Smashing Security

Latest Episodes:

The man behind The Missing Cryptoqueen Dec 11, 2019

Show notes

We're joined by special guest Jamie Bartlett, of the chart-topping "The Missing Cryptoqueen" podcast, in this bumper episode where we discuss his investigation into the OneCoin cryptocurrency scam, the Russian cybercriminals behind Evil Corp, and the mysterious leaks about the NHS that have turned oh-so-political...

All this and much much more can be found in the latest edition of the "Smashing Security" podcast, hosted by computer security veterans Graham Cluley and Carole Theriault.

Visit https://www.smashingsecurity.com/158 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Jamie Bartlett.

Sponsored By:

Support Smashing Security

Links:

Russian hacking group "Evil Corp" accused of targeting American businesses — CBS News, YouTube.
Evil Corp donuts — YouTube.
International law enforcement operation exposes the world’s most harmful cyber crime group — National Crime Agency.
Treasury Sanctions Evil Corp, the Russia-Based Cybercriminal Group Behind Dridex Malware — U.S. Department of the Treasury.
UK Government Releases Photos of Russian Hackers, Whose Lives Look Awesome — Motherboard.
Hackers with high-placed daddies ‘Evil Corp’ member designated by U.S. Treasury is son of former Russian mayor — Meduza.
The Missing Cryptoqueen — BBC Sounds.
Jeremy Corbyn reveals dossier 'proving NHS up for sale' — The Guardian.
Reddit links UK-US trade talk leak to Russian influence campaign — TechCrunch.
Corbyn v Johnson: BBC election debate round-up — YouTube.
Stammer Time! — Cassetteboy on Twitter.
The Inside Story of Labour's 'NHS For Sale' Leak — Motherboard.
More proof NHS is up for sale as Amazon exploits NHS for free — TruePublica.
Tweet by Rik Ferguson about his fragrant armpits — Twitter.
nuud.
Accused of Killing a Gambino Mob Boss, He’s Presenting a Novel Defense — The New York Times.
Graham and Carole appear on the BeerConOne Stream — Twitch. Graham & Carole show up at about 1 hour 48 minutes into the show.
The Beer Farmers raise funds for the Electronic Frontier Foundation and Mental Health Hackersy The Beer Farmers : BeerConOne. — GoFundMe.
The Radio Adventures Of Dr. Floyd.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy

A biometric knuckle duster Dec 04, 2019

Show notes

What is Kaspersky's ugly ring for? Is there something suspicious about how NordVPN lets you stream Disney+? And why did a hacker impersonate a music producer?

Plus we have a bonus feature interview with Rachael Stockton from Logmein, the folks behind LastPass, all about behavioral biometrics!

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.

Visit https://www.smashingsecurity.com/157 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guests: Maria Varmazis and Rachael Stockton.

Sponsored By:

Support Smashing Security

Links:

"Eau de Eugene Kaspersky" — Smashing Security, episode 12.
Kaspersky Labs - Packin' The K — YouTube.
Thousands of taxpayers tell HMRC to delete voiceprint data it stored without consent — Graham Cluley.
Hackers Have Stolen Almost Six Million US Government Fingerprints — Tripwire.
Fingerprints are not the same as passwords — Graham Cluley.
Face/Off trailer — YouTube.
Picture of the (rather ugly) Kaspersky ring — Twitter.
Kasperky's synthetic fingerprint ring — YouTube.
This Ring Uses a Fake Fingerprint to Protect Your Biometric Data — PC Magazine.
How is NordVPN unblocking Disney+? It might be through YOUR own computer. Even if you’ve never used Disney+ or NordVPN. — Derek Johnson.
The Rise of “Bulletproof” Residential Networks — Krebs on Security.
SmartPlay by NordVPN: What is it and how does it work? — NordVPN.
Resident Evil: Understanding Residential IP Proxy as a Dark Service — XiangHang Mi.
Alleged Music Hacker Indicted for Impersonating a Producer to Steal Unreleased Music — Hollywood Reporter.
Hacker stole unreleased music and then tried to frame someone else — ZDNet.
Manhattan U.S. Attorney Announces Charges Against Austin Man For Computer Hacking And Fraud Scheme To Steal Unreleased Music From Music Industry Professionals — Department of Justice.
Why the f**k was I breached?
President Nixon Never Actually Gave This Apollo 11 Disaster Speech. MIT Brought It To Life To Illustrate Power Of Deepfakes — WBUR News.
Which Classic Toy Came First? — Mental Floss.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy

Better safe than Sony Nov 27, 2019

Show notes

In this clip from a special bonus episode produced for our Patreon supporters, Graham Cluley and Carole Theriault discuss the 2014 hack of Sony Pictures - reportedly carried out by North Korea for the very oddest of reasons...

