Plus Feed

Plus Feed

By Jack RhysiderTechnology
Download on the App Store

Plus Feed episodes

  • 76: Knaves Out

    This is the story about how someone hacked into JP Morgan Chase, one of the biggest financial institutions in the world. It’s obvious why someone would want to break into a bank right? Well the people who hacked into this bank, did not do it for obvious reasons. The hackers are best described as knaves. Which are tricky, deceitful fellows.

    Sponsors

    Support for this show comes from LastPass by LogMeIn. LastPass is a great password manager but it can do so much more. It can setup 2FA for your company, or use it to monitor what your users are doing in the network. Visit LastPass.com/Darknet to start your 14 day free trial.

    Support for this episode comes from SentinelOne which can protect and assistwith ransomeware attacks. On top of that, SentinelOne offers threat hunting, visibility, and remote administration tools to manage and protect any IoT devices connected to your network. Go to SentinelOne.com/DarknetDiaries for your free demo. Your cybersecurity future starts today with SentinelOne.

    Support for this show comes from IT Pro TV. Get 65 hours of free training by visiting ITPro.tv/darknet. And use promo code DARKNET25.


    For a complete list of sources and a full transcript of the show visit darknetdiaries.com/episode/76.

    1 hr 26 min
  • 75: Compromised Comms

    From 2009 to 2013 the communication channels the CIA uses to contact assets in foreign countries was compromised. This had terrifying consequences.

    Guests this episodes are Jenna McLaughlin and Zach Dorfman.

    Sponsors

    This episode was sponsored by IT Pro TV. Get 65 hours of free training by visiting ITPro.tv/darknet. And use promo code DARKNET25.

    This episode was sponsored by Thinkst Canary. Their canaries attract malicious actors in your network and then send you an alert if someone tries to access them. Great early warning system for knowing when someone is snooping around where they shouldn’t be. Check them out at https://canary.tools.

    View all active sponsors.

    Sources

    • https://finance.yahoo.com/news/cias-communications-suffered-catastrophic-compromise-started-iran-090018710.html
    • Video: Fostering Bipartisanship in Intelligence Oversight CNAS2019
    • https://www.mcclatchydc.com/news/nation-world/national/article28348576.html
    • https://foreignpolicy.com/2018/08/15/botched-cia-communications-system-helped-blow-cover-chinese-agents-intelligence/
    • https://www.nytimes.com/2017/05/20/world/asia/china-cia-spies-espionage.html
    • https://www.nytimes.com/2018/01/17/world/asia/jerry-lee-cia-china-mole-hunt-suspect.html
    • https://news.yahoo.com/cia-fix-communications-system-left-trail-dead-agents-remains-elusive-100046908.html
    • https://www.washingtonpost.com/archive/sports/1988/03/21/cuban-defector-impeaches-cia-spies/10cec17c-076b-4867-96c5-628b8435a852/
    • https://en.wikipedia.org/wiki/Aldrich_Ames
    • Attribution

      Darknet Diaries is created by Jack Rhysider.

      Research assistance this episode from Yael Grauer.

      36 min
    • 74: Mikko

      Poker is a competitive game. Unlike other casino games, poker is player vs player. Criminal hackers have understood this for a while and sometimes hack the other players to get an edge. And that small edge can result in millions of dollars in winnings.

      This episode contains a story from Mikko Hypponen of F-Secure. We also interview Mikko to know more about him and the history of malware.

      Sponsors

      This episode was sponsored by IT Pro TV. Get 65 hours of free training by visiting ITPro.tv/darknet. And use promo code DARKNET25.

      This episode was sponsored by Thinkst Canary. Their canaries attract malicious actors in your network and then send you an alert if someone tries to access them. Great early warning system for knowing when someone is snooping around where they shouldn’t be. Check them out at https://canary.tools.

