3 ms·
The opsec of the people who eventually get indicted is always terrible. If you wanted to exfiltrate source code or docs, why the heck would you use the victim's
by jeffbee 3y ago
The opsec of the people who eventually get indicted is always terrible. If you wanted to exfiltrate source code or docs, why the heck would you use the victim's own cloud storage product? You would just point a camera at your display and scroll through the desired materials, or use HDMI capture, or something along those lines.
- deleted 3y ago[deleted]
- diggan 3y agoSurvivorship bias in action? The only ones we hear about are the ones who are sloppy enough to get caught. The people who know how to not get caught, doesn't get caught so we never hear about them.
- flextheruler 3y agoDefinitely. We’re certainly not living in a world where we catch more of these people than we don’t.
- trollerator23 3y agoExactly. We only know about the terrible ones.
- ecoquant 3y agoIt also reminds me of stories I have read of drug mules that it makes no sense how they think they wouldn't be caught using the methods they were using. The twist of the story though is they were duped themselves. They were setup to get caught as a decoy while the real crime took place.
- trollerator23 3y agoThat sounds interesting. Where?
- everfrustrated 3y agoPossibly they thought it would appear as their business-as-usual Google related traffic flows. Rather than say, some tor IP address which would stick out.
- mr_toad 3y agoPen and paper can work too.
- paulddraper 3y ago> The opsec of the people who eventually get indicted is always terrible By definition.... Yes