This is the story about when Mohammed Aldoub, AKA Voulnet, (twitter.com/Voulnet) found a vulnerability on VirusTotal and Tweeted about it.
Sponsors
Support for this podcast comes from Cybereason. Cybereason reverses the attacker’s advantage and puts the power back in the defender’s hands. End cyber attacks. From endpoints to everywhere. Learn more at Cybereason.com/darknet.
Support for this show comes from Varonis. Do you wonder what your company’s ransomware blast radius is? Varonis does a free cyber resilience assessment that tells you how many important files a compromised user could steal, whether anything would beep if they did, and a whole lot more. They actually do all the work – show you where your data is too open, if anyone is using it, and what you can lock down before attackers get inside. They also can detect behavior that looks like ransomware and stop it automatically. To learn more visit www.varonis.com/darknet.
Sources
Attribution
Darknet Diaries is created by Jack Rhysider.
Episode artwork by odibagas.
Audio cleanup by Proximity Sound.
Theme music created by Breakmaster Cylinder. Theme song available for listen and download at bandcamp. Or listen to it on Spotify.
Equipment
Recording equipment used this episode was the Shure SM7B, Zoom Podtrak P4, Sony MDR7506, in the Hindenburg editor.
Transcript
[START OF RECORDING]
JACK: A few years back, I used to play this really stupid mobile game. I don’t even remember what it was called. You had a party of fighters and you level them up or something. But the thing was, in the game there was a online chat option, and at any moment you could look at the people chatting to see what they’re talking about in the game. Well, if you’ve played any game that has online chat options, you know how toxic it can be, and this place was no exception. People were selling in-game gold that wasn’t even possible; it was just all scams, because there was no way to send gold to anyone in the game. There was just some real vile hatred spewed all over the place. The thing is, the people that did this felt like they could just hide behind their username that they created a minute ago, because the worst case scenario is that they just might get banned from the game. But I was a network security engineer, and I wanted to see if there was a way to learn more about the people that were saying rude stuff in chat. [MUSIC] So, I started a packet capture on my phone. All network traffic coming in and out of the phone was captured, and then I started looking through it.