December 23, 2025

Security Now 1057: GhostPoster

2 hours 20 minutes

What if your smart TV and Firefox extensions were secretly hijacking your security and privacy? This episode reveals the jaw-dropping discovery of a massive TV botnet and the surprisingly clever malware lurking behind innocent browser icons.

North Korea's profitable fixation on cryptocurrency.

Amazon uncovers a cryptomining sneaking into customer clouds.

Insecure Docker API servers are also hosting cryptominers.

A new and truly massive SmartTV-based botnet discovery.

DNS Benchmark's 4th release.

Who, besides Let's Encrypt, offers free automated certs.

Some interesting listener feedback.

And how a PNG Icon was used to infect 50,000 Firefox users

Show Notes - https://www.grc.com/sn/SN-1057-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Join Club TWiT for Ad-Free Podcasts!

Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit

Sponsor:

zscaler.com/security

...more

View all episodes

By TWiT

4.3

200200 ratings