Saturday, May 21, 2011

SpyCam Story #610 - Starbuck's Naked Shot


Police said Friday they are still looking for dozens of victims recorded by a hidden camera found in a women's restroom at a Glendora Starbucks.

William Zafra Velasco, 25, allegedly used a plastic coat hanger spycam to record at least 45 women, said Glendora Police Chief Rob Castro. Some of those victims were juveniles, said Castro.

The device has a tiny camera hole atop the hanger, with two holes for audio and a USB hookup in the back. It is similar to the spycam seen here. (more)

Friday, May 20, 2011

Book—Compilation of State and Federal Privacy Laws—Now available in different formats.

The information in the Compilation of State and Federal Privacy Laws is now available in different formats. 

This book cites and describes more than 600 state and federal laws affecting the confidentiality of personal information and electronic surveillance. 

The laws are listed by state, grouped in categories like medical, credit, financial, security breaches, tracking technologies, employment, government, school records, Social Security numbers, marketing, telephone privacy and many more. Canadian laws too. (more) (Privacy Journal web site)

Android Malware Jumps 400 Percent as All Mobile Threats Rise

Mobile security is the new malware battlefield as attackers take advantage of users who don’t think their smartphones can get compromised.

Cyber-attackers are gunning for Google’s Android as they take advantage of a user base that is “unaware, disinterested or uneducated” in mobile security, according to a recent research report.

Malware developers are increasingly focusing on mobile devices, and Android malware has surged 400 percent since summer 2010, according to the Malicious Mobile Threats Report 2010/2011 released May 11. The increase in malware is a result of users not being concerned about security, large number of downloads from unknown sources and the lack of mobile security software, according to the Juniper Networks Global Threat Center, which compiled the report. (more)

Thursday, May 19, 2011

A Day at The International Spy Museum

The International Spy Museum is one of my favorite places. I spent the afternoon there yesterday.

If you have never been there, you "need to know" this... This is not some cheesy tourist trap one might find in Orlando. It is a quality museum in the finest sense of the word. The exhibits are first class, very educational, imaginative and entertaining—hard to do all in one shot, but they do it.

Visiting Washington, DC is always a compromise. There are so many great things to see and do. Do as many as you can, but save room for dessert. Visit the Spy Museum. It is history at its most relevant.

The newest exhibit – Cyber War – actually leaves people (me included) with a feeling of terror in the pit of the stomach. Yes, it is that well done. No, you won't like the feeling. I won't spoil it for you, but... think about what would happen if electricity were no longer available. All it might take are a few keystrokes.

"Aurora Experiment. In the Spy Museum’s new gallery dedicated to Cyber War, Weapons of Mass Disruption, video of an experiment conducted for the Department of Homeland Security depicts a simulated cyber attack on a generator control station. The simulation led to the generator’s destruction, demonstrating the all-too-real infrastructure vulnerabilities of the U.S power grid. On loan from four of the lead engineers who created and carried out the Aurora experiment, the Museum is pleased to display parts of the disabled generator."

As I was saying, they make espionage relevant. (more)

A Former KGB Lock Picker Discusses His Craft

Nicolai B. was, for thirty years, a senior operative of the KGB, stationed in Riga, Latvia. He and his colleagues were “laid off” in 1991 after the collapse of the Soviet Union and the reorganization of the Committee for State Security, one of the most feared entities by Soviet citizens. His comments and disclosures were of particular interest to me and my colleagues because of our work in designing, training, and using covert entry tools in connection with government operations. His job was to conduct sensitive “intrusions” into offices, homes, businesses and other facilities in order to gather information about suspected “enemies of the state.” The theft or covert copying of documents, installation of electronic eavesdropping devices and cameras, and the planting of evidence were all in a day’s job for this retired agent. (more)

AusCERT 2011 Conference — Smartphones: the perfect bugging device

Security experts at the AusCERT 2011 Conference in Queensland this week warned that serious attacks on mobile phones are expected before the end of this year, and that those attacks will involve tracking users, not just stealing their money.

On Wednesday, Amil Klein, CTO at Trusteer, explained how mobile malware has evolved to a stage where it can now bypass most banking security.

Graham Ingram, the general manager of AusCERT, backs this up.

