Espionage

Chinese Tech: Banned in DC, but not in the States
Richi Jennings | | backdoors, Banned in D.C., china, chinese government, Espionage, government, Huawei, nsa, SB Blogwatch, supply chain, The NSA is just concerned that it will ask for a TikTok login instead of Facebook on the next update, ZTE
There’s a massive loophole in the federal ban on Chinese technology from sus firms such as Huawei and ZTE: It doesn’t stop states from buying it ...
Security Boulevard
NSA Employee Charged with Espionage
An ex-NSA employee has been charged with trying to sell classified data to the Russians (but instead actually talking to an undercover FBI agent). It’s a weird story, and the FBI affidavit ...
Security Vulnerabilities in Covert CIA Websites
Back in 2018, we learned that covert system of websites that the CIA used for communications was compromised by—at least—China and Iran, and that the blunder caused a bunch of arrests, imprisonments, ...
Amy Zegart on Spycraft in the Internet Age
Amy Zegart has a new book: Spies, Lies, and Algorithms: The History and Future of American Intelligence. Wired has an excerpt: In short, data volume and accessibility are revolutionizing sensemaking. The intelligence ...
Using Foreign Nationals to Bypass US Surveillance Restrictions
Bruce Schneier | | cyberespionage, Espionage, FBI, law enforcement, Privacy, surveillance, Uncategorized
Remember when the US and Australian police surreptitiously owned and operated the encrypted cell phone app ANOM? They arrested 800 people in 2021 based on that operation. New documents received by Motherboard ...

Malicious Life Podcast: In Defense of the NSA
Malicious Life Podcast | | Espionage, Infosec, Intelligence Community, Internet, legal, Malicious Life, National Security Agency, nsa, Podcast, PodcastsCat, Privacy, security
The National Security Agency is one of the world's most formidable and powerful intelligence agencies. Some people fear that the NSA’s advanced capabilities could one day be directed inwards instead of outwards ...

Malicious Life Podcast: Operation GhostShell – An Iranian Espionage Campaign
Malicious Life Podcast | | Advanced persistent threat, Aerospace, APT, Cloud Security, dropbox, Espionage, Ghostshell, government, Infosec, Iran, Malicious Life, MalKamak, national security, Operation GhostShell, Podcast, PodcastsCat, Remote Code Execution, remote-access Trojan, security, ShellClient RAT, telecommunications, telecoms
In July 2021, Nocturnus - the Cybereason Threat Research and Intelligence team - was called to investigate an espionage campaign targeting Aerospace and Telecommunications companies globally. Their investigation resulted in the discovery ...

Operation GhostShell: Novel RAT Targets Global Aerospace and Telecoms Firms
Cybereason Nocturnus | | Advanced persistent threat, Aerospace, Agrius APT, APT, Critical Infrastructure, cyberattack, Espionage, Europe, Iran, MalKamak, Malop, Malware, Nation-state Attack, national security, Nocturnus, Operation GhostShell, remote-access Trojan, research, ResearchCat, Russia, ShellClient RAT, telecommunications, telecoms, threat actors, Threat Intelligence, Turla, United States
In July 2021, the Cybereason Nocturnus and Incident Response Teams responded to Operation GhostShell, a highly-targeted cyber espionage campaign targeting the Aerospace and Telecommunications industries mainly in the Middle East, with additional ...

Govware Conference: Cybereason CEO Lior Div to Deliver Keynote
Cybereason Security Team | | Advanced persistent threat, APT, china, cyberattack, DeadRinger, Espionage, Govware conference, Lior Div, Sam Curry, telecommunications, telecoms
Cybereason is pleased to share that our CEO and co-founder Lior Div will be a keynote speaker at the Govware Conference in Singapore on Wednesday, October 6, 9:30 am, SST. His talk ...

Malicious Life Podcast: The Tesla Hack
Malicious Life Podcast | | cybercrime, Endpoint Controls, enterprise security, Espionage, Hacking, ICS, industrial control systems, Infosec, insider threat, Malicious Life, Network Security, Podcast, PodcastsCat, Russia, security, Tesla
It's every company's nightmare: a mysterious stranger approached an employee of Tesla's Gigafactory in Nevada, and offered him 1 million dollars to do a very simple job - insert a malware-laden USB ...