      Sources

      • https://www.cardplayer.com/poker-news/18318-wsop-bracelet-winner-jailed-for-web-poker-cheating
      • https://forumserver.twoplustwo.com/29/news-views-gossip/my-unbelievable-ept-barcelona-story-hotel-rooms-arts-barcelona-broken-into-plant-trojans-1369171/
      • Mikko’s research on bypassing hotel room keys
      • https://archive.f-secure.com/weblog/archives/00002647.html
      • https://pokerfuse.com/news/live-and-online/more-stories-of-tampered-laptops-emerge-in-wake-of-ept-barcelona-scam-24-09/
      • https://forumserver.twoplustwo.com/showpost.php?p=40050535&postcount=410
      • https://forumserver.twoplustwo.com/showpost.php?p=40099537&postcount=794
      • https://igaming.org/poker/news/danish-former-high-stakes-pro-reported-to-police-for-massive-fraud-1602/
      • https://nyheder.tv2.dk/krimi/2019-12-02-dansk-pokerspiller-far-konfiskeret-26-millioner-kroner
      • https://www.flushdraw.net/news/peter-jepsen-verdict-a-mixed-victory-for-poker-justice/
      • https://www.bankrollmob.com/poker-news/2019123/danish-poker-pro-sentenced-jail-cheating-others-online-poker
      • Video: Peter Jepsen talks about an attempted hack on him
      • https://www.sijoitustieto.fi/comment/29593#comment-29593
      • https://forumserver.twoplustwo.com/29/news-views-gossip/sad-conclusion-my-barcelona-incident-1397551/
      • Video: Brain Searching for the first PC virus in Pakistan
      • https://archive.org/details/malwaremuseum
      • 1 hr 10 min
      • 73: WannaCry

        It is recommend to listen to episodes 53 “Shadow Brokers”, 71 “FDFF”, and 72 “Bangladesh Bank Heist” before listening to this one.


        In May 2017 the world fell victim to a major ransomware attack known as WannaCry. One of the victims was UK’s national health service. Security researchers scrambled to try to figure out how to stop it and who was behind it.

        Thank you to John Hultquist from FireEye and thank you to Matt Suiche founder of Comae.

        Sponsors

        Support for this episode comes from LastPass. LastPass is a great password manager but it can do so much more. It can setup 2FA for your company, or use it to monitor what your users are doing in the network. Visit LastPass.com/Darknet to start your 14 day free trial.

        This episode was sponsored by Linode. Linode supplies you with virtual servers. Visit linode.com/darknet and when signing up with a new account use code darknet2020 to get a $20 credit on your next project.

        45 min
      • 72: Bangladesh Bank Heist

        A bank robbery with the objective to steal 1 billion dollars. This is the story of the largest bank robbery in history. And it was all done over a computer.

        Our guest this episode was Geoff White. Learn more about him at geoffwhite.tech.

        Check out Geoff’s new book Crime Dot Com. Affiliate link: https://www.amazon.com/gp/product/1789142857/ref=as_li_tl?ie=UTF8&camp=1789&creative=9325&creativeASIN=1789142857&linkCode=as2&tag=darknet04-20&linkId=bb5a6aa7ba980183e0ce7cee1939ea05


        Sponsors

        This episode was sponsored by IT Pro TV. Get 65 hours of free training by visiting ITPro.tv/darknet. And use promo code DARKNET25.

        Support for this episode comes from Blinkist. They offer thousands of condensed non-fiction books, so you can get through books in about 15 minutes. Check out Blinkist.com/DARKNET to start your 7 day free trial and get 25% off when you sign up.

        37 min
      • 71: Information Monopoly

        In this episode, we’re going into the depths of North Korea to conduct one of the greatest hacks of all time. To find a way to inject information into a country run by totalitarian regime.

        A big thanks to Yeonmi Park for sharing her story with us. Also thanks to Alex Gladstein for telling us the inside story.

        You can find more about Flash Drive For Freedom at flashdrivesforfreedom.org.


        Yeonmi’s book "In Order to Live": https://www.amazon.com/gp/product/014310974X/ref=as_li_tl?ie=UTF8&camp=1789&creative=9325&creativeASIN=014310974X&linkCode=as2&tag=darknet04-20&linkId=88ebdc087c6ce041105c479b1bb6c3d2


        Sponsors

        This episode was sponsored by IT Pro TV. Get 65 hours of free training by visiting ITPro.tv/darknet. And use promo code DARKNET25.

        Support for this episode comes from Blinkist. They offer thousands of condensed non-fiction books, so you can get through books in about 15 minutes. Check out Blinkist.com/DARKNET to start your 7 day free trial and get 25% off when you sign up.

        1 hr 9 min
      • 70: Ghost Exodus

        Ghost Exodus is a hacker. He conducted various illegal activities online. Some of which he documents on YouTube. He’s also a great musician. He got into some trouble from his hacking. This is his story.

        A big thanks to Ghost Exodus for sharing his story with us. Also thanks to Wesley McGrew for telling us the inside story.

        Sponsors

        This episode was sponsored by IT Pro TV. Get 65 hours of free training by visiting ITPro.tv/darknet. And use promo code DARKNET25.

