Recorded Future’s Insikt Group recently published a research report titled, The Business of Fraud: An Overview of How Cybercrime Gets Monetized. The report describes the types of fraud methods and services currently used by threat actors to facilitate their campaigns. It provides an overview of some notable recent developments, lists some of the top vendors of these services on the criminal underground, and provides suggested mitigations for defenders to implement.  Joining us this week to discuss their findings are Recorded Future’s Kirill Boychenko and Roman Sannikov both members of the Insikt Group’s team cybercrime and underground. 

Recorded Future - Inside Threat Intelligence for Cyber Security

204 The Inner Workings of Financially Motivated Cybercrime

Joining us this week is Madiha Fatima, a director and head of third-party risk management at Angelo Gordon.  Our conversation centers on creating and maintaining an effective third-party risk management program. We discuss creating an effective due diligence process, integrating automation and process efficiencies, as well as some of the emerging risks she and her team are tracking. We address the human side of risk management, and Madiha shares her advice for keeping your risk management program thorough, while not finding yourself overwhelmed.

203 Streamlining Third Party Risk Management

For this week’s show we welcome back Allan Liska, a member of Recorded Future’s CSIRT security team. Allan updates us on the latest trends he and his colleagues are tracking on the ransomware and online extortion fronts. We discuss the growing sophistication of the tools and tactics attackers are using, and the remarkable brazenness with which they do their business.

202 Ransomware and Extortion Evolve More Brazen Tactics

We're sharing a special bonus episode in your feed this week, from the CyberWire's CSO Perspectives podcast hosted by Rick Howard.  This episode, Cybersecurity First Principles: Intrusion Kill Chains, Rick talks about why intrusion kill chains are the perfect companion strategy to the passive zero trust strategy he talked about last week. The key takeaway here is that we should be trying to defeat the humans behind the campaigns collectively, not simply the tools they use independently with no context about what they are trying to accomplish.

Bonus — CyberWire CSO Perspectives with Rick Howard

Our guest this week is a true internet pioneer. Paul Vixie describes himself as a “long time defender of the internet.” He’s  an author or co-author of several RFC documents and open source software systems including BIND and Cron, a serial entrepreneur now CEO and co-founder of his fifth startup company, Farsight Security, and an inductee into the Internet Hall of Fame.  He joins us with insights on how we are suffering the ramifications of early internet design choices, what that means for global networking going forward, and, specifically, why he believes it’s best not to rely on outsourcing your DNS.

201 An Internet Born In a Threat-Free Environment

On the occasion of this, our 200th episode of the Recorded Future podcast, we welcome back our very first guest, Robert M. Lee, CEO of industrial control systems security company Dragos. They recently published their 2020 ICS security year in review report, and Rob joins us to share some of the insights he and his team have gained over the past year, as well as the long term security trends they’re tracking.

200 The Journey Ahead is the Challenge in ICS

Our guest this week is Sir David Omand. He is former director of GCHQ, one of the UK’s primary intelligence agencies, and  is currently Visiting Professor in War Studies, King’s College London.  We’ll be discussing his career in intelligence and public service, the changes he’s seen along the way, and we’ll discuss his most recent book How Spies Think: 10 Lessons from Intelligence.

199 A Call to Arms In Favor of Rationality

On today’s program, a conversation with a pair of CEOs from leading companies in the cyber security industry. Joining us are Marten Mickos, CEO of bug bounty platform provider HackerOne, and Christopher Ahlberg, CEO at Recorded Future.  They share their insights on what it takes to be a successful CEO in a rapidly changing cybersecurity field, the importance (or not) of having deep technical skills, differentiating yourself in a crowded marketplace, and the ongoing challenges of the unknown unknowns.

198 Leaders Make Good News Out of Bad

Deepfakes continue to be a growing security concern. As the technology to alter video footage and replace one person's face with another’s has advanced in ease, sophistication and availability, the use of deepfakes has become more broadly prevalent, extending beyond novelty use to become another tool in the adversary’s playbook.  Our guest today is Andrei Barysevich, cofounder and CEO of fraud intelligence firm Gemini Advisory. He shares his insights on the growing criminal market for deepfakes, and how organizations can best prepare themselves to defend against them.

