The Logic Bomb That Took Down the World's Richest Oil Company🎙Darknet Diaries Ep. 30: Shamoon
Vložit
- čas přidán 29. 06. 2022
- In 2012, a Saudi Arabian oil company was hit with the most destructive virus ever, sending shockwaves through global markets. One woman hired an elite team to fix the destruction.
Episode 28: • The Secret Hacking Uni...
Episode 29: • The Most Sophisticated...
Visit darknetdiaries.com/episode/30/ for a list of sources, full transcripts, and to listen to all episodes. - Věda a technologie
This entire podcast is underrated. Every episode is gold.
Its one of the most known podcasts, what do you mean underrated? Agree that every episode is gold.
@@skizz_ I just found it
@@Linnitup7755 You are in for a ride.
I only found it other day, not even into computers like that other than liking the idea of it. The Xbox hackers got me hooked. Fascinating every time.
True. It is like watching a blockbuster 👍
I'm binging this series. Dude needs a TV show.
Great candidate for OTA Digital TV Channels - I'm trying to learn more about it. But definitely a great candidate - anyone can learn.
You shouldn’t be scared that a hacker can take down a company. You should be scared that we (the world) have allowed ourselves to get to a point where one company controls 25% of the worlds energy
Facts this guy is such a system cuck.
@@fidelio9301 fact you're nothing but a sheep that took that experimental product like an idiot
We didn't allow anything, geography did
@@Laotzu.Goldbug remember that Victor's always writes there version of his-story
This is a good point
your podcast is so well produced! damn, I'd love to see it in netflix
Make this podcast with video, interview. Netflix will come to you!
@@josvooges agreed wholeheartedly, as much as there are people who would not want to be interviewed on video it would be way cool and fit the mysterious side of the show if they were talking from the shadows with a trench coat and hat and their voice all digitally distorted. i got so many angles of how this could work!
This series deserves to be fully animated
I'd love to make it animated but having trouble finding someone to do it. The 10 second theme music animation took 3 months to complete.
"imagine if gas prices tripled overnight" well in 2022, we don't have to imagine anymore :(
Yeah and now almost 2 years later the world is chugging along just fine.
FJB
@@brilobox2 that's a pretty ignorant reply tbh..... To put your reply in perspective it's like saying "the Jews suffered under Hitler's rule? Who cares everything's fine now"
@@anotherguy9402 dude. its $5 for 20 miles. ur ok
@@anotherguy9402 to compare gas prices to the holocaust if f***king absurd
your content is not just entertaining but also an eye opener for everyone on the dangers of skimping on computer security.
Just such a gosh darn great podcast, I've been listening for years now. And the stories are what keep reminding me that cyber-security is far more interesting, dark, and full of craziness than most people (even info-sec folk) really realize! Thanks again Jack!
As always, amazing content, can't wait to see you hit a million subs 🤞
I just subscribed couple weeks ago but I love jack man. I hope he wakes up knowing he's doing something to make people happy and that he deserves to be happy. No tip riding just some genuine love from the community
I hope so too!
It honestly blows my mind the people you get to talk to, I'm not in IT myself but have grown up around the community, and know many people who'd be very jealous of the people you know/talk to (not that they'd admit it lol)
I hate hackers
I need my id back
Been listening to you for a few months now , have learned a lot from you and about Cyber. Just wanna thank you for the time you put in and your honestly the best podcast on Hacking and Cybersecurity. Ain't NO ONE CLOSE, Hope your doing well man :D
I'm an expat listening from Saudi while I'm at work. Just started this but I'm already very interested. Thanks for your awesome content!
Great podcast and glad too see these youtube versions.
Amazed at how you're able to score all these interviews! Great job!
I did this interview in a hotel room in Las Vegas during defcon in 2018 I believe .
I can't believe this channel doesn't have more subs and views. This is amazing and very fascinating content. 🤯
Great episode, I'm so amazed that stories this big don't reach the news.
love this show ❤️ as always great content
Since i cannot comment in Google podcasts i come here to comment on your episodes i just have three words for you - you are amazing
This podcast is so informative and I love how it details the threat method and the consequences of it in the real world. I’ve binge watched all of these already having just found your podcast not that long ago roughly 1-2 months ago. I love the intro, the animations and the background art too😍. Thanks Jack for such amazing content 🙌
That 36 hour rule is super Dutch. Every bank I worked at had this exact rule. I think it had something to do with the financial crash of 2008 and all the malpractices at banks were exposed. Everyone works less then 36 hours including management.
