Despite claims by Trezor today that none of its devices have been compromised — unlike the devices of its competitor, Ledger — hardware hacker Joe Grand…
Category: Zero Day
Who Is Planting Backdoors in Ledger Crypto Wallets?
The theft last week of an estimated $100 million in crypto using a hardware backdoor planted in Ledger wallets points to a sophisticated and systematic…
Trezor Wallets Also Compromised with Implants
Despite claims by Trezor today that none of its devices have been compromised — unlike the devices of its competitor, Ledger — hardware hacker Joe Grand…
Who Is Planting Backdoors in Ledger Crypto Wallets?
The theft last week of an estimated $100 million in crypto using a hardware backdoor planted in Ledger wallets points to a sophisticated and systematic…
Company Behind Graphite Spyware Speaks for First Time about Italy Abuse and Accountability
[The following is an excerpt from a piece I recently published at Wired. See link below to read the full story.] Spyware maker Paragon Solutions has long…
Company Behind Graphite Spyware Speaks for First Time about Italy Abuse and Accountability
[The following is an excerpt from a piece I recently published at Wired. See link below to read the full story.] Spyware maker Paragon Solutions has long…
US-Based Digital Forensics Firm Hid its Russian Ownership from U.S. Government Customers
The U.S. Department of War, Secret Service and other federal departments and agencies unwittingly purchased digital forensics software from a…
Tracking Peter Stokes and The Com: Allison Nixon and Her Work Unmasking Cybercriminals
Any time a member of The Com gets arrested, there’s a good chance Allison Nixon played a role in it. Nixon is chief research officer at the cyber investigations firm Unit221B, named after the apartment number of famed literary detective…
Arrest of Iranian Hacker Spotlights Iran’s Movement into Economic Espionage and IP Theft
A lot has been written in the last decade about China’s economic espionage through its theft of intellectual property. Former FBI Director Christopher Wray once referred to these thefts as “one of the largest transfers of wealth in human history."…
Timeline of Iran’s Nuclear Program and the Stuxnet and Fast16 Attacks
This timeline is intended to serve as a sidebar to the in-depth story I published today about how the Fast16 malware subverted nuclear weapons tests. As noted in the story, which you can read here, all things point to Iran…
Experts Confirm the Fast16 Malware Was Sabotaging Nuclear Weapons Tests, Likely in Iran
Fast16 didn’t predate Stuxnet but was contemporaneous with it. It also wasn’t aimed at altering nuclear weapons but was simply feeding false data to engineers about the nuclear detonation tests they were conducting, in order to trick them into believing…
Trenchant Exec Who Sold Zero Days to Russian Buyer Ordered to Pay $10 Million in Restitution to Former Employers
Peter Joseph Williams, the former L3 Trenchant executive recently convicted of stealing zero-day exploits from his employer and selling them to a Russian broker, has been ordered to pay $10 million to his former employer and its parent company, according…
Mystery Around Venezuelan Cyberattack Deepens, with New Discovery of “Highly Destructive” Wiper
The mystery around a cyberattack that struck Venezuela's state-owned oil company in December is growing, following an announcement by researchers this week that they had discovered a "highly destructive" wiper program that appears to have been designed to target the…
The Sad Decline of Trenchant Exec Who Had Everything, Before Deciding to Steal and Sell Zero Days to Russian Buyer
Peter Joseph Williams, a former L3 Trenchant executive recently convicted of secretly selling zero-day exploits to a Russian broker, says he was suffering anxiety, burnout, years of depression, and financial difficulties when he decided to steal exploits from his US…
Trenchant Exec Says He Had Depression, Money Troubles When He Decided to Sell Zero Days to Russian Buyer; Also, New Info Reveals Nature of His Work for Australian Intelligence Agency
Peter Joseph Williams, a former L3 Trenchant executive recently convicted of secretly selling zero-day exploits to a Russian broker, says he was suffering anxiety, burnout, years of depression, and financial difficulties when he decided to steal exploits from his US…
Iranian Hacktivists Strike Medical Device Maker Stryker in “Severe” Attack that Wiped Systems
Stryker, a leading maker of medical devices, was hit early this morning with a cyberattack that has reportedly caused the company's systems to shut down globally. The company has acknowledged the attack and called it "severe" in communication with employees.…
Trenchant Exec Who Sold His Employer’s Zero-Day Exploits to Russian Buyer Sentenced to 7 Years in Prison
A former Trenchant executive who pleaded guilty last year to selling his company's software hacking tools to a zero-day broker in Russia was sentenced today to seven years and three months in federal prison. The US Treasury Department simultaneously announced…
Polish Grid Systems Targeted in Cyberattack Had Little Security, Per New Report
The hackers behind a cyberattack that targeted Poland's grid infrastructure met little resistance when they hit systems at a heat-and-power plant and wind and solar farms last month. The intruders were able to easily access numerous systems at the affected…
Attack Against Poland’s Grid Disrupted Communication Devices at About 30 Sites
The hackers behind a cyberattack that targeted Poland's grid infrastructure in December disabled communication devices for at least 30 sites across a number of energy facilities in different parts of the country. The hackers succeeded in disabling the communication systems,…
Booz Allen Tech Contractor Took IRS Job Specifically to Leak Trump’s Tax Records
The US Treasury Department announced yesterday that it was canceling all contracts it holds with consulting firm Booz Allen Hamilton because the company failed to prevent one of its contractors from stealing and leaking tax records years ago when he…