Your Social Accounts Are Never Safe, Even If You Use Great Passwords🎙Ep. 86 The LinkedIn Incident
Source: YouTube · Jack Rhysider · published Jul 27, 2023 · 51:49
Cyber-crime operates as a complex, multi-layered supply chain rather than the work of a lone hacker, involving various specialized roles to successfully monetize stolen data 0:01-0:04.
Key Takeaways:
• After a hacker breaches a company and steals information, their primary goal is to find a buyer to monetize the theft and fund future attacks 0:09-0:19.
• Hackers frequently rely on brokers who act as middlemen, taking a percentage of the profits to negotiate the sale of stolen databases 0:21-0:33.
• To solve inherent trust issues between anonymous criminals, the underground market utilizes escrow agents as trusted third parties to facilitate safe transactions 0:35-0:39.
Understanding this intricate ecosystem reveals just how specialized and organized modern digital criminal enterprises truly are.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
JACK: You ever get fascinated with the cyber-crime
supply chain? It’s never a solo hacker doing the whole
thing; there’s a lot of layers to this onion. So, let’s say a hacker breaks into a place
and steals a bunch of information from some company. Well, next he’ll typically want to sell
that data to make some money and do it again, so now you’ve got to find a buyer. But before we even get to the buyer of stolen
data, there’s sometimes brokers involved, people who have negotiated deals between hackers
and buyers. So you might go to one of these brokers, offer
a percentage for selling the database to someone. Now it’s on them to find someone. But when the broker finds a buyer, sometimes
one side doesn’t trust the other so they bring in a trusted third party, an underground
escrow agent if yo…