Russians team up with young, English-speaking hackers for cyberattacks | 60 Minutes

Cybersecurity investigators worry ransomware attacks may worsen as young, native-English speaking hackers in the U.S., U.K. and Canada team up with Russian hackers.
"60 Minutes" is the most successful television broadcast in history. Offering hard-hitting investigative reports, interviews, feature segments and profiles of people in the news, the broadcast began in 1968 and is still a hit, over 50 seasons later, regularly making Nielsen's Top 10.
Subscribe to the “60 Minutes” KZbin channel: bit.ly/1S7CLRu
Watch full episodes: cbsn.ws/1Qkjo1F
Get more “60 Minutes” from “60 Minutes: Overtime”: cbsn.ws/1KG3sdr
Follow “60 Minutes” on Instagram: bit.ly/23Xv8Ry
Like “60 Minutes” on Facebook: on. 1Xb1Dao
Follow “60 Minutes” on Twitter: bit.ly/1KxUsqX
Subscribe to our newsletter: cbsn.ws/1RqHw7T
Download the CBS News app: cbsn.ws/1Xb1WC8
Try Paramount+ free: bit.ly/2OiW1kZ
For video licensing inquiries, contact: [e-mail]

[@scarpfish]

Apparently the people whom this story is about found the comments section. 🙄

[@805drifter]

Defender here…just because you don’t understand it doesn’t mean it’s not real. Or are you saying you’re a criminal?

[@donemigholzjr.7344]

Who would have all these encrypted coeds, top secret passwords, and critical cyber files? Have insight into all the networks to find the "Hackers" that know how to use them? .............. Trump.

[@neilc879]

@@805drifter Just mark him as spam probably paid for by the FBI or CIA.

[@Realist-ist]

🖖👽

[@henrietta1066]

Teenagers just entered the online course.

[@slayersmsJr]

Reporter: "have you made any arrests?" Fbi agent:"Fat no dawg"

[@buzz5969]

Casinos are the biggest crooks in the game….

[@joeking433]

Nah, they're angels compared to hackers.

[@henlohenlo689]

i agree. they also rigged it so that they are on tribal jurisdiction which impunes themselves of legal accountability.

[@happykitten5695]

@@joeking433 "you" must be joeking right? 😹😻🐾 🙏 Peace and LOVE for ONE and ALL 🕊❤‍🔥

[@Allinthefamilee]

Agreed

[@mscotthowell1]

Who are the better scammers? The casinos or the computer hackers?

[@willwill235]

Your mom

[@orlandocuadra2125]

Damn!

[@joeking433]

Hackers. I have no fear of casinos.

[@sarahsinkerton8479]

Both

[@joeking433]

Only one is a criminal.

[@Hunter96187]

Hackers are attacking trucking companies everyday with emails it’s insane

[@MESSEDUPWORLD30]

THEY SPAM MY EMAIL LIKE CRAZY 😧😮

[@dozekarTheCursed]

Less technical targets are generally less likely to be well defended. They see a lot of attacks.

[@Hunter96187]

@@dozekarTheCursed makes sense but Jesus

[@lil----lil]

I wouldn't be surprised if they're still using Windows XP. They probably spend 99.9% budget on marketing and .01% on IT Security.

[@THATMINININJA]

Execs turn the other way when its time to spend on security.

[@bjkjoseph]

That is definitely true

[@tazandoreo]

10000% accurate. They are.

[@douglassmith9445]

Surprisingly, this is not the case in real world incidents almost all the time. Social engineering and insider threats are what truly cause this stuff to happen. Human imperfections cause problems with what would be the perfect computations a computer will always make otherwise.

[@lil----lil]

@@douglassmith9445 It's called training. That _is_ part of the IT budget. Your raise the hell out of cybersecurity awareness to your organization especially people with higher root level access. Some organizations now require a physical token using NFC to login _and_ to do work (see Google), just admin/password will not do. If you try to login without the token (as an admin) the alarm bell will go off nor will it be successful. Each token expires _daily_ and must be renewed as you start your day. Now how cool is that? NO physical token. NO ACCESS. Period. Even if the token is stolen or lost. As for regular users? You can lockdown the desktop/email server completely with ZERO attachment policy or have a proxy server clean it up before distribution, there are many ways to mitigate the risk I can guarantee you they spend very little money on IT security - if any.

