DEF CON 31 War Stories - Tracking the Worlds Dumbest Cyber Mercenaries

DEF CON 31 War Stories - Tracking the Worlds Dumbest Cyber Mercenaries - Cooper Quintin

Рет қаралды 101,676

8 ай бұрын

For the last 6 years my colleagues and I have been tracking the activities of the cyber-mercenaries we call Dark Caracal. In this time we have observed them make a number of hilarious mistakes which have allowed us to gain crucial insights into their activities and victims. In this talk we will discuss the story of Dark Caracal, the mistakes they have made, and how they have managed to remain effective despite quite possibly being the dumbest APT to ever exist.

Пікірлер: 105

@tartas1995 7 ай бұрын

Honestly the best compliment for a podcast like darknet Diaries is that real it experts listen to it

@Chiberia 2 ай бұрын

Audio guy has his gain slider to "mcdonalds drivethrough"

@xplinux22 8 ай бұрын

I was waiting so eagerly for this one to be posted. Ever since I saw the EFF deeplinks post about it, the title had amused me so much that I knew I wanted to learn more. Was not disappointed, I enjoyed the ride!

@rjbrake 7 ай бұрын

Dude sounds like he's got a mouth full of marbles and jello

@ZincLeadAlloy 8 ай бұрын

It’s interesting to see the whole cybersecurity ecosystem that involves real pros, malicious actors and intelligent KZbinrs haha!

@sativagirl1885 7 ай бұрын

*Imagine* this world's power structure not as a pyramid but a hypercube, resting in the palm of your hand. You're made in God's image. Create!

@-r-495 7 ай бұрын

thank you for giving Jack a shoutout. great guy, great podcast!

@sagebrushrepair 7 ай бұрын

Jackery Sider!

@olommentes 7 ай бұрын

although every time I say this, another mic will clip into infinity at defcon, but this is Darknet Diaries

@adrianalexandrov7730 5 ай бұрын

in Russian "bandook" means racketeer, mugger, hooligan, etc. Basically a criminal prone to violent crimes. Would be written as "бандюк"

@DavidUrulski-wq9de 2 ай бұрын

True, also backwards it spells koodnab, which almost sounds like koolnab, cool nab, cool noob. Bit rude.

@brujua7 8 ай бұрын

Super insteresting. Much love to EFF!

@magicponyrides 2 ай бұрын

Jesus Christ this talk was incredible. I had no idea what I was in for.

@7_of_9 7 ай бұрын

Great stuff!

@Theabstractblu Ай бұрын

Man took me on a journey great job

@capability-snob 8 ай бұрын

The next battle may be secure operating systems and hardware. Capability systems that allow for easy control and auditing of security decisions need to find their way into the mainstream.

@sativagirl1885 7 ай бұрын

#RFC 420, secure smoke signals are available for take out or in!

@jamestaylor3805 6 ай бұрын

Self surviving systems that have extremely limited connectivity periods IMHO

@CYB3Rsynth 7 ай бұрын

I'm having a freaky Mandela effect type moment right now because I feel like I've watched this all the way through before but it was posted 10 days ago and I have not watched any defcon content in the past month

@wraithfvcker 7 ай бұрын

You appear to be a user of psychedelic drugs, basing this off of the mocking clown avatar (which is a common DMT entity) and synth being in your name. If this is the case, I experienced something similar with a music video the first time I saw it. It was unmistakable that I had not seen it, yet because I was on LSD I had the most potent deja vu I have ever experienced while watching it, and I also because I felt had seen it before, I thought the video was designed to look like things look to someone on LSD. Then when I watched it the second time, it was not like I remembered. You may have triggered something similar by having used psychedelics recently, basically a feeling of deja vu. Don't do kids, drugs. 😊🎉

@Truth_Unleashed 7 ай бұрын

Nope, but darknet diaries will likely do a story on this. He does mention the conti ransomware group from a darknet diaries episode.