Literally one of the only comments that has some info 🤙
Just subbed, love your content. Also glad you have proper subtitles, many yt podcast even with millions of subscribers aren’t even doing that for some reason
Love the content, looking forward to more :)
Jack can you make a second channel dedicated to dark internet mysteries. You and nexpo have the best voices on CZcams.
I don't like conspiracy theories so much. I find they add more misinformation in the world that's already full of misinformation. So it's hard to cover an internet mystery without bringing up some conspiracy theory.
Great stuff once again.
A suggestion: if you make a recommendation that someone watch other episodes prior to this one, it is really helpful to include links to such episodes in the description.
Thanks again and I look forward to more excellent episodes.
I love your podcasts
You need more subs for sure my man
Jack .. u saved my business. Listen to show. I noticed someone in my account laying dormant for months. Thx bro
Thank you for pointing to ep 28 and 29.
Best podcast I’m addicted.JRE is in trouble
Great work
awesome episode
You’re incredible jack thanks for bringing everything you do to light. 🥰
Wow 👏 awesome podcast
Great story.great channel
Wow this one got me pumped up!
Saving to watch later.
Imagine being so talented and on the cutting edge of a field, and you just get lured by money to serve the oil industry with your exceptional skills... This podcast is at the same time brilliant and awfully depressing.
Great content. Love the cover art.
I’d suggest as you grow with funding consider adding visual art throughout the CZcams version that illustrates the story post-production of the podcast. This would make for a great visual experience. It could be sketch art or stock photos / videos or historical video snip-it’s or photoshopped stills. Many highly successful channels do this, each with their own flavor...
Some benchmark channels I’ve been following for years (across various genres):
Jake Tran, Coffeezilla, Real Engineering, Dark Footage, Brew....
Each of these channels have evolved their studio art and visual illustrations. So you could start simple and then expand as the team grows...
start making the dream team list of artists you want on board. With this level and quality of content and story telling you will be there sooner than you thought possible.
that would be hard but cool
Yeah maybe this is my middle phase. The first phase was just a stock video of like purple water. I didn't like it so I stopped. This phase has a ton of original animation. But I get it, it's not consistent with what the episode is talking about. I do want to have more visuals but it'll be a while til I get there.
Ha ha... its funny how often Romanians show up in IT and cyber security... its awesome!
Hell when I was growing up some Romanian neighbourhoods created their own networks to share files 🤣 and files would get sneaker netted from one network to the other... it was so fun having such a grass roots setup.
I love your podcast!!! One problem: you mention podcast numbers, yet many of them are un-numbered 😥
Great stuff as always and here's a comment for the algorithm!
Hi sir, Oh yes you are back with another episode...
Your podcast are just too Amazing, inspiring and great.... keep up the good work jack!
Thank you! Will do!
My favorite episode
Yes “imagine” like gas prices aren’t destroying things now lol
To be honest, the attack might have benefited it Saudi Arabia in the long run, since then they have matured a lot,
They are now
12th in the National Cyber Security Index
2nd in the Global Cybersecurity Index
the bestpodcast
Thanks a lot brother. ..still trying to understand how did Houston, Texas have a visibility on what went into Aramco...
Were they outsourced?
At the time Houston had an IT team, no security team. They saw part of the start of the attack in April/May 2012 . But Saudi said new phone who's dis. _ person Jack interviewed for this episode
This is a movie waiting to be written!
Lets go started
It is not the most profitable company ever existed. V.O.C was, Dutch East India Company. Great video though, I love watching your videos.
drop links for #28 29 in the description plz
You stopped labeling the NUMBER after episode 18. I cannot find the two prerequisite episodes
INTERESTING ONES AGAIN :)
THANK YOU FOR SHARING :)
THANK YOU FROM ISRAEL :)
This is genuinely terrifying. How long before an IOT hack causes an environmental disaster
Probably already happened.
Not really considering that there aren't many people who know how to work older systems in addition to that there are even fewer who know how to crack into them. Also these systems are often air gapped from the internet and run on their own intra-net.