[@jchastain789]

Finally a story from this year. And not from a decade ago

[@bfrancis9898]

It’s hard to cry for casinos. 🤷🏼‍♂️

[@Mike-kc5ew]

Yes, but that's short sighted. These criminals aren't stopping at casinos, they're going after hospitals, non-profits, schools, government offices, infrastructure devices, pretty much anybody and everybody. Well it doesn't really matter if they hit a casino, it very much matters if they hit a power plant or a hospital, as that can translate to people who die.

[@scarpfish]

It's hard to cry for people who lose money at them too.

[@christineherrmann205]

I thought the same, but the United Healthcare hack was disgusting.

[@Paine137]

@@napoleonsmith7793Get off your knees.

[@donemigholzjr.7344]

Who has a long-standing problem with the Las Vegas Casinos and their CEO? Who would have all these encrypted coeds, top secret passwords, and critical cyber files? Have insight into all the networks to find the "Hackers" that know how to use them? .............. Trump.

[@Mike-kc5ew]

The reason why it "feels like we are winning every battle, but losing the war" is because those who are stopping these attacks have to be ready and on top of it 100% of the time, they can't for even 1% of the time fail. If they're not on guard 365 days a year, but only 364 days a year, and the hackers break through on one day, everything is a wash. The U.S. for years has been needing to step up cyber security. Thankfully, we're starting to, hopefully we can get it under control before too many more bad things happen.

[@805drifter]

Yup, we are losing th war because there isn’t a strong enough deterrent.

[@waynehill2746]

It wasn't a hack in the sense of flipping zeros and ones; it was a successful social engineering attack in which a person gave up information and or access to what the social engineer needed. The most successful attacks don't start in the computer, they start with the person sitting at the computer, P.I.C.N.I.C-> "Problems In Chair Not In Computer". Companies don't want to admit it because they treat there employees so bad that the employee doesn't care for thinking about what's being asked, they just want to get back to what they were doing so they can go home. I don't blame the employees because the same way the company looks at them as just a number, so should the employee look at the company as just a mark who's paying them, no love lost.

[@CyberneticOrganism01]

need AI to do it

[@PREDATOR07]

Not even 1 day but a few minutes.

[@edwardboylan4187]

Surprised China isnt being mentioned...

[@user-kj3lo5op9v]

how can you when they are offering 50 million for information about russian black cats theres only so many millions to go around! imagine how much would cost them to get information about chinese red dragons.... or pandas, or something exotic like that

[@osmosis_8692]

Oh, they're there. Relax.

[@AnonymousT206]

Because this is from and about Russia? What a smart question!

[@philrabe910]

I'm fearing that they are too good to be caught at present.

[@CHL41993]

China got enough useless green paper from normal trade. They would like to buy Intel/GE/Google, but they are not allowed to, all they can buy with green paper is bean. So getting more green paper is not in the interests of China.

[@xxxxx8200]

A video about hackers that's 13:34 minutes long? Missed opportunity... Bro, just add three seconds of filler...

[@j.till_z]

Not l337 enough I quess.

[@AskAKill99]

Lmak

[@evanstential]

2:36 corps reduce costs by replacing people with technology. How they victims? 😓

[@ncdave4]

Look at the hubris on MGM's CEO's face... he doesn't care.. his multi-millions are all safe and sound...

[@Bellatrys]

They will accuse u of the exact thing they are doing.

[@fongponto]

Totally

[@Coyannn]

No, there are exponentially more APT groups originating from Russia than anywhere else. You know, it's funny how people like you, who do not know a single thing about the hacking space outside of this video, tend to come up with the most stupid conspiracy theories.

[@_MaxHeadroom_]

So it wasn't really even a hack then? They got access to an employees account by tricking MGM into resetting their password. Corporations really need to brief their staff on things like that

[@magnumxlpi]

Social engineering is definitely an important part of hacking

[@salmanuel4053]

Standard old hacker technique that goes back to phone phreaking, before the web was born.

