হ্যাকাররা ভুল গার্লফ্রেন্ডকে আক্রমণ করেছিল! | Hackers Infected Wrong Girlfriend
ভূমিকা / Introduction
রোমানিয়ায় Bitdefender-এর হেডকোয়ার্টারে গিয়ে NetworkChuck দেখা করেছেন Draco টিমের সাথে — একটি এলিট সাইবার ক্রাইম ফাইটিং টিম যা প্রায় অজানা। এই টিমটি Bitdefender-এর ভলান্টিয়ার ম্যালওয়্যার রিসার্চারদের নিয়ে গঠিত, যারা দিনে সাধারণ চাকরি করে এবং রাতে সাইবার ক্রিমিনাল শিকার করে। তাদের সবচেয়ে বিখ্যাত কীর্তি: একটি র্যানসমওয়্যার গ্যাং-এর বিরুদ্ধে ২.৫ বছরের যুদ্ধ যা $১ বিলিয়নের বেশি পেমেন্ট থামিয়েছে।
Draco টিম: সাইবার ক্রাইমের অ্যাভেঞ্জারস / The Draco Team
NetworkChuck-এর বক্তব্য: They infected the computer of the girlfriend of one of our most talented penetration testers. Huge mistake.
Draco টিমের সদস্যরা Bitdefender-এর দিনের চাকরি করেন এবং রাতে সাইবার ক্রাইম ফাইট করেন। তাদের পরিচয় গোপন রাখা হয় কারণ অপরাধীরা তাদের টার্গেট করতে পারে। তাদের কাজ: ডার্ক ওয়েব মনিটর করা, ম্যালওয়্যার এনালাইসিস, ক্রিপ্টোকারেন্সি ইনভেস্টিগেশন, এবং ফ্রি ডিক্রিপ্টর তৈরি করা। গল্পটি শুরু হয় যখন Gang Crab র্যানসমওয়্যার একটি পেনিট্রেশন টেস্টারের গার্লফ্রেন্ডের কম্পিউটার ইনফেক্ট করে। এটি ছিল একটি বিরাট ভুল — কারণ Draco টিম এটাকে ব্যক্তিগতভাবে নিয়েছিল।
“The Gang Crab ransomware infected the girlfriend of the most talented penetration tester on the Draco team, and these guys hold a grudge. This was a two and a half year vendetta.”
Ransomware as a Service / RaaS Business Model
NetworkChuck-এর বক্তব্য: Ransomware as a Service operates like a franchise, kind of like McDonald’s.
NetworkChuck RaaS (Ransomware as a Service) ব্যবসা মডেলটি McDonald’s ফ্রাঞ্চাইজির সাথে তুলনা করেছেন। কোর গ্রুপ (ডেভেলপাররা) ম্যালওয়্যার তৈরি এবং আপডেট করে, আর অ্যাফিলিয়েটরা (ফ্রাঞ্চাইজির মতো) ম্যালওয়্যার বিতরণ করে এবং ইনফেকশন ঘটায়। লাভ ৩০:৭০ অনুপাতে ভাগ হয় (৩০% কোর গ্রুপ, ৭০% অ্যাফিলিয়েট)। Gang Crab তাদের পিক সময়ে ৫০% বাজার নিয়ন্ত্রণ করত। ভুক্তভোগীদের ৭০% ransom দিতে বাধ্য হয় — $৬০০ ডিফল্ট, কিন্তু ফাইলের গুরুত্ব অনুযায়ী দাম বাড়ে। একজন ক্রিমিনালের বাড়িতে Ferrari, Lamborghini এবং হেলিকপ্টার ছিল!
- Core Group: ম্যালওয়্যার ডেভেলপ ও আপডেট করে (৩০% লাভ)
- Affiliates: ম্যালওয়্যার বিতরণ ও ইনফেকশন ঘটায় (৭০% লাভ)
- Vetting Process: অ্যাফিলিয়েট হতে লাই ডিটেক্টর টেস্ট দিতে হতো!
- পেমেন্ট রেট: ৭০% ভুক্তভোগী ransom দিতে বাধ্য হন
“70% of people pay the ransom. Think about that. Small businesses, families, grandmas, your grandma paying $600 and more that they could not afford.”
ডিক্রিপ্টর: র্যানসমওয়্যারের মৃত্যু / The Decryptor Strategy
NetworkChuck-এর বক্তব্য: Draco created a decryptor — a tool that can decrypt the files encrypted by Gang Crab ransomware for free.
