Fake Ads, Insider Threats, and a Big Data Dump
Manage episode 377509063 series 3493659
In this thrilling episode of Unmasked, our cybersecurity superheroes plunge headfirst into the late August headlines to uncover the most cutting-edge and formidable cyberattacks. Fasten your seatbelts and ensure your hands remain securely inside the vehicle as we embark on an exhilarating journey through the world of cybersecurity.
Along our path, we'll make intriguing stops, including a detour through the realm of deceptive Amazon ads on Google, an exploration of Tesla's security breach stemming from an insider threat, and a stealthy incursion targeting the renowned international snack-maker, Mondelez, by way of a third-party partner. You might recognize Mondelez from their household snack brands like Ritz and Honey Maid. All this and much more await you in this week's gripping episode.
You can subscribe to Unmasked on Spotify, Amazon, or wherever you get your podcasts.
Show notes:
August Headlines
Sneaky Amazon Google ad leads to Microsoft support scam (bleepingcomputer.com)
- Classic Tech Support scam
- But done in clever way
- Data leaked to German media
- Former employees behind the breach
- Employees misappropriated the information
Hackers ask $120,000 for access to multi-billion auction house (bleepingcomputer.com)
- IABs
- initial access through VPN or RDP
- privileges associated with the access accounts ranged from cloud administrator (14 cases) to local admin (5 cases) and domain user (2 cases)
- positive side effects, such as uncovering areas that need stronger security or identifying devices, services, and accounts that could pose a risk.
Mondelez says crooks stole staff data in security breach • The Register
- Mondelez International – Parent company for Oreo and Ritz Crackers and many others
- 51,000 of its past and present employees that their personal information has been stolen from a law firm hired by the Oreo and Ritz cracker
- Mondelez was among the global companies hit in the NotPetya outbreak — and it recently settled its lawsuit against Zurich American Insurance Company, which it brought because the insurer refused to cover Mondelez's $100-million-plus cleanup bill
- data may have been compromised for 24 months.
Chapters
1. Fake Ads, Insider Threats, and a Big Data Dump (00:00:00)
2. Tech Scams via Amazon Google Ads (00:00:10)
3. Security and Access Controls in Companies (00:12:50)
4. Importance of Monitoring Login Locations (00:20:34)
5. Security Breach and Third-Party Vulnerability (00:30:38)
6. Farewell and Appreciation for Viewers (00:38:33)
18 episodes