[@trentbateman]

They’re not breaking the security systems generally. This is more akin to stealing your mail from your mailbox vs breaking through your reinforced front door

[@Crown42]

Social engineering is definitely a form of hacking. The vast majority of hacks that happen are geared towards Social engineering, including phising tactics. As a guy who has been studying IT all of my life I can tell you from experience this is the case.

[@jameslucena1020]

"hacking" lololololol

[@thinkpositive3667]

Blame the companies who ignore cybersecurity. They are the worst.

[@joeking433]

So who is worse, the devil or those he tricks?

[@stevenelson25]

Young people have been talking to each other through global voip communications systems for years and years. I have as many foreign contacts in my lists as I do Americans at this point. So yeah.

[@Sir_Ray_LegStrong_Bongabong]

can they help me also because some peopke here do not have conscience nor guilt

[@joeking433]

They need much harsher penalties for hackers.

[@8ersoul8]

The clammmm! Savage

[@yw1971]

As long as there's no Federal Law that requires companies to report & actively protect themselves (something MUCH more important than ESG & DEI), there won't be any remedy

[@UrFuture_56]

Great episode ❤

[@user-pm5nk1xo5q]

Everyone loves to have all this digital integration, but this makes it easy for these criminals.

[@panama-canada]

The next level is to get hired by those companies and physically inject their servers.

[@____Anonymous___]

I been applying to NSA for months and nothing but "we've move into other candidates" I have a pretty good experience with pentesting

[@buzz5969]

Hack them youll get seen kid😅😂

[@Sjalabais]

Such a difficult decision to make for the operators. Pay the ransom, and scramble to repair little damage, or do the morally right thing, and look at immense losses and interruption of business. Cæsar's vs. MGM is a stark contrast here.

[@zacharymartin5033]

This isn't a little damage. They needed to rebuild their ENTIRE system architecture. If you think Ransomware causes little damage you need to do a lot more research. As a cyber security analyst my biggest fear is someone at the company falling for a ransomware attack.

[@MargaretCho-pt3ng]

​@@zacharymartin5033the OP is a fool for calling it a "little damage".

[@saltlife1978]

I'm glad they target greedy corporations instead of old ladies who are living on their social security check

[@joeking433]

They do both.

[@ruthie8785]

They probably do that too.

[@escapeearth2327]

@saltlife1978. They’re coming for you next

[@joeking433]

When you're evil, you're evil. The devil doesn't discriminate between companies and individuals, he'll target you both!

[@saltlife1978]

@@escapeearth2327 must be nice to say anything you want on the internet

[@zipdaddyz]

I have no sympathy for the rip off artists better known as Las Vegas casinos

[@aaronvessels9406]

They don't force people to gamble

[@danielbetancur1250]

@@aaronvessels9406 No, they just enable and encourage it. Totally cool.

[@TheBlanco951]

i have no sympathy for the hackers either

[@jimparsons6803]

It doesn't occur too many to ask the question of the 'why' of legalized gambling in NV, which I find just as odd. With gambling in a state, the property taxes go down. The cocaine for state and national legislators, seemingly free money. There's been a number of PBS docs about this aspect as well, so in the public mind? The casinos then are acting as agents for the states, if you think about it. That too has been on PBS more than a few times ... Front Line. Organized crime is sometimes associated with the various casinos in various states, with a small extension then, the mob, mob families are agents of the said states. Should be a boggle or two in there at some point, don't you think?

[@teekolinski491]

@@jimparsons6803because they were originally built/founded by the Italian mob

[@trqster]

Poor Vegas casinos...I feel for their losses.

[@joeking433]

Bad guys always try to find a way to not look bad. ;)

[@trqster]

@@joeking433 bad guys just don't care about how they look :)

[@Sir_Ray_LegStrong_Bongabong]

they knew that they were the cause of some delays of my welfare and the right for work and personal decisions

[@TheRivalz]

Wait until they hit our defense systems. This is nothing.

