Janvi Sheth

Dog Person, @UNSW Alumni, Artificial Intelligence grad, Mental Health First Aider, GMCKS Pranic Healer & Arhatic Yogi, lover of deep conversations

[ty @tycryptty]

Dark pattern: the curve in the image looks like a hair on your phone and when you try to remove it, you are directed to their sale website. This is like a I-know-I-will-be-tricked-but-I-must-click-it-anyway design....

[Limor Kessem, CISM, C|ISO @iCyberFighter]

Everyone has to work remote.... really, everyone! 😆#cybercrime

[Tae’lur Alexis @TaelurAlexis]

I just got an acceptance offer from a coding bootcamp I applied to back in 2017 for their web development program.

I currently work as a web developer now lol I’m laughing so hard

[Katie🌻Moussouris (she/her/she-ra/she-hulk) 🪷 @k8em0]

Please continue to *report bugs* directly to https://t.co/XGmuHfcsLY (links to email or a form)

Thank you for all the *feedback* on the Zoom VDP & bug bounty programs sent to

Katie.moussouris at Zoom dot us

We’re gathering feedback at my above Zoom email, not bug submissions.

[Janvi Sheth @janvi_sheth]

An interesting thread after we just discussed about the pros and cons of contact tracing last week.
#comp6441

[David Crowe @CroweDM]

Prime Minister Scott Morrison says the commonwealth will have no access to the data from the new tracing app.

He says the data will be stored in an encrypted file that can only be accessed by state and territory authorities.

[Janvi Sheth @janvi_sheth]

@JoshuaDerbe This is exactly how social engineering attacks work. They exploit & manipulate human psychology & emotions such as fear, confusion, greed, curiosity, etc. In times like these, fear seems to be driving people to believe false information. Hence people need to be more alert & aware

[Janvi Sheth @janvi_sheth]

(2/2) Out of the high number of new domains (1400) registered in the last 3 months, many could be illegitimate. Shady websites for healthcare items that are in shortage have also popped up. The key learning for all of us remains, “BE AWARE” and “BE ALERT”.

[Janvi Sheth @janvi_sheth]

(1/2) Cybercriminals are taking advantage of the human emotions of fear & uncertainty & are sending phishing emails posing to be WHO or US CDC & are asking victims to download safety information or infection maps & are delivering malware instead
https://t.co/itBYhsLnbg
#comp6441

[Janvi Sheth @janvi_sheth]

@AdrianRadoman Even after all that we hear and all the warnings given, if they still choose to use Zoom, just how prone would they be to the attackers. And a big government's Zoom meeting combined with deepfakes, the impact on their security could be terrible.
https://t.co/JGEloR2u4i

[Janvi Sheth @janvi_sheth]

Avatarify, an open source program deepfakes you during a Zoom or Skype meeting in real time. With a some amount of coding and proper voice impersonation, I wonder how easy can it be to actually impersonate and carry out phishing live on a Zoom.
https://t.co/eunxiXaYyh
#comp6441

[Janvi Sheth @janvi_sheth]

(1/2) Hackers are selling two critical Zoom zero-days allowing hackers to spy on their calls, one for Windows and one for Mac OS for $500,000. Zoom has announced a large investment to improve the security and privacy issues of its product.
https://t.co/JfMoqxE9EB
#comp6441

[Janvi Sheth @janvi_sheth]

In WFH times, the employees would just rely on such means as unlike a regular office scenario they cant meet someone face to face to reconfirm what they discussed. So, at times like these it would be very critical for the companies and very favourable to the attackers.
#comp6441

[Janvi Sheth @janvi_sheth]

Avatarify, an open source program deepfakes you during a Zoom or Skype meeting in real time. With a some amount of coding and proper voice impersonation, I wonder how easy can it be to actually impersonate and carry out phishing live on a Zoom.
https://t.co/eunxiXaYyh
#comp6441

[Janvi Sheth @janvi_sheth]

This followed by a follow up phishing email supposedly from the exec to those employees could make the employees even less suspicious and the employees would feel as though it is very normal. This could make a good social engineering attack.
#comp6441

[Janvi Sheth @janvi_sheth]

The pandemic has forced so many people to WFH, and now as they use Zoom for video meetings, its impact could be very critical.

[Janvi Sheth @janvi_sheth]

RCE which is Remote Code Execution allows hackers to break in without phishing attach and allows hackers to attack the victim's whole machine, not just the app that they are attacking. The Mac OS bug is not RCE making it less dangerous.
#comp6441

[MTPConnect @MTPConnect_AUS]

.@CicadaInnov in #collaboration w @AustCyber & @cynchsec have a webinar on Wednesday! Register today to see how you can protect yourself against cyber attacks as you work from home & it's open to all sectors! https://t.co/oSPnzAZlYz

[Janvi Sheth @janvi_sheth]

Hackers are selling two critical Zoom zero-days allowing hackers to spy on their calls, one for Windows and one for Mac OS for $500,000

Due to the pandemic and WFH situation, Zoom is used by many people including employees for video meetings and hence this could be very critical

[UNSW @UNSW]

A view of the main walkway from Anzac Pde in 1964. We hardly recognise ourselves #unswfoundationday Photo: Max Dupain