270: Bearded Barbie, EDR scams, and hobbyist crime detectives

Pulchritudinous women with glossy long hair are targeting Israeli officials via Facebook - but why? Scammers have found a new way to gain access to your most sensitive information - but how? And armchair detectives are helping investigating cold cases involving DNA - but should they?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans https://www.smashingsecurity.com/hosts/graham-cluley (Graham Cluley) and Carole Theriault, joined this week by Maria Varmazis.

Visit https://www.smashingsecurity.com/270 (https://www.smashingsecurity.com/270) to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the https://www.reddit.com/r/smashingsecurity (Smashing Security subreddit), or https://www.smashingsecurity.com/ (visit our website) for more episodes.

Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.
Special Guest: Maria Varmazis.
Sponsored By:
https://l.kolide.co/3uSdmVj (Kolide): Kolide is a SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.

Kolide is perfect for organizations that want to move beyond a traditional lock-down model and move to one where employees are educated about security and device management while fixing nuanced problems. We call this approach Honest Security.

You can try Kolide on an unlimited number of devices with all its features for free and without a credit card for 14 days.

https://www.keepersecurity.com/smashing (Keeper Security): Keeper Security’s enterprise password management platform locks down logins, payment cards, confidential documents, API keys, and database passwords in a patented Zero-Knowledge encrypted vault. And, it takes less than an hour to deploy across your organization.

Sign up for a Keeper free trial for your organization today, and get a free 3-year personal plan, at keepersecurity.com/smashing

https://www.patreon.com/smashingsecurity (Support Smashing Security)
Links:
https://www.dailymail.co.uk/news/article-2308658/How-Barbies-body-size-look-real-life-Walking-fours-missing-half-liver-inches-intestine.html (How Barbie's body size would look in real life) — Daily Mail.
https://www.cybereason.com/blog/operation-bearded-barbie-apt-c-23-campaign-targeting-israeli-officials (Operation Bearded Barbie: APT-C-23 Campaign Targeting Israeli Officials) — Cybereason.
https://krebsonsecurity.com/2022/03/hackers-gaining-power-of-subpoena-via-fake-emergency-data-requests/ (Hackers Gaining Power of Subpoena Via Fake “Emergency Data Requests”) — Brian Krebs.
https://www.pewresearch.org/fact-tank/2021/10/27/what-we-know-about-the-increase-in-u-s-murders-in-2020/ (What we know about the increase in U.S. murders in 2020 ) — Pew Research Center.
https://onlinedegrees.uwf.edu/articles/the-history-of-dna/ (The History of DNA: From Crime Scenes to Consumer Goods) — University of West Florida.
https://www.nytimes.com/2018/10/15/science/gedmatch-genealogy-cold-cases.html (How an Unlikely Family History Website Transformed Cold Case Investigations ) — The New York Times.
https://www.pewtrusts.org/en/research-and-analysis/blogs/stateline/2020/02/20/dna-databases-are-boon-to-police-but-menace-to-privacy-critics-say (DNA Databases Are Boon to Police But Menace to Privacy, Critics Say) — PEW.
https://www.nytimes.com/2022/03/27/technology/dna-tests-crime-solving.html (Philanthropists Push Police Searches of DNA Databases) — The New York Times.
https://dnasolves.com/ (Help solve crimes with your DNA) —...

Pulchritudinous women with glossy long hair are targeting Israeli officials via Facebook - but why? Scammers have found a new way to gain access to your most sensitive information - but how? And armchair detectives are helping investigating cold cases involving DNA - but should they?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.

Visit https://www.smashingsecurity.com/270 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Maria Varmazis.

Sponsored By:

Kolide: Kolide is a SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.

Kolide is perfect for organizations that want to move beyond a traditional lock-down model and move to one where employees are educated about security and device management while fixing nuanced problems. We call this approach Honest Security.

You can try Kolide on an unlimited number of devices with all its features for free and without a credit card for 14 days.
Keeper Security: Keeper Security’s enterprise password management platform locks down logins, payment cards, confidential documents, API keys, and database passwords in a patented Zero-Knowledge encrypted vault. And, it takes less than an hour to deploy across your organization.

Sign up for a Keeper free trial for your organization today, and get a free 3-year personal plan, at keepersecurity.com/smashing

Support Smashing Security

Links:

How Barbie's body size would look in real life — Daily Mail.Operation Bearded Barbie: APT-C-23 Campaign Targeting Israeli Officials — Cybereason.Hackers Gaining Power of Subpoena Via Fake “Emergency Data Requests” — Brian Krebs.What we know about the increase in U.S. murders in 2020 — Pew Research Center.The History of DNA: From Crime Scenes to Consumer Goods — University of West Florida.How an Unlikely Family History Website Transformed Cold Case Investigations — The New York Times.DNA Databases Are Boon to Police But Menace to Privacy, Critics Say — PEW.Philanthropists Push Police Searches of DNA Databases — The New York Times.Help solve crimes with your DNA — DNASolves.Hackers Attacked Two Leading Genetic Genealogy Websites — BuzzFeed.How to Pronounce Moët & Chandon? And WHY?! — YouTube.How to Pronounce Wednesday? (CORRECTLY) — YouTube.Julien Miquel on YouTube.Support Maria Varmazis as she raises money for Cancer Research — Pan-Mass Challenge.The House (2022 film) — Wikipedia.The House — Netflix.Smashing Security merchandise (t-shirts, mugs, stickers and stuff)