Capital One Bank Hack

 

Think more than twice if you want to do something illegal and then... give up. =) Otherwise? Well... Read the below articles then.

Lessons learnt: A misconfigured cloud asset can cause a big multi-million dollar problem.

https://www.theregister.com/2022/06/20/captial_one_wire_fraud/
https://www.securityweek.com/jury-convicts-seattle-woman-massive-capital-one-hack

About the Capitol One breach read the following news:
https://www.securityweek.com/qa-what-know-about-capital-one-data-breach

"The conviction follows the infamous 2019 hack of Capital One in which personal information of more than 100 million US and Canadian credit card applicants were swiped from the financial giant's misconfigured cloud-based storage."

"Paige Thompson (aka 'erratic') was arrested in July 2019 after data was leaked between March and July of that year. The data was submitted by credit card hopefuls between 2005 and early 2019, and Thompson was able to get into Capital One's AWS storage thanks to a 'misconfigured web application firewall.'"

"The complaint added: 'Capital One determined that the April 21 file contained code for three commands, as well as a list of more than 700 folders or buckets of data.'"

"'Ms Thompson used her hacking skills to steal the personal information of more than 100 million people, and hijacked computer servers to mine cryptocurrency,' thundered US Attorney Nick Brown. 'Far from being an ethical hacker trying to help companies with their computer security, she exploited mistakes to steal valuable data and sought to enrich herself.'
'She wanted data, she wanted money, and she wanted to brag,' Assistant United States Attorney Andrew Friedman said in closing arguments."

ABD-Rusya Arası Siber Naneler

"Kopya çekmek serbest ama yakalanmamak şartıyla."

 

ABD'nin Rus avı sürüyor. ABD'de yaşamaya başlayıp, daha sonra da ABD vatandaşı olmuş olan "Russian-born", Alexander Tverdokhlebov isimli bir eleman, "wire fraud" suçundan dolayı 110 ay ceza aldı geçtiğimiz hafta. Kopya çekerken yakalandı yani. (Bu, medyaya düşen. Medyaya düşmeyen birçok olay olduğunu tahmin ediyorum.)

 

https://www.justice.gov/usao-edva/pr/russian-born-cybercriminal-sentenced-over-nine-years-prison

http://www.darkreading.com/cloud/cybercriminal-with-ties-to-exclusive-russian-hacking-forums-sentenced-to-prison/d/d-id/1329313?

 

Hollywood'a ilham veren, klasik ABD taktiği devreye giriyor burada. Rus elemana hemen bir itiraf anlaşması (plea agrrement) imzalatmışlar. Rus elemandan biraz daha ek bilgi ve PARA tırtıklamışlar yani. "Hacı 25 yıl mı yatmak istersin yoksa 10 yıl yatıp çıkmak mı? İkincisiyse ötmeye başla!" tarzı bir anlaşma oluyor bunlar sanırım filmlerden gördüğümüz kadarıyla.

 

Rus elemanın, sağa sola vermiş olduğu toplam zarar 9 ila 25 milyon dolar civarındaymış. (YUH BEA! Paraya gel!) Bitkoyin, mitkoyin falan abiden anca 5 küsür milyon dolar tırtıklayabilmiş Sam emmimiz.

 

Vaktiyle herifçioğlu 500,000 bilgisayarlık bir botnet ağına sahip olduğunu söyleyip, sağa-sola havasını atıyormuş. Gerçi mevzu, herifçioğlunun "övüneceği" kadar var. "500,000 infected computers" iyi bir rakam tek bir kişi için.

Rusya'nın ABD seçimlerine müdahale etmiş olduğuna dair ortaya atılan iddiaların etkilerinin devam ettiğini görüyoruz. Her ne kadar Trump yönetimi, mevzuyu sulandırmak istese ve mevzunun üzerini örtmeye gayret etse de ABD devlet refleksi bu konuyu hemen bırakma niyetinde değil gibi anlaşılıyor. Tüm bunların sebebinin bu olduğunu düşünüyorum. Daha eğlenceli haberler duyabiliriz bundan sonra konuyla ilgili olarak.

Yazıdan notlar:

"Federal authorities seized approximately $5 million in Bitcoin and $272,000 in cash from him. According to the plea agreement, victims' estimate losses totaled between $9.5 million to $25 million."

 

"Tverdokhlebov boasted he possessed 40,000 stolen credit card numbers and controlled as many as 500,000 infected computers for his botnets."

 

"At various times between 2009 and 2013, Tverdokhlebov claimed on the cybercrime forums that, among other things, he possessed 40,000 stolen credit card numbers and could control up to 500,000 infected computers."

The Wolf...

Below you can find two video links of HP about data breach. An excellent acting from Christian Slater. And they also "Hollywodized" the cybersecurity very well.

 

 

1st video

 

2nd video

 

 

Grizzly Steppe IP Addresses

Below you can find the IP addresses which were allegedly a part of the Grizzly Steppe:

https://www.google.com/maps/d/embed?mid=1pTg2yQ7JJWgMGVFeQEvCS2sBjIE&hl=en%22&ll=39.77695796990109%2C30.520955418777476&z=18

Grave Danger: Digitally Signed Malwares

Security experts have estimated that more than 200,000 unique malware binaries were discovered in the last couple of years signed with valid digital signatures.

Source: http://resources.infosecinstitute.com/cybercrime-exploits-digital-certificates/