Russians team up with young, English-speaking hackers for cyberattacks | 60 Minutes

Cybersecurity investigators worry ransomware attacks may worsen as young, native-English speaking hackers in the U.S., U.K. and Canada team up with Russian hackers.
"60 Minutes" is the most successful television broadcast in history. Offering hard-hitting investigative reports, interviews, feature segments and profiles of people in the news, the broadcast began in 1968 and is still a hit, over 50 seasons later, regularly making Nielsen's Top 10.
Subscribe to the “60 Minutes” KZbin channel: bit.ly/1S7CLRu
Watch full episodes: cbsn.ws/1Qkjo1F
Get more “60 Minutes” from “60 Minutes: Overtime”: cbsn.ws/1KG3sdr
Follow “60 Minutes” on Instagram: bit.ly/23Xv8Ry
Like “60 Minutes” on Facebook: on. 1Xb1Dao
Follow “60 Minutes” on Twitter: bit.ly/1KxUsqX
Subscribe to our newsletter: cbsn.ws/1RqHw7T
Download the CBS News app: cbsn.ws/1Xb1WC8
Try Paramount+ free: bit.ly/2OiW1kZ
For video licensing inquiries, contact: [e-mail]

[@scarpfish]

Apparently the people whom this story is about found the comments section. 🙄

[@805drifter]

Defender here…just because you don’t understand it doesn’t mean it’s not real. Or are you saying you’re a criminal?

[@donemigholzjr.7344]

Who would have all these encrypted coeds, top secret passwords, and critical cyber files? Have insight into all the networks to find the "Hackers" that know how to use them? .............. Trump.

[@neilc879]

@@805drifter Just mark him as spam probably paid for by the FBI or CIA.

[@Realist-ist]

🖖👽

[@henrietta1066]

Teenagers just entered the online course.

[@Hunter96187]

Hackers are attacking trucking companies everyday with emails it’s insane

[@MESSEDUPWORLD30]

THEY SPAM MY EMAIL LIKE CRAZY 😧😮

[@dozekarTheCursed]

Less technical targets are generally less likely to be well defended. They see a lot of attacks.

[@Hunter96187]

@@dozekarTheCursed makes sense but Jesus

[@buzz5969]

Casinos are the biggest crooks in the game….

[@joeking433]

Nah, they're angels compared to hackers.

[@lil----lil]

I wouldn't be surprised if they're still using Windows XP. They probably spend 99.9% budget on marketing and .01% on IT Security.

[@THATMINININJA]

Execs turn the other way when its time to spend on security.

[@bjkjoseph]

That is definitely true

[@tazandoreo]

10000% accurate. They are.

[@douglassmith9445]

Surprisingly, this is not the case in real world incidents almost all the time. Social engineering and insider threats are what truly cause this stuff to happen. Human imperfections cause problems with what would be the perfect computations a computer will always make otherwise.

[@lil----lil]

@@douglassmith9445 It's called training. That _is_ part of the IT budget. Your raise the hell out of cybersecurity awareness to your organization especially people with higher root level access. Some organizations now require a physical token using NFC to login _and_ to do work (see Google), just admin/password will not do. If you try to login without the token (as an admin) the alarm bell will go off nor will it be successful. Each token expires _daily_ and must be renewed as you start your day. Now how cool is that? NO physical token. NO ACCESS. Period. Even if the token is stolen or lost. As for regular users? You can lockdown the desktop/email server completely with ZERO attachment policy or have a proxy server clean it up before distribution, there are many ways to mitigate the risk I can guarantee you they spend very little money on IT security - if any.

[@mscotthowell1]

Who are the better scammers? The casinos or the computer hackers?

[@willwill235]

Your mom

[@orlandocuadra2125]

Damn!

[@joeking433]

Hackers. I have no fear of casinos.

