The Cowra guy’s ego got him in trouble. What of all the crims and state sponsored guys who quietly remain?
If you suddenly open a drawer in your kitchen at night, and see and kill a small cockroach, you would never go back to bed and sleep easy. You would now know you have a major problem.
That little guy was simply not as agile and stealthy as the other thousand that were hiding under the cutlery tray, and on the underside of the cabinet.
So David Cecil the ‘self-taught’ ‘ego driven’ hacker from Cowra was not agile and certainly not stealthy, his internet bragging got him caught.
State sponsored actors and those driven by money are highly skilled and don’t brag online. They do their work quietly and undetected. This notoriety thing is passé and over-rated.
The excitement of this arrest is misplaced, it should simply serve to alert Platform Networks, and any other potential targets that they have a major problem.
It is easy to get in and hard to be found.
If we had the ability to simply look under the tray and underside of the cabinet how many stealthier, more focused roaches would we find in our systems?
Perhaps we know the real truth and simply want to go back to bed and not confront it.
Protection with detection and response will help.
Get exclusive access to CSO, invitation only events, reports & analysis. - 1
Bank trojan targets users of Bitcoin exchange Mt Gox
- 2
Australian Information Security Association issues blunt warning as National Cyber Security Awareness Week begins
- 3
Review: Mobile Device Management
- 4
ACMA database keeps finger on Australia’s malware pulse
- 5
The week in security: Aussie banks targeted as mobiles drive privacy fears
- FTJob Title: Mac Systems/ Enterprise Systems EngineerNZ
- FTSenior Python DeveloperNSW
- FTLead Software EngineerSA
- FT.NET - Sitecore Developer - Melbourne - PermNSW
- FTR&D EngineerSA
- FTFlash / ActionScript Developer - ContractNSW
- FTTest EngineerVIC
- FTQuality ManagerSA
- FTOS Web Applications DeveloperNSW
- FTTest Analyst (MS Environment) .netNSW
- FTTest Analyst (MS Environment) .netNSW
Incident handling is a vast topic, but here are a few tips for you to consider in your incident response. I hope you never have to use them, but the odds are at some point you will and I hope being ready saves you pain (or your job!).
- Have an incident response plan.
- Pre-define your incident response team
- Define your approach: watch and learn or contain and recover.
- Pre-distribute call cards.
- Forensic and incident response data capture.
- Get your users on-side.
- Know how to report crimes and engage law enforcement.
- Practice makes perfect.
Warning: Tips for secure mobile holiday shopping
I’m dating myself, but I remember when holiday shopping involved pouring through ads in the Sunday paper, placing actual phone calls from tethered land lines to research product stock and availability, and actually driving places to pick things up. Now, holiday shoppers can do all of that from a smartphone or tablet in a few seconds, but there are some security pitfalls to be aware of.
