they get to a position of you know like super strength where you know nothing can touch him any longer and then maybe inevitably it's like eh you know thanks for the uh report we'll let you know maybe maybe not and maybe we'll fix it and maybe not epic this slime ball registrar and host has confirmed their hack last week we talked about the email i received when some grc domain email accounts were obtained from the domain registrar and web host epic at the time epic was denying that anything had happened uh it took him a week to acknowledge what all the evidence showed they finally did so i wanted to quickly follow up threat post's updated coverage of this quoted the cto and co-founder of blue hexagon he explained uh and that this guy has nothing to do with epic but but why they quoted him to get some context for why this was happening and so the cto and co-founder of blue hexagon was quoted by threat post saying this has happened to a lot of the right wing outlets parlor and gab for example because they had been brought up in record time to capitalize on current events like the election vaccines voting and de-platforming to be able to fundraise or get traction quickly he said unfortunately this usually means that security takes a back seat due to business pressure right it's like hey get go get us a website get us online and as we know security takes extra effort so it's not surprising that security is lagging and lacking and he says which can result in breaches usually hacktivists are not known to be as sophisticated as nation state groups or the big game ransomware operators but nowadays a lot of tools and malware are for sale and can be used by anyone who is reasonably technically adept at penetrating networks and of course last week's topic was about cobalt strike which is precisely that sort of out-of-the-box turn-key off-the-shelf hacking tool so that's what's going to be happening if you're in a big hurry to get yourself online i know and unfortunately if you paint a target on yourself and you know there was so much news this week i didn't have a chance to get to all of it but i did keep checking back in with URL_TOKEN and this attack continued at one point a couple days ago they thought they were back online and then in an updated tweet they said oh uh apparently our u.s points of presence are back down and now there's yet another voip vendor uh URL_TOKEN which has been suffering another ddos attack so twit advertiser by the way and by the way look at a huge because they're the backend for google voice and a bunch of other stuff so when URL_TOKEN goes down this boy this is a tough ransomware uh play you know i mean geez yeah yeah and it's hard to defend against this stuff right as i said that the when you're looking at request-based attacks you need filters for those requests and nobody's built filters for voip requests and because it's a it's a real-time technology unlike a web query where you can afford to kind of bounce it around a bit and make it you know jump through some hoops voip may be a tricky protocol to uh to protect and this may just be the beginning of new protocol specific attacks that we're
NO_SEGMENT_TOKEN