[@bfrancis9898]

It’s hard to cry for casinos. 🤷🏼‍♂️

[@Mike-kc5ew]

Yes, but that's short sighted. These criminals aren't stopping at casinos, they're going after hospitals, non-profits, schools, government offices, infrastructure devices, pretty much anybody and everybody. Well it doesn't really matter if they hit a casino, it very much matters if they hit a power plant or a hospital, as that can translate to people who die.

[@scarpfish]

It's hard to cry for people who lose money at them too.

[@christineherrmann205]

I thought the same, but the United Healthcare hack was disgusting.

[@Paine137]

@@napoleonsmith7793Get off your knees.

[@donemigholzjr.7344]

Who has a long-standing problem with the Las Vegas Casinos and their CEO? Who would have all these encrypted coeds, top secret passwords, and critical cyber files? Have insight into all the networks to find the "Hackers" that know how to use them? .............. Trump.

[@Mike-kc5ew]

The reason why it "feels like we are winning every battle, but losing the war" is because those who are stopping these attacks have to be ready and on top of it 100% of the time, they can't for even 1% of the time fail. If they're not on guard 365 days a year, but only 364 days a year, and the hackers break through on one day, everything is a wash. The U.S. for years has been needing to step up cyber security. Thankfully, we're starting to, hopefully we can get it under control before too many more bad things happen.

[@805drifter]

Yup, we are losing th war because there isn’t a strong enough deterrent.

[@waynehill2746]

It wasn't a hack in the sense of flipping zeros and ones; it was a successful social engineering attack in which a person gave up information and or access to what the social engineer needed. The most successful attacks don't start in the computer, they start with the person sitting at the computer, P.I.C.N.I.C-> "Problems In Chair Not In Computer". Companies don't want to admit it because they treat there employees so bad that the employee doesn't care for thinking about what's being asked, they just want to get back to what they were doing so they can go home. I don't blame the employees because the same way the company looks at them as just a number, so should the employee look at the company as just a mark who's paying them, no love lost.

[@CyberneticOrganism01]

need AI to do it

[@PREDATOR07]

Not even 1 day but a few minutes.

[@xxxxx8200]

A video about hackers that's 13:34 minutes long? Missed opportunity... Bro, just add three seconds of filler...

[@j.till_z]

Not l337 enough I quess.

[@AskAKill99]

Lmak

[@TheRivalz]

Wait until they hit our defense systems. This is nothing.

[@joythought]

Important defence systems are air-gapped

[@zachtos2]

they wont, they want to make money, no money to be made because USA will never pay a terrorist.

[@mahwahnj1]

They prob already have it or at least have access to it

[@edwardboylan4187]

Surprised China isnt being mentioned...

[@user-kj3lo5op9v]

how can you when they are offering 50 million for information about russian black cats theres only so many millions to go around! imagine how much would cost them to get information about chinese red dragons.... or pandas, or something exotic like that

[@osmosis_8692]

Oh, they're there. Relax.

[@AnonymousT206]

Because this is from and about Russia? What a smart question!

[@philrabe910]

I'm fearing that they are too good to be caught at present.

[@CHL41993]

China got enough useless green paper from normal trade. They would like to buy Intel/GE/Google, but they are not allowed to, all they can buy with green paper is bean. So getting more green paper is not in the interests of China.

[@Bellatrys]

They will accuse u of the exact thing they are doing.

[@fongponto]

Totally

[@slayersmsJr]

Reporter: "have you made any arrests?" Fbi agent:"Fat no dawg"

[@_MaxHeadroom_]

So it wasn't really even a hack then? They got access to an employees account by tricking MGM into resetting their password. Corporations really need to brief their staff on things like that

[@magnumxlpi]

Social engineering is definitely an important part of hacking

[@salmanuel4053]

Standard old hacker technique that goes back to phone phreaking, before the web was born.

[@trentbateman]

They’re not breaking the security systems generally. This is more akin to stealing your mail from your mailbox vs breaking through your reinforced front door

[@Crown42]

Social engineering is definitely a form of hacking. The vast majority of hacks that happen are geared towards Social engineering, including phising tactics. As a guy who has been studying IT all of my life I can tell you from experience this is the case.

