The Insecurity Brief

GoDaddy said in a statement to the SEC that the data of up to 1.2 million of its customers was exposed after hackers gained access to the company’s Managed WordPress hosting environment. The incident was discovered by GoDaddy on November 17, but the attackers had access to its network and the data contained on the breached systems since at least September 6, 2021.

Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. The suppression of information is a danger to all of us.  Social media attempts to shape news and information by over-amplification of disinformation. This podcast hope to give information and provide insights from 

Join our community!!

Follow me on Twitter

@trip_elix

Links

Our Website:

https://www.tripelix.com/insecurity/godaddy-hacked-and-the-seedy-and-hidden-world-of-affiliate-marketing/

Youtube:

https://youtu.be/cOgF2g733Wc

Rumble:

https://rumble.com/vpp4j5-godaddy-hacked.html

iTunes:

https://podcasts.apple.com/us/podcast/godaddy-hacked-and-the-seedy-and-hidden/id1583788677?i=1000543032548

Spotify:

https://open.spotify.com/episode/0uPBaPxVBAW6uv7wAiFalT

Trip’s books

#godaddy 

In a data breach notification published today, GoDaddy said that the data of up to 1.2 million of its customers was exposed after hackers gained access to the company’s Managed WordPress hosting environment.

https://www.bleepingcomputer.com/news/security/godaddy-hack-causes-data-breach-affecting-12-million-customers/

In a security disclosure published today, GoDaddy says that up to 1.2 million active and inactive customers have been exposed after hackers gained access to its managed WordPress hosting platform. The hack was first discovered by GoDaddy on November 17, 2021.

https://ithemes.com/blog/godaddy-hacked/

Data breaches seem to be making headlines on a daily basis lately. The recent Equifax and Capital One hacks alone exposed the personal, financial, and contact information of more than 250 million Americans. Thousands of gigabytes of personal data are now exposed to the dark reaches of the internet. So what becomes of stolen data? Sometimes nothing, but i

Do you know how to protect your cell phone? Is it your personal bugging device? Trip goes though the steps to secure your device.

Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. The suppression of information is a danger to all of us.  Social media attempts to shape news and information by over-amplification of disinformation. This podcast hope to give information and provide insights from 

Join our community!!

Follow me on Twitter

@trip_elix

Links

Our Website:

https://www.tripelix.com/insecurity/basic-cellphone-security/

Youtube:

https://youtu.be/pH6DBAexyrM

Rumble:

https://rumble.com/vpp4aj-basic-cellphone-security.html

iTunes:

https://podcasts.apple.com/us/podcast/basic-cellphone-security/id1583788677?i=1000542922681

Spotify:

https://open.spotify.com/episode/7e7zwpLWQvxGIAYKTGMyIm

Trip’s books

#cellphone #android #iphone

Amazon link Entwth Cell Phone Tempered Glass Privacy Screen Protector(Black,2 Pack),Compatible iPhone 11/XR 6.1″ Screen HD Clarity 3D Touch 9H Hardness Anti-Spy Anti-Scratch Anti-Glare,Easy Install Bubble Free

    USB Data Blocker, JSAUX (4-Pack) USB-A Defender Only for Quick Charge, Protect Against Juice Jacking, Refuse Hacking Provide Safe Charging- Red

Behind the radio ads lurks a devious plot to separate you from your money. Trip unfolds the murky world of Identity theft and title scams

Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. The suppression of information is a danger to all of us.  Social media attempts to shape news and information by over-amplification of disinformation. This podcast hope to give information and provide insights from 

Join our community!!

