Smashing Security

FatFace stumps up $2 million to its ransomware extortionists, an IT administrator is caught with his pants down, Mobikwik blames its users for a data breach, and we burgle a house... virtually.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Host Unknown's Thom Langford.

Visit https://www.smashingsecurity.com/221 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Thom Langford.

Sponsored By:

• 1Password: With 1Password you only ever need to memorize one password. All your other passwords and important information are protected by your Master Password, which only you know. Take the 14 day free trial now.

Support Smashing Security

Links:

• FatFace would like everyone to keep its data breach “strictly private and confidential” — Graham Cluley.
• Retailer FatFace pays $2m ransom to Conti cyber criminals — Computer Weekly.
• Streisand effect — Wikipedia.
• 'We have your porn collection': The rise of extortionware — BBC News.
• Mobikwik Data Breach: Data of 10 crore Mobikwik users for sale on dark web, say cybersecurity experts — The Economic Times.
• Mobikwik data breach said to be largest KYC leak, personal data of 3.5 million users up for sale on dark web — India Today.
• Rick Beato — YouTube.
• What Makes This Song Great? Ep.94 Gordon Lightfoot — YouTube.
• Adriano Celentano - Prisencolinensinainciusol — YouTube.
• Ember: The World’s First Temperature Control Mug.
• Slow-cooked guide to Sous Vide Eggs — Serious Eats.
• Art History 101 — YouTube.
• Chris Luedke, art historian — Twitter.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

PC manufacturer Acer might have received a $50 million ransom demand, a warning spreads on Facebook about a trick being used by hackers, and why are the City of London's police not happy about Sci Hub?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Alex Eckelberry.

Visit https://www.smashingsecurity.com/220 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Alex Eckelberry.

Sponsored By:

• 1Password: With 1Password you only ever need to memorize one password. All your other passwords and important information are protected by your Master Password, which only you know. Take the 14 day free trial now.
• Sailpoint: SailPoint Identity Security can help you enable your business and manage the cyber risk associated with the explosion of technology access in the cloud enterprise – ensuring each worker has the right access to do their job – no more, no less.
• 
  
• Gain unmatched visibility and intelligence while automating and accelerating the management of all user identities, entitlements, systems, data and cloud services.

Support Smashing Security

Links:

• Hackers cannot post Facebook comments on your behalf without you seeing it — AFP Fact Check.
• Does a Facebook Hack 'Hurt and Offend' Friends? — Snopes.
• Stop sending mail you later regret — Gmail blog.
• April Fools Check: Did Google Really Release Mail Goggles? — TechCrunch.
• When was blinking invented?
• Computer giant Acer hit by $50 million ransomware attack — Bleeping Computer.
• Ransomware gang says it targets firms who have cyber insurance. And what’s more, it will hack insurance firms to identify them… — Graham Cluley.
• Is the staggeringly profitable business of scientific publishing bad for science? — The Guardian.
• Police warn students and universities of accessing an illegal website to download published scientific papers — City of London Police.
• Meet the pirate queen making academic papers free online — The Verge.
• Sci-Hub: How Does it Work? — The Scholarly Kitchen.
• Glitterbomb Trap Catches Phone Scammer (who gets arrested) — YouTube.
• After Life — Netflix.
• The One — Netflix.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

How are cheerleaders being creeped out by deepfakes? What might Tinder tell potential dates about your murky past? And how should companies respond to the press when a security breach occurs?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Yvonne Eskenzi.

Visit https://www.smashingsecurity.com/219 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Yvonne Eskenzi.

Sponsored By:

• CrowdSec: CrowdSec is open-source and crowd-powered software enabling you to detect and block attacks. While sharing with its user community, you contribute to improve its efficiency and make the internet safer.
• Sailpoint: SailPoint Identity Security can help you enable your business and manage the cyber risk associated with the explosion of technology access in the cloud enterprise – ensuring each worker has the right access to do their job – no more, no less.
• 
  
• Gain unmatched visibility and intelligence while automating and accelerating the management of all user identities, entitlements, systems, data and cloud services.
• 1Password: Check out 1Password's podcast "Random but Memorable" for lighthearted security advice and banter with hosts Matt, Anna, and Michael.
• 
  
• Listen to the "Random but Memorable" show in your favourite podcast app to hear the latest about security horror stories, data breaches, password hacking, and more.

Support Smashing Security

Links:

• Chris Farley makes an energetic entrance to the David Letterman show — YouTube.
• Cheer — Netflix.
• Bucks County woman created ‘deepfake’ videos to harass rivals on her daughter’s cheerleading squad, DA says — Philadelphia Inquirer.
• Cheerleader, 17, who appeared in 'deepfake' vaping video 'made by rival's mom' tells how she broke down in tears — The Sun.
• Oliver Reed on being deadly — YouTube.
• Deep Tom Cruise — TikTok.
• Deep Tom Cruise pretends to be a snapping turtle — TikTok.
• Deep Tom Cruise demonstrates his golf swing — TikTok.
• A Guide to Crisis Communications for Incident Response — Eskenzi PR.
• Tinder to introduce in-app background checks — BBC News.
• Garbo - A new kind of online background check.
• Match Group Partners with Garbo to Make Groundbreaking Background Check Technology Accessible To Users, Starting with Tinder — Press release.
• Notificationsounds.com
• Blinkist — Summaries of over 3,000 bestselling non-fiction books.
• Acriflex — Antiseptic burns cream.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Is it the end of the road for John McAfee? Is PornHub more legitimate than Facebook? And do you know as much as you think you do about the Microsoft Exchange Server mega-hack?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner.

Visit https://www.smashingsecurity.com/218 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Dave Bittner.

Sponsored By:

• Sailpoint: SailPoint Identity Security can help you enable your business and manage the cyber risk associated with the explosion of technology access in the cloud enterprise – ensuring each worker has the right access to do their job – no more, no less.
• 
  
• Gain unmatched visibility and intelligence while automating and accelerating the management of all user identities, entitlements, systems, data and cloud services.
• 1Password: Check out 1Password's podcast "Random but Memorable" for lighthearted security advice and banter with hosts Matt, Anna, and Michael.
• 
  
• Listen to the "Random but Memorable" show in your favourite podcast app to hear the latest about security horror stories, data breaches, password hacking, and more.

Support Smashing Security

Links:

• John McAfee 'disguised as Guatemalan street hawker with a limp' — The Telegraph.
• John McAfee Wanted for Murder — Gizmodo.
• John McAfee says he infected laptops with malware, spied and stole passwords from Belize officials — Naked Security.
• John McAfee is running for president — Graham Cluley.
• Good luck John McAfee, socially engineering a corpse… — Graham Cluley.
• How To Uninstall McAfee Antivirus — YouTube.
• John David McAfee And Executive Adviser Of His Cryptocurrency Team Indicted In Manhattan Federal Court For Fraud And Money Laundering Conspiracy Crimes — US Department of Justice.
• IsLegitSite — Check if a website is legitimate or not.
• Microsoft Exchange Server Market Share and Competitor Report — Datanyze.
• Four new hacking groups have joined an ongoing offensive against Microsoft’s email servers — MIT Technology Review.
• A Basic Timeline of the Exchange Mass-Hack — Krebs on Security.
• New nation-state cyberattacks — Microsoft.
• The Kilobyte’s Gambit — A 1k chess game.
• The Repair Shop — Netflix.
• The Repair Shop — BBC One.
• Sideways — BBC Radio 4.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Actor, presenter and writer Robert Llewellyn, famous for playing the part of Kryten in the science-fiction comedy "Red Dwarf," joins us as we discuss robots gone rogue, electric vehicle nightmares, and creepy companions.

All this and much much more can be found in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Robert Llewellyn - famous for "Fully Charged," "Scrapheap Challenge," and as Kryten on "Red Dwarf."

Visit https://www.smashingsecurity.com/217 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Robert Llewellyn.

Sponsored By:

• 1Password: 1Password offers seamless syncing across all your computers and mobile devices, so you can store and access unlimited passwords from anywhere at any time. Only you have the keys to decrypt your data and sensitive information – 1Password doesn’t know it, doesn’t share it, and doesn’t sell it.
• 
  
• Protect your whole family and get 50% off when you sign up for a 1Password Family account – make your home a 1Password household.
• 
  
• For more details visit www.1password.com/switch50

Support Smashing Security

Links:

• 'Drunk' robot vacuums spark complaints from owners — BBC News.
• Roomba S9+ weird behaviour on version 3.10.8 — Reddit.
• Time lapse video of i7+ attempting to return to clean base after 3.12.8 update — Reddit.
• Robot vacuum cleaners can eavesdrop on your conversations, researchers reveal — Bitdefender BOX blog.
• The Hidden Cyber Risks of Electric Vehicles — Upstream.
• Mindfulness, laughter and robot dogs may relieve lockdown loneliness – study — The Guardian.
• Charlie — YouTube.
• Aibo — YouTube.
• Lovot — YouTube.
• Petit Qoobo — YouTube.
• Flatcat — YouTube.
• For All Mankind trailer — YouTube.
• For All Mankind — Apple TV.
• "Diary of an MP's Wife: Inside and Outside Power" by Sasha Swire. — Amazon.
• "I Care A Lot" trailer — YouTube.
• I Care A Lot — IMDB.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

World-chess-champion-turned-activist Garry Kasparov returns to the show as we discuss a romance scammer with plenty of time on his hands, the surge in sextortion, and how social media is being swamped with claims of fake snow.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Garry Kasparov.