"The genie is out of the bottle. The hardware is there, the software is there, the capability is there ... these guys will turn it around quickly, now. They know what to do, as soon as the reward is there — and it is clearly there — they will move rapidly into it, and I think that is going to shock a few people because we will wake up one morning and it will all be happening."

But it's not just users' bank accounts that are at stake; modern smartphones make the perfect bugging device.

The implications of being able to turn on a remote device that has the capacity to look at emails, geo-locate users, look at SMSes, listen to phone calls, record meetings and even turn on a camera are stunning. Intelligence agencies with these capabilities with a remote "on" button would be ecstatic. (more)

Tennis Players?!?! Where did the Mossad get that idea?

Undercover agents tracked a Syrian official carrying nuclear secrets to London where they broke into his hotel room and stole the plans as part of a daring operation on foreign soil by Mossad, the Israeli secret service, it has been claimed...

The operation involved at least 10 undercover agents on the streets of Britain and led directly to a controversial bombing raid into Syrian territory that destroyed a nuclear reactor that was under construction.

It closely mirrored the assassination of Mahmoud al-Mabhouh, a senior Hamas arms trader, who was killed in his hotel room in Dubai last year using agents disguised as tennis players. (more)

SpyCam Story #609 - Largest Video Monitoring Contract in History

In what it says is the “largest video monitoring contract in history,” Iverify at the end of April announced it won a five-year contract valued at $39 million to provide guard replacement and shrink-reduction services to 529 Family Dollar stores, nationwide.

Iverify president Mike May said Iverify brought big savings to the table for the Family Dollar.

"[They are] using a robust application that uses Cernium analytics for location-based risk assessment that triggers local announcements in the vicinity of high-shrink products. Further, with sophisticated time-based analysis, it then escalates the risk profile and engages a live intervention from a protection specialist," May told Security Systems News. "They then assess and respond to a protocol based in the actual risk. This is a best case model leveraging intelligent video coupled with a loss-prevention certified specialist that responds and reduces the customer's potential shrink losses." (more)

Think about it. Dollar Stores, yes DOLLAR STORES is going to invest about $14,750.00 per store, per year (actually more factoring in the "protection specialist" cost) to protect their dollar items from "walking"! They know the value of a dollar.

How much have you invested in your business counterespionage program to keep your intellectual secrets from "walking", your corporate secrets from "talking", and your strategic conversations from "bugging"? We can help, call us.

Wednesday, May 18, 2011

U.S. Secret Service to Enhance its Telecommunications Intercept Capabilities

The U.S. Secret Service wants to replace its existing telecommunications interception system with a new, all-inclusive intercept platform that can collect, analyze, decode and reconstruct voice, data and Voice Over Internet Protocol (VOIP) communications.

The new system will be used by approximately 250 Secret Service analysts, monitors and administrators, on a 24/7 basis, according to a sources sought notice published on May 12 by the DHS component.

“The system must be able to decode multiple specified common telecommunications application & network protocols,” said the agency. It must also support the automatic translation of intercepted messages in “numerous highly specific foreign languages,” which the Secret Service did not identify. (more)

U.N. Nuclear Agency Diplomats "Fear" Cell Phone Bugging During Visit to Iran

The U.N. nuclear agency is investigating fears from its experts that their cell phones and lap tops have been hacked into by Iranian officials looking for confidential information.

Diplomats tell The Associated press that the hardware apparently was tampered with while left unattended during inspection tours in the Islamic Republic. (more)

Pssst... Buy the book. Know for certain.

Monday, May 16, 2011

Mini SpyCam Now with 720P HD Picture Quality. Awesome.

from the sellers web site... 
The Little Brother Key Chain Pinhole Camera has so many uses; Great DVR Surveillance for Private Investigators and Journalists. Let your Small Spy Camera be as hidden as you are. This light and covert tiny spy camera will let you get it done without incurring suspicion. Use as a Nanny Cam – No one will Suspect your tiny spy camera is Recording.


                       Change video setting to 720P.

College Students – Never miss a lecture by a Professor again! Currently House or Apartment shopping - Never get confused on another property again. Capture those Funniest Moments with just two clicks of the Little Brother wireless spy cam. Memorialize Every Wonderful moment with your Mini HD DV Camera. (more)

Why do I mention it?
So you will know what you're up against.