Draco টিমের কৌশল ছিল সহজ কিন্তু শক্তিশালী: ফ্রি ডিক্রিপ্টর তৈরি করা। Gang Crab-এর বিরুদ্ধে ২.৫ বছরে পাঁচটি ডিক্রিপ্টর প্রকাশ করা হয়। প্রতিবারই Gang Crab ডিক্রিপ্টর ব্লক করতে ম্যালওয়্যার আপডেট করত, কিন্তু Draco আবার নতুন ডিক্রিপ্টর নিয়ে আসত। পাঁচবার এই চক্র চলার পর অ্যাফিলিয়েটরা বিশ্বাস হারিয়ে ফেলে এবং Gang Crab-এর প্ল্যাটফর্ম ছেড়ে চলে যায়। Gang Crab নিজেকে বন্ধ করতে বাধ্য হয় — যদিও তারা REvil (Ransomware Evil) নামে রিব্র্যান্ড করে ফিরে আসে। REvil-এর বিরুদ্ধে Draco-র ডিক্রিপ্টর $১ বিলিয়নের বেশি পেমেন্ট থামিয়েছে!
“This decryption tool stopped $1 billion from being paid to the criminals. $1 Billion. That’s crazy.”
AI অস্ত্র প্রতিযোগিতা / The AI Arms Race
NetworkChuck-এর বক্তব্য: AI completely eliminates the gap between a junior developer and a senior developer for criminals.
বর্তমানে সাইবার ক্রিমিনালরা AI ব্যবহার করছে ফিশিং স্ক্যাম, ডিপফেক, ভয়েস ক্লোনিং এবং মাল্টি-প্ল্যাটফর্ম স্ক্যামের জন্য। মাত্র ৮ সেকেন্ডের অডিও দিয়ে আপনার ভয়েস ক্লোন করা যায়। Bitdefender-এর AI টিম তার জবাবে তৈরি করেছে: ডিপফেক ডিটেকশন (অডিও, ভিডিও, ইনটেন্ট এনালাইসিস), AI স্ক্যামার হানিপট (যা স্ক্যামারদের সাথে ১৫ মিনিট কথা বলে তাদের সময় নষ্ট করে), এবং মাল্টি-প্ল্যাটফর্ম স্ক্যাম ডিটেকশন। তবে সবচেয়ে বড় কথা — “We’re not winning the war, we’re putting a dent in it.”
“Cybersecurity should be a fundamental human right, just like the right to liberty and the right to critical thinking.” — Bogdan, Bitdefender
মানুষের গল্প / The Human Stories
NetworkChuck-এর বক্তব্য: Every single victim that we save is a real person.
ভিডিওটির সবচেয়ে হৃদয়স্পর্শী অংশ হলো Bitdefender-এর Bogdan-এর বলা গল্পগুলো। একজন PhD ছাত্র তার থিসিস ডিফেন্ড করতে যাচ্ছিল — র্যানসমওয়্যার তার এক মাসের কাজ নষ্ট করে দেয়। Draco টিম রাতারাতি একটি ডিক্রিপ্টর বের করে তার ক্যারিয়ার বাঁচায়। আরেকটি গল্প — সিরিয়ার এক দম্পতি, যাদের কম্পিউটারে ছিল তাদের যুদ্ধে নিহত সন্তানদের শেষ ছবি। ক্রিমিনালরা সেই ছবি জিম্মি করেছিল। Draco টিম সেই ছবি উদ্ধার করে। “Cybersecurity is a human right.”
