Chair of the Federal Reserve and CEOs of the largest US banks said in recent months that their biggest concern is a cyberattack against the financial sector. I wrote about what could happen if a systemic cyberattack targeted the financial sector. nytimes.com/2021/07/03/bus…
Experts say country is not prepared for a systemic cyberattack on Wall Street if it targets core institutions/infrastructure that provide key services. "[E]everybody believes an institution can be taken out... What we don’t know is how bad it would get and how fast,” experts said
Financial sector could withstand one large institution being knocked ou, but if multiple ones shut down, disruption could last wks. If attackers struck on a “triple witching” Friday when stock options/stock index futures/stock index options all expire, effects would be amplified.
Banks aren’t biggest concern in cyberattack. Payment card processors, clearinghouses like ACH or Fedwire, and systems for settling bond/equities/options transactions (National Securities Clearing Corporation and the Depository Trust and Clearing Corporation) are a bigger risk.

• • •

Missing some Tweet in this thread? You can try to force a refresh
 

Keep Current with Kim Zetter

Kim Zetter Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @KimZetter

11 Jun
Israeli TV says blasts that damaged the Natanz uranium enrichment plant in Iran in April was a supply-chain attack. Operatives supplied Iran with the marble platforms on which the centrifuges stand, and the marble was embedded with explosives. apnews.com/article/united…
"Media in Israel [have] to clear stories involving security matters through military censors. That Cohen’s remarks apparently cleared the censors suggests Israel wanted to issue a new warning to Iran amid the Vienna nuclear negotiations."
It's confusing which incident Israel TV is referring to. There were explosions at Natanz in July 2020 and April 2021. The 2020 incident involved fire; 2021 incident included explosion but mostly took out electricity. Here's my story about 2021 incident: zetter.substack.com/p/sabotage-at-…
Read 4 tweets
8 Jun
Really thoughtful explanation from @propublica about why they're publishing tax info for the wealthiest Americans, which they received from an anonymous source. They considered that the info might come from "a state actor hostile to American interests." propublica.org/article/why-we…
"Many will ask about the ethics of publishing such private data. We are doing so—quite selectively and carefully—because we believe it serves the public interest in fundamental ways...[to disclose] tax returns of ppl like Jeff Bezos, Michael Bloomberg, Warren Buffett, Elon Musk"
"While the revelations in today’s story are extraordinary, the procedures..used in assessing the data’s value are standard..nearly everyone who provides material to a reporter is doing so in ways that reflect their...agenda....those motives are irrelevant if the info is reliable"
Read 4 tweets
7 Jun
DoJ announces that it has found and recaptured the majority of the ransom that Colonial Pipeline paid.
They seized the money from a bitcoin wallet.
"We identified a virtual currency wallet that the Darkside actors used to collect payment.... Victim funds were seized from that wallet preventing Darkside actors from using it."
Read 6 tweets
3 Jun
Adding to previous reports that DoJ had seized phone records of WaPo reporters, the NYT now says DoJ also secretly seized phone records of four NYT reporters spanning Jan 14-Apr 30, 2017: Matt Apuzzo, Adam Goldman, Eric Lichtblau and Michael S. Schmidt. nytimes.com/2021/06/02/us/…
In addition to phone records, DoJ also secured a court order to seize logs — but not contents — of the reporters' emails, but “no records" were actually obtained using the order. The Biden admin has since avowed that it will not seize journo records for leak investigations.
DoJ didn't say which article was being investigated but the NYT says it appears to be related to classified info reported in an April 22, 2017 article the reporters wrote about how James Comey "handled politically charged investigations during the 2016 presidential election."
Read 6 tweets
25 May
This has gotten a lot of attention in last months and people have tried to bring me into the argument because my book states that Stuxnet used 5 zero-days (one patched before Stuxnet launched so only 4 at time of launch). Liam, Eric and I disagree on what constitutes a 0-day.
They say a hard-coded password that Siemens placed in its system was a 0-day because Stuxnet exploited it. I use the conventional definition of a 0-day as something the vendor doesn't know about and has therefore had 0-days to patch it....
The hardcoded password was intentionally placed there by Siemens, and even after Stuxnet was discovered exploiting it, Siemens warned customers not to change the password or the system wouldn't work. That's not a 0-day to me. Eric, Liam and I laugh about it and agree to disagree.
Read 5 tweets
14 May
"Elliptic has identified the Bitcoin wallet used by the DarkSide... this wallet received the 75 BTC payment made by Colonial Pipeline on May 8, following the crippling cyberattack on its operations." So CP paid ransom on Saturday (depending on which timezone this uses)
The wallet has been active since 4th March 2021 and received 57 payments from 21 different wallets. Some of the payments directly match ransoms known to have been paid to DarkSide by victims, such as 78.29 BTC ($4.4 million) sent by chemical distribution company Brenntag May 11.
"It has been reported within the past hours that DarkSide itself has ceased operations and has had its funds seized - and indeed their wallet was emptied of the $5 million in Bitcoin it contained on Thursday afternoon."
Read 4 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!

Follow Us on Twitter!

:(