22:55 So, okay. So what did they hack? Just a government website that they get some important documents from Granholm I can tell you what they say more hydrogen! It's not that hard to imagine what she is talking about Well there is also this thing about the DMV records of it What difference does it make Exactly Take action I think This is, and by the way this was an evolutionary reporting. Yes thank you! Because when it first came out there was well blah blah nothing to it and its not Russia we checked on that then all of a sudden became Klop. Yeah, Klop. But now its not the Russian government so we know its not the Russian government. Its Klop! I think...and the real thing that stands out like a sore thumb to me
23:45 is Johns Hopkins. Yes, spook! Out of the blue it's this this this John Hop- what other universities were hacked? This is like one of those stories you see where 30 people are killed so they can execute one guy and he gets lost in the shuffle hmm I think John Hopkins was a target for some reason And the rest of it is all smoke screen, just so we don't start noticing Johns Hopkins. I like it! Makes a lot of sense. What do they get from Johns Hopkins? That's what we need to know. Well... They probably have... If its kind of a front for the intelligence groups any one of them
24:36 There's got to be information that has come to light. Yeah, well the way it's played in the mainstream US Department of Energy got ransom requests... Oh I have a ransom request for you? Excuse me! Thank you. It was just a request. I can't pay this sorry Okay well it was only a request don't take it seriously From the Russia-linked extortion group now it's an extortion group CLOP It's an extortion group. At both its nuclear waste facility and scientific education facility that were recently hit in a global hacking campaign. See, these are all words that are all... Data was compromised at the two DOE entities after hackers breached their systems through security. So this is different! They breached their systems? Are they in the network?
25:32 After they breach their systems through a security flaw in the file transfer tool, move it to transfer. The software is widely used by organizations around the world to share sensitive data." Have you used it? No! I've never even heard of it. We use SFTP... It's widely used! Well, I'm not an organization. Just a dude Do we know that it's widely used? I've never heard of it either From the US government department to the UK's telecom regulator and energy giant Shell. See, energy...energy! A range of victims has emerged since Burlington Massachusetts-based Progress Software found the security flaw in its MoveIt transfer product last month
26:17 Last month. Last month? But now the wide-ranging impact of it shows how even the most security minded federal agencies are struggling to defend against ransomware attacks Ransomware gangs typically scour for such widely used tools This is conflating two stories Mm-hmm Ransomware we know how that works Yeah, and it doesn't work through moveit. Yeah wait here's a little more interesting...here we go The ransom requests. A ransom, isn't a ransom... Ransom request is not the same as ransomware No it's but it also would be a ransom demand not a request
26:58 Yeah, ransom. Exactly I agree They demanded ransom Oh they requested ransom So why are they using the word request? The ransom requests to the Department of Energy came in emails to each facility said the spokesperson without revealing how much money was demanded Well what kind of request is that?! Whatttt? They came in individually, not as kind of a blind carbon copy. Oh! So it was targeted email? The two entities that received them did not engage with Klopp and there was no indication the ransom requests were withdrawn Now they go straight into the Department of Energy which manages US nuclear weapons and nuclear waste sites related to the military
27:42 Yeah, they do a lot more than that but okay. They talk about battery cars. Notified Congress of the breach and is participating in investigations with law enforcement and the CISA. Oh, Klopp did not respond to requests for comment but in a post on its website... Wait a minute! Klopp has a website? Do they have a spokesperson? Well, they didn't respond to requests for comments. They must have a PR at Klopp dot org I guess in a post on his website it said yeah it said all caps we don't have any government data! Gotta do with Russian boys and suggested
28:25 that should the hackers inadvertently have picked up such data in their mass theft, we still do the polite thing and delete all. But they're polite! What is this? What kind of hackers are these?! Oh wow... This is a scam. Recorded future analyst Alan Liska said Klopp was likely making a big deal out of how they purportedly deleted government data in an attempt to protect themselves from retaliation from Washington and other governments this is horse crap like massive loads of it too now
29:05 I don't, the whole thing with requests. But what's the point? Again Johns Hopkins shows up as the big red flag on this. Let's just listen one more time to the... Which school it was? Tonight, senior government officials are racing to limit the impact of what one cyber expert is calling potentially the largest theft and extortion event in recent history. American targets include multiple federal agencies including the Department of Energy plus Johns Hopkins affiliated hospitals in Maryland and Florida Affiliated hospitals? Affiliated hospitals in Maryland so... Georgia's statewide university system Maryland and Florida
29:48 Hmm, Maryland. I don't that's interesting well. I mean there's a lot more they don't mention Any of the other ones there hmm here we go Johns Hopkins what we do It's at Children's Hospital. I think in st.. Petersburg Florida Yeah, I don't know the whole thing is weird and and I was hoping it would fit into Klaus You know we all know but still pay insufficient attention to the frightening scenario of a comprehensive cyber attack which would bring to a complete halt
30:32 to the power supply, transportation hospital services our society as a whole. The COVID-19 crisis would be seen in this respect as a small disturbance in comparison to a major cyber attack To use the COVID-19 crisis as a timely opportunity on the lessons cybersecurity community can draw and improve our preparedness for a potential cyber pandemic. It could just be, you know beginning of a setup created a bit of tension like oh everywhere Oh they got my driver's license whoo-hoo yeah something like that by coincidence if there is such a thing