12 ms·
LockBit claims to exfiltrate 33TB of data from US Federal Reserve
- turdistheword 2y agoWould this be maybe their biggest target so far? If so, the $50,000 which has been offered seems a tad dreamy.
- jszymborski 2y ago> Many experts are skeptical about the criminal group’s announcement. The Federal Reserve is a high-profile target, and a data breach could have serious repercussions. Many believe that the group’s announcement is just for attention.
- nathanaldensr 2y ago"Many." Sounds like potential propaganda to me. Who are these "many?"
- gwerbret 2y agoThe use of "many" in such contexts by journalists (and human/AI entities who choose to write like journalists, as in this case) is a shim used to make personal opinion seem more objective.
- SV_BubbleTime 2y agoAnd we can definitely rely on plurality of professionals. There were many (almost all) journalists and intelligence professionals that claimed the Hunter Laptop was not real… except of course it was and entered into evidence in his gun trail and conviction recently.
- mschuster91 2y agoThe "story" was that Joe Biden had pushed Ukraine to protect Hunter Biden [1], and there was no evidence found to support that claim at all, despite multiple investigations from the FBI as well as both chambers of Congress [2]. The only thing that turned out to be true and actually criminal was that Hunter Biden acquired a gun while forbidden from doing so, for which he was recently convicted. [1] https://en.wikipedia.org/wiki/Hunter_Biden_laptop_controversy#Ukraine_material https://en.wikipedia.org/wiki/Hunter_Biden_laptop_controvers... [2] https://en.wikipedia.org/wiki/Biden%E2%80%93Ukraine_conspiracy_theory https://en.wikipedia.org/wiki/Biden%E2%80%93Ukraine_conspira...
- SV_BubbleTime 2y ago[flagged]
- mschuster91 2y ago> There was all the crack anfter Joe spent decades enforcing laws to disproportionately punish users of that drug. Many people, on all sides of the political aisles as well as the population, supported the "war on drugs". It's not really fair to single out Joe Biden for a policy that was unquestionably popular during the time. > And the more actionable complaints that he was selling influence to Joe while complaining about his cut. And yet, not enough to be worthy of judgement by Republican-led committees. Of course, the question remains if the committees didn't see an issue because if they'd have held the Bidens to that standard, they'd have to resign en masse as well. > That Joe was involved in the businesses that Hunter had zero qualifications for. People leading businesses without being (formally) qualified to do so? If there is one thing that's a defining feature of modern capitalism, then this. > But yea, it’s OK you aren’t aware of those things. You were by design protected from those nasty truths by “the many”. And even now, if it doesn’t say it on Wikipedia, it must not be true! My POV is that when even a bunch of Republicans can't find more actionable (!) evidence of wrongdoing than illegally acquiring a gun and questionable policy decisions decades ago, the entire matter was blown up to a size it should never even have got to.
- 2y ago
- oopsallmagic 2y ago[dead]
- colingoodman 2y agoCould you link something showing that "almost all" journalists claimed the laptop wasn't real? Some articles from notable publications making such claims, etc.
- narrator 2y ago[flagged]
- hiddencost 2y agoThey're one of the most powerful, and one of the most scrutinized. Keeping them insulated from political pressure is incredibly important. Otherwise you end up with a monetary policy of "drastically cut rates right before the election to protect the incumbent".
- 1oooqooq 2y agomost scrutinized and insulated are diametrically opposed concepts.
- AnimalMuppet 2y ago"Insulated from political pressure" is not diametrically opposed to "scrutinized".
- 1oooqooq 2y agoexcept politic pressure, for better or worse, is the only way we have to scrutinize anything. otherwise you get a stalinist party. there's no in between. no matter how specialized or elitist and gate keeping your argument is.
- deleted 2y ago[deleted]
- deleted 2y ago[deleted]
- RicoElectrico 2y agoWhich is what this clown Glapiński did for PiS in Poland. And by clown I don't exaggerate. All his off-topic rambling and "bon mots" became a meme ("jak rośnie to spada, jak spada to rośnie", "nie ma co się kopać z koniem") This really shows how difficult it is to maintain quality of unelected officials who are supposed to be independent and can't even be dismissed.
- deleted 2y ago[deleted]
- kouunji 2y agoIf this is real, this is an incredible target to choose. I mean, you might not make it trial if they catch you, if you know what I mean. Makes me wonder what level of affiliation or perceived safety would make anyone this confident.
- empath75 2y agoI don't think the federal reserve has that many deep dark secrets. The main risk is going to be stuff like knowing that a bank is in trouble before it's public knowledge.