@dannydetonator 7 ай бұрын

This happens not only to some drug users. You might have watched a different presentation on cybersecurity or ransomware attacks (could be TEDx or the same Darknet Diaries. It has similar vibe and memory is not reliable. Yeah, i do dope periodically..

@chriscerne7095 7 ай бұрын

Same. I got deja vu when he was talking about tracking down the building from the WiFi hotspot. But after doing some Googling, I realized that some of the info was in the Darknet Diaries Dark Caracal episode.

@CYB3Rsynth 7 ай бұрын

@@chriscerne7095 that's it!

@JuliaYamYam 7 ай бұрын

great talk, thank you!

@majdps995 7 ай бұрын

Interesting story. Seems like the threat actor never heard of opsec.

@JeremyAndersonBoise 7 ай бұрын

Xampp for the fail 😂

@pietrolux 7 ай бұрын

Easy on that Gain button next time please. Cool talk!

@n_sweep 7 ай бұрын

deaf con

@sassycat77 6 ай бұрын

what a great talk,

@bstevenm 6 ай бұрын

Amazing talk 😂

@Hukkinen 7 ай бұрын

I think they rather sell subcontracting for Conti ransomware than aim primarily for using Conti against political targets..

@andrewferguson6901 8 ай бұрын

This story seems familiar, did someone else publish about these events in the past year or two?

@jamestaylor3805 6 ай бұрын

Dark Caracal episodes on other shows.

@andreyns89 7 ай бұрын

2:46 - Wow. What a twist. 😯😯😯

@jscheunemann 8 ай бұрын

Irina needs to have a news person like the great Borat to help with Kazakh government

@abcdefg91111 24 күн бұрын

2:50 the irony of the crowd while same shit happened to Assange. Hypocrisy makes humans blind

@157-40_T 7 ай бұрын

❤

@jeffbrownstain 8 ай бұрын

If Rache Bartmoss was a corpo skid 😂

@tonygardner4077 8 ай бұрын

distorted mic.... ekk

@mariarahelvarnhagen2729 7 ай бұрын

Is It The Band Glass Animals & Their Record Label & Family ?

@Theabstractblu Ай бұрын

shoutout #DarknetDiaries

@raretapes8057 7 ай бұрын

What the hell was that left-handed cross-handshake?

@chessdominos 7 ай бұрын

Who is the hecker?

@prostytroll 7 ай бұрын

2:44 "...escaping to Russia to get a little bit more freedom - ha,ha,ha" - I wonder if Snowden and Assange would find it funny...

@Sk0lzky 6 ай бұрын

Pallas cat (manul) and caracal are entirely different species. Someone must've gotten confused :v

@motionthings 8 ай бұрын

I hear you hired the "NASL sound guy" :p

@talphazero1036 7 ай бұрын

Dude was outta breath from standing and talking. I'm asthmatic myself and go through it ever so often, but seeing it from the other side is reallllyyyyyyy off-putting. Good CON regardless

@joaobino9431 6 ай бұрын

12:18 Nazaré Tedesco. This Brazilian meme is just everywhere huehuehuehue....

@barmooj 8 ай бұрын

Banduke means bastard in Lebanese 😂

@kalmarnagyandras 8 ай бұрын

Shouty audio hurts

@Milkman76 5 ай бұрын

Heyyyyy it's COPS for the hacker crowd. 🤣 I wonder where most of these cyber mercenaries come from.

@emd2837 Ай бұрын

the vocal fry is telling

@katanasteel 7 ай бұрын

Banduke and dark caracal are today's cdc backoffice

@Auth_Zero_ 6 ай бұрын

Is PrinceAli Prince Roni fom DX-143?

@JohnDoe-bd5sz 7 ай бұрын

I love these videos but please please please fire those in charge of sound for these videos, the sound part is terrible

@repairstudio4940 7 ай бұрын

Haha stupor effective. 😁

@Studio23Media 7 ай бұрын

"Escaping to Russia to get a little more freedom" Oh the irony... 🥴🤣

@74KU 6 ай бұрын

Ah shit, this dude is tracking me Also, take a drink of water the lip smacking is intense.

