DEF CON 32 - Inside the FBI’s Secret Encrypted Phone Company ‘Anom’ - Joseph Cox

DEF CON 32 - Inside the FBI’s Secret Encrypted Phone Company ‘Anom’ - Joseph Cox

Source: YouTube · DEFCONConference · published Oct 16, 2024 · 39:20

Cybersecurity
No ratings yet Log in to rate
Transcript Available
Description

The FBI secretly created and ran Anom, an encrypted phone company designed to monitor criminal organizations worldwide 0:20-0:35. Drug traffickers like Dominico gatan seratti used these phones believing they were secure, not realizing the FBI was reading every message 2:51.

Key Takeaways:
• Anom devices contained a hidden backdoor that carbon copied all messages to FBI agents 11:12-11:24
• The FBI used Lithuania as a third country to legally collect messages worldwide, circumventing US restrictions 12:00
• Anom's security features were mostly "security theater" but criminals paid $1,000-$2,000 per device for the perception of safety 16:41
• The operation followed a pyramid scheme structure with distributors selling devices while the FBI secretly controlled everything 23:02
• The FBI has indicated they plan to conduct similar operations in the future, raising questions about encryption and surveillance 34:45

The case demonstrates the complex tension between law enforcement surveillance capabilities and encryption technologies 38:05.

Sources:

  • 0:20-0:35 Introduction to Anom and drug trafficker case
  • 2:51 FBI monitoring of Anom messages
  • 11:12-11:24 Technical details of the Anom backdoor
  • 12:00 FBI's use of Lithuania for legal circumvention
  • 16:41 Anom's security featu

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 0.5 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

good afternoon everybody uh our next speaker is Joseph Cox and it's inside the FBI's secret encryption phone company Anam give him a nice warm Devcon welcome a good thank you so much all right uh I'll speed up the first little bit because of the slight delay I'll start with a story this guy Dominico gatan seratti he's from South Australia he's a drug trafficker started with methamphetamine before moving into lots and lots of cocaine he also sold specialized encrypted phones from a company called Phantom secure these were ordinary Blackberry devices they had the microphone removed the camera the GPS taken out and then they added pgp Email encryption to those phones which I'm sure you all familiar with and this allowed him and other criminals to talk um outside of the eyes of law enforcement…