Dr. Marina Krotofil

The recent investigation into the #Predator spyware scandal in #Greece has unveiled a massive surveillance operation targeting politicians, journalists, and others. A report by a Deputy Prosecutor of the Greek Supreme Court reveals that two individuals had their communications intercepted after clicking malicious links, while 114 others evaded surveillance. Four individuals have been identified as perpetrators of these breaches. Despite these revelations, the report does not hold Greece's National Intelligence Service (EYP) or the Counterterrorism Service accountable, even though some targets were monitored by both Predator and the EYP. This has sparked political outrage and calls for legal and legislative action. In the U.S., the legal battle over #Pegasus spyware continues as the #NSO Group faces a lawsuit from #WhatsApp. The court has ruled that testimonies from three NSO executives are sufficient, denying WhatsApp's request for additional witnesses. Pegasus, known for its advanced surveillance capabilities, has been used by governments worldwide. This ongoing case highlights critical questions about the ethics and legality of spyware used for state surveillance, underscoring the need for stringent global regulations. As the struggle for #privacy rages on, the push for #surveillance continues relentlessly. In Greece, alarming reports suggest that the government is preparing a Presidential Decree to obtain new #spyware, even more intrusive than Predator or Pegasus. This ominous system is set to replace the existing EYP surveillance tools and is rumored to infiltrate phones without the need for SMS or email. Disturbingly, the software can alter data and functionality at will. The EYP's prosecution will control this powerful tool, while the Privacy of Communications Authority will be notified only after its acquisition, with no say in its deployment. The situation is beginning to smell like an old Orwellian nightmare, where every citizen worldwide is monitored in a world devoid of privacy. How long will the global community continue to turn a blind eye to the growing shadow of surveillance that looms over our lives in the name of our security and anti-terrorism? 👥 If you're navigating the complexities of digital security across various domains—be it phishing, web applications, infrastructure, or cloud services—and seeking insights or support, I invite you to connect, follow, or reach out to me directly on LinkedIn. I'm here to assist in any way possible. 🔗 For an in-depth exploration of this case, check out the full articles on 1. https://lnkd.in/dumW6P6D 2. https://lnkd.in/dq_9TxE2 3. https://lnkd.in/dx2XMxPH

41

3 Kommentare

Undersea cables, low-orbit satellites, and Internet governance Recently, NATO financed a project to find #alternative ways to maintain the functionality and #security of the #Internet in case of an #attack and sustain its #civilian and #military #communications. This is an ongoing discussion in the EU Parliament. A report published by the sub-committee regarding the threats to the #undersea communications: https://lnkd.in/eQrtuCat The news of Bloomberg demonstrated that NATO had already started projects to build alternatives for such crises. NATO is helping #finance a project aimed at finding ways to keep the internet running should #subsea cables, which shuttle civilian and military communications across European waters, come under attack. The potential impact of such an attack on #cybersecurity is significant, making this project a crucial step in ensuring the security and functionality of the Internet.  Researchers, including #academics from the #US, #Iceland, #Sweden, and #Switzerland, are working together on a project aimed at finding ways to keep the Internet running in the face of potential threats. Their goal is to develop a seamless method to #reroute internet #traffic from subsea cables to #satellite #systems in the event of #sabotage or a #natural #disaster. The North Atlantic Treaty Organization’s Science for Peace and Security Programme has approved a grant of as much as €400,000 ($433,600) for the $2.5 million project, and research institutions are providing in-kind contributions, as shown in the documents seen by Bloomberg. https://lnkd.in/eQYE6TcP All these projects and discussions bring low-orbit Internet services and Internet governance issues to our table, which are relevant to cyber security issues and hold several discussion points. The low-orbit Internet satellites issue reminded me of Huawei's #6G project on the very low-orbit Internet satellites that required further discussions considering the political conundrum. https://lnkd.in/e43YNa6y

14

1 Kommentar

A little bit of nostalgia and great to see references to the AP3086 (the precursor to the JSP440, Defence Manual of Security). Also notice the reference to ISO7799 (the precursor to ISO/IEC 27001). I first became interested in (and applied for) my Counter Intelligence specialisation when AP3086 was the security manual. By the time I went on this 10 week residential training course, in Aug 2002, it had been replaced by the JSP440. #informationsecurity #systemsecurity #informationsrcuritymanagement

4

SUMMARY: The new FIDO proposal facilitates seamless and secure transfer of passkeys across various digital platforms, enhancing password-less security measures. MAIN POINTS: - The FIDO proposal aims to allow users to move passkeys safely between different devices and operating systems. - This initiative seeks to improve interoperability and streamline the user experience in managing credentials. - A focus on enhancing cross-platform functionality addresses security concerns and promotes a password-less future. TAKEAWAYS: - Implementing the FIDO proposal could simplify secure authentication across platforms for users. - The increased interoperability among devices can lead to wider adoption of password-less security practices. - Enhancements in passkey management may reduce the reliance on traditional passwords. #FIDO #passkeys #cybersecuritynews

4

This is how we're different at SCYTHE, we can emulate the actual threat behaviors so you really know where you stand. 🦄 We emulated the threat actor's novel method of local and domain user enumeration via “Security Log” querying for valid user logins to determine what accounts are active and what users can be found on the hosts where they have access.

21

👀 Looking to sharpen your reverse engineering skills & solve MITRE ATT&CK tactics inspired scenarios? Cyber Reverse & MITRE Challenge is organized by Keysight Technologies Romania this November in #DefCamp's Hacking Village and it just might be what you need. 💻 Read more >> https://lnkd.in/de2ujusn

6

The "Review of Cybersecurity News in Ukraine, July 2024," details several key developments in cybersecurity: - Ukraine is actively strengthening its cybersecurity in response to Russian aggression. This includes holding cyber dialogues with the EU, organizing regional forums, and receiving network equipment donations to enhance its cyber defense capabilities. - Ukrainian organizations are sharing their cybersecurity experiences with international partners, and there is a focus on training veterans and civil servants in cybersecurity. - The report describes the ongoing "First World Cyber War," where Russian hackers are particularly active, targeting countries like Finland and various global organizations. Russian cyber activities include attacks on websites, espionage, and disruption of services. - There are also challenges highlighted, such as phishing attacks aimed at Ukrainian officials, increased activity from Belarusian hackers, and cyber-attacks on Ukrainian defense companies.

3

Listening to a great talk on single point of failure supply chain by Tarah Wheeler at the IANS Boston security forum. Great talk and a great introduction to the discussion led later today on this issue. If you are here and want to continue this massively important issue join my session on supply chain at 1:05 PM. I believe this is one of the biggest problems in cybersecurity today. What can you do about it? What are you doing about it? Tarah is bringing up some great points. Have you implemented her suggestions? What have been your challenges? Have you considered the wide variety of sources of supply chain attacks? Software updates are not the only thing you need to worry about. What tools exist to help you defend against these attacks? This was a great introduction to today’s discussion and I hope it helps people consider the severity of this issue. Come to learn and share how you are dealing with supply chain attacks with your peers.

8

A #threat #actor has announced that they are selling a #database containing information on over 49,000 members and partners of NATO alongside classified #documents and #technical #reports. The threat actor’s claims were made in an #online post. According to the post, the documents include various security classifications: NATO #Restricted (NR) NATO #Confidential (NC) NATO #Secret (NS) The asking price for this data is 10,000 XMR (Monero), and the seller is open to using an #escrow service to facilitate the #transaction. #cybersecurity #dataleak

7

I'm intrigued by the recent activities of IntelBroker as outlined in the latest SOCRadar® Extended Threat Intelligence post. Their ability to adapt and shift strategies rapidly is a stark reminder of the constantly evolving cyber threat landscape. It's clear that organizations must be equally agile and proactive in their cybersecurity measures. At Secutor Cybersecurity, we emphasize not just the need for robust security strategies but also for understanding the specific tools and technologies that can best protect us. As a cybersecurity professional, seeing real-time intelligence and threat analysis like this reinforces the commitment to continuous learning and adapting our defenses. This is a perfect example of why staying informed and vigilant is crucial in today's digital age. #CyberSecurity #ThreatIntelligence #InfoSec #CyberDefense #DigitalTransformation #Consulting

3

“In addition to the DDoS attacks that occurred during the G7 summit in Italy, there has been an increase in cyberattacks and the dissemination of disinformation against Japan related to the conflict in Ukraine” writes SPF Senior Fellow Jun Osawa in his latest IINA article. Read the full piece here: https://lnkd.in/gPiM7gDe

2

🕵🏻‍♂️🧑🏻‍💻Two Moldovan brothers appear to be helping Russia to carry on cyberwarfare into Europe. On Thursday, an investigation by Correctiv – a German investigative and fact-checking organization part of the EDMO network – reported that two brothers from Moldova are providing IT infrastructure to support Russian cyberattacks and disinformation campaigns across Europe. Despite EU sanctions, their company, PQ Hosting, enables Russian hackers and propagandists to operate through EU-based servers, hiding their activities through complex corporate structures and shell companies, Correctiv reports. Read the full investigation here: Hacks und Propaganda: Zwei Brüder aus Moldau tragen Russlands digitalen Krieg nach Europa (in German). source: EDMO Disinfo Bulletin – Issue n. 28 #disinformation, #propaganda

1

The suspected sabotage of vital Baltic Sea fiber-optic communication cables linking Finland and Germany, along with Sweden and Lithuania, emphasizes a critical point: modern warfare extends beyond traditional battlegrounds. Cyberattacks, infrastructure sabotage, and economic disruptions are now essential tactics in the ever-evolving landscape of hybrid warfare. This incident underscores the significance of bolstering cyber resilience and protecting critical infrastructure to ensure global security in the face of such threats. #CyberSecurity #CriticalInfrastructure #CyberResilience #BalticSea #GlobalSecurity #ResilienceInAction #DigitalDefense

11

Would I lie to you? "Operation MiddleFloor is an ongoing disinformation campaign against Moldovan targets that began in early August. It uses emails as the primary distribution method instead of more common methods such as social networks or fake websites. While the campaign disseminates fake emails and documents, it also aims to gather information on the victims’ environments, likely to set the stage for targeted malware attacks. The threat actors use spoofed email accounts to disseminate content allegedly originating from European Union institutions, Moldavian ministries, or political figures. This campaign exploits multiple sensitive topics and fears related to the current pro-European government and Moldova’s potential EU membership. These include concerns about gas supply and fuel prices ahead of winter, LGBT, potential stringent anti-corruption measures, changes in the education system, immigration from the Middle East, and general labor market shifts across Moldova and EU countries. The actors behind this campaign are Russian-speaking and not fully proficient in English. Based on the Tactics, Techniques, and Procedures (TTPs), targeting, and distributed messages, Lying Pigeon appears to be aligned with Russian interests. We linked Lying Pigeon to previously unattributed clusters of activity across Europe. Since early 2023, Lying Pigeon activity has been observed in several European locations related to the following themes: NATO 2023 summit in Vilnius. 2023 general elections in Spain, spreading disinformation about an alleged upcoming terrorist attack. Polish cybersecurity scene, topics such as freedom of the press, and others. According to CERT Polska, the actor they track as APT-UNK2 with substantial overlaps with Lying Pigeon, was also responsible for distributing infostealers in Poland and staging fake websites."

1