- rtkwe 2y agoThe Fed runs several payment systems so in theory all the transfers sent through there could be a part of this leak.
- empath75 2y agoI'd be _extremely_ surprised if they managed to pop the payment systems.
- throwup238 2y agoIf previous releases are anything to go by, it’ll be a bunch of backups and databases from enterprise HR and IT software that was running on poorly secured Windows servers, though I don’t know how it adds up to 33TB. Probably undeduplicated backup images or something. The dump from their Boeing hack was excruciatingly boring.
- urfunny 2y ago[dead]
- hahaitsfunny 2y ago[dead]
- ttyprintk 2y ago
- exabrial 2y agoPlacing a bet this was a Windows system, just as all of the other recent major "hacks" were.
- SV_BubbleTime 2y agoHeart bleed, Log4J, triangulation, spectre, rowhammer, almost every single website hack, every single social engineer attack, only by chance xz… Yea. Windows sucks, but that is often off topic.
- sva_ 2y agoI think most of the things you listed weren't really used in the wild, at least not at scale?
- SV_BubbleTime 2y agoI’m pretty sure every phishing attack almost ever was used in the wild and OS-agnostic. The rest of the list was off the top of my head. Other than WannaCry and Stux, how many large scale windows malwares can you name without looking them up?
- deleted 2y ago[deleted]
- sva_ 2y agoYeah that's the exception I had in mind. I guess you could call it social engineering, but it seems like the words Microsoft Outlook and Active Directory are way overrepresented in these attack vectors (hopefully not in this particular case.)
- NegativeK 2y agoI try my hardest to avoid Windows, but implying that Linux/etc are effectively immune to major hacks is absurd.
- abeppu 2y agoWhat data does the Fed actually deal with? The article mentions "Americans' banking secrets" as if the risk is to individuals but ... to oversee banks, does it need the particulars of individual account holders? Or is this information about banks and their overnight borrowing (i.e. should be "American banks' secrets")? Or is this like, pending drafts of various policy reports and granular data from which summaries would eventually be published?
- AnimalMuppet 2y agoTransactions above $10k get reported. Reported to who? Is it the Fed? If that data got stolen, that would be enormous. If it's technical analysis data ("In October 1957, Idaho produced X tons of potatoes..."), then it's less interesting.
- eesmith 2y agoFor what it's worth, Idaho produced 35,525,000 cwt (1,776,250 short tons) of potatoes in fall of 1957. https://archive.org/details/CAT10268574003/page/4/mode/2up?q=idaho+ https://archive.org/details/CAT10268574003/page/4/mode/2up?q... ;)
- abracadaniel 2y agoNow this is what I come to HN for. Did you go looking for this report, or did you already know these were uploaded to the internet archive?
- eesmith 2y agoLooked for it. "idaho potato production 1957" to see what the right search terms were by looking at some hits, then "idaho farm report 1957" until I found that table via in-book text search; both searches as " Search text contents ", limited to <1965.
- chuckadams 2y ago> Reported to who? Department of Homeland Security, I imagine. Probably the IRS too. Probably not the Fed, they can't really do anything with the data other than report it to someone else.
- deleted 2y ago[deleted]
- oldpersonintx 2y ago[dead]
- CaptainJustin 2y agoOne of the scary things about ransomware attacks is to think of the possibility of other actors having gotten in before and copied all the data. I can't imagine the security hole is always an unknown zero day.
- I_Am_Nous 2y agoSame group who claimed to have Fulton County, Georgia data, pushed back the pay deadlines, but never released anything after Fulton County didn't pay the ransom. I don't doubt they have actually hit targets but that seed of doubt is planted.
- 0cf8612b2e1e 2y agoIs that some calculus about risks? Ransoming data with a threat, might kind of make people shrug in the aftermath. Airing all of the dirty laundry might make authorities take a significantly harder look at you. Like those groups who apologize for hacking a hospital.
- tmaly 2y agoHow long would it have taken them to transfer 33TB and where would they store it?
- andai 2y agoHow would they leak it? Multi-part RAR on dozens of MicroSDs sent to journalists?
- NegativeK 2y agoOften it's via torrents. Or just data dumps on a web server. Why restrict the data to journalists when it causes much more harm to the breached org for other criminals to get the data?
- gotnohax 2y ago[flagged]
- creaghpatr 2y agoWhenever these groups tout volume of data it seems like a marketing move to compensate for lack of meaningful insights, compromising info, etc