Your name might be (Commander) Bond, James Bond, but don’t shout it out on the Tube

Details

Category: Cyber Security (Personal)

Have you ever been to a conference (think InfoSec or CloudSec) or walked near one and been curious to see what everyone does? At InfoSec you will see people with conference attendee badges on saying: head of information security at: MoD, MPS, FCO, Home Office etc. They wear them inside the building and forget to take them off when they leave.

On the train two days ago (6th Jan 2015) I spotted a man (and presumably his wife) entering the train with a name badge on. Curiosity of course overcame me. What did it say? Commander A******* **************, Defence Adviser, ************** High Commission. Could it get any worse? I searched for Commander A******* on the internet and found him on a UK government diplomatic list and then listed on his own high commission website. Along with an entire staff list (including armed forces), phone numbers and assistants.

Read more …

Personal view and observations around commercial (corporate) Wi-Fi data collection in the United Kingdom and Europe

Details

Category: Cyber Security (Personal)

I travel a lot, not that I publish this fact greatly online. This year I have been to nine countries, eight within the European Union and one within Europe. At the moment I am writing this article on a coach journey from one capital to another capital covering 310 kilometres. Excellent I/we can simply turn up at any European Union country by plane, boat or by land and flash (sometimes not) our passport and gain entry.

Back to the topic of commercial data collection. Within the United Kingdom and the Republic of Ireland though to a slightly less extent, when we use free Wi-Fi, it may be free but we are giving “them” something. Our browsing history, search terms, SSL/TLS connection* and probably more. Free yes, but we go from the customer to the supplier and of course they use or sell what they collect.

Read more …

Macro malware from "Avis" and phishing through GetResponse

Details

Category: Blog

Excel macro malware (like banking trojan) appearing as Avis rental.


Apple phishing sent through and redirecting through GetResponse (email marketing).