Sunday, May 15, 2011

Cell Phone Spyware for Kids, or... The Santa Clause

South Africa - A new startup has entered the mobile stage to help parents keep track of their children’s mobile usage. Mobilflock a Cape Town-based startup, that says it makes “cell phones safe for kids by giving parents visibility over how they use their phones, and tools to protect their children from harm.”

The startup is the brain child of Patrick Lawson, founder of Clickatell who according to co-founder Vanessa Clark, “realised the need to protect children on their mobile phones in the same way you would them on a computer”.

The web is crawling with apps and websites that help parents track and protect their children from the dangers on line. Mobiflock joins the likes of Nokia’s Kno-Where an application that allows parents track their children’s whereabouts and activity on less savoury websites like Cell Phone Tracking, and provides parents or quardians with a way of ‘spying’ on any mobile phone...

Here is how it works, parents visit the website (or the soon to be launched Ovi Store and other apps) to download a client onto their child’s mobile. This client then gives parents access to a “secure” online dashboard to monitor phone traffic (calls, messages, web browsing, location), and parents can then set up security barriers and alerts for their child. (more)

Free Tickets to International Spy Museum with Stay at Marriott's Nearby "Safe House"


The Washington Marriott at Metro Center is offering an exciting downtown Washington, DC hotel package which includes Spy Museum tickets and hotel accommodations. With International Spy Museum tickets, guest can indulge in conspiracy theories, spy traps, military intelligence and the fascinating world of espionage... (more)

Sons of Blackwater Open Corporate Spying Shop

Veterans from the most infamous private security firm on Earth and one of the military’s most controversial datamining operations are teaming up to provide the Fortune 500 with their own private spies.

Take one part Blackwater, and another part Able Danger, the military data-mining op that claimed to have identified members of al-Qaida living in the United States before 9/11. Put ‘em together, and you’ve got a new company called Jellyfish. Jellyfish is about corporate-information dominance. (more)

Saturday, May 14, 2011

VoIP Phone Eavesdropping Alert

Contact centers and businesses using a popular make of internet phone were at risk of having their communications intercepted and confidential information leaked, a hacking group demonstrated.

Security consultant Chris Gatford showed SC Magazine how internet-protocol phone systems from market leader Cisco were vulnerable out of the box to attacks that were widely known. He said customers of his had lost $20,000 a day through such exploits.

A Cisco spokesman said the networking vendor was serious about security and advised users to apply the relevant recommendations in the manual to secure their systems. 
( Products / Security)

Gatford said VoIP phone systems could turn on their users, hacked to become networked listening devices or 'bugs', wiretapped remotely or silenced, blacking out communications. Contact centers that often use internet-protocol phones because they were cheap to run, were especially at risk, he said.

“It is the closest attack in a real world environment that mimics so many of the scenes Hollywood likes to show us” Gatford said.

You can imagine if you’re an employee who wants to listen into the boss during a meeting, that the phone in the conference room will be a target.” (more)

Friday, May 13, 2011

"£50,000, or yer lucky charms video goes public."

 Ireland - A group of men allegedly demanded £50,000 from a businessman by threatening to release a stolen video to the media, a court has heard.

Belfast Crown Court heard that police arrested two of the five defendants minutes after the alleged victim, known as Witness A, handed over £15,000.

A barrister told the court that the video was inside a car belonging to Witness A which was stolen in 2001.

He added the video "was of a nature that he did not want anyone to see". (more)

Super Injunctions - The New Privacy Club

Something rather interesting is happening to privacy, in the breakneck world of the internet. It's being privatized.

Legislatures around the world are flummoxed by the sheer breadth of the internet-related privacy issues piling up with exponential speed on their doorsteps...

As governments struggle with these questions, the privacy mercenaries are moving in. The most obvious example currently is in the United Kingdom, where a court remedy known as the "super injunction" has evolved as a high-priced means of shutting down unfavorable stories about celebrities and business people in the media. Here's how it works... (more)

More Sports Spying - The 2018 World Cup Caper

England football chiefs hired a team of spies to snoop on rival bidders for the 2018 World Cup, it was claimed yesterday.

Undercover agents were paid by the FA to infiltrate Zurich hotels where Fifa committee members were staying last December and report what they learned.