Follow me on Twitter

@trip_elix

Links

Our Website:

https://www.tripelix.com/insecurity/home-title-theft/

Youtube:

https://youtu.be/UZLpGzWV_do

Rumble:

https://rumble.com/vpnj1x-home-title-theft.html

iTunes:

https://podcasts.apple.com/us/podcast/home-title-theft/id1583788677?i=1000542804664

Spotify:

https://open.spotify.com/episode/644jT3BtWreMyfjJ3vp3JV

Trip’s books

#hometitletheft #scam

Ooooo, terrible things can happen. The latest, as you can hear on radio ads and other venues, is that no-good-niks can steal your home out from under you. But you can buy insurance against such a fate. Whew. But maybe this is a shuck, too. Rick Kahler, president of Kahler Financial Group in Rapid City, S. D, explains:

The booming voice of Bill O’Reilly sounds pretty serious. He’s telling you that by using documents on the internet, title thieves can steal your home without you knowing, sell it or take out loans against it and stick you with the bill. Title theft sounds pretty ominous.

https://www.legalexaminer.com/home-family/title-theft-is-not-the-problem-despite-ad-claims/

The FBI is committed to aggressively pursuing those who endanger the stability of our banking system and the safety of assets and personal information the public has entrusted to its care. In financial institution fraud (FIF) investigations, the Bureau continues to concentrate its efforts on organized criminal groups that prey on banks and engage in patterns of activity that lead to large aggregate losses. When FIF schemes involve single actors, the FBI prioritizes cases with high losses or significant community impact.

https://www.f

From all the ads you would think that without one you are in danger. Most of it is hype to trick you into installing a device to track you even more thna your IsP.

Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. The suppression of information is a danger to all of us.  Social media attempts to shape news and information by over-amplification of disinformation. This podcast hope to give information and provide insights from 

Join our community!!

Follow me on Twitter

@trip_elix

Links

Our Website:

https://www.tripelix.com/insecurity/is-your-vpn-hacked/

Youtube:

https://youtu.be/om6t8xgJsLc

Rumble:

https://rumble.com/vpni0f-is-your-vpn-hacked.html

iTunes:

https://podcasts.apple.com/us/podcast/is-your-vpn-hacked/id1583788677?i=1000542681225

Spotify:

https://open.spotify.com/episode/3n4hN1eOPt1LDyIuYuIoQR

Trip’s books

#VPN #Expresvpn #fortinet

According to the Justice Department, ExpressVPN CIO Daniel Gericke and two others worked as hackers for hire for the UAE to develop “zero-click” attacks capable of breaking into internet accounts and devices, including those in the US.

https://www.pcmag.com/news/expressvpn-cio-helped-united-arab-of-emirates-hack-into-phones-computers

Further discussions with LimeVPN have revealed the claim of 69,000 users being affected was actually an activity log total, with the number of live user accounts closer to 800. LimeVPN also confirmed their website has not been hacked and the claim of all private keys being leaked is false. In reality, 25 WireGuard keys used for beta testing were taken. LimeVPN says, “We have reset all access credentials, shut down wire guard servers and separating our billing infra from marketing info.”

https://www.pcmag.com/news/limevpn-suffers-major-data-breach-over-69k-users-at-risk

A threat actor has leaked a list of almost 500,000 Fortinet VPN login names and passwords that were allegedly scraped from exploitable devices last summer.

from web pages to the dark net what is this place we call the internet?

Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. The suppression of information is a danger to all of us.  Social media attempts to shape news and information by over-amplification of disinformation. This podcast hope to give information and provide insights from 

Join our community!!

Follow me on Twitter

@trip_elix

Links

Our Website:

https://www.tripelix.com/insecurity/internet-basics/

Youtube:

https://youtu.be/6P4CMiA_kwE

Rumble:

https://rumble.com/vpl62t-internet-basics.html

iTunes:

https://podcasts.apple.com/us/podcast/internet-basics/id1583788677?i=1000542439381

Spotify:

https://open.spotify.com/episode/2aYKgkjlhKqrnuaHXGQ9ts

Trip’s books

#tor #internet #bots

The Internet’s Own Boy: The Story of Aaron Swartz (Must Watch Documentary 2014)

https://www.youtube.com/watch?v=3Q6Fzbgs_Lg&t=3796s

Privacy is a human right

Businesses are becoming increasingly aware of the cyber-threat represented by bot attacks. In fact, over 70% of organizations in the e-commerce, entertainment, travel, and financial services sectors display a common understanding of the most common types of operations, such as card cracking or credentials stuffing. What is more, 76% of them state that they have been attacked by bots in the past.

https://heimdalsecurity.com/blog/bot-attacks/

Stalkerware is a term now in use officially recognized as a thing. Scary but there are tricks and thing i discuss in the cast that others don’t talk about.

Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. The suppression of information is a danger to all of us.  Social media attempts to shape news and information by over-amplification of disinformation. This podcast hope to give information and provide insights from 

Join our community!!

Follow me on Twitter

@trip_elix

Links

Our Website:

https://www.tripelix.com/insecurity/dealing-with-stalkers-stalkerware-and-location-tracking-avoidance/

Youtube:

https://youtu.be/NGwoNfzv_xk

Rumble:

https://rumble.com/vpev97-dealing-with-stalkers-stalkerware-and-location-tracking-prevention.html

iTunes:

https://podcasts.apple.com/us/podcast/dealing-with-stalkers-stalkerware-and-location/id1583788677?i=1000542311458

Spotify:

https://open.spotify.com/episode/2exFBTRmvvedQwMkHSoMqo

Trip’s books

Websites are requiring that you provide a text message for a false sense of security. Two methods of defeating 2nd auth are explained in this episode and a strategy for security that you should adopt.

Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. The suppression of information is a danger to all of us.  Social media attempts to shape news and information by over-amplification of disinformation. This podcast hope to give information and provide insights from 

Join our community!!

Follow me on Twitter

@trip_elix

 Links

Our Website:

https://www.tripelix.com/insecurity/problems-plague-second-auth/

Youtube:

https://youtu.be/g24m8t57QpE

Rumble:

https://rumble.com/vpc44m-problems-plague-second-auth.html

iTunes:

https://podcasts.apple.com/us/podcast/problems-plague-second-auth/id1583788677?i=1000542311339

Spotify:

https://open.spotify.com/episode/7BPLVDdbMK2KgHQ9GqsxJ8

#2fa #phishing #2ndauth

ThioJoe

https://phishtank.org/

https://openphish.com/

For over a decade, phishing toolkits have been helping attackers automate and streamline their phishing campaigns. Man-in-the- Middle (MITM) phishing toolkits are the latest evolution in this space, where toolkits act as malicious reverse proxy servers of online services, mirroring live content to users while extracting credentials and session cookies in transit. These tools further reduce the work required by attackers, automate the harvesting of 2FA-authenticated sessions, and substantially increase the believability of phishing web pages.

https://catching-transparent-phish.github.io/

Skimmers are not new, they have existed for years. First introduced using magnetic strips new technology has changed them to be ultra thin and much smarter.

Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. The suppression of information is a danger to all of us.  Social media attempts to shape news and information by over-amplification of disinformation. This podcast hope to give information and provide insights from 

Join our community!!

Follow me on Twitter

@trip_elix

 Links

Our Website:

https://www.tripelix.com/insecurity/skimmers-used-to-steal-money-how-its-done-and-what-to-watch-for/

Youtube:

https://youtu.be/LaOqyTkRGWI

Rumble:

https://rumble.com/vp9o4u-skimmers-used-to-steal-money-how-its-done-and-what-to-watch-for.html

iTunes:

https://podcasts.apple.com/us/podcast/skimmers-used-to-steal-money-how-its-done-and-what-to/id1583788677?i=1000542069434

Spotify:

https://open.spotify.com/episode/2jiTiy1UBUNqK3n9GfBgHQ

Trip’s books

Hashtags go here

The skimmers could read card information from the magnetic stripe of a payment card. In August, Costco found five skimmers on payment card devices in four of their warehouses.

https://www.zdnet.com/article/costco-says-card-skimmers-were-found-at-chicago-area-warehouses-less-than-500-people-affected/

Credit cards are loaded with security features, but the game of cat and mouse goes on. Nefarious syndicates continue to develop technology to steal data in new and innovate ways. After SparkFun did a teardown on some illicit hardware, they were visited by local law enforcement, who requested their help once more.

https://hackaday.com/tag/credit-card-skimmer/

The series I’ve written about ATM skimmers, gas pump skimmers and other related fraud devices have become by far the most-read posts on this blog. I put this gallery together to showcase the entire series, and to give others a handy place to reference all of these stories in one place. Click the headline or the image associated with each blurb for the full story.

https://krebsonsecurity.com/all-about-skimmers/

The FBI web portal sent a fake cyber alert to thousands and to Brian Krebs who interviewed the hacker

Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. The suppression of information is a danger to all of us.  Social media attempts to shape news and information by over-amplification of disinformation. This podcast hope to give information and provide insights from 

Join our community!!