[@joythought]

Important defence systems are air-gapped

[@zachtos2]

they wont, they want to make money, no money to be made because USA will never pay a terrorist.

[@mahwahnj1]

They prob already have it or at least have access to it

[@johnsheikh3831]

@@joythoughtthere’s ways around air gapped systems. Trust me on that and that’s what we know from previous attacks

[@22ergie]

..."hacking into Microsoft"... Oh, the irony.

[@DoctorPlay]

The biggest problem is all of these companies are using the same technology. One day that’s gonna change.

[@thenearhorizon]

Poor casinos

[@thesadboxman]

11:49 Wow for once NSA is actually doing its mission to protect the US people from foreign entities instead of doing what it can to invade the privacy of Americans.

[@Ryan-vi1tu]

So we have to operate the same way then, right?

[@color4268]

What about Brain Weapon Attacks?

[@Timo_Adventures]

Playing the smallest violin for casino's lost revenue

[@Straightarrow213]

I highly doubt it that MGM lost 100 million they probably just run up the numbers so they could get more from insurance..

[@blueresolve2954]

Insurance compensation aren't determined by indemnified companies.

[@joeking433]

They were smart! It lessens efforts of the hackers to hack them again knowing that even if they do get into the servers they won't get any money. Bravo for MGM! Everyone else needs to do the same!

[@hack5871]

So not to pay taxes

[@felixkazteyanoz]

Go after the scammers,

[@FarzadDastmalchi-op2ud]

Then we have to issue warrents for ALL the members of Congress, Senate, the Oval Office, all the tech execs and financial institutions as well. Hummm,, I say good, let's go.

[@Diogenes76]

Many companies are too cheap to do basic IT. They consider IT a money sink and fund it accordingly even though it is what actually makes modern efficiency possible. Something you know, you are, you have...

[@riyaandrayplay6856]

"How are they connected"? Come on my guy 😂

[@thexfile.]

Microsoft Windows hasn't changed since Windows 95.

[@edwelndiobel1567]

Not true, its gotten MORE intrusive.

[@kizziezizzler8080]

the united states government needs to fix the CFAA and incentivize hackers to get paid for their work instead of this zero tolerance policy opening up adversary nation states into recruiting american tech workers

[@FarzadDastmalchi-op2ud]

So we now learn that the Emperor has no cloth. Basically a paper tiger has been roaring using a bull horn and now its bluffs are called.

[@user-uz5ko8sv2f]

Exceptionalism in journalism… class act reporter, no hype, no politics, just telling the story.. masterclass!!

[@krushnitgaming8423]

lol

[@user-kj3lo5op9v]

gotta love bots

[@Gregknows-uj8gg]

Just because we have the technology does not mean we have too use it. What ever happened too the simpler times. Before so much computer software controlling everything. I want too be safe and I dont need AI intelligence and computers controlling everything.

[@motoflyte]

Giving them a cool name only makes them.... OH..I see. Forget it

[@flybone100]

Perhaps we should make this type of crime a capital crime. I wonder how much longer it would go on?

[@chasejohnson3932]

Wow😢

[@DillaMillaShowClips]

Scared to click your videos because it always starts off great and then in the corner says aired in 2016 or some crap. Seriously make an archive channel and only upload current videos here

[@FarzadDastmalchi-op2ud]

I love it. Let them eat cake. And give more of your money to Google, Apple and Microsoft and their likes. BUT you cannot even fry and egg yourselves.

[@cmil432a]

Do we not remember Edward Snowden and the nsa?

[@AA-eq5wk]

yeah they intentionally made all this software easy access for the authorities... now they want to blame Russia, the old and new boogie man to throw money at by elite for military global capital investment... maybe instead of sending money to various war theaters, america should be protecting citizens in cyberspace and in the homeland? .... and instead of jan6 and endless trump snares, maybe the fbi and other well paid federal agencies should shift "equity" to plugging holes?

[@freethinker5225]

Exactly... elon didn't even have to hack Twitter cuz he was so rich

[@805drifter]

What’s you point? Unclear

[@JohnSmith-vm8st]

How many years ago was that, again?

