June 29, 2022

TV hacking

June 28

There is a bit of tit for tat TV hacking going on between Russian and the collective Ukraine cyber forces. The most recent was a foiled attempt by Russia on Ukraine.

https://ssu.gov.ua/en/novyny/sbu-ne-dala-rosiiskym-spetssluzhbam-zlamaty-ukrainski-telekanaly-yaki-berut-uchast-u-natsionalnomu-telemarafoni

June 5

Last month there was a successful Russian attack on a streaming service, the most notable element being that it interrupted a football match which annoyed some people.

https://imi.org.ua/en/news/hackers-attack-oll-tv-media-service-and-broadcast-russian-propaganda-instead-of-football-i45981

March 16

In the most impressive of the attacks in terms of psyops, Russian hackers took over the Ukraine24 streaming service and displayed a text message saying roughly, “Hi, Zelensky here, I’m surrendering and we should all give up.”

https://www.mirror.co.uk/news/world-news/desperate-russia-hacks-ukraine-tv-26480124

March 7

In March Anonymous claims to have hacked a Russian streaming service and broadcast Ukrainian footage. FWIW…

https://www.independent.co.uk/news/world/europe/anonymous-wink-ivi-russia-24-channel-1-moscow-24-b2029915.html

-

This is huge.

Nick Schifrin @nickschifrin

BREAKING: @POTUS announces new US military deployments to Europe: 1. Create permanent HQ for US 5th Army Corps in Poland 2. Deploy additional rotational brigade to Romania 3. Deploy 2 additional F-35 squadrons to the UK 4. "Enhance" rotational deployments in Baltics

-

-

Garick Chan @ilovegarick

I thought of @blelbach first...

-

Jeff Stone @jeffstone500

New: A former Canadian government employee just agreed to plead guilty to working for ransomware gang that hacked hospitals through the pandemic. US cops ~$28 million when they took him into custody. court docs: storage.courtlistener.com/recap/gov.usco…

-

John Regehr @johnregehr

from r/dataisbeautiful

-

Corey Quinn @QuinnyPig

BREAKING: AI ethicist warns that Google may produce a self-aware engineer within the next five years.

-

Bret Devereaux @BretDevereaux

One of the things I find interesting is how an academic subfield or debate is shaped by the circumstances of its creation. So let's talk about the odd shape that the Roman Demography subfield has taken and what seems (to me at least) to have shaped that. 1/

-

Florian Ederer @florianederer

Every now & then I come across a beautiful paper that makes me answer the question "Is this economics?" with an emphatic YES. The debutante season was disrupted in 1861-63 by Queen Victoria's mourning. This led to less assortative matching & reduced aristocratic power.

-

nash flynn @itsnashflynn

everyone freaking out thinking the robot apocalypse is coming bc the google AI is sentient and it’s like okay? just add it to the apocalypse pile who cares

-

Evan Kohlmann @IntelTweet

Iraqi hackers suspected of ties to Iran have reportedly launched a "cyberattack" (likely a DDOS attack) targeting the servers of Cellebrite, an Israeli digital forensics and intelligence company whose software tools are often used by Western law enforcement and security agencies.

-

👩🏻‍🚀 @lanyardigan

Love the deli paper on the doctor’s table. Mmm I’m a sick little sandwich

-

This is so cool. An entire mythos of wars, silver mines, lost kingdoms, and centuries of strife. All made up. I hope they archive it and make it available as a website. I think a fictional story told with Wikipedia entries would be cool.

https://www.sixthtone.com/news/1010653/she-spent-a-decade-writing-fake-russian-history.-wikipedia-just-noticed.-

https://lithub.com/a-chinese-borges-wrote-millions-of-words-of-fake-russian-history-on-wikipedia-for-a-decade/

-

https://blog.talosintelligence.com/2022/06/de-anonymizing-ransomware-domains-on.html

-

CommodoreBlog @CommodoreBlog

Happy Birthday Atari.🎂 en.m.wikipedia.org/wiki/Atari #Atari🔊

-

Nottingham Politics @NottsPolitics

▪️ Information Wars ▪️ 🎧 Listen to the new podcast series from @NottsPolitics' @drnataliemartin. 🗣️Over 4 episodes Natalie discusses the issue of “disinformation” in mainstream and social media with experts in the field. Listen to the series here ➡️bit.ly/3a6GQXf

-

https://dys2p.com/en/2021-12-tamper-evident-protection.html

-

Kostas @Kostastsale

This new #Bumblebee way of execution is quite evasive. Using response files to execute the DLL file that was dropped along with the .lnk. As Katie mentioned here (https://t.co/eGkCWgDS9c) odbcconf.exe file are not very common and this execution is easy to spot/detect/hunt for.

Kelsey @k3dg3

Thanks for the shout-out @likethecoins! Here is a fresh sample from a campaign today: #Bumblebee "286a" #TA580 Email -> URL -> WeTransfer landing -> WeTransfer zip -> 2 IMGs -> .lnk -> .rsp -> .dll https://t.co/mTMIWo0VQc https://t.co/DwEmQWLjTG https://t.co/QyqUSuJNHp

-

raptor @0xdea

Unrar Path Traversal Vulnerability affects Zimbra Mail (CVE-2022-30333) << path handling is hard, exhibit #78555

blog.sonarsource.comUnrar Path Traversal Vulnerability affects Zimbra MailWe discovered a vulnerability in Zimbra Enterprise Email that allows an unauthenticated, remote attacker fully take over Zimbra instances via a flaw in unrar.

-

Electrospaces @electrospaces

In Germany there's a government agency called @ZITiS_de that has to develop hacking tools for the police and the secret services, but hardly anyone knows what they are actually doing:

tagesschau.deWas macht eigentlich die “Hackerbehörde” ZITiS?Seit drei Jahren gibt es die Zentrale Stelle für Informationstechnik im Sicherheitsbereich in München. Sie soll Cyberwerkzeuge für die Polizei und Geheimdienste entwickeln - doch die lassen auf sich warten. Von Florian Flade.

-

Michael Idov 🌻 @michaelidov

For a donation, 🇺🇦 artillery will put any message on a shell just before firing it. So, naturally, I ordered one to read the 🇷🇺 war apologists’ favorite phrase (“everything is not so black and white”)