@@mehmeh1999 Yeah, definitly. However, Stuxnet demonstrated that air-gapped systems aren't bullet proof. Lots of IOT devices connected to the net too, just ask Shodan :). I get your point though, would probably require an intentional state sponsored effort to cause said disaster.
@@haXez_org As we can see in Ukraine even state sponsored actors can't reliably take down infrastructure. Some things are just too old, or too restrictive. But then again these are near first world countries going to war. It's still to be seen what would happen if two world powers went to war. China vs U.S., China vs R.F., China vs India, Etc.
my grandma is 95 still drinking 3 highballs a day. My grandfather she was widowed to, smoked up to his death... not from smoking but from mesothelioma from asbestos in the airforce
TBH: none of us ever know when
awesome
Hey Jack where is those book links??????
Are these In a different order to the ones on your podcast releases?
It is very surprising to me that Saudi Aramco would put a woman in such a critical and powerful position
Shamoon-a!
Hee-hee!
Saudi Aramco is a public company, its traded on the Saudi stock exchange
It had an Ipo in 2019 if I'm not mistaken.
Just imagine cloudflare google and AWS gone at a same time 🤯😵
Developers developers developers...
I’m loving these podcasts - instantly subscribed after hearing my first episode!!
As for the first trillion dollar company being Apple, my understanding is that Apple were the first consumer technology company to become a trillion dollar company.
they have so much money i like that
Hack the world with osint seems to be an old book… is this an old episode?
It’s an older episode. Looks like he’s moving his podcast library to CZcams
Well 2012 WAS 10 years ago. From a technological development standpoint; It's outdated.
I wish I could work for her
Could you do a video that specifically and without prejudice villainizes the CCP ?
CCP is the most corrupt dictatorship on earth destroying the earth’s atmosphere with pollution and annihilating human kind with Covid bio lab diseases. 🇨🇳
Hard not to villainize a bunch of villains.
I'm slightly surprised the first phone call did not include, "Sending a plane for you!". I have a job, "Speaking away from the phone, "How much is xxco in he Netherlands worth?, Buy it" Then back to her. "Well, we want you, and if I have to buy the company you work for I will."
As someone familiar with the subject, she did exaggerate a bit. She did get a fat paycheck, but most of the other stuff was somewhat "embellished," should I say? Great show nevertheless. Don't take it fact for fact, though.
Could you please post the links for 28 & 29
I just posted it in description and at beginning thanks to you.
@@JackRhysider Much appreciated.
The internet is like pop music; it's evil!
What was the Dutch East India Company worth at it’s apex?
Dutch east indian trading company
Flat networks are common, one single flat AD domain makes it easy to share data often built during the late 90's or early 2000s
Exactly what hackers rely on. Lazy people who take ease of use over security.
I only know about Saudi aramco because I’m an F1 fan lol
They reconnected to the internet. Do they never learn???!!!!
Ask ALEKSANDAR how he know about everything.
I'm just at the beginning, but how tf do you not know Saudi Aramco? Sure it's not as well known as Netflix, but it's one of the biggest companies in the world! And by the way, yes they had their IPO in 2019! And yes it was a big deal - everyone knew about it!
I love these stories but the music and sounds you put in sometimes can be overbearing @15:10
It's untrue that the US gets a lot of oil from Saudi Arabia. We get 365 barrels/day from SA and that's a drop in the bucket compared to the 18+ million per day that we produce in country. The US is the largest oil producer in the world by quite a large amount and were completely self reliant on our own oil production
First, the situation is different today than 10 or 15 years ago. Second, this particular podcast is full of factual inaccuracies. It's a great show, but this particular episode is a tad sensationalist.
You got flat network and confused with networks that don't have internal firewalling flat networks mean there is no subnetting or nat I use a flat network to increase performance but I use ebpf to prevent anything from talking to anything it doesn't need to anyone that uses kubernetes network policies does the same thing but I put the nodes, services, and pods on the same subnet using cilium ipam v2
Relacxing
Idk how nuking the MBR causes perminant damage. Yeah OS not found but with a simple tool i could repair all of them. It would take hours per machine but i could bring it back up. None of this damage is at all perminant.
I mean put yourself in that situation. 1. The malware has not been analyzed. No telling what it actually does, you just know the MBR is hosed. 2. You need to get back up asap. 3. You have the budget to buy a new hard drive.