মূল টুল ও রিসোর্স / Key Tools & Resources
- Bitdefender: সাইবার সিকিউরিটি সলিউশন
- Draco Team: Bitdefender-এর ভলান্টিয়ার সাইবার ক্রাইম ফাইটিং টিম
- Gang Crab Decryptor: ফ্রি ডিক্রিপ্টর টুল
- REvil (REvil) Decryptor: আরেকটি ফ্রি ডিক্রিপ্টর
সারসংক্ষেপ / Summary
NetworkChuck-এর এই ভিডিওটি সাইবার ক্রাইমের বাস্তবতা এবং এর বিরুদ্ধে লড়াইয়ের একটি চমৎকার ডকুমেন্টারি। Draco টিমের গল্প — কীভাবে একটি ছোট্ট গ্রুপ অফ ভলান্টিয়ার ম্যালওয়্যার রিসার্চার $১ বিলিয়নের বেশি সাইবার ক্রাইম থামিয়েছে — সত্যিই অনুপ্রেরণাদায়ক। কিন্তু সবচেয়ে বড় শিক্ষা: AI স্ক্যাম দিন দিন বেশি পরিশীলিত হচ্ছে, এবং আমাদের সবাইকে সচেতন ও সতর্ক থাকতে হবে। Bitdefender-এর AI ডিফেন্স টিম আশার আলো দেখালেও, যুদ্ধ এখনও জেতা যায়নি।
📖 সম্পূর্ণ ট্রান্সক্রিপ্ট দেখুন / View Full Transcript / पूरा ट्रांसक्रिप्ट देखें ▼
📜 সম্পূর্ণ ট্রান্সক্রিপ্ট / Full Transcript / पूरा ट्रांसक्रिप्ट
🇧🇩 বাংলা / Bengali / बांग्ला:
NetworkChuck Claude Code নিয়ে আলোচনা করছেন। তিনি দেখাচ্ছেন কিভাবে ফোন থেকে Claude Code ব্যবহার করা যায় — Hostinger VPS-এ Terminal সেটআপ করে, Terminus অ্যাপের মাধ্যমে SSH কানেকশন স্থাপন করে, এবং tmux দিয়ে persistent session চালু রেখে। তিনি fail2ban, UFW firewall এবং SSH key authentication দিয়ে সুরক্ষা বাড়ানোর পদ্ধতি দেখাচ্ছেন। টেকনিক্যাল টার্ম যেমন VPS, SSH, tmux, fail2ban, UFW ইংরেজিতেই রাখা হয়েছে।
🇺🇸 English / ইংরেজি / अंग्रेज़ी:
0:00 There is an elite cyber crime fighting team hidden in Romania. 0:03 They have saved victims over a billion dollars and helped dismantle criminal 0:06 empires and almost no one knows who they are. Let’s change that. 0:17 Our journey starts here, 0:18 but Defender HQ inside this building are the members of the Draco team, I think. 0:23 Can you tell me who’s on the team? No, that’s for safety reasons. 0:27 We’ll talk more about that later. 0:28 But what they do is we lower on the dark web and we look at dark markets. 0:33 For instance, malware analysis, cryptocurrency investigations. 0:36 This decryption tool stopped $1 billion from being paid to the 0:40 criminals they infected the computer of the girlfriend of one of our most 0:45 talented penetration testers. Huge mistake. 0:48 We’re going to dive into all that, 0:49 but the most interesting and probably concerning thing I learned is when I asked 0:52 them this, do you feel like you’re winning the war with cyber crime? 0:55 We’re not definitely not stopping it. We’re definitely not derailing it. 0:58 Now, what Alex just said right there is terrifying, 1:00 and this is one of the biggest things I learned from talking with Bitdefender. 1:03 AI scams are everywhere, deep fakes, phishing attacks, 1:06 and you can’t tell they’re getting too good. But later in the video, 1:10 Bitdefender, show me how they’re fighting fire with fire. 1:12 They’re using their own AI to waste scammers, time to detect deep fakes. 1:16 It’s seriously impressive if you don’t want to miss it, but for now, 1:19 get you coffee ready. Let’s dive into the world of the Draco team. 1:24 Now, the reason we’re here, 1:25 Bitdefender HQ is because every member of the Draco team works for Bitdefender, 1:29 and that’s important to know because they are a real malware researchers, 1:33 real forensics experts that by day help keep individuals and businesses safe, 1:37 but by night they volunteer to hunt down cyber criminals, fight cyber crime. 1:42 It’s like the Avengers without the enthusiasm. 1:46 So just like Batman and Superman, 1:47 they need a day job to help cover their after hours crime fighting activities, 1:51 and that’s the rule that defender plays. 1:52 They also flew us out there and sponsored this video, so thank you. 1:55 Now this is Alex. 1:56 My name is Alex Ve and I’m the chief security strategist for Bitdefender. 2:00 He works with the Draco team. 2:02 I think he might be the Samuel L. Jackson in this scenario, but again, 2:05 he refused to tell me who is on the team because keeping their identity secret 2:08 is crucial. 2:09 They have made plenty of enemies who would love to know who they are. 2:11 That’s why the members don’t make public the fact that they are involved 2:16 into this. So they keep it confidential. 2:19 But what have they done to make all these cyber criminals so upset with them? 2:24 They infected the computer of the girlfriend of one of our 2:29 most talented penetration testers. 2:32 Now this story is crazy for two reasons. First, I love the motivation. 2:35 The guy’s girlfriend got hacked and he is like, you know what? 2:37 We’re coming after you. Now, that’s not always the case. 2:39 Sometimes law enforcement reaches out to us to ask for assistance. 