In this episode of the series, I apply our threat model to a scenario with significantly higher vulnerability than the last. In this example, the client is conducting active engagement with an overseas illegal marketplace operated by the target.
Part 2 of this 3-part series, Lance applies the managed attribution threat model to an OSINT scenario. The MA requirement here is for the operator to blend in with a highly paranoid group while avoiding detection as an alias by the social media platform they are using.
Threat modeling for managed attribution systems requires a different methodology. We have developed a new framework that combats threats that are specific to managed attribution.
The most effective way to expose online identities and aliases is a technique called the Canary Trap or the Barium Meal Test. None of the standard managed attribution practices are effective in thwarting it because it attacks the human operator, rendering most tools ineffective.
When conducting intelligence operations, it is important to avoid attention.We have all heard the advice, “When in Rome, do as the Romans do,” but how do we achieve that when we are in Rome.com? What different factors will make us stand out from the crowd and attract unwanted attention during online operations? ...
The definition of managed attribution is the process of controlling the technical and behavioral indicators that comprise your online identity or attribution.
Learn misattribution lessons from the capture of Guccifer 2.0 who accidentally leaked their identities, ruining an entire mission and resulting in arrests, all due to a lack of consistency with their operational security (OPSEC).
Situational awareness is important when engaging online - especially when hunting for threats outside the organization's firewalls. This requires the skills and tools to protect your identity by remaining anonymous. Additionally, un-patched systems and poor configurations could potentially allow an attacker to get through to your internal network.
While mergers and acquisitions (M&A) are generally known for bringing economic growth and opportunity, people are beginning to realize that the process also brings serious cybersecurity risks. For example, along with the acquired company’s valuable assets, buyers also inherit all previous and current vulnerabilities and breach history. But there are...
In May 2018, the new General Data Protection Regulation (GDPR) will take effect, applying to the vast majority of organizations across the world and signaling one of the most significant changes in data protection regulation to date. The GDPR, focused on notice, consent, control, and security, will mean that websites...