Visit https://www.smashingsecurity.com/156 to check out this episode’s show notes and episode links, and become one of our "bonus content" Patreon supporters to hear the full episode in all its glory, get early access to future episodes, occasional bonus content, and even receive stickers!

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening and Happy Thanksgiving!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Support Smashing Security

Links:

Hackers leak Hollywood salaries, embarrassing emails - PBS Newshour — YouTube.
Did North Korea hack Sony? It seems hard to believe — Graham Cluley.
Poor passwords at Sony, WikiLeaks shows with archive of hacked documents — Graham Cluley.
The Interview Trailer (2014) — YouTube.
U.S. Said to Find North Korea Ordered Cyberattack on Sony — The New York Times.
Sony hackers failed to hide their North Korean IP addresses, says FBI — Hot for Security.
NSA allegedly hacked North Korea's networks before Sony attacks — Graham Cluley.

Privacy & Opt-Out: https://redcircle.com/privacy

Juice jacking, YouTube hacking, password slacking Nov 20, 2019

Show notes

A bank has some of the worst password advice ever, travellers are told to be wary when USB charging their smartphones and laptops, and a gamer has his YouTube account hacked.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Geoff White.

Visit https://www.smashingsecurity.com/155 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Geoff White.

Sponsored By:

Support Smashing Security

Links:

Giorgio Bonfiglio tweets about Fineco's bizarre attitude to passwords — Twitter.
This Bank Had the Worst Password Policy We've Ever Seen — Motherboard.
NIST password guidelines.
Officials warn about the dangers of using public USB charging stations — ZDNet.
MarcoStyle on Twitter.
A YouTuber With 350,000 Subscribers Was Hacked, YouTube Verified His Hacker — Forbes.
Massive wave of account hijacks hits YouTube creators — ZDNet.
Popular gaming channel MarcoStyle has been hacked for days, running scams, but YouTube isn't responding — Reclaim the net.
How my Youtube Channel got hacked for 2 weeks — MarcoStyle on YouTube.
The Crown — Netflix.
Aberfan disaster — Wikipedia.
Aberfan - 50 years on — WalesOnline.
Cliff Michelmore eyewitness report from Aberfan — YouTube.
Dolly Parton's America — WNYC Studios.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy

A buttock of biometrics Nov 13, 2019

Show notes

The UK's Labour Party kicks off its election campaign with claims that it has suffered a sophisticated cyber-attack, Apple's credit card is accused of being sexist, and what is Google up to with Project Nightingale?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by John Hawes.

Visit https://www.smashingsecurity.com/154 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: John Hawes.

Sponsored By:

Support Smashing Security

Links:

That "sophisticated" Labour cyber-attack - don't panic — Graham Cluley.
General election 2019: Labour Party hit by second cyber-attack — BBC News.
Election 2019: Security flaw leaves donors’ details online — The Times.
Apple's 'sexist' credit card investigated by US regulator — BBC News.
Apple's credit card caper probed over sexism claims – after women screwed over on limits — The Register.
Google has access to detailed health records on tens of millions of Americans — Ars Technica.
Google’s ‘Project Nightingale’ Gathers Personal Health Data on Millions of Americans — WSJ.
Google buys Fitbit for $2.1 billion — Ars Technica.
Smart condom ring i.Con is like a Fitbit for your man bits — CNET.
The Missing Cryptoqueen — BBC Sounds.
Undone — Amazon Prime.
Speed Monopoly - How to Play in under 30 minutes! — YouTube.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy

Cybercrime doesn’t pay (but Uber does) Nov 06, 2019

Show notes

The cybercrime lovebirds who hijacked Washington DC's CCTV cameras in the run-up to Donald Trump's inauguration, the truffle-snuffling bankers at the centre of an insider-trading scandal, and the hackers that Uber paid hush money to hide a security breach.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Lisa Forte.

Visit https://www.smashingsecurity.com/153 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Lisa Forte.