Follow me on Twitter

@trip_elix

Links

Our Website:

https://www.tripelix.com/insecurity/fbi-hacked-spams-thousands/

Youtube:

https://youtu.be/fWAfn3_27D4

Rumble:

https://rumble.com/vp89q3-fbi-hacked-spams-thousands.html

iTunes:

https://podcasts.apple.com/us/podcast/fbi-hacked-spams-thousands/id1583788677?i=1000541925215

Spotify:

https://open.spotify.com/episode/78CXjIhF6xrAZMC2jZfLgY

Trip’s books

Hashtags go here

The Federal Bureau of Investigation (FBI) confirmed today that its fbi.gov domain name and Internet address were used to blast out thousands of fake emails about a cybercrime investigation. According to an interview with the person who claimed responsibility for the hoax, the spam messages were sent by abusing insecure code in an FBI online portal designed to share information with state and local law enforcement authorities.

https://krebsonsecurity.com/2021/11/hoax-email-blast-abused-poor-coding-in-fbi-website/oo4DhrIcZ+Xx+0UUAfT0jxpFFECbhOtxiigCiiigH/2Q==

Hackers have targeted Federal Bureau of Investigation (FBI) mail servers, sending thousands of fake messages saying their recipients have become the victims of a “sophisticated chain attack,” first reported by Beeping computer. The emails were originally discovered by The Spamhaus Project, a nonprofit organization that investigates email spammers.

https://goodwordnews.com/fbi-messaging-system-hacked-to-send-fake-cybersecurity-warnings/

This tool will make email headers human readable by parsing them according to RFC 822. Email headers are present on every email you receive via the Internet and can provide valuable diagnostic information like hop delays, anti-spam results and more. If you need help getting copies of your email headers, just read this tutorial.</

TrickBot, is a financial Trojan first detected in 2016, has been traditionally a Windows-based crimeware solution, employing different modules to perform a wide range of malicious activities on target networks, including credential theft and perpetrating ransomware attacks.

Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. The suppression of information is a danger to all of us.  Social media attempts to shape news and information by over-amplification of disinformation. This podcast hope to give information and provide insights from 

Join our community!!

Follow me on Twitter

@trip_elix

Links

Our Website:

https://www.tripelix.com/insecurity/trickbot-still-infecting-despite-government-and-microsofts-best-efforts/

Youtube:

https://youtu.be/A-qoZDCD9f8

Rumble:

rumblelink

iTunes:

ituneslink

Spotify:

spotifylink

Trip’s books

#trickbot #malware #windows #microsoft #ransomware 

“BazaCall” or “BazarCall” is a support scam that entices victims to download and run a malicious Excel spreadsheet that infects a vulnerable Windows computer with BazaLoader (also called BazarLoader) malware. This infection process involves a fake support center and support person who guides you through the process. This video shows an example of how someone might get infected.

IBM X-Force has been tracking the activity of ITG23, a prominent cybercrime gang also known as the TrickBot Gang and Wizard Spider. Researchers are seeing an aggressive expansion of the gang’s malware distribution channels, infecting enterprise users with Trickbot and BazarLoader. This move is leading to more ransomware attacks — particularly ones using the Conti ransomware.

Efforts to disrupt TrickBot may have shut down most of its critical infrastructure, but the operators behind the notorious malware aren’t sitting idle. According to new findings shared by cybersecurity firm Netscout, TrickBot’s authors have moved portions of their code to Linux in an attempt to widen the scope of victims that could be targeted