Microsoft Verified Publisher System Abused For Data Exfiltration - ThreatWire (AUDIO ONLY) (Patreon)

ThreatWire Totem Board - Limited Edition! - https://snubsie.com/threatwire-products/tw-totem 

Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

Support ThreatWire! https://www.patreon.com/shannonmorse 

Follow Shannon on Social Media: https://snubsie.com/links 

GitHub certs were stolen in a breach, don’t trust the blue checkmarks, and the encrypted messaging platform Exclu gets seized! All that coming up now on ThreatWire.

 #threatwire #hak5

ThreatWire by Shannon Morse is a weekly news journalism show covering cybersecurity topics for network admins, information security professionals, and consumers.

Watch this on youtube: https://youtu.be/3wKWn8pvW0Q

Chapters:

00:00 GitHub Certificates Stolen

02:11 Untrusted Blue Checkmarks 

04:02 Exclu Takedown

Links:

https://github.blog/2023-01-30-action-needed-for-github-desktop-and-atom-users/

https://thehackernews.com/2023/01/github-breach-hackers-stole-code.html

https://arstechnica.com/information-technology/2023/01/github-says-hackers-cloned-code-signing-certificates-in-breached-repository/

https://msrc-blog.microsoft.com/2023/01/31/threat-actor-consent-phishing-campaign-abusing-the-verified-publisher-process/

https://www.bleepingcomputer.com/news/security/microsoft-disables-verified-partner-accounts-used-for-oauth-phishing/

https://thehackernews.com/2023/02/hackers-abused-microsofts-verified.html

https://www.proofpoint.com/us/blog/cloud-security/dangerous-consequences-threat-actors-abusing-microsofts-verified-publisher

https://www.bleepingcomputer.com/news/security/police-hacked-exclu-secure-message-platform-to-snoop-on-criminals/

https://www.vice.com/en/article/wxnve9/dutch-police-read-messages-of-exclu

https://www.om.nl/actueel/nieuws/2023/02/03/politie-leest-opnieuw-mee-met-criminelen-cryptocommunicatiedienst-exclu-ontmanteld

https://www.politie.nl/nieuws/2023/februari/3/politie-leest-opnieuw-mee-met-criminelen.html

Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

Our Site → https://www.hak5.org

Shop →  http://hakshop.myshopify.com/

Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1

Support → https://www.patreon.com/threatwire

Contact Us → http://www.twitter.com/hak5

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

____________________________________________

Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.