experience and you're 20 😁

-

Alan Rozenshtein @ARozenshtein

Terrific analysis of the special cybersecurity issues around open-source software, from @ChinmayiSharma in @lawfareblog.

lawfareblog.comOpen-Source Security: How Digital Infrastructure Is Built on a House of CardsLog4Shell remains a national concern because the open-source community cannot continue to shoulder the responsibility of securing this critical asset and vendors are not exercising due care in incorporating open-source components into their products. A comprehensive institutional response to the inc…

-

Archaeo - Histories @archeohistories

The three headed Lernaean Hydra wall painting from an Etruscan tomb at the necropolis of Pianacce, dated to the 4th century BC.

-

What a story!

Michael Weiss 🌻🇺🇸🇮🇪 @michaeldweiss

NEW: Remember Jan Marsalek, the fugitive Wirecard COO and suspected GRU agent, who fled to Russia from Munich? The exclusive story of how he did it -- with the help of one of Austria's top former intelligence officers.

dossier.centerFrom Munich to MoscowThe inside story of how fugitive Wirecard COO Jan Marsalek fled from a 2 billion euro corruption saga in Germany and wound up living under state protection in Russia

-

Kelly Shortridge @swagitda_

At @SummerC0n 2022, @rpetrich and I presented “Lamboozling Attackers” on how you can leverage deception environments to exploit attacker brains (i.e. their learning & decision-making). Slides are now online here and they are An Experience: swagitda.com/speaking/Lambo…

Paper here:

https://cacm.acm.org/magazines/2022/6/261170-lamboozling-attackers/fulltext

-

Why are McDonald’s Self Service Kiosks so hackable?

https://ghuntley.com/mcdonalds/

-

pancak3 @pancak3stack

Aleksandr Vadimovich Zhukov (06.04.1984), one of the malware developers working for the Conti RaaS organization. pancak3.substack.com/p/van Cc @Kozielectric

pancak3.substack.comvanOne of the malware developers working for the Conti RaaS organization.

-

Dmytro Oleksiuk @d_olex

Enjoyed new malware report? Want similar UEFI firmware implant for your operations? Check out my Boot Backdoor: it is more reliable than #CosmicStrand, it is harder to detect, it has more deployment options and its sources available on github: github.com/Cr4sh/s6_pcie_…

Gustavo Cols @GustavoCols

Our new blog post is about a UEFI firmware bootkit that we called #CosmicStrand and attributed to an unknown Chinese-speaking threat actor. #APT #Securelist #Kaspersky https://t.co/jbb7GLCnKB

For attackers who have started using cr4sh’s tools in the wild, see here:

https://www.theregister.com/2022/07/21/us_cyber_command_malware_ukraine/

-

Matthijs R. Koot @mrkoot

Russian Intelligence: A Case-based Study of Russian Services and Missions Past and Present (14MB .pdf, Spring 2022, 370 pages) ni-u.edu/wp/wp-content/… Author: Kevin P. Riehle (@riehle_kevin) Editor/Publisher: National Intelligence (NI) Press /c @krypt3ia #intelligence #russia

-

The diary of Arthur Bremer, which was made into the book “and assassin’s diary” which partially inspired the movie “Taxi Driver.”

It is amazingly articulate and well written.

https://archive.org/details/nsia-BremerArthurDiaryBookof/page/n4/mode/1up

-

Oleksandra Matviichuk @avalaina

It’s a really a case when one graffiti from St. Petersburg (Russia) is worth a thousand words. One of the best examples of oppositional street art. #RussianWarCrimes

-

-

But With Raptors @ButWithRaptors

Singin' in the Rain (1952) but with a Velociraptor

-

Jerry Aldrich @jerryaldrichiii

LMAO, anyone else remember the thread on the left? Well, here's how it turned out.