cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Caute_cautim
Community Champion

The biggest cyber attacks of 2024

Hi All

 

An interesting reminder of what happened in 2022, 2023 and possibly to come in 2024.

 

https://www.bcs.org/articles-opinion-and-research/the-biggest-cyber-attacks-of-2024/

 

Regards

 

Caute_Cautim

1 Reply
Early_Adopter
Community Champion

Good Old BCS, relatively slow on the uptake with a nice pause on the flash to bang, just like our very Dear King Charles, regal forthright and outspoken* head of state of less of the commonwealth every year!

“Traditionally, phishing attackers might have struggled with English grammar and punctuation, giving users a line of defence — if the email reads badly, ignore it.”

This is actually not a reliably indicator of why common syntactical and grammatical errors turn up in phishing emails anymore - the senders of the malicious email use these errors to have brighter or more educated subjects self select out of their opportunity pipeline, if you can spot it you’re not the target of this one…

Then we have:

“The possibility of criminals crafting their own large language models (LLMS) trained explicitly on a vast body of existing malware code and content from the dark web is more worrying. These tools would make deploying the software parts of attacks much more accessible for criminals.”

Which is a probability of one, given many malicious LLMs already exist(in fact many copyright holders and content owners don’t see a higher difference in any of them). 😉

https://securityintelligence.com/articles/what-to-know-about-new-generative-ai-tools-for-criminals/

Of course, it’s at these at these festive times, sitting around the tin of welfare turkey roll around a illuminated tree carcass (stolen from the cleared site of a financially unsustainable East Asian property development, and fenced to us via a tick-Tok shop) as dictated for solidarity in the cost of living crisis, we might well receive targeted emails from organisations that also make little sense, offering us bagatelle’s such as the chance to buy a “Professional Membership” at the bargain price of one hundred and fifty five Pounds Sterling! Do note that this is still considerably more than the one hundred and twenty five American dollars demanded of us by our own dear ISC2, despite the incredible efforts of the Prime Ministers of His Majesty’s Government over the last few years! Of course like Christmas ISC2’s demands come earlier every year, without the actual date coming forward. Rounding this out, there is an Organisation that Stands head and shoulders above all of these rougues - and that is the mighty IAPP! This king of extortion by SMTP would like two hundred and fifty US Dollars for its emails as it preens with its AI Governance Certification! Lording it over the l see societies and associations as if the brandy butter wouldn’t melt…

… of course all of these traditional players have amazingly been able to sustain these emails without and skill, or even need to call on LLMs, and it gives me great optimism that we’ll see this level of craftsmanship for many years to come, no matter the reckless blandishments of Gen AI!

Merry Christmas Everyone!

*Traditionally, at least since the mid eighties this free speaking role fell to the Prince of Wales, and before him the Duke of Edinburgh. The mantle was briefly taken up by Boris the Johnson War-master of Uxbridge and Holder of Parties, keeping the nations spirits up during the terrible privation of the Covid Epoch. As he was briefly Trussed-Up, with Rishi “Brutus” Sunak ready to cast the last lettuce in the kingdom with great piety he would have doubtless thought “Et Tu…”