3 ms·

I wonder whether by compromised you mean: 1. compromised in the spy movie sense of them voluntarily passing information to the scammers (potentially for money)

by jupp0r 4y ago

I wonder whether by compromised you mean: 1. compromised in the spy movie sense of them voluntarily passing information to the scammers (potentially for money) 2. compromised in the IT security sense of their accounts or computers having been hacked 3. some superset of 1. and 2.

aspectmin 4y ago
Probably simpler than both of those, more as in - there are allegations/comments suggesting that there may be individuals holding trusted positions who may not be as trustworthy as one would hope (based on the potential pathways by which malicious parties may have identified the OP). Insider threat is still a significant concern to companies, and were one representing Microsoft one might want to at least take a peek at what happened and make sure nothing untoward is occurring. Standard Disclaimers apply. I am not a Microsofty, nor do I play one on TV. Objects in the mirror may be closer than they appear.
- FunnyBadger 4y ago
  My primary take-home from having DOD/DOE security clearances, and having to sit through historical case studies every 3 months about security breaches, is that every DOD/DOE security lapses and espionage event in history were "trusted insiders" doing the deed. Physical security was long ago solved by pre-20th century tech like locks and security guards. No, it was always a trusted insider. There's no reason to assume that is any different with social media companies.
codetrotter 4y ago
> in the spy movie sense It’s not just in the movies. https://krebsonsecurity.com/2022/03/a-closer-look-at-the-lapsus-data-extortion-group/ https://krebsonsecurity.com/2022/03/a-closer-look-at-the-lap... > Microsoft says LAPSUS$ — which it boringly calls “DEV-0537” — mostly gains illicit access to targets via “social engineering.” This involves bribing or tricking employees at the target organization or at its myriad partners, such as customer support call centers and help desks. > “Microsoft found instances where the group successfully gained access to target organizations through recruited employees (or employees of their suppliers or business partners),” Microsoft wrote.
- aaaaaaaaata 4y ago
  Recruited employees? Or people they unknowingly hired? Small distinction?
  - vageli 4y ago
    Recruited to join in the scheme against their employer.
  - namelessoracle 4y ago
    It's not a small distinction. An organization deliberately trying to inject an asset into your company to do X or Y is a different problem to solve than an existing employee who was coopted. And the co opted case has a different problem in one motivated by gain vs one motivated by threats agains them.

by jupp0r 4y ago

aspectmin 4y ago

Probably simpler than both of those, more as in - there are allegations/comments suggesting that there may be individuals holding trusted positions who may not be as trustworthy as one would hope (based on the potential pathways by which malicious parties may have identified the OP). Insider threat is still a significant concern to companies, and were one representing Microsoft one might want to at least take a peek at what happened and make sure nothing untoward is occurring. Standard Disclaimers apply. I am not a Microsofty, nor do I play one on TV. Objects in the mirror may be closer than they appear.

FunnyBadger 4y ago
My primary take-home from having DOD/DOE security clearances, and having to sit through historical case studies every 3 months about security breaches, is that every DOD/DOE security lapses and espionage event in history were "trusted insiders" doing the deed. Physical security was long ago solved by pre-20th century tech like locks and security guards. No, it was always a trusted insider. There's no reason to assume that is any different with social media companies.

codetrotter 4y ago

> in the spy movie sense It’s not just in the movies. https://krebsonsecurity.com/2022/03/a-closer-look-at-the-lapsus-data-extortion-group/ https://krebsonsecurity.com/2022/03/a-closer-look-at-the-lap... > Microsoft says LAPSUS$ — which it boringly calls “DEV-0537” — mostly gains illicit access to targets via “social engineering.” This involves bribing or tricking employees at the target organization or at its myriad partners, such as customer support call centers and help desks. > “Microsoft found instances where the group successfully gained access to target organizations through recruited employees (or employees of their suppliers or business partners),” Microsoft wrote.

aaaaaaaaata 4y ago
Recruited employees? Or people they unknowingly hired? Small distinction?
- vageli 4y ago
  Recruited to join in the scheme against their employer.
- namelessoracle 4y ago
  It's not a small distinction. An organization deliberately trying to inject an asset into your company to do X or Y is a different problem to solve than an existing employee who was coopted. And the co opted case has a different problem in one motivated by gain vs one motivated by threats agains them.