Visit https://www.smashingsecurity.com/216 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Garry Kasparov.

Sponsored By:

• 1Password: 1Password offers seamless syncing across all your computers and mobile devices, so you can store and access unlimited passwords from anywhere at any time. Only you have the keys to decrypt your data and sensitive information – 1Password doesn’t know it, doesn’t share it, and doesn’t sell it.
• 
  
• Protect your whole family and get 50% off when you sign up for a 1Password Family account – make your home a 1Password household.
• 
  
• For more details visit www.1password.com/switch50

Support Smashing Security

Links:

• Dating apps scam committed by criminal from inside prison — BBC News.
• File on 4 - The Dangers of Dating Apps — BBC Sounds.
• Playboy Magazine, November 1989 — Including Garry Kasparov's interview and sexy photo shoot.
• Sextortion email scams — Avast.
• Has Fake Snow Been Falling on the US? — Snopes.
• TikTok Users Are Trying (and Failing) to Prove the Snow in Texas Is Fake — Daily Beast.
• TikTok Users Are Burning Snowballs in Viral Videos to 'Prove' the Snow is Fake — Gizmodo.
• Griddy: Why a Texas electricity company is under fire for astronomical bills during winter storm — The Independent.
• Ted Cruz Mariachi Band Performed at a Discount — TMZ.
• Slow TV Map.
• The Queen's Gambit — Golden Globes.
• Soulmates (TV series) — Wikipedia.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

The FBI is hoping that its hunt for Capitol rioters will go viral, a cryptocurrency con lets its perpetrator live the high life... for a while, and just what does Facebook have against cows and a team of cricketers?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by BBC technology correspondent Zoe Kleinman.

Visit https://www.smashingsecurity.com/215 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Zoe Kleinman.

Sponsored By:

• 1Password: With 1Password you only ever need to memorize one password. All your other passwords and important information are protected by your Master Password, which only you know. Take the 14 day free trial now.
• Recorded Future: Recorded Future's podcast, Inside Security Intelligence, takes a deep dive into the world of cyber threat intelligence
• 
  
• They share stories from the trenches and the operations floor, giving you the lowdown on established and emerging adversaries
• 
  
• Whether it's the SolarWinds breach, 5G conspiracy theories, or Russian election interference, Inside Security Intelligence gives you a fresh take from a variety of industry experts

Support Smashing Security

Links:

• The FBI Wants You To Make These Photos Of Capitol Insurrectionists Go Viral — Huffington Post.
• Capitol Violence — FBI.
• Sedition Hunters.
• Boston Bombing: The Anatomy of a Misinformation Disaster — The Atlantic.
• Iced Earth’s singer and bassist quit band "in response to recent events and circumstances" — NME.
• Capitol Insurrection: More Than 230 People Charged And What We Know About Them — NPR.
• 'Overtly sexual' cow blocked as Facebook ad — BBC News.
• What is Stefan Qin’s edge in crypto? Fraud, says the SEC — Digital Finance.
• Founder Of $90 Million Cryptocurrency Hedge Fund Charged With Securities Fraud And Pleads Guilty In Federal Court — Department of Justice.
• A crypto kid had a $23,000-a-month condo. Then the feds came — Fortune.
• Radio Garden — Explore live radio by rotating the globe.
• Dodow.
• On Her Majesty's Secret Service mind control scene — YouTube.
• Mark Kermode's Secrets of Cinema — BBC.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Fingerprints and DNA records have been deleted from the UK's police database, the SolarWinds hack continues to wreak havoc and raise questions, and we have some advice for how to fall in love safely under lockdown...

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Professor Alan Woodward.

Visit https://www.smashingsecurity.com/214 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Alan Woodward.

Sponsored By:

• 1Password: With 1Password you only ever need to memorize one password. All your other passwords and important information are protected by your Master Password, which only you know. Take the 14 day free trial now.