[@jameslucena1020]

"hacking" lololololol

[@8ersoul8]

The clammmm! Savage

[@user-pm5nk1xo5q]

Everyone loves to have all this digital integration, but this makes it easy for these criminals.

[@Sjalabais]

Such a difficult decision to make for the operators. Pay the ransom, and scramble to repair little damage, or do the morally right thing, and look at immense losses and interruption of business. Cæsar's vs. MGM is a stark contrast here.

[@zacharymartin5033]

This isn't a little damage. They needed to rebuild their ENTIRE system architecture. If you think Ransomware causes little damage you need to do a lot more research. As a cyber security analyst my biggest fear is someone at the company falling for a ransomware attack.

[@MargaretCho-pt3ng]

​@@zacharymartin5033the OP is a fool for calling it a "little damage".

[@Ryan-vi1tu]

So we have to operate the same way then, right?

[@saltlife1978]

I'm glad they target greedy corporations instead of old ladies who are living on their social security check

[@joeking433]

They do both.

[@ruthie8785]

They probably do that too.

[@ncdave4]

Look at the hubris on MGM's CEO's face... he doesn't care.. his multi-millions are all safe and sound...

[@evanstential]

2:36 corps reduce costs by replacing people with technology. How they victims? 😓

[@UrFuture_56]

Great episode ❤

[@thenearhorizon]

Poor casinos

[@TomPetty-li4ct]

I say it's all by plan. I'd like to see the insurance payouts and the liquidation tax benefits. Also, let's look at executive pay around these times. Losses and liability are most likely pushed onto consumers

[@jchastain789]

Finally a story from this year. And not from a decade ago

[@Sir_Ray_LegStrong_Bongabong]

can they help me also because some peopke here do not have conscience nor guilt

[@joeking433]

They need much harsher penalties for hackers.

[@rosemarechanging9805]

The U.S. would do well to scholarship software engineering students to staff a future "cyber-wars" army (with enough extra for private sector staffing)!

[@CyberneticOrganism01]

that's not the preferred way of a free country with small government ideal

[@poindextertunes]

why would they do that when they just recruit the best hackers who get caught. Same thing with forgers too

[@joeking433]

They need to go back to pen and paper.

[@22ergie]

..."hacking into Microsoft"... Oh, the irony.

[@felixkazteyanoz]

Go after the scammers,

[@FarzadDastmalchi-op2ud]

Then we have to issue warrents for ALL the members of Congress, Senate, the Oval Office, all the tech execs and financial institutions as well. Hummm,, I say good, let's go.

[@riyaandrayplay6856]

"How are they connected"? Come on my guy 😂

[@yw1971]

As long as there's no Federal Law that requires companies to report & actively protect themselves (something MUCH more important than ESG & DEI), there won't be any remedy

[@panama-canada]

The next level is to get hired by those companies and physically inject their servers.

[@thexfile.]

Microsoft Windows hasn't changed since Windows 95.

[@edwelndiobel1567]

Not true, its gotten MORE intrusive.

[@JanetBeebe-nh9re]

I bet they hit the Swinomish Casino.

[@Ihaveyourpogs]

The calm before the storm?

[@pikiwiki]

of course. the end is close. don't let your guard down. keep a years worth of food

[@panama-canada]

9:15 so is it 5 mil or 15??

[@color4268]

What about Brain Weapon Attacks?

[@Literallyarealhuman]

Everything has become more brazen because there are no consequences and these are not seen as real crimes because rhetorically we don’t care of rich people there’s money but matters when these rich people provide jobs and infrastructure

[@flybone100]

Perhaps we should make this type of crime a capital crime. I wonder how much longer it would go on?

[@Diogenes76]

Many companies are too cheap to do basic IT. They consider IT a money sink and fund it accordingly even though it is what actually makes modern efficiency possible. Something you know, you are, you have...