197 Deepfakes as a Service

Our guest this week is Simon Hodgkinson. He’s a security professional with over 35 years of experience in the space, most recently as CISO for BP. In our conversation, Simon shares his thoughts on the evolution of the cyber security space that he’s witnessed over the course of his career, and how we might address the industry skills gap that’s leaving millions of jobs unfilled. We’ll get his take on threat intelligence, as well as his advice for folks who are looking to pursue a career in cyber security.

196 A Secure Environment Where People Can Be Their Whole Selves

The last few years, and the most recent election cycle in particular, have brought unprecedented levels of misinformation and disinformation to the fore. This era of online disinformation bots, fake news, and  interference from foreign adversaries has sown the seeds of division in our culture, much of it distributed and amplified on social media platforms.  Jane Lytvynenko is a senior reporter at Buzzfeed News, and the past several years she’s been focused on disinformation — where it comes from, who’s seeing it, how it works, and what might be done to defend against it. She joins us to share her insights.

Unraveling Disinformation in Social Media

Our guest is Nick Sinai, Senior Advisor at Insight Partners, a global venture capital and private equity firm investing in high-growth software companies. Before joining Insight in 2014, Nick served in the White House, where he was U.S. Deputy Chief Technology Officer. At the White House, Nick led President Obama’s Open Data Initiatives and helped start and grow the Presidential Innovation Fellows program, which brings entrepreneurs, innovators, and technologists into government.  Nick is a senior fellow and former adjunct faculty at the Harvard Kennedy School, where he taught a technology and innovation in government field class. Nick is also an advisor to Coding It Forward, a nonprofit that places computer science, data science, and design students in federal agencies.

194 White House Experience Informs Venture Capital

The COVID-19 global pandemic has, predictably, attracted bad actors intent on using fear and uncertainty as a framework for a variety of actions, from run of the mill money scams to targeting phishing, business email compromise and even espionage.  Recorded Future’s INSIKT research group has been following these money trails and correlating them with a spectrum of bad actors around the globe. They recently published their findings in a blog post titled, “Follow the Money: Qualifying Opportunism Behind Cyberattacks During the COVID-19 Pandemic”. On today’s episode we’ve got a pair of INSIKT group researchers joining us to share their expertise. Lindsay Kaye is Director of Operational Outcomes for the Insikt Group at Recorded Future, and Charity Wright is a Cyber Threat Intelligence Analyst.

193 Correlating the COVID-19 Opportunist Money Trail

  The ​International Spy Museum​ in Washington, D.C. is a private non-profit museum dedicated to the tradecraft, history, and contemporary role of espionage. It boasts the largest collection of international espionage artifacts currently on public display, and says “The Museum's mission is to educate the public about espionage and ​intelligence​ in an engaging way. It provides a context for understanding the important role intelligence has played in history and continues to play today.” Our guest today is Andrew Hammond, Historian and Curator of the International Spy Museum. He shares his perspective on the importance of physical artifacts, and how presenting them to the public with meaningful context can help us understand our history and give us insights on how the past may inform our future.

192 Technology and Human Stories Intersect at the International Spy Museum

Stories about the recently uncovered breach of the SolarWinds Orion software have been dominating the news lately, and the situation is still continuing to evolve. In this episode, we speak with Jonathan Condra, senior manager for strategic and persistent threats with Recorded Future’s Insikt Group, to get his perspective of what this breach is all about, where we stand in terms of attribution, what it means for the security community writ large, and whether or not a breach like this rises to the level of a “Cyber Pearl Harbor” or “Cyber 9/11.”

191 Solarwinds Orion Breach Investigations Continue

Recorded Future takes you inside the world of cyber threat intelligence. We’re sharing stories from the trenches and the operations floor as well as giving you the skinny on established and emerging adversaries. We also talk current events, technical tradecraft, and offer up insights on the big picture issues in our industry. Join the Recorded Future team, special guests, and our partners from the CyberWire to learn everything you want to know (and maybe some things you’d rather not know) about the world of cyber threat intelligence.

hubhopper

Recorded Future - Inside Threat Intelligence for Cyber Secur...

hubhopper