2:44 Not. Number two, working with law enforcement is painful and slow. 2:47 Criminals move fast. They see you come in, they close down shop, 2:50 they change tactics, 2:51 and the Draco team has to wait months for law enforcement to catch up and they 2:54 have to be patient. But in this case, they didn’t want to be, 2:56 and they found a genius way to take down these criminals. Now, disclaimer, 3:00 they’re not vigilantes. They’re not Batman. They can’t break the law. 3:03 So instead of breaking down the doors, 3:05 they found a way to break the criminal’s trust. 3:07 Welcome to Cyber Criminal Enterprise 1 0 1, ransomware as a service. 3:11 Ransomware as a service operates like a franchise, kind of like McDonald’s. 3:15 With McDonald’s you have corporate who handles branding, distribution, 3:17 burger recipes, and then you have the franchisees, 3:20 the people who buy into it and run the actual restaurants. 3:22 There was a core group that was building the infrastructure that was coding 3:27 the malware and improving the malware. 3:29 And then you have the affiliates who like the franchisees make sure the product 3:33 is distributed to the masses or the infections are delivered to the user’s 3:36 computers. 3:37 And they split the money. Like 30% goes to the core group, 3:41 the developers, 70% goes to the affiliates. 3:45 Now, hold on, what money? Well, 3:47 you see this infection they’re putting on these computers. It’s ransomware. 3:50 Ransomware is malicious software that will grab the files in your computer. 3:53 It will lock them up to where you can’t access the files and you have to pay a 3:56 ransom to the affiliates to get it decrypted or unlocked. 3:59 But criminals are kind of paranoid, right? 4:01 Not just anyone can become an affiliate. They have to be vetted, trusted. 4:04 I heard there was even cases where they were performing tests with 4:09 a lie detector, 4:10 so they make sure that they’re not hiring undercover police officer. 4:14 This model only works if people actually like the hamburgers and are willing to 4:17 pay for them, 4:18 or if people’s files are actually getting locked up with the ransomware and 4:21 they’re willing to pay to have their files unlocked. Otherwise, 4:24 the franchisees and the affiliates wouldn’t do this. 4:27 It’s that system that Draco attacked and they made it almost impossible to turn 4:31 a profit. Gang Crabb was a massive ransomware. 4:34 They controlled 50% of the market at its peak, huge presence, 4:37 thousands of victims, millions in ransom payments paid, 4:39 but then they made a huge mistake. It got personal. 4:42 The gang Crabb ransomware infected the girlfriend of the most talented 4:45 penetration tester on the Draco team, and these guys hold a grudge. 4:48 This was a two and a half year vendetta. Now again, crab was nasty, 4:52 but it was clever. They even had tiered pricing. 4:54 The price they were asking was directly coordinated with the 4:58 amount of interesting files on the drive, and there was a default $600. 5:03 So if the machine was like fresh windows installation, 5:05 nothing interesting there, $600. 5:08 And what’s crazy is you’ll see a statistic that says 50% of people pay the 5:11 ransom. That’s not the case. It’s worse. 5:14 If you talk to law enforcement, 5:15 which also looks at the actual databases of people who paid, 5:19 it’s actually 70%. 5:21 Think about that. Small businesses, families, grandmas, 5:24 your grandma paying $600 and more that they could not afford. 5:27 The criminals were making millions. 5:29 There was a recent arrest in Russia a couple of months ago and they 5:34 were filming his house. He had one Ferrari, one Lamborghini, 5:39 a helicopter. 5:40 But here’s the thing, what if the victims didn’t pay? That’s the situation. 5:45 Draco created with a team of malware experts. 5:47 They created what’s called a decryptor. This tool is a big deal. 5:50 It can be used to decrypt the files encrypted by the gang crab. 5:54 Ransomware for free problem solved right victory. They did it not quite. 5:59 You see gang crab corporate, they stepped in. 6:01 Every time there was a decryption tool that was released to the public, 6:05 they actually modified the malware. 6:07 So now you will not be able to decrypt the new version. 6:10 But then we released a new one and so on. 6:13 Systematic disruption. Over the course of two and a half years, 6:16 the Draco team released five decryption tools, getting crab couldn’t keep up. 6:20 And after five times, 6:21 what happened was that we severely destroyed the trust between the 6:26 affiliates and the developers, 6:28 which means the affiliates moved away to work with other groups and the 6:32 administrators had no people to work with them. So they just said, 6:35 we’re closing shop. 6:36 And they were kind of mad, like really upset. 