Smashing Security Star Wars, the CIA, and a WhatsApp malware mirage
9 snips
May 28, 2025 Allan Liska, a Ransomware Sommelier known for his expertise in cybersecurity, joins the hosts for an engaging discussion. They explore a bizarre incident where a Star Wars fan site now redirects to the CIA. Cambodia's rise as a hotspot for scam call centers is examined, linking organized crime to economic impacts reminiscent of half the country’s GDP. They also debunk the myth of WhatsApp malware, offering vital tips to safeguard against its vulnerabilities and highlighting the importance of verifying security alerts.
AI Snips
Chapters
Transcript
Episode notes
CIA's Covert Message Websites
- The CIA created covert websites disguised as fan or interest pages like starwarsweb.net for informants to communicate securely.
- The passwords to unlock secret messaging on these sites were embedded and easily discoverable, leading to informant capture.
CIA's OPSEC Mistakes Exposed
- The CIA's careless operational security included sequential IP addresses, making discovery of multiple spy sites trivial.
- This OPSEC failure led to informant arrests and demonstrates the importance of subtlety in covert communications.
Petraeus Affair Gmail Method
- General David Petraeus and his biographer secretly communicated by sharing a Gmail account and exchanging drafts.
- Their scheme was uncovered by the FBI, exposing their affair and demonstrating covert communication risks.