Sponsored By:

Support Smashing Security

Links:

Ransomware attack impacted 70% of Washington DC police surveillance cameras — Graham Cluley.
The Hapless Shakedown Crew That Hacked Trump’s Inauguration — Wall Street Journal.
Eveline Cismaru's Instagram account.
London Investment Bankers Charged in Insider-Trading Ring — Bloomberg.
Trade-Secrets Case Linked to Google Seen as Warning to Silicon Valley — Wall Street Journal.
Uber concealed massive hack that exposed data of 57m users and drivers — The Guardian.
Uber's statement about its 2016 "Data Security Incident"
Hackers who extorted Uber and LinkedIn plead guilty — ZDNet.
Maersk: Springing back from a catastrophic cyber-attack — I-CIO.
The Master Game — Wikipedia.
BBC's The Master Game — The Kenilworthian.
Gogglebox — Channel 4.
Ndemic Creations, makers of Plague Inc.
Plague Inc. trailer — YouTube.
‎Plague Inc. — iOS App Store.
Plague Inc. — Google Play.
The great contemporary art bubble. BBC documentary - YouTube — YouTube.
BBC art documentaries playlist — YouTube.
Painters and artists documentaries — YouTube.
Art documentaries playlist — YouTube.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy

Cats, hoodies, and rent Oct 30, 2019

Show notes

What's the problem with IoT-enabled pet feeders? Can hacking ever be illustrated without a hoodie? And just how are landlords using smart home technology to snoop upon their residents?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by technology journalist and broadcaster David McClelland.

Visit https://www.smashingsecurity.com/152 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: David McClelland.

Sponsored By:

Support Smashing Security

Links:

Privacy & Opt-Out: https://redcircle.com/privacy

Frankly, sometimes paying the ransom is a good idea Oct 23, 2019

Show notes

Remember how the City of Baltimore was badly hit by ransomware earlier this year? Turns out that wasn't the end of their problems. Also, Carole takes a look at how smart speakers can be hacked to trick you into giving criminals your passwords or even credit card details. And we discuss the findings of the LastPass global password security report.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, with a featured interview with Rachael Stockton from Logmein.

Visit https://www.smashingsecurity.com/151 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Rachael Stockton.

Sponsored By:

Support Smashing Security

Links:

Support Smashing Security on Patreon — Now also includes free stickers!
RobbinHood ransomware attack brings down parts of City of Baltimore's computer network — Tripwire.
Some Baltimore City Services Still Shut Down Due To Ransomware Attack — YouTube.
Baltimore government could have lost its website last week. And not because of hackers — Baltimore Brew.
Baltimore transfers $6 million to pay for ransomware attack; city considers insurance against hacks — Baltimore Sun.
Baltimore IT department uses ‘mind-boggling,' outdated data storage method, audit finds
Councilman “mind-boggled” by Baltimore City IT department ineptitude — Ars Technica.
The City Of Baltimore Blew Off A $76,000 Ransomware Demand Only To Find Out A Bunch Of Its Data Had Never Been Backed Up — Techdirt.
"Backin Up" by The Gregory Brothers — YouTube.
Smart Spies: Alexa and Google Home expose users to vishing and eavesdropping — Security Research Labs.
Zoomquilt 2.
Arkadia Zoomquilt.
Historia Civilis — YouTube.
2019 Global Password Security Report — LastPass.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy

Liverpool WAGs, Facebook politics, and a selfie stalker Oct 16, 2019

Show notes

Footballers' wives go to war over Instagram leaks, it turns out fake news is fine on Facebook (just so long as it's in a political ad), and things take a horrific turn in Japan, as a stalker uses a scary technique to find out where his pop idol lives.

Visit https://www.smashingsecurity.com/150 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Dave Bittner.

Sponsored By:

Support Smashing Security

Links:

Tweet by Coleen Rooney on Twitter.
Tweet by Rebekah Vardy on Twitter.
Prince Harry launches phone-hacking case against Sun and Mirror owners — The Guardian.
Mark Zuckerberg: An Elizabeth Warren presidency would 'suck' for Facebook — CNN.
In leaked audio, Mark Zuckerberg rallies Facebook against critics, competitors, and Elizabeth Warren — The Verge.
Elizabeth Warren Facebook ad mocks Facebook's fact checking policies — Engadget.
Graham getting thrashed by Garry Kasparov — @gcluley on Twitter
Stalker zoomed in on Japanese idol's eyes to find out where she lived — Graham Cluley.
Obsessed fan finds Japanese idol's home by zooming in on her eyes — AsiaOne.
Ni No Kuni: Wrath of the White Witch - Nintendo Switch Trailer — YouTube.
Funny English Idioms - and why we say them! — YouTube.
Vice — Amazon Prime.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Privacy & Opt-Out: https://redcircle.com/privacy

Falling in love with fraudsters Oct 09, 2019

Show notes

We take a trip to Staten Island, New York, to hear how a case of cyberstalking resulted in the arrest of 20 alleged mobsters, learn about the nude photo-loving insider threat at Yahoo, and discover how fraudsters might be boosting Match.com's profits.

Visit https://www.smashingsecurity.com/149 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Ran Levi.

Sponsored By: