Beers with Talos Ep. #50: Operating under the cover of… nothing

Recorded March 29, 2019 - Matt and Joel are both on the road this week, and Omar Santos from Cisco PSIRT joins the crew to discuss malware posing as ransomware and defending against supply chain attacks. We go deeper on the Talos story exposing criminal groups operating in the open on social media platforms like Facebook and the implications of criminal groups leveraging social networking. Facebook has removed the disclosed groups, so we discuss the best-effort ways to play whack-a-mole with bad guys on the open web.

The timeline:

• 01:00 — Roundtable: Holy crap. Will Nigel’s own nephew get to be a Mighty Red??
• 12:15 — Locker Goga: Disruptive, but less than useful as ransomware
• 19:35 — Asus backdoor: How big was it? What are your defenses against supply chain attacks?
• 38:30 — Criminal hacking marketplaces activity in plain sight
• 49:00 — Parting shots and closing thoughts: Talos Threat Research Summit reg is open!

The links:

• Locker Goga Talos post
• Asus backdoor discovered
• Criminal Marketplaces on Facebook
• TTRS tickets are on sale now!