In the Shell

Let's dive deep into the shadowy world of money mules—unwitting intermediaries in online scams and cybercrime. From stolen banking credentials to elaborate parcel reshipping schemes, scammers rely on these individuals to move stolen funds and goods, leaving the mules to bear the legal and financial consequences.https://darknetdiaries.com/episode/111/ - Darknet Diaries EP 111: ZeuS//NO BS PODCAST HOSTING🟡 Yellowball is a no BS podcast hosting service that I built and run. Whether you're looking to start a podcast, import an existing one, or just want to learn more, head over to https://yellowball.fm to check it out.//REFERENCEShttps://www.schwab.com/schwabsafe/think-twice-before-assisting-money-movementhttps://krebsonsecurity.com/2020/04/how-cybercriminals-are-weathering-covid-19/https://www.youtube.com/watch?v=vthPmLORVrMhttps://www.youtube.com/watch?v=FxR4EMFH8GUhttps://www.youtube.com/watch?v=3_HFHd9E1Fkhttps://krebsonsecurity.com/2016/09/money-mule-gangs-turn-to-bitcoin-atmshttps://chargebacks911.com/reshipping-scams/https://www.ukfinance.org.uk/press/press-release/money-mule-recruiters-use-fake-online-job-adverts-to-target-generation-covidhttps://www.fbi.gov/how-we-can-help-you/scams-and-safety/common-frauds-and-scams/money-mules

In college, I once showed my class the reality of Remote Access Trojans (RATs) with a live demo—showing how easily someone could take over a computer with the right tool. Years later, the real-world ramifications of these tools are even more chilling. Today, we’re diving deep into Poison Ivy, a notorious RAT that took the cybersecurity world by storm in the mid-2000s, and was linked to high-profile cyberattacks on government agencies, human rights organizations, and corporate giants.//NO BS PODCAST HOSTING🟡 Yellowball is a no BS podcast hosting service that I built and run. Whether you're looking to start a podcast, import an existing one, or just want to learn more, head over to https://yellowball.fm to check it out.//REFERENCEShttps://www.theregister.com/2012/08/31/nitro_hackers_abuse_java_exploithttps://www.darkreading.com/cyberattacks-data-breaches/poison-ivy-trojan-just-won-t-diehttps://www.mandiant.com/sites/default/files/2021-09/rpt-poison-ivy.pdfhttps://web.archive.org/web/20080208054011/http://www.poisonivy-rat.com/https://www.trendmicro.com/vinfo/us/threat-encyclopedia/malware/poisonivy

In this episode, we dive into the chaotic rise of the Mydoom worm, one of the fastest-spreading computer worms ever recorded. From its origins in Russia to its DDoS attacks on SCO Group and Microsoft, Mydoom wreaked havoc on the internet in the early 2000s. We explore how the worm’s clever tactics—like blocking antivirus websites and spreading through email and peer-to-peer networks—made it a formidable threat. Despite the $500,000 bounty, its creator remains a mystery to this day.//NO BS PODCAST HOSTING🟡 Yellowball is a no BS podcast hosting service that I built and run. Whether you're looking to start a podcast, import an existing one, or just want to learn more, head over to https://yellowball.fm to check it out.//REFERENCEShttps://www.getsupport.co.uk/blog/2021-10/mydoom-the-fascinating-story-behind-the-worlds-fastest-computer-virus/https://www.mrbrown.com/blog/2004/07/google_attacked.htmlhttps://www.f-secure.com/v-descs/novarg.shtmlhttps://www.f-secure.com/v-descs/mydoom-b.shtmlhttps://www.youtube.com/watch?v=QbIkueFe8E4

In 2003, the Fizzer worm took advantage of the growing peer-to-peer file-sharing trend, spreading across Kazaa and beyond. What seemed like a harmless music download on Limewire could turn into a backdoor for hackers. In this episode of In The Shell, I share my personal experience with file sharing on my Blue Dell Inspiron 1100 and how I unknowingly encountered malware for the first time. We’ll explore the origins of the Fizzer worm, its unique ability to auto-update, disable antivirus software, and install keyloggers to steal personal information.I’ll explain how Fizzer spread through file-sharing platforms and network shares, how it spoofed emails, and the sophisticated techniques it used to stay one step ahead of antivirus programs. From peer-to-peer networks to corporate environments, Fizzer’s reach was global—and the impact on users was profound.//NO BS PODCAST HOSTING🟡 Yellowball is a no BS podcast hosting service that I built and run. Whether you're looking to start a podcast, import an existing one, or just want to learn more, head over to https://yellowball.fm to check it out.//REFERENCEShttps://www.f-secure.com/v-descs/fizzer.shtmlhttps://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=Win32%2fFizzerhttps://www.kaspersky.com/about/press-releases/fizzer-a-multi-threat-worm-that-attacks-via-e-mail-and-kazaahttps://www.infoworld.com/article/2234751/fizzer-worm-spreading.htmlhttps://threats.kaspersky.com/en/threat/Email-Worm.Win32.Fizzer/https://www.helpnetsecurity.com/2003/05/13/fizzer-e-mail-worm-is-spreading-at-an-alarming-rate/http://virus.wikidot.com/fizzerhttps://www.giac.org/paper/gcih/450/w32-fizzera-analysis-infection-prevention-handling/103564

In this episode of In the Shell, we dive into one of the most notorious cyber incidents of the early 2000s—the SQL Slammer worm. Join me as we explore how this tiny 376-byte worm caused massive internet disruptions worldwide in 2003. From its rapid spread across 75,000 servers in under 10 minutes to its impact on global infrastructure, the SQL Slammer worm serves as a powerful reminder of the importance of patching vulnerabilities and maintaining strong network security.We’ll break down the technical aspects, including SQL Server vulnerabilities, the difference between TCP and UDP, and how the worm exploited a buffer overflow to wreak havoc. Plus, we’ll discuss the lessons learned and how cyber threats have evolved since then.//NO BS PODCAST HOSTING🟡 Yellowball is a no BS podcast hosting service that I built and run. Whether you're looking to start a podcast, import an existing one, or just want to learn more, head over to https://yellowball.fm to check it out.//REFERENCEShttps://www.netscout.com/blog/asert/remembering-sql-slammerhttps://www.historytools.org/docs/the-sql-slammer-virus-how-it-works-and-how-to-protect-yourselfhttps://threatpost.com/inside-story-sql-slammer-102010/74589/https://www.caida.org/catalog/papers/2003_sapphire/https://www.wired.com/2003/07/slammer/