@abcdefg91111 24 күн бұрын

6:23

@purestench9263 Ай бұрын

Pallas and caracal cats are completely different. I think he meant pallas' are relatee to manuls or some shit

@douglasknapp4059 8 ай бұрын

UK trying to stop End-to-End encryption. Just enacted a law requiring Messaging services like WhatsApp and Signal to back door their apps.

@plebius 7 ай бұрын

Technically correct but misses one point. They admitted the software does not exist and will not enforce it. Not that it matters, it's there in law now so you can bet that it will come into force the next big news story when they can enforce it without backlash.

@tuskiomisham 8 ай бұрын

Lol a caracal is not a pallas cat but ok

@artej11 8 ай бұрын

Big Floppa :3

@OwO-. 8 ай бұрын

probably switched it up with manul, because pallas cat is another name for the manul. also they are both adorable :3

@JeremyAndersonBoise 7 ай бұрын

Is this a cat talk?

@jamestaylor3805 6 ай бұрын

Maybe as a joke... intentional slight twist. US students grow in an environment where they ridicule the mascot of rival schools. And black p$**y may not have made it past committee, and shadow cat is trademarked.

@emd2837 Ай бұрын

well that was interesting in a unintentional kind of way. eff really? oh dear

@lalanotlistening 6 ай бұрын

mic’s too hot 😖

@MikeHunt-rw4gf 5 ай бұрын

Algorithm.

@goldnutter412 8 ай бұрын

🤣

@frosty1433 7 ай бұрын

What the movie Fat Pizza and then listen to their response: 11:44

@yomajo 7 ай бұрын

For full record, current Kazakhstan president Tolkayev is awesome!

@erikschiegg68 7 ай бұрын

Is Irina Petroushova a cover name for Russel Brand?

@sativagirl1885 7 ай бұрын

#MoooooooooooooooooooooooooooooooooooooooooooooooooonLighting by government authorities is a real kosher cash cow.

@jahwni 8 ай бұрын

Why does he have different colored arms/hands? 🤔😂

@TheAndjelika 8 ай бұрын

It is still fascinating to me how Americans laugh at Russia when they talk about freedom. I guess it's a remnant of the Cold War, but they don't seem to realize that the "land of the free" is just a brand, and that the USA today doesn't even rank in the top 10 among countries that can be considered free at all, in fact, it's right up there with Russia. Here are the first 10 (Switzerland, New Zealand, Ireland, Norway, Denmark, Sweden, Finland, Netherlands, Luxembourg ) ... Yes, there is at least one hacker who had to flee the USA and seek asylum in Russia.

@fifthfangofmetsudo 7 ай бұрын

Yes, nothing free about America... apart from the cost of living in your head as it seems from this comment

@Nitidus 7 ай бұрын

Such a stupid, ignorant comparison can only come from someone who has never had to live in Russia nor got to know anyone who faced persecution there. Also, let me tell you that the freedom index does not represent an objective truth. Trying to make it look lit it was is actively deceiving. God, I never thought I'd have to defend the fuc|king US one day...

@thelatearthurmorgan6158 7 ай бұрын

The people of New Zealand are prisoners in their own country.

@davidkamaunu7887 7 ай бұрын

Yes the USSR fought the Cold War to keep Germany divided and maintain a buffer against future invasion after WW2… The US fought the Cold War only to become as autocratic and oppressive as the USSR was. 😢

@plebius 7 ай бұрын

Man this comment thread is a s*** show. Comparing the US to Russia. Really, where you mysteriously fall out of windows for being critical. Where everyone accepts that the courts are rigged and the ballot boxes too. Is that what we are comparing. I also can't believe I am defending the US on this one, but wtf is that comparison.

@girl4632 7 ай бұрын

But in no sense opening pdf install malware. It's not some kind of magic. Tell exactly what it was. I don't think it was based on any vulnerability in pdf opener, not pdf could be executed. It must be fooled by extension.

@stubstunner 7 ай бұрын

Fake version of pdf opener.