6 ms·
Sequoia Capital says it was hacked
- 0xy 6y agoI have knowledge of some pretty sophisticated phishing tests run at a large organization. The click rate for links in those emails is shockingly high. If you have a sophisticated attacker using spear fishing using company information then it's even more effective. "Hey, [coworker X] told me I should send you our latest policy document for [project Y], here's the link"
- double0jimb0 6y agoA tactic made possible in other worlds, Powered by Facebook (tm)
- ayelmao303 6y agoThis doesn't make sense.
- tekdude 6y agoAt my last position, everyone got an email in mid-December saying that the company would be giving each employee a holiday gift... just click the link to select one from the options. It seemed very out of character for the company, so I ignored it. Many people were upset to find out that the free gift was, surprise, extra security refresher training.
- bawolff 6y agoHow to make your employees hate your security team and undermine all their efforts out of spite: 101...
- lotsofpulp 6y agoSeems like the employees are undermining all of the security team’s efforts by suppressing critical thinking at the prospects of getting a trinket.
- Craighead 6y agooh, Godaddy?
- toomanybeersies 6y ago> If you have a sophisticated attacker using spear fishing using company information then it's even more effective. I work for a large company with a common email address format, and I'm constantly getting personalised emails, complete with my name and vaguely related to my work, advertising training and seminars (although I'm yet to be targeted by a spear phishing attack). I assume they just trawled LinkedIn to find people working at the company and their role. Our email addresses follow a standard format, so it's trivial to guess what my email address is. We also get monthly simulated phishing emails from our security team. I've just gotten into the habit of not reading emails. Everything important comes through Slack, my email inbox is mostly automated emails from a dozen different services and company announcements that I don't bother reading.
- ublaze 6y agoNot to throw shade on Sequoia, but the statement "We recently experienced a cybersecurity incident" reminds me of Euphemisms by George Carlin (https://youtu.be/vuEQixrBKCc https://youtu.be/vuEQixrBKCc)
- koolba 6y agoThat routine is gold on so many levels.
- walrus01 6y agoit's not a data breach, it's a free surprise off-site backup service.
- throwawayboise 6y agoAnd encrypted!
- walrus01 6y agoUsing the latest industry standard cipher suites, and large key sizes!
- anonAndOn 6y agoWell done! SOBS is a surprisingly apt acronym.
- ratsmack 6y agoI just watched the whole thing again... it was a refresher course at Carlin University.
- airhead969 6y agoProphet GC. I remember watching him live on my grandparent's pirated HBO box. Yeap. Sanitize, soften, and obscure language until people stop paying attention: whether it's war veterans or MIC appropriation bills. His most important lesson was: don't vote or you enable the fraud and corruption pretending to give you a choice.
- themark 6y agoWhat does ‘monitoring the dark web’ mean?
- Waterluvian 6y agoKeyword search on 4chan.
- pantelisk 6y agobeyond the third page of google results
- JohnJamesRambo 6y agoGood Lord who would do that?
- edoceo 6y agoOnly the dirty and desperate prolitariat.
- airhead969 6y agoThe proletariat are literate?
- thrwaway2day 6y agoask your sons friend who is always screwing around with the computers
- tenderfault 6y agoI believe even dark web monitoring software don't look in there
- ratsmack 6y agoProbably just a quick look at The Pirate Bay.
- rdxm 6y agofiled under "no shit".
- victor9000 6y agoDoes anyone know a good source of educational material on this topic that I can pass around to non-technical coworkers?
- mandeepj 6y agoNot hard to design your own. 1. Educate them not to open links until they are sure - in emails originated from outside or obscure looking domains 2. Spot for spelling mistakes to find out if it’s a phishing email
- deleted 6y ago[deleted]
- advocatemk 6y agoThere has been another hacking event targetting sequoia which has been deliberately kept secret. This data breach happened at a leading Indian law firm which is ironically abbreviated NDA (Nishith Desai Associates) and which Sequoia has used for structuring its funds, esp the Indian ones. This data breach was facilated by disgruntled employees of NDA and the leaked data has also made it to the law enforcement agencies. The leaked documents contain information about the super secret shell entities of Sequoia and other VC funds in tax haven jurisdictions such as Cayman Islands and Mauritius.