[@tioswift3676]

@@JohnSmith-vm8stTime doesn’t matter. How long ago was the atom bomb made? Well it’s still relevant today. Same applies.

[@Fedgery007]

While Americans and government argue over how many genders there are, this is happening.

[@hunterhogan6372]

Brilliant generations coming and AI ...Wow!

[@MAG320]

Red Hat hacker here. It does take a hacker to get a hacker. Black Hats will go after big game. Red hats go after those black hats. It takes extensive amounts of experience & skillsets in Networking, database & TelNets to become that masterclass hacker. Plus some software development. Hire a Rick to Stop a Rick. Hire more Rick’s to stop more Rick’s. That’s how the game works. The bigger the game, the higher the rewards, the stiffer the competition & the faster the pace. And the more complex the system, and the tougher the learning process. That’s why hackers are getting paid $100G+ YOY. And that’s just for starters.

[@PREDATOR07]

😂 Fbi doesn't agree only because they don't accept being defeated .

[@lf3541]

Spiders? AI? Hoo boy. And, in an American election year, no less... what could possibly go wrong?

[@geekazoid47]

A walking shot in some kind of defunct patch panel room with 1/4" cables that is supposed to represent a datacenter is condescending and annoying. A datacenter is LOUD. Its secure. Stop trying to act like you are in one.

[@_11346]

Too much gate keeping in the profession and very little pay in government jobs. Why get paid 20/hr and be put on strict rules when you can hack a casino and live free? This has been the same story for decades. Alot of people want to work and do this job, but no one will hire anyone. Millions of open jobs in Cybersecurity, but then theres thousands of people who keep getting turned away. Now they complain? Smh

[@felipe-vibor]

It's called manufacturing consent for war.

[@kenl3805]

This is more of a scam than a hack. I mean I suppose you would have to know how to navigate within that system and what codes to use to shut things down but for the most part they played on human error in a very direct way.

[@JanetBeebe-nh9re]

I bet they hit the Swinomish Casino.

[@harmatodlamstel6435]

Man they should have had windows defender on

[@richmukasa6069]

You can't hack on ICP.. Internet Computer Protocol. ICP is 3rd eye tech.

[@TriAngles3D]

Mitnick was a great tech guy with an even better Social Engineering skill set. So many security firms focus solely on tech and not the social engineering mechanism.

[@Xavier-uknonada]

Damn

[@nickdoessht]

Maybe our president should say we won’t prosecute people hacking Russia if they won’t on our part.

[@robincastle7641]

When the oligarchs oppress the human spirit, we see an erosion of the noble aims of this spirit. A balanced economy that allows the human spirit to use that spirit to create a livelihood that is noble, as in dignified, elegant, with true freedom as revealed when given true respect and justice.

[@joeking433]

Huh?

[@Literallyarealhuman]

Everything has become more brazen because there are no consequences and these are not seen as real crimes because rhetorically we don’t care of rich people there’s money but matters when these rich people provide jobs and infrastructure

[@dallas_l9163]

Well these rich people should take more caution into cyber security and invest more into but you don’t see that happen until they actually get hit with an attack

[@SuperGreatSphinx]

MINERVA THE GODDESS OF WISDOM

[@SandyRiverBlue]

This is why the internet of things concept is so flawed. Wouldn't have happened just 20 years ago.

[@Sir_Ray_LegStrong_Bongabong]

it's two days now without eating a food, and ihave been really, because there's nothing that ican do

[@panama-canada]

9:15 so is it 5 mil or 15??

[@tommclain8893]

Technology has many advantages. However, too many won’t do a honest days work.

[@dueycarter1583]

hire taygeta to protect governments, military, and big businesses

[@timothymurphy7127]

Need to get the FBI to cover this up ASAP.

[@fieldroaster21]

Poor corporation 😭

[@tazandoreo]

Somehow; I couldn’t care less about this dump getting hacked.

[@w5ke]

12:46 king bobbbbb🗣️🗣️

[@JohnSmith-vm8st]

Only a member of the com would know him by that name.

[@xulven759]

@@JohnSmith-vm8st KING BOB!

