John Harrison

Security dude focused on protecting users from Ransomware attacks and some of the latest threats. The opinions I express here are my own

[Unit 42 @Unit42_Intel]

2024-04-15 (Monday): #ContactForms campaign pushing #SSLoad malware as early as Thursday, 2024-04-11. List of indicators available at https://t.co/MLr80TUH73

#Wirshark #Unit42ThreatIntel #TimelyThreatIntel #InfectionTraffic

[John Harrison @drdriveby]

Ugh. Another ransomware attack. #ransomware

[vx-underground @vxunderground]

Panera Bread got hit by ransomware.

"Panera Sip Club members were particularly frustrated because they could not take advantage of the unlimited drinks they had paid $14.99 per month for as part of their subscription."

https://t.co/7YtLlvAiuS

[Nasreddine Bencherchali @nas_bench]

We just finished processing or in other words we just "Slash & Grabbed" this amazing report from @HuntressLabs team. Made some updates and added some new Sigma rules. But fortunately a lot of it was already covered by old generic rules.

Here is a quick thread on every Sigma rules from @sigma_hq you can use to catch things mentioned in this 💎report

[John Harrison @drdriveby]

@jamessun Feel free to to dm

[John Harrison @drdriveby]

Successful resolution with my email situation! Thank you @EarthLink

[John Harrison @drdriveby]

7 days and counting with no email during account takeover. 3 emails to executive customer support. 7 calls to customer support. Still no email. #fail thanks @EarthLink #customersupportfail

[John Harrison @drdriveby]

@fusepark @EarthLink Day 11. Someone is “looking into it”
🤦‍♂️. #supportfail

[John Harrison @drdriveby]

7 days and counting with no email during account takeover. 3 emails to executive customer support. 7 calls to customer support. Still no email. #fail thanks @EarthLink #customersupportfail

[John Harrison @drdriveby]

10 days and counting. No emails returned from my corporate email. 56 minutes on hold this call. 6 hours invested so far. Nice job @EarthLink #customersupportfail

[John Harrison @drdriveby]

@EarthLink dm is available

[John Harrison @drdriveby]

Nicely said @cyb3rops !

[Florian Roth ⚡️ @cyb3rops]

This meme has aged well - if you use products from these vendors, assume RCE vulnerabilities and plan from there

[John Harrison @drdriveby]

This is hilarious! Is this your neighbor!? #wifi #Neighbours

[Alvin Foo @alvinfoo]

Your wifi is public property! 😂😂

[John Harrison @drdriveby]

@cyb3rops We still see this all the time! Great suggestions!

[John Harrison @drdriveby]

Largest operator of car dealerships in Australia and New Zealand impacted by #ransomware attacks.😞. #CyberSecurity

[BleepingComputer @BleepinComputer]

Eagers Automotive halts trading in response to cyberattack - @billtoulas
https://t.co/cLr81TOGs4

https://t.co/cLr81TOGs4

[John Harrison @drdriveby]

Nice overview and summary from @CeciliaZin ! This should be very interesting to watch! I wonder what @kevinroose and @CaseyNewton think about it! Hardfork episode time! #hardforkpodcast
#chatgpt4

[Cecilia Ziniti @CeciliaZin]

🧵 The historic NYT v. @OpenAI lawsuit filed this morning, as broken down by me, an IP and AI lawyer, general counsel, and longtime tech person and enthusiast.

Tl;dr - It's the best case yet alleging that generative AI is copyright infringement. Thread. 👇

[John Harrison @drdriveby]

Wow .

[Steve Weis @sweis]

This iMessage exploit is crazy. TrueType vulnerability that has existed since the 90s, 2 kernel exploits, a browser exploit, and an undocumented hardware feature that was not used in shipped software:
https://t.co/YJdY6alLbV

[John Harrison @drdriveby]

@joff_thyer Pcap or it isn’t real.

[John Harrison @drdriveby]

How’s your day going?! #itsupport #bootdisk #computerfail

[Robert Graham @robertgraham]

Cybersecurity expert here: no.

The stories of teenage hacking are sensationalized.

As far as we can tell, he didn't hack into the company using a FireTV stick. He accessed the company using his phone.

Specifically, he connected his phone to the TV and its bluetooth keyboard, through the FireTV stick. This made things more convenient when accessing the Internet from his phone, but was by no mean such things were essential.

Moreover, the story sounds like he'd hacked into the company and stolen the content weeks before. He then just logged into their Slack to taunt them while in the hotel room. Accessing Slack from you phone is not terribly difficult.

As for his skills, most teenagers have no skill in general, but have been taught by other teenagers one specific skill. What makes it work isn't because the teenagers are smart but because their targets are dumb. The NSA already has all these skills.

The one thing that would be valuable to the NSA is autistic obsession with tech. There are a lot of autism-spectrum people who you could just stick in a room and watch blossom with tech skills because they are obsessed with them. You don't have to 'train' them, they'll train themselves.

But, their goals aren't aligned with the NSA. The NSA doesn't go romping through the Internet hacking whomever they find. NSA hackers are given specific tasks to achieve, they must play by the rules, and the paperwork involved is more arduous than the actual hacking. Such autistic kids would not do well in that environment.

The kind kids the NSA wants to hire are those that are socialized enough they won't get so angry at the needless paperwork and roadblocks that they go off on a rampage (like Snowden). That's a rare enough skill to find. All the rest of the hacking skills can be taught.

If you are an organization with zero skills of your own, then sure, hiring such kids will at least get you started. But you'll exhaust their value within 3 months, after which you've got a sociopath on your hands that you have to deal with.

[John Harrison @drdriveby]

Christmas greetings from EasyPark! Not sure why my colleagues got notified 10 days ago! 😑 #ransomeware #databreach