Josh Marpet, a cybersecurity expert and contributor to Security Weekly News, joins to dissect the growing menace of smishing and its deceptive tactics. He highlights serious trust issues surrounding government surveys and a recent BeyondTrust breach. The conversation dives into shocking crypto scams disguised as religious investment opportunities, especially a pastor's fraudulent scheme. Marpet also warns about vulnerabilities in cloud infrastructure like Aviatrix and the rampant scams in the burgeoning crypto space, emphasizing compliance and vigilance in cybersecurity.
The surge in smishing attacks underscores the critical need for users to remain vigilant about suspicious texts and links.
Identified vulnerabilities in BeyondTrust's software and Aviatrix controllers highlight the importance of regular updates and proactive security measures.
Deep dives
The Rise of Smishing and Phishing Attacks
Smishing, a form of phishing using SMS, has surged, presenting numerous threats to users. Recently, numerous scams involved fake claims about package deliveries, urging users to click malicious links supposedly to retrieve their iPhone or other items. One prominent example discussed was how attackers cleverly bypassed iMessage's default phishing protection by manipulating the contact list, allowing the links to become clickable once the user engages with the text. This highlights the need for heightened awareness and vigilance regarding suspicious texts, emphasizing the importance of reminding users not to click on links from unknown sources.
BeyondTrust Vulnerabilities and Their Consequences
Significant vulnerabilities in BeyondTrust's software have been identified, with a critical API exploit leading to major breaches. The vulnerabilities allowed attackers to steal API keys and reset passwords for local accounts, resulting in a connection to a recent Treasury Department security breach linked to a nation-state-backed group. Due to these findings, the Cybersecurity and Infrastructure Security Agency (CISA) mandated that all users of BeyondTrust must patch their systems by an urgent deadline. This event underscores the critical need for organizations to remain vigilant about regular updates and proactive security measures.
Crypto Pyramid Scheme Run by a Pastor
A pastor was charged with running a fraudulent cryptocurrency scheme, soliciting funds from his congregation under the guise of secure investment opportunities. He promoted a fictional cryptocurrency called Solano Fi, claiming unrealistically high returns with no risk, basing his proposition on a supposed divine revelation. When congregants sought to reclaim their investments after seeing no returns, they were met with threats and further demands for more funds to maintain the scheme. This incident serves as a stark reminder to remain wary of investment scams, especially those cloaked in misleading promises tied to faith.
Exploitation of Aviatrix Controllers
A critical vulnerability in Aviatrix controllers, a tool for managing multi-cloud environments, has been exploited, leading to serious security risks including crypto-jacking. Roughly 65% of cloud environments utilizing these controllers were discovered to have pathways enabling unauthorized administrative access, amplifying the potential for large-scale attacks. The flaw stems from an exposed API endpoint, which, while necessary for function, also poses an inherent risk if not properly secured. The situation stresses the urgency for organizations using Aviatrix controllers to apply the available patches swiftly to mitigate these severe security threats.