@@JackRhysider Master boot record, It just fucks the software of OS. If you wipe the hard drive the you're good. Alternatively you could just use recovery software on the hard drive and transfer the data to a working computer. Then wipe the original hard drive.
Good luck doing it on tens of thousands of machines, or doing it when you don't have Internet access, or when you have a hundred execs breathing down your neck. Hindsight is a biatch, easy to attribute stuff from one's homebred experience with digital forensics, but real life enterprise stuff is a lot more entertaining.
luck can give a lot of money to stupid people...and take them fast
10:45 Saudi-Aramco had never gone green. Paperless maybe, but never green unless that's what you call making US dollars off oil
I noticed that. Pay me millions on a contract, and I'll say my oil company "is green" also, lol. Like a label on something saying "all natural." Yeah, well, my crap is all natural, but I'm not eating it, lol.
Rivetting
Csv savage 😂😂😂 usb that me.
Fishing attacks come whether you use the computer or not... So many of the things this lady says are just "off". It's not like you sit down and press a key and then all the phishing emails come flooding in... They come flooding in regardless. Phishing is something you can do without having previous contact with someone.
Phishing attacks are executed when the person executes/opens the attatchment in a phishing email. And of course they come in for anyone, hackers have email lists of a lott of emails. Its not hard to get a few emails from people in a company, and from there sending those emails is easy. Im not sure what you think is so off with what shes saying? You gotta actually interact with the phish to get attacked by it. The only reason someone may do it with a previous contact or whatever, is in hopes that, that person doesnt think twice opening and executing the stuff in the email. And honestly shes going pretty far into this hack so idk what youre on about, ngl.
Also she doesnt sound too smart, they asked her a price and she didnt even think about it, probably asked for only around 500k a year, they laughed at her and said lets make it 600k. lmaooo she couldve asked 10 Million a year and they wouldve done it anyway, money for these ppl is nothing. they are laughing all the way to the bank
Maybe the attack originated from a certain 3 letter agency, 1st letter c, last letter a, pick the middle letter. And she was the perfect fix for the mess. The fact they blamed Iran immediately should tell you who is the culprit.
@@jukee67 Likely an inside job, the Sauds hate the Persians.
@@jukee67 you and your dumb conspiracies 😂
From the sounds of this hack... it sounds almost non-politic in a way. Like the goal wasn't to crush the oil tycoons lest they would have targeted the production. The hasty use of the burning american flag feels almost like a distraction. I think their goal was to disrupt the flow of energy in the world... but why? Maybe some kind of financial incentive from other shareholders in the world? Maybe its useless to speculate by this point anyways.
Also I'm gonna look like an idiot if the video explains exactly what happens as I'm only 14:45 through it...
I'm living in Chihuahua love you
from the level of their security before the attack even a child could have done all this damage lmfao why were they so insecure???
laughed when they got DDOS'd the shit out of them after they got back up
I think the facts are a little misrepresented here. Don't take everything you hear on the Internet as facts. Also a child this wasn't. APT33 isn't your average child.
It is real hard to feel sorry for the company that was attacked.
I would recommend listening to the other side of the story. Although the Saudis aren't looking for sympathy, I'm sure. This played nicely in their favor. They just sold their stuff at a higher price. The attack may have benefitted them more than you would imagine.
Hey someone send this channel 1000000000000000$ please this is great content
Knowing me I'd blow it all on loot boxes.
Flat earth, flat network! That's it
ths best podcast compartement seccion data base of traiding page downald page traiding page
Algorithm comment
Same
I don't need You nothing
Beautiful.
(y)
Wow, where do I start. While this is a great show this particular episode is full of inaccuracies and embellishments. Sensationalist much, factual it isnt. JRE usually does his checks, but this episode was sooo meh. Messing up RasGas with QatarGas, and 25% of the world's gas production? Helium, at best. They did merge in 2018, but at the time? Other stuff as well, e.g. claiming ARAMCO was the biggest cap value or most profitable, etc. The other stuff about the incident and her role... just facepalm.
Logic bombs don't wipe hard drives... Logic bombs only crash the processor / memory.
Shamoon virus "Once a system is infected, the virus continues to compile a list of files from specific locations on the system, upload them to the attacker, and erase them. Finally the virus overwrites the master boot record of the infected computer, making it unusable."
"Logic bomb" is exclusively refering to the conditional nature of the malware. The payload can be anything. Also, what does "crash the processor / memory" mean??