6:40 The ransomware group was actually very vocal. 6:43 They were even giving interviews in the media. They had a Twitter account. 6:47 They were cursing the defender quite often. So I’m guessing, yeah, 6:51 they were aware that they’re provoking some frustration back there. 6:55 Now, this was a victory. After it was all said and done, 6:57 the Draco team helped save victims over a hundred thousand dollars. 7:00 It’s not bad. Not a ton. 7:02 When you compare it to the millions that gang crab gained, 7:05 but the group disappeared after this. 7:07 They publicly claimed they made enough money and we’re moving on to something 7:10 else. But that’s just what they wanted us to think. 7:12 They came back with a vengeance. 7:16 The next case that was interesting to look into was another ransomware group 7:21 called Rebel, or also known as sobi. 7:24 This group was from Russia. 7:25 The name was inspired from the Resident Evil Game franchise. 7:28 I just finished Resident Evil four. Amazing. 7:30 But they stood for Ransomware Evil and just like Resident Evil, 7:33 they were a fan of making sequels. 7:35 And the reason we started looking at this one, so to speak, why? 7:38 How do we choose? 7:40 The reason we started to look at this one is because it was sharing 50% of the 7:44 code with Gantt grab. So basically they rebranded. 7:48 They didn’t go anywhere. Are. 7:50 You serious? So Gang Crab said they were done, they made enough money, 7:54 we can go home now, but nope, 7:56 they got greedy and they rebranded putting on a disguise and hoping no one would 7:59 notice. And dude Arvo was bad. 8:01 They were responsible for several high profile ransomware attacks like the meat 8:05 processing company, JBS. 8:06 They disrupted the food supply chain or the oil company, 8:09 colonial Pipeline and the software company, 8:11 Kaseya and a supplier of the tech giant Apple Millions were paid out, but Draco, 8:16 they were ready. 8:17 This was another investigation that took about two years, 8:20 so it finalized in 2019, something like that. 8:24 And we were also able, in this case, to have another decryption tool. 8:29 And this time, 8:30 this decryption tool stopped $1 billion from being paid to 8:35 the criminals. 8:35 $1 Billion. 8:37 That’s crazy. 8:38 So similar to Gang Crab, 8:39 they were able to produce a Decryptor tool and they just gave it to everyone for 8:43 free. Here’s an article they wrote about this. I’ll have a link below. 8:46 You could even still download the rebuild to crypto. Let’s try it out. 8:49 It’s an E xe. Hopefully this is safe. I’m sure it is. Yeah, here it is. I agree. 8:54 Let’s see what, and it still works. And in the same way, 8:57 they had affiliates distrusting Reveal Corporate. 9:01 So they were already frustrated. They weren’t making money. 9:03 And then there was another fun find. 9:04 A backdoor was discovered in the malware that revealed that Reveal Corporate was 9:07 cheating their affiliates out of money. 9:09 And that was the last nail in the coffin. Dismantling that empire. 9:12 Doesn’t that get you hyped? I mean, that’s so stink and cool. 9:15 It took four and a half years, 9:17 but they helped take these guys down and not just take them down. 9:20 They helped so many people saving over a billion dollars. 9:23 Now getting back to the article. This guy who wrote it, I got to meet, 9:26 let’s zoom into his face. Bogden. Actually, he’s right here. 9:29 My name is Bog Atu. I’m a director of threat research at Bid Defender. 9:33 This interview was awesome. We’re going to dive deep into that here in a moment. 9:36 But for me, 9:36 it was the time I had with Bogden outside of the interview when we went out for 9:40 a few drinks and we’re just sitting there chatting, getting real. 9:42 We talked about these situations, 9:44 the victims of gang crab in Ville and other ransomware, 9:47 and we’re sitting across from each other and he’s got tears in his eyes telling 9:50 you the stories. This guy, he’s passionate about this. And it’s not just him, 9:53 it’s the other people at Bitdefender. 9:55 It’s the members of the Draco team being there. I got to feel it. It’s real. 9:59 These guys are superheroes, but are we winning? Are we stopping ransomware? 10:03 I mean, we’re not definitely not stopping it. We’re definitely not derailing it, 10:07 but putting a dent, yeah, I would say that’s the fair. 10:10 So no, we’re putting a dent in it, but it’s still a huge criminal enterprise. 10:14 They’re still raking in money and the Draco team proves something important. 10:18 We can fight back, but of course the criminals aren’t giving up. 10:21 When the Draco team comes at them, takes ’em down, they change tactics. 