Risky Business #773 -- Cybercriminals are dropping like flies in Russia
Dec 4, 2024
auto_awesome
In this discussion, Vijit Nair, VP of Product at Corelight, sheds light on the future of cloud security, revealing the complexities organizations face in multi-cloud environments. He emphasizes the need for standardized monitoring approaches. The conversation also highlights recent trends in cybercrime, notably Russian hackers facing severe consequences. Nair dives into the inadequacies of traditional security solutions in cloud contexts and advocates for innovative tools that can enhance protection across dynamic infrastructures.
The FTC's investigation into Microsoft's bundling practices raises concerns about competition within the cybersecurity market and the implications for standalone providers.
Recent high-profile arrests of cybercriminals in Russia suggest a possible shift in the government's approach to enforcing cyber laws amid international pressure.
The ransomware attack on Stoli Vodka highlights the severe financial repercussions that cyber threats can have on businesses, regardless of their size.
Deep dives
FTC Investigation into Microsoft
The Federal Trade Commission (FTC) has opened an investigation into Microsoft’s business practices, particularly concerning its bundling of security products under its E5 licensing. This investigation is noteworthy due to Microsoft's significant role in the technology ecosystem and its influence in the InfoSec community. Critics argue that Microsoft’s ability to bundle services may suppress competition by making it difficult for standalone security providers to succeed. The discussion raises questions about the potential consequences if Microsoft were required to separate its security products from its other offerings.
Russian Cyber Criminal Arrests
Recent arrests of high-profile cyber criminals in Russia signify a possible shift in the country's approach to dealing with cyber crime. The arrest of Wazawaka, a well-known ransomware affiliate, raises questions about the Russian government's stance on enforcing cyber laws amid international scrutiny. Additionally, the sentencing of a kingpin from the Hydra drug marketplace highlights a potential crackdown on online criminal activity in Russia. However, the motivations behind these actions remain unclear, as Russia's complex political landscape complicates the narrative.
Ransomware Impact on Stoli Vodka
Stoli Vodka, a company with ties to both the U.S. and Russia, has filed for Chapter 11 bankruptcy protection largely due to the devastating effects of a ransomware attack. The attack, which started in August, severely disrupted operations, leading to significant financial challenges for its U.S. subsidiaries. This situation illustrates the ongoing threat of ransomware on businesses, regardless of their size or sector. Stoli's plight serves as a reminder of the real-world implications of cyber threats and the importance of robust security measures.
Central Bank Breach in Uganda
A recent breach at Uganda's central bank resulted in the theft of approximately $17 million, underscoring the vulnerabilities faced by financial institutions. While some funds have been frozen by other banks, a portion was successfully withdrawn by the attackers. This incident highlights the ongoing risks associated with banking cybersecurity, particularly for central banks that are typically considered high-value targets. The breach echoes past attacks on financial institutions, showcasing the evolving tactics of cybercriminals aimed at exploiting weaknesses in banking systems.
Environmental Activism and Corporate Espionage
A reporting investigation has unveiled how ExxonMobil allegedly employed a lobbying firm to gather information on environmental activists and discredit their climate change claims. The orchestrated effort involved hacking into activists' communications and leaking sensitive information to undermine their credibility. This scenario showcases the dark side of corporate strategies, where large firms may resort to unethical practices to maintain their public image and combat criticism. The revelations raise serious ethical concerns about the lengths corporations will go to protect their interests against environmental movements seeking accountability.
On this week’s show, Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including:
The FTC decides its time to take another look at Microsoft
Exxon’s opponents targeted by hackers
Russian hackers keep getting sentenced and it confuses us
The Feds recommend Signal, because throwing hackers out of telcos ain’t gonna happen
A South Korean set-top-box manufacturer shipped a DDoS client for corpo-combat
And much, much more.
This week’s sponsor interview with Vijit Nair from Corelight. We talk to him about doing detection in cloud environments, and how the varied nature of cloud systems makes the old ways - network monitoring - useful in new and interesting ways.
If you’re in Sydney, Pat is recording a live episode of the Wide World of Cyber with Chris Krebs on 5 December. There might still be tickets left!