[@thinkpositive3667]

Blame the companies who ignore cybersecurity. They are the worst.

[@joeking433]

So who is worse, the devil or those he tricks?

[@zipdaddyz]

I have no sympathy for the rip off artists better known as Las Vegas casinos

[@aaronvessels9406]

They don't force people to gamble

[@danielbetancur1250]

@@aaronvessels9406 No, they just enable and encourage it. Totally cool.

[@TheBlanco951]

i have no sympathy for the hackers either

[@jimparsons6803]

It doesn't occur too many to ask the question of the 'why' of legalized gambling in NV, which I find just as odd. With gambling in a state, the property taxes go down. The cocaine for state and national legislators, seemingly free money. There's been a number of PBS docs about this aspect as well, so in the public mind? The casinos then are acting as agents for the states, if you think about it. That too has been on PBS more than a few times ... Front Line. Organized crime is sometimes associated with the various casinos in various states, with a small extension then, the mob, mob families are agents of the said states. Should be a boggle or two in there at some point, don't you think?

[@teekolinski491]

@@jimparsons6803because they were originally built/founded by the Italian mob

[@kenl3805]

This is more of a scam than a hack. I mean I suppose you would have to know how to navigate within that system and what codes to use to shut things down but for the most part they played on human error in a very direct way.

[@thesadboxman]

11:49 Wow for once NSA is actually doing its mission to protect the US people from foreign entities instead of doing what it can to invade the privacy of Americans.

[@DoctorPlay]

The biggest problem is all of these companies are using the same technology. One day that’s gonna change.

[@geekazoid47]

A walking shot in some kind of defunct patch panel room with 1/4" cables that is supposed to represent a datacenter is condescending and annoying. A datacenter is LOUD. Its secure. Stop trying to act like you are in one.

[@richmukasa6069]

You can't hack on ICP.. Internet Computer Protocol. ICP is 3rd eye tech.

[@Xavier-uknonada]

Damn

[@Gregknows-uj8gg]

Just because we have the technology does not mean we have too use it. What ever happened too the simpler times. Before so much computer software controlling everything. I want too be safe and I dont need AI intelligence and computers controlling everything.

[@carlosinfante72]

I highly doubt it that MGM lost 100 million they probably just run up the numbers so they could get more from insurance..

[@blueresolve2954]

Insurance compensation aren't determined by indemnified companies.

[@joeking433]

They were smart! It lessens efforts of the hackers to hack them again knowing that even if they do get into the servers they won't get any money. Bravo for MGM! Everyone else needs to do the same!

[@hack5871]

So not to pay taxes

[@xulven759]

no way king bob!

[@dueycarter1583]

hire taygeta to protect governments, military, and big businesses

[@ValenceFlux]

I got to learn about some interesting security technology during an apprenticeship. But I ended up so sick I could no longer pursue that career. I can't forget how some apprentices thought they were smarter than the instructor. How all our phones got hacked and erased. How we were told we were assisting in the new and improved world economy. Guess I was in over my head with that job. I hope this comment was substantive.

[@julioescobar4946]

What was the purpose of your comment can’t understand crap of what you wrote?

[@salmanuel4053]

You didn't have to put a proprietary company app on your personal phone, did you? This could explain how "all our phones got hacked and erased." Perhaps you could consider writing an ebook on your job stint, adding research to extend what you learned to a broad picture that could interest a significant audience.

[@ValenceFlux]

@@salmanuel4053 Most people do not want to believe it but I have thought of that. We were actually told to leave our phones in the car for some of our jobs. Some of us did that and some did not. They warned us that cell phones were not secure. I had an htc verizon phone, most of us had verizon. I had a windows pda with no phone on some of the jobs.

[@tommclain8893]

Technology has many advantages. However, too many won’t do a honest days work.

[@felipe-vibor]

It's called manufacturing consent for war.

[@w5ke]

12:46 king bobbbbb🗣️🗣️

[@JohnSmith-vm8st]

Only a member of the com would know him by that name.