        Support for this episode comes from Blinkist. They offer thousands of condensed non-fiction books, so you can get through books in about 15 minutes. Check out Blinkist.com/DARKNET to start your 7 day free trial and get 25% off when you sign up.

        This episode was sponsored by Detectify. What vulnerabilities will their crowdsource-powered web vulnerability scanner detect in your web applications? Find out with a 14-day free trial. Go to https://detectify.com/Darknet

        Sources

        • https://www.pcworld.com/article/167756/article.html
        • https://archives.fbi.gov/archives/dallas/press-releases/2011/dl031811.htm
        • 57 min
        • Bonus 6: Monica Witt

          A story about an intelligence officer, the Air Force, Iran, phishing attacks, and Hollywood. It's also a story about loyalty and sympathy. 

          Sources:
          https://www.nationalgeographic.com/news/2013/12/131219-lottery-odds-winning-mega-million-lotto/
          https://eu.desmoinesregister.com/story/news/crime-and-courts/2015/04/13/hot-lotto-ticket-trial-delayed/25715155/
          https://arstechnica.com/tech-policy/2015/04/prosecutors-suspect-man-hacked-lottery-computers-to-score-winning-ticket/
          https://eu.desmoinesregister.com/story/news/crime-and-courts/2015/07/12/trial-hot-lotto-ticket-set-monday/30062097/
          https://eu.desmoinesregister.com/story/news/crime-and-courts/2015/09/09/convicted-hot-lotto-rigger-sentenced-10-years/71924916/
          https://theconversation.com/are-powerball-drawings-and-quick-pick-numbers-really-random-53103
          https://lp.vg/media/2016040601.pdf
          https://www.nbcnews.com/news/us-news/brother-jackpot-rigger-massive-lottery-scandal-arrested-n551941
          https://eu.desmoinesregister.com/story/news/crime-and-courts/2016/04/06/lottery-scammers-brother-facing-criminal-charges/82690668/
          https://www.lotterypost.com/news/302131
          https://nakedsecurity.sophos.com/2016/04/08/forensics-uncover-how-brothers-rigged-the-lottery/
          https://www.theguardian.com/technology/2016/apr/08/man-hacked-random-number-generator-rig-lotteries-investigators-say
          https://arstechnica.com/information-technology/2016/04/neutered-random-number-generator-let-man-rig-million-dollar-lotteries/#
          https://www.iowacourts.gov/static/media/documents/151515_2A5C17733EB81.pdf
          https://www.kaspersky.com/blog/hacking-lottery/12685/
          https://eu.desmoinesregister.com/story/news/crime-and-courts/2016/07/27/appeals-court-tosses-one-fraud-conviction-accused-hot-lotto-rigger/87608110/
          https://eu.desmoinesregister.com/story/news/crime-and-courts/2017/01/09/defendant-hot-lotto-scandal-set-enter-plea/96344708/
          https://www.fayettecountyrecord.com/articles/2017/02/02/court-documents-reveal-extensive-holdings-tipton
          https://www.courthousenews.com/iowa-high-court-grills-both-sides-in-lotto-fraud-case/
          https://eu.desmoinesregister.com/story/news/crime-and-courts/2016/12/22/eddie-tipton-accused-lottery-rigger-hot-lotto-new-wisconsin-charges/95767182/
          https://dfw.cbslocal.com/2017/06/19/fb-texas-judge-rigged-lottery-jackpot/
          https://dfw.cbslocal.com/2017/06/19/fb-texas-judge-rigged-lottery-jackpot/
          https://www.ibtimes.co.uk/computer-programmer-reveal-secrets-how-he-rigged-lottery-results-win-millions-1626031
          https://www.ibtimes.co.uk/lottery-rigger-tommy-tipton-claimed-he-was-only-colorado-hunt-bigfoot-1627460
          https://www.courtlistener.com/pdf/2017/06/23/state_of_iowa_v._eddie_tipton.pdf
          https://caselaw.findlaw.com/ia-supreme-court/1865449.html
          https://www.iowaattorneygeneral.gov/newsroom/tipton-brothers-plead-guilty-in-iowa-to-lottery-rigging-scheme
          https://www.iowaattorneygeneral.gov/media/cms/Tipton_plea_1B79A27975DF7.pdf
          https://www.cnbc.com/2017/06/30/mastermind-of-lottery-fraud-admits-he-rigged-jackpots.html
          https://www.thedailybeast.com/inside-the-biggest-lottery-scam-ever
          https://ialottery.com/Pages/Pressroom2017/N08_22_17_TiptonSentencing.aspx
          https://www.ialottery.com/Pages/Pressroom2017/N08_22_17_Timeline_JackpotClaim.pdf
          https://eu.desmoinesregister.com/story/news/investigations/2017/08/22/iowa-lottery-cheat-sentenced-25-years/566642001/
          https://eu.desmoinesregister.com/story/news/investigations/2018/03/15/how-gaming-geek-checkered-past-pulled-off-biggest-lottery-scam-u-s-history/397657002/
          https://eu.desmoinesregister.com/story/news/investigations/2018/03/15/how-gaming-geek-checkered-past-pulled-off-biggest-lottery-scam-u-s-history/397657002/