One FA spy even mingled with guests – including Prince William, PM David Cameron and David Beckham, who were drafted in at the last minute to lobby for the bid – in the city’s Baur au Lac hotel...

The FA refused to comment ­officially yesterday, but a 2018 official admitted to the Mirror: “Yes, we had a private security team.

There were undercover people inside the Baur au Lac. They were in the lobby and the bar, listening in. It’s not illegal to listen to conversations.” (more)

Why is this important to you?
Sports is just another business. Big business. Just like your big business. The same tactics are being used against you. Most often it is successful and unnoticed. Time to bring a counterespionage consultant on board.

Wednesday, May 11, 2011

Spy News as seen from London - The WhiteRock Report

 via WhiteRock...
• Hotel Wiretapping: Latvian Security Services Accused in Planting Bugs in Radisson
• Apple Design Theft: Three Chinese Workers Charged over Leak of iPad 2 Specs
• Espionage Fear: Swiss Intelligence Lists Economic Spying among Major Security Threats
• Trillions for Trade Secrets: South Korean Security Service does the Espionage Maths


Hotel Wiretapping: Latvian Security Services Accused in Planting Bugs in Radisson
An eavesdropping scandal has broken out in Latvia, one of the Baltic States. An investigation was launched last week to find out whether the National Security Service has eavesdropped the VIP rooms in one of the high-end Radisson chain hotels, popular among foreign dignitaries.

The country’s former transportation minister, Ainars Slesers, made the allegation in a TV interview, which became the basis for the investigation. He claimed the luxury suites at the Radisson Blu Ridzene in the country’s capital Riga were bugged over a long period of time, while the hotel hosted numerous foreign and local high-ranking officials. The constitutional Protection Bureau, which carries out wiretaps in Latvia, refused to comment on the allegations. 

Raili Maripuu, WhiteRock Managing Director: "Many government bodies and global corporations alike neglect the appropriate security measures when utilising hotels to host high value meeting and events. This investigation into wiretapping in the Radisson hotel is a stark warning to businesses that rely solely on in-house security provisions. Solutions to counter unauthorised surveillance at events and meetings in public locations exist, which aim to mitigate exposure, maintain confidentiality and avoid subsequent embarrassment and financial loss."
Read Full Story from Original Source... 


Apple Design Theft: Three Chinese Workers Charged over Leak of iPad 2 Specs
Three employees of the China-based computer components manufacturer Foxconn, arrested in December 2010, were charged two weeks ago for violating trade secrets when leaking the design of the iPad 2.

Apple was alerted to the leak by the fact that some accessory manufacturers were prepared to offer cases for the iPad 2 ahead of the product itself going on sale. Foxconn supplies the components for the Apple products, such as iPhone, iPad and MacBook, but also works with HP, Dell, Microsoft, Sony and Samsung.
Read Full Story from Original Source...


DID YOU KNOW?
The US Congress recently gave an option to ban a scientific collaboration with China due to extremely high espionage risk. Source: Forbes 


Espionage Fear: Swiss Intelligence Lists Economic Spying among Major Security Threats
Switzerland’s National Security Service outlined commercial espionage as one of the greatest future threats in its report published last week.

The report warns that economic espionage can undermine state sovereignty, weaken the competitiveness of businesses established in Switzerland and threaten the financial industry. Swiss Federal Intelligence states further that to fight economic espionage, protective and preventative measures are needed, such as the Government’s Prophylax training programme, which aims to help private corporate and research institutions to better protect themselves.
Read Full Story from Original Source...


Trillions for Trade Secrets: South Korean Security Service does the Espionage Maths
The South Korean Industrial Security Center, which works under National Intelligence, estimates that the damage from trade secret leaks to local companies’ amounts to over 50 trillion KRW, i.e. nearly 28 million GBP per annum. (about 46 million USD)

The sum includes the funds that companies invest in technological development and the damage incurred by technology leaks leading to sales and export failure.

The Korean Association for Industrial Technology Security, which conducted a similar survey late last year, established that nearly 80% of the SMEs developing nationally important technologies found themselves at the danger level.
Read Full Story from Original Source...