[@w5ke]

@@JohnSmith-vm8st no

[@xulven759]

@@JohnSmith-vm8st KING BOB!

[@alexanderweyers441]

@@JohnSmith-vm8st king bob is well known outside the comm anyone, a ton of people who listen to uzis music specifically are aware of him

[@dylnlol]

@@JohnSmith-vm8st he was also infamous for leaking/hacking famous musicians unreleased to the public for money but he wasn’t arrested because of this so it’s not mentioned

[@TriAngles3D]

Mitnick was a great tech guy with an even better Social Engineering skill set. So many security firms focus solely on tech and not the social engineering mechanism.

[@trqster]

Poor Vegas casinos...I feel for their losses.

[@joeking433]

Bad guys always try to find a way to not look bad. ;)

[@trqster]

@@joeking433 bad guys just don't care about how they look :)

[@stevenelson25]

Young people have been talking to each other through global voip communications systems for years and years. I have as many foreign contacts in my lists as I do Americans at this point. So yeah.

[@janklaas6885]

📍10:16

[@cmil432a]

Do we not remember Edward Snowden and the nsa?

[@AA-eq5wk]

yeah they intentionally made all this software easy access for the authorities... now they want to blame Russia, the old and new boogie man to throw money at by elite for military global capital investment... maybe instead of sending money to various war theaters, america should be protecting citizens in cyberspace and in the homeland? .... and instead of jan6 and endless trump snares, maybe the fbi and other well paid federal agencies should shift "equity" to plugging holes?

[@freethinker5225]

Exactly... elon didn't even have to hack Twitter cuz he was so rich

[@805drifter]

What’s you point? Unclear

[@JohnSmith-vm8st]

How many years ago was that, again?

[@tioswift3676]

@@JohnSmith-vm8stTime doesn’t matter. How long ago was the atom bomb made? Well it’s still relevant today. Same applies.

[@BoydGilbreath]

It's not a cybercrime. A person stupidly gave the keys to the kingdom to an impostor. Corporations will need to hire humans instead of firing them all. They will have to conduct ongoing investigation of their own work force. They will need to install software to continuously monitor whatever exposed digital networks they use, and shut down any action that is outside the parameters they set. Humans will have to turn the network back on when they fix whatever they did wrong that allowed the attack. AI can do this. They say AI is dangerous because it can learn and act independently. AI is software. It does not have input that humans have. AI only learns what it is fed. I can over hear people talking and figure out haw to rob them, but the computer cannot do that without a human to put the necessary data in.

[@joeking433]

Typical of bad guys always trying to blame those they commit crimes against.

[@jdotsalter910]

12:10: why were the Russian hackers let go?

[@angryfatass]

when bad things happen to the US that's good for Russia so they let them go

[@Mike-kc5ew]

They said just a few seconds after at 12:12, because of the war in Ukraine.

[@ruthie8785]

Had to go to the front.

[@Sir_Ray_LegStrong_Bongabong]

it's two days now without eating a food, and ihave been really, because there's nothing that ican do

[@nikolakovacevic9269]

I have a great idea , let's make everything smart and online 👍🏼😏

[@matwkong606]

If he is payed well that cool

[@ruthie8785]

Yeah y’know just a little treason no biggie.

[@SandyRiverBlue]

This is why the internet of things concept is so flawed. Wouldn't have happened just 20 years ago.

[@PREDATOR07]

😂 Fbi doesn't agree only because they don't accept being defeated .

[@DillaMillaShowClips]

Scared to click your videos because it always starts off great and then in the corner says aired in 2016 or some crap. Seriously make an archive channel and only upload current videos here

[@Luke-uv4ri]

hmmm I think i hear the sound of quantum encryption coming lol

[@sashasavisha146]

Don’t casinos have cybersecurity? Those companies are paid a lot of money. If they were not useful they wouldn’t continue to be so popular.