          46 min
        • 69: Human Hacker

          We all know that computers and networks are vulnerable to hacking and malicious actors, but what about us, the humans who interface with these devices? Con games, scams, and strategic deception are far older than computers, and in the modern era, these techniques can make humans the weakest link in even the most secure system. This episode, security consultant and master social engineer, Christopher Hadnagy, joins us to share his stories and wisdom. He describes what it was like to be a social engineer before the world knew what social engineering was and tells some of his amazing stories from his long career in penetration testing.

          A big thanks to Christopher Hadnagy from social-engineer.org for sharing his stories with us.

          Check out his book Social Engineering: The Science of Human Hacking, affiliate link here.

          Check out his podcast called The Social-Engineer podcast.

          Sponsors

          This episode was sponsored by Thinkst Canary. Their canaries attract malicious actors in your network and then send you an alert if someone tries to access them. Great early warning system for knowing when someone is snooping around where they shouldn’t be. Check them out at https://canary.tools.

          Support for this episode comes from LastPass. LastPass is a great password manager but it can do so much more. It can setup 2FA for your company, or use it to monitor what your users are doing in the network. Visit LastPass.com/Darknet to start your 14 day free trial.

          Sources

          • https://www.social-engineer.org/
          • How phishing scammers manipulate your amygdala and oxytocin TEDxFultonStreet
          • DEF CON 22 - Chris Hadnagy - What Your Body Tells Me - Body Language for the SE
          • https://en.wikipedia.org/wiki/George_C._Parker

          • Book Recommendations with affiliate links:

            • Social Engineering
            • Influence
            • What Every Body is Saying
            • Emotions Revealed
            • Presence
            • It’s Not About “Me”, Top 10 Techniques for Building Rapport
            • 1 hr 5 min
            • 68: Triton

              A mysterious mechanical failure one fateful night in a Saudi Arabian chemical plant leads a cast of operational technology researchers down a strange path towards an uncommon, but grave, threat. In this episode, we hear how these researchers discovered this threat and tried to identify who was responsible for the malware behind it. We also consider how this kind of attack may pose a threat to human life wherever there are manufacturing or public infrastructure facilities around the world.

              A big thanks to Julian Gutmanis, Naser Aldossary, Marina Krotofil, and Robert M. Lee for sharing their stories with us.

              Sponsors

              This episode was sponsored by IT Pro TV. Get 65 hours of free training by visiting ITPro.tv/darknet. And use promo code DARKNET25.

              This episode was sponsored by Linode. Linode supplies you with virtual servers. Visit linode.com/darknet and when signing up with a new account use code darknet2020 to get a $20 credit on your next project.

              Sources

              • https://www.fireeye.com/blog/threat-research/2019/04/triton-actor-ttp-profile-custom-attack-tools-detections.html
              • https://www.fireeye.com/blog/threat-research/2017/12/attackers-deploy-new-ics-attack-framework-triton.html
              • https://www.fireeye.com/blog/threat-research/2018/10/triton-attribution-russian-government-owned-lab-most-likely-built-tools.html
              • https://dragos.com/wp-content/uploads/TRISIS-01.pdf
              • Video S4 TRITON - Schneider Electric Analysis and Disclosure
              • Video S4 TRITON - Mandiant Analysis at S4x18
              • Video S4 TRITON - Reverse Engineering the Tricon Controller by Dragos
              • Video S4 TRITON - A Report From The Trenches
              • Video - Safety Orientation video for the Chemical Plant
              • 1 hr 14 min

              About Plus Feed

              From the publisher's feed

              Explore true stories of the dark side of the Internet with host Jack Rhysider as he takes you on a journey through the chilling world of hacking, data breaches, and cyber…