[@alexanderweyers441]

@@JohnSmith-vm8st king bob is well known outside the comm anyone, a ton of people who listen to uzis music specifically are aware of him

[@dylnlol]

@@JohnSmith-vm8st he was also infamous for leaking/hacking famous musicians unreleased to the public for money but he wasn’t arrested because of this so it’s not mentioned

[@nathanrice6589]

Doesn't anyone remember also king Bob is one of the names of the minions from the movie the minions?

[@nikolakovacevic9269]

I have a great idea , let's make everything smart and online 👍🏼😏

[@hpppzz145]

free snoopy

[@BoydGilbreath]

It's not a cybercrime. A person stupidly gave the keys to the kingdom to an impostor. Corporations will need to hire humans instead of firing them all. They will have to conduct ongoing investigation of their own work force. They will need to install software to continuously monitor whatever exposed digital networks they use, and shut down any action that is outside the parameters they set. Humans will have to turn the network back on when they fix whatever they did wrong that allowed the attack. AI can do this. They say AI is dangerous because it can learn and act independently. AI is software. It does not have input that humans have. AI only learns what it is fed. I can over hear people talking and figure out haw to rob them, but the computer cannot do that without a human to put the necessary data in.

[@joeking433]

Typical of bad guys always trying to blame those they commit crimes against.

[@mitchellsmith4601]

Casinos make all this money, but they don’t have offline redundant systems, ready to be brought online so people keep giving them money? Stupid.

[@xulven759]

no way king bob!

[@jdotsalter910]

12:10: why were the Russian hackers let go?

[@angryfatass]

when bad things happen to the US that's good for Russia so they let them go

[@Mike-kc5ew]

They said just a few seconds after at 12:12, because of the war in Ukraine.

[@ruthie8785]

Had to go to the front.

[@sashasavisha146]

Don’t casinos have cybersecurity? Those companies are paid a lot of money. If they were not useful they wouldn’t continue to be so popular.

[@ValenceFlux]

I got to learn about some interesting security technology during an apprenticeship. But I ended up so sick I could no longer pursue that career. I can't forget how some apprentices thought they were smarter than the instructor. How all our phones got hacked and erased. How we were told we were assisting in the new and improved world economy. Guess I was in over my head with that job. I hope this comment was substantive.

[@julioescobar4946]

What was the purpose of your comment can’t understand crap of what you wrote?

[@salmanuel4053]

You didn't have to put a proprietary company app on your personal phone, did you? This could explain how "all our phones got hacked and erased." Perhaps you could consider writing an ebook on your job stint, adding research to extend what you learned to a broad picture that could interest a significant audience.

[@ValenceFlux]

@@salmanuel4053 Most people do not want to believe it but I have thought of that. We were actually told to leave our phones in the car for some of our jobs. Some of us did that and some did not. They warned us that cell phones were not secure. I had an htc verizon phone, most of us had verizon. I had a windows pda with no phone on some of the jobs.

[@dillonrohe4988]

A bit too technology dependent are we...?

[@buzz5969]

No just stupid kids with social media accounts and lacking security not verifying individual wanting password change.

[@donaldjohnson-wn6ps]

Russia needs to chill and take itself offline

[@ZorroComputers]

Casinos can't secure their networks. Give me a brake. LOL.

[@God0fTime]

this is what happens when you abandon the youth teach nonsense in schools get nonsense criminals

[@bijoychandraroy]

The irony

[@dd07871]

Not true.

[@drticktock4011]

Go back to paper

[@DanL57]

I hope the Russians don't hack Candy Land.

[@janklaas6885]

📍10:16

[@stevenboddy4232]

This goes to show American greed and cheap manufacturing will cripple us. If you think this is bad, our entire electrical grid is ran off Chinese tech

[@matwkong606]

If he is payed well that cool

[@ruthie8785]

Yeah y’know just a little treason no biggie.

[@Straightarrow213]

Were they angry? What kind of dumb question is that people get mad when they get the wrong food at McDonald’s😂

[@Tommyoda]

Exactly man forget my French Fries and see what happens! 🤣💦