Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Spies Jumped from One Network to Another via Wi-Fi in an Unprecedented Hack

wired.com

Post reply on HN
Print view View original

51–60 of 63 posts

Re: Spies Jumped from One Network to Another via Wi-Fi in an Unprecedented Hack

#51

Post by myworkinisgood »

mr_mitm wrote: post #50
brudgers wrote: post #2

If your threat model includes nation states, you are outgunned. A nation state can probably buy the building across the street if that's the value of hacking your system. Of course there are almost certainly cheaper options,but that's the level of time and budget you are up against...teams of motivated and well resourced experienced professionals working against you full time.

Maybe so, but in this case they made it easy for them [1]: > Upon examining those logs, Volexity found that in January and February, password-spray attacks had been carried out against this service and three accounts had been successfully compromised by an attacker. > ... > The Enterprise Wi-Fi network, however, did not require MFA and only required a user's valid domain username and password to authenticate > ... >…

Have you seen how much people struggle with getting on wifi when you include just include certificates, not even MFA on such security things?

Re: Spies Jumped from One Network to Another via Wi-Fi in an Unprecedented Hack

#52

Post by mr_mitm »

myworkinisgood wrote: post #51
mr_mitm wrote: post #50

Earlier quoted context omitted.

Maybe so, but in this case they made it easy for them [1]: > Upon examining those logs, Volexity found that in January and February, password-spray attacks had been carried out against this service and three accounts had been successfully compromised by an attacker. > ... > The Enterprise Wi-Fi network, however, did not require MFA and only required a user's valid domain username and password to authenticate > ... >…

Have you seen how much people struggle with getting on wifi when you include just include certificates, not even MFA on such security things?

I have not. It's an enterprise Wifi. Enroll all end points and authentication happens seamlessly. Zero user interaction, it literally cannot be simpler.

Re: Spies Jumped from One Network to Another via Wi-Fi in an Unprecedented Hack

#54

Post by madaxe_again »

This isn’t entirely novel.

I did some grey verging on black hat work a few years back. Target was in a place that putting boots on the ground would have been a challenge, and highly conspicuous.

We targeted the tenant a floor below them. Got in through a networked fax machine. Hijacked an AP, used that to bruteforce our way in upstairs.

I think I might have been working for Russian intelligence, retrospectively. The whole “briefcase full of cash” bit should have been a hint, but it was interesting work, and the dudes we were targeting (a PMC) were no angels.

Re: Spies Jumped from One Network to Another via Wi-Fi in an Unprecedented Hack

#57

Post by [deleted] »

transpute wrote: post #40
LinuxBender wrote: post #36

Earlier quoted context omitted.

FWIW one can front-end OpenLDAP or AD with Radius. Once the translation layer is in place then it's more about teaching IT how to manage particular fields in LDAP/AD.

From repo at start of thread: screenshots for adding router users and managing network segments, https://apps.apple.com/us/app/secure-programmable-router/id6... . Router image runs Linux and hostapd.

[deleted]

Re: Spies Jumped from One Network to Another via Wi-Fi in an Unprecedented Hack

#58

Post by scandox »

medo-bear wrote: post #48
mu53 wrote: post #20

Earlier quoted context omitted.

You say criminals, but I think you meant intelligence agencies

Often street criminals and other lumpen sections of society work for intelligence agencies

The lumpen don't get enough credit

Re: Spies Jumped from One Network to Another via Wi-Fi in an Unprecedented Hack

#59

Post by kelsey98765431 »

madaxe_again wrote: post #54

This isn’t entirely novel. I did some grey verging on black hat work a few years back. Target was in a place that putting boots on the ground would have been a challenge, and highly conspicuous. We targeted the tenant a floor below them. Got in through a networked fax machine. Hijacked an AP, used that to bruteforce our way in upstairs. I think I might have been working for Russian intelligence, retrospectively. The…

Careful buddy, if you worked for who you think then the NDA is STRONGLY enforceable by some guys breaking into your house in the middle of the night... stay frosty

Re: Spies Jumped from One Network to Another via Wi-Fi in an Unprecedented Hack

#60

Post by medo-bear »

scandox wrote: post #58
medo-bear wrote: post #48

Earlier quoted context omitted.

Often street criminals and other lumpen sections of society work for intelligence agencies

The lumpen don't get enough credit

here is an article about cia providing prostitutes to people of influence

https://www.cia.gov/readingroom/docs/CIA-RDP90-01208R0001002...

Post reply on HN