Clip
Investigating a Police Department Ransomware Attack
36:01 - 37:47 (01:46)
A detective investigates a police department ransomware attack that caused 10 months of lost work and searches for the hacker's IP address for clues on their identity and motive.
Similar Clips
The speaker is contemplating whether to leave a hacker logged into a system to avoid missing out on information they need to catch the hacker, or to revoke their access immediately and eliminate the risk of further harm.
27:23 - 29:26 (02:03)
Summary
The speaker is contemplating whether to leave a hacker logged into a system to avoid missing out on information they need to catch the hacker, or to revoke their access immediately and eliminate the risk of further harm.
ChapterResponding to a Cyber Attack on a Municipal Office
Episode96: The Police Station Incident
PodcastDarknet Diaries
The domain controller of a bank was found sending data to China, which meant hackers had gained access.
21:43 - 23:06 (01:22)
Summary
The domain controller of a bank was found sending data to China, which meant hackers had gained access. The domain controller handles all authentication and connectivity between Windows computers, giving them admin access to pretty much any other system on the network.
ChapterStopping a Hacker Attack on a Dutch Bank
EpisodeEp 35: Carbanak
PodcastDarknet Diaries
Adam, a former IT employee, destroys an entire company's data infrastructure after being fired and takes revenge against his former employer.
35:26 - 36:42 (01:15)
Summary
Adam, a former IT employee, destroys an entire company's data infrastructure after being fired and takes revenge against his former employer.
ChapterHacking Techniques: Remote Desktop Protocol Hacks and Phone Wipes
Episode113: Adam
PodcastDarknet Diaries
The process of pushing program and logic files to the safety controller, and comparing them with what is running on the system to ensure reliability and security, is explained by a guest on the podcast.
14:13 - 17:32 (03:19)
Summary
The process of pushing program and logic files to the safety controller, and comparing them with what is running on the system to ensure reliability and security, is explained by a guest on the podcast. The importance of pulling logs and artifacts from devices amidst potential threats from untrusted parties is emphasized.
ChapterPlant Cybersecurity and Incident Response
Episode68: Triton
PodcastDarknet Diaries
A cyber attacker was able to gain access to a city's server through the mayor's home computer, which had been compromised through a phishing email scam.
47:40 - 51:35 (03:55)
Summary
A cyber attacker was able to gain access to a city's server through the mayor's home computer, which had been compromised through a phishing email scam. The attacker then logged into the police department's computer to obtain further information.