Support Smashing Security

Links:

• Police probes compromised after computer records deleted — BBC News.
• Home Office admits 15,000 people deleted from police records — The Guardian.
• Home Office admits 'coding error' wiped 15,000 police records — IT Pro.
• Boris Johnson adviser quits after being overruled on Priti Patel bullying report — The Guardian.
• UK's families put on fraud alert — BBC News.
• Security Advisory — SolarWinds.
• Suspected Chinese hackers used SolarWinds bug to spy on U.S. payroll agency – sources — Reuters.
• A Second SolarWinds Hack Deepens Third-Party Software Fears — Wired.
• Microsoft: No Evidence SolarWinds Was Hacked Via Office 365 — CRN.
• What You Need to Know About Romance Scams — FTC.
• Interpol warns of romance scam artists using dating apps to promote fake investments — ZDNet.
• Man lost £38,000 to scammers posing as single women on Match.com — Metro.
• Romance scams rank number one on total reported losses — FTC.
• This romance scam tricks victims in laundering federal funds — Better Business Bureau.
• Lexulous.
• Scrabble fans slam 'sparkly abomination' new app — BBC News.
• ‎Best Bubble Breaker — Apple App Store.
• Jawbreaker (Windows Mobile game) — The original BubbleBreaker?
• IKEA Klippan, 2 Seater sofa cover — Bemz.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Mensa - the social club for people with high IQs - is accused of not being so smart about security, an Indian TV journalist gets an unbelievable job offer from Harvard, and we take a look at what's being going on with GameStop short selling.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley.

Visit https://www.smashingsecurity.com/213 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Mark Stockley.

Sponsored By:

• Recorded Future: Recorded Future's podcast, Inside Security Intelligence, takes a deep dive into the world of cyber threat intelligence
• 
  
• They share stories from the trenches and the operations floor, giving you the lowdown on established and emerging adversaries
• 
  
• Whether it's the SolarWinds breach, 5G conspiracy theories, or Russian election interference, Inside Security Intelligence gives you a fresh take from a variety of industry experts
• CrowdSec: CrowdSec is open-source and crowd-powered software enabling you to detect and block attacks. While sharing with its user community, you contribute to improve its efficiency and make the internet safer.
• 1Password: With 1Password you only ever need to memorize one password. All your other passwords and important information are protected by your Master Password, which only you know. Take the 14 day free trial now.

Support Smashing Security

Links:

• Two British Mensa directors quit over cyber security concerns — Financial Times.
• Mensa Website Hacked After Britain’s Smartest Folk Failed To Secure Passwords — Forbes.
• Poor password security at the British branch of Mensa? — Graham Cluley.
• I Am Nidhi Razdan, Not A Harvard Professor, But... — NDTV.
• GameStop stock price — MarketWatch.
• GameStop: What is it and why is it trending? — BBC News.
• An uprising against Wall Street? Hardly. GameStop was about the absurdity of the stock market — The Guardian.
• GameStop short squeeze fuels new stock-market services tracking Reddit messages — MarketWatch.
• The Basics of Shorting Stock — The Balance.
• The Rise of the Murdoch Dynasty — BBC iPlayer.
• SketchUp.
• The Office ASMR — A Podcast to Sleep To.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Google warns security researchers that North Korean hackers are pretending to be their buddies, sensitive information connected to Coronavirus testing is available for sale in the Netherlands, and is a Peeping Tom at your home security provider spying on you through CCTV?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.

Visit https://www.smashingsecurity.com/212 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Maria Varmazis.

Sponsored By:

• 1Password: With 1Password you only ever need to memorize one password. All your other passwords and important information are protected by your Master Password, which only you know. Take the 14 day free trial now.

Support Smashing Security

Links:

• Illegale handel in privégegevens miljoenen Nederlanders uit coronasystemen GGD — RTL News.
• Video conference of EU Defence Ministers where a Dutch journalist gatecrashed the system — YouTube.
• John van den Heuvel — Wikipedia.
• Dutch COVID-19 patient data sold on the criminal underground — ZDNet.
• Smashing Security episode 175: Zoom deepfakes, Zardoz, and 'Rona tracing.
• Bonus: Smashing Security After Dark #2 - Zardoz commentary. — Smashing Security on Patreon.
• New campaign targeting security researchers — Google Threat Analysis Group (TAG).
• Google: North Korean hackers have targeted security researchers via social media — ZDNet.
• ADT Employee: I Spied on Naked Customers Through Security Cams — Gizmodo.
• ADT sued after employee accessed more than 200 customers’ home security systems in Dallas area — Dallas Morning News.
• The Investigation — BBC iPlayer.
• The Investigation: why my drama about Kim Wall doesn't name her killer — The Guardian.
• Tobias Lindholm on his take of the Kim Wall murder investigation — Nordisk Film & TV Fond.
• ‘Babylon 5 Remastered’ now available to buy or stream on HBO Max — Engadget.
• High Maintenance — HBO.
• Hear the New Trailer for Wondery's Podcast 'The Apology Line' — Rolling Stone.
• Allan Bridge — Wikipedia.
• The Apology Line — Wondery.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)