Tuesday, May 10, 2011

Anatomy of an FBI Vehicle Tracking Device

The FBI's use of GPS vehicle tracking devices is becoming a contentious privacy issue in the courts, with the Obama administration seeking Supreme Court approval for its use of the devices without a warrant, and a federal civil rights lawsuit targeting the Justice Department for tracking the movements of an Arab-American student.

In the midst of this legal controversy, Threat Level decided to take a look at the inside of one of the devices — which are generally custom-made for law enforcement. Working with the teardown artists at iFixit, we examined a device an environmental activist discovered on her vehicle in 2005, which she recently provided to us.

What follows is iFixit's analysis of the first-ever dissection of an FBI vehicle tracker. (more)

Monday, May 9, 2011

WPEC Reports - Spying on you: Cell phone snoops

 

Our deepest secrets are often told during cell phone conversations. Could you imagine if someone would have constant access to your personal information by tapping into your cell phone and listening to your private conversations?

Chai Chaiyanan and his fellow college students are chatting, not knowing danger is about to walk by. A man swiped his smart phone. What the stranger is about to do is nothing short of spying. He's planting a special application that can turn Chai's phone against him, his every move monitored by a mobile spy app.

Turns out the scenario is not a real one and Chai knew he was being spied on. But FIU technology professor Faisal Kaleem, who posed for CBS 12 as our bad guy, says it can happen to you as long as you leave your phone unattended.

Kaleem is talking about powerful apps like Flexispy and others, that once secretly installed are hidden in your phone and untraceable to you.

Room bugging is one function. The bad guy calls the victim's cell and it instantly activates the phone like a microphone. The bad guy can monitor our conversation and the phone appears to be off. (more) (antidote)

Flash: World's Thinest Cell Phone to be announced tomorrow.

via gizmag.com...
Researchers from the Human Media Lab at Canada's Queen's University have created a fully-functioning floppy E-Ink smartphone, which they also refer to as a paper computer. Like its thicker, rigid-bodied counterparts, the Paperphone can do things like making and receiving calls, storing e-books, and playing music. Unlike them, however, it conforms to the shape of its user's pocket or purse, and can even be operated through bending actions.

"This computer looks, feels and operates like a small sheet of interactive paper," said its creator, Roel Vertegaal, who is also the director of the Human Media Lab. "You interact with it by bending it into a cell phone, flipping the corner to turn pages, or writing on it with a pen." ...

The technology is the result of a collaboration between Queen's University and Arizona State University, and will be officially presented on May 10th at the CHI 2011 conference in Vancouver.

"This is the future," said Vertegaal. "Everything is going to look and feel like this within five years." (more)

Santa Eyes Help Sanitize Bad Guys - UWB Radar Sees Through Walls

 There’s a new tool available for soldiers, special forces, and police officers who must surprise a high-value terrorist or enact a hostage rescue: a one-man backpack radar that can see through walls. 

The radar technology is a few years old, but the device — the Prism 200c system from Cambridge Consultants — fits into a small pack and weighs less than 15 pounds. It provides data on the location and movement of people inside a room or building on a handheld device, meaning only a single operator is needed. That’s a big advantage in the field; previous systems were heavier and required a second person with a laptop computer to receive the data. (more) (videos)

Security Fail #100 - The Secured Ladder

Seen in my travels...
When you want to keep your office ladder where it belongs you lock it up, right. A sturdy bicycle lock should do the trick. Smart. 

In fact, you might want to keep the bicycle lock attached to the ladder so you can lock it up wherever you happen to be using it. Oh, very smart! 

Electrical conduit in the maintenance closet makes a sturdy anchor. Nobody is going to risk getting electrocuted sawing through electrical conduit to steal a crummy ladder. Wow, very, very smart!! 

And, we'll attach the lock to the conduit with velcro in case we lose the key... (Blammmmmpppp!) FAIL.

Is that an Atomic Clock in your pocket, or are you just hot to see me?

Atomic clocks are one of those things that most of us have probably always thought of as being big, ultra-expensive, and therefore only obtainable by well-funded research institutes. While that may have been the case at one time, a team of researchers have recently developed an atomic clock that they say is one one-hundredth the size – and that uses one one-hundredth the power – of previous commercially-available products. It's called the Chip Scale Atomic Clock (CSAC), and it can be yours for about US$1,500 ... a little more than what you might pay for a regular clock, but not bad for one that varies by less than a millionth of a second per day. (more)