[@____Anonymous___]

I been applying to NSA for months and nothing but "we've move into other candidates" I have a pretty good experience with pentesting

[@buzz5969]

Hack them youll get seen kid😅😂

[@barrebaby512.]

Ocean’s 24

[@user-kj3lo5op9v]

more like oceans 0x18

[@user-uz5ko8sv2f]

Exceptionalism in journalism… class act reporter, no hype, no politics, just telling the story.. masterclass!!

[@krushnitgaming8423]

lol

[@user-kj3lo5op9v]

gotta love bots

[@FarzadDastmalchi-op2ud]

So we now learn that the Emperor has no cloth. Basically a paper tiger has been roaring using a bull horn and now its bluffs are called.

[@kizziezizzler8080]

the united states government needs to fix the CFAA and incentivize hackers to get paid for their work instead of this zero tolerance policy opening up adversary nation states into recruiting american tech workers

[@twolegs6045]

Where can i sign up to join the gang!??

[@mikeyrose4183]

You have to learn wireshark first.

[@Weed]

I'm pretty sure the U.S. Army needs a lot of help in these trying times for them. They'd be more than happy to take some more helping hands.

[@bijoychandraroy]

The irony

[@Sir_Ray_LegStrong_Bongabong]

they knew that they were the cause of some delays of my welfare and the right for work and personal decisions

[@nickdoessht]

Maybe our president should say we won’t prosecute people hacking Russia if they won’t on our part.

[@dd07871]

Not true.

[@panama-canada]

10:55 but of course it’s not a crime! Because it’s outside of US jurisdiction. So you can do whatever you want ;)

[@tazandoreo]

Somehow; I couldn’t care less about this dump getting hacked.

[@timothymurphy7127]

Need to get the FBI to cover this up ASAP.

[@robincastle7641]

When the oligarchs oppress the human spirit, we see an erosion of the noble aims of this spirit. A balanced economy that allows the human spirit to use that spirit to create a livelihood that is noble, as in dignified, elegant, with true freedom as revealed when given true respect and justice.

[@joeking433]

Huh?

[@hpppzz145]

free snoopy

[@lf3541]

Spiders? AI? Hoo boy. And, in an American election year, no less... what could possibly go wrong?

[@bakerstreet101]

Does this mean that Japan is less susceptible to cyberattacks because Japanese is a difficult language?

[@Fedgery007]

While Americans and government argue over how many genders there are, this is happening.

[@OffensiveComment]

So there scammers

[@henlohenlo689]

casinos are one of hte top ways to launder money. AND it's on tribal jurisiction. and so they have no effort to play the rules as casino's for the most part. and all of this is just ignored. and then make a big deal over some virus or something that virus are rather common on phones computers businesses.

[@fluxcapacitor1621]

Is there any benefit to LinkedIn?

[@DanL57]

I hope the Russians don't hack Candy Land.

[@_11346]

Too much gate keeping in the profession and very little pay in government jobs. Why get paid 20/hr and be put on strict rules when you can hack a casino and live free? This has been the same story for decades. Alot of people want to work and do this job, but no one will hire anyone. Millions of open jobs in Cybersecurity, but then theres thousands of people who keep getting turned away. Now they complain? Smh

[@user-sb3qg5ph5t]

We (humans) are a mess

[@grahamfloyd3451]

The guy calling it "corporate terrorism" isn't smart enough to be speaking on this subject. You aren't a target because they want free hotel rooms.

[@mja9376]

They are aware of that. Your post is weird

[@platolover6377]

Congress and law enforcement should be dealing with this kind of threat that will affect all of us Americans. But when you're dealing with Trump chaos can people like Matt gaetz and Marjorie Taylor Greene, very little gets done. Americans have only themselves to blame for a lot of the pain that will be caused

[@motoflyte]

Giving them a cool name only makes them.... OH..I see. Forget it

[@johntownPSN]

Thank goodness MGM didn't pay! Ceaser's is part of the problem and will probably be hit again.

[@drticktock4011]

Go back to paper