10:24 And ransomware is just one front in this war because now the criminals are using 10:28 ai. 10:31 Cyber criminals can now easily integrate AI into everything they’re doing, 10:35 which means they can move very fast, adapt like you would not believe. 10:38 And it’s not just that it’s level the playing field, 10:40 but because being a cyber criminal, it’s not easy. You have to have skills, 10:44 elite skills. But with ai, that’s not the case anymore. 10:47 What AI brought to the table for the criminals was that it 10:51 completely eliminated the gap between a junior developer and a senior developer. 10:57 So they can actually move faster, they can write better code. 11:00 So we obviously have to do the same thing on this side. 11:04 Now, here’s what the criminals are using AI for right now. 11:06 Here’s a quick hit list. 11:07 They can now use AI to generate better written phishing scams. 11:11 They can improve code. 11:12 So the phishing scams that are happening right now, 11:15 the text and the emails and the calls, 11:17 you’re getting the grammar’s perfect and it’s personal. 11:20 They know things about you. You have to really sit there and go, huh, 11:24 these things are really hard to spot. I asked Rovan, 11:27 the director of innovation at Bitdefender, 11:28 what the scariest thing is for him right now. And he said this. 11:31 So the more confident they get, 11:35 the more money they lose because the education and the 11:39 information on spotting scams, 11:41 he’s lacking and people are becoming more confident, 11:44 but AI and hackers are becoming better. 11:46 So that’s really worrying for me. No. 11:49 Matter how good you think you are, even if you’re a tech expert, you can be, 11:53 I know I can be tricked front before they’ll even look at me. 11:56 Can you transfer me just for Id not paying or anything? I don’t know. I to call. 12:02 I promise I’ll pay that first thing tomorrow. Hey, it’s me. 12:08 Don’t try anything, but I’m never letting my guard down. 12:11 And then we had this stuff. 12:12 Just last year. 12:13 We had over 1 million of these ads detected by us at Bitdefender. 12:18 YouTube channels get hacked. We get that stream jacking situation, 12:21 hijacking live streams with AI celebrities, Elon Musk, Bitcoin scams, flooding, 12:25 Facebook as sponsored post. 12:27 Most people cannot tell their fake and voice cloning. That’s scary. 12:30 We have seen voice cloning for scams, 12:33 especially for scams that are trying to mimic your family members or friends. 12:37 It only takes eight seconds of your voice to clone it. 12:40 Imagine that if your mom gets a call from someone that sounds just like you, 12:43 Hey, I’m in trouble. I need money. 12:44 Now think about how much of your voice is already out there like I’m cooked, 12:48 but voicemail, social media, zoom calls. 12:50 And on top of that, you bring AI and you do all these celebrate scams. 12:55 It’s a nightmare. This is not going anywhere good. 12:58 So here’s the thing, we’re kind of in an AI arms race right now. 13:01 Traditional defenses do not work. Grammar checks, template detection, 13:04 they don’t work. Criminals adapt too fast. So how we fighting back ai, 13:08 I didn’t know this, 13:09 but Bitdefender built an entire AI defense team to fight fire with fire. Again, 13:14 here’s Ros V, the director of innovation of Bitdefender, 13:16 and he showed me some absolutely insane stuff. 13:18 So this is Elon Musk video. I. 13:21 Just dropped like 150 milligram edible and I’m feeling 13:27 suited. I’m about to design 30 new space cars and get us some Mars. 13:32 Basically, 13:32 you can either upload a file or send a link for the most popular platforms 13:37 out there. 13:38 This is also specifically aim that manipulating people. 13:44 So we have the analysis result. Yeah, 13:46 it’s high confidence because most of the audio is manipulated. 13:51 So here we have details on which segments are manipulated, 13:55 what’s the confidence level and how many speakers. 13:57 And also here you have the intent analysis. 14:00 So basically what are the indicators and detailed analysis? 14:05 So we know that the manipulated segments contains the repetition to emphasize 14:09 the intoxicated impression and making sure people believe that’s really Elon 14:14 Musk getting high on some drugs and stuff like that. Yeah. 14:18 The first thing was deep fake detection. And let’s be honest guys, 14:21 it’s getting pretty hard to tell. Like this one here from Elon Musk, 14:24 it’s been used to scam a ton of people, but with ai, 14:26 they’re able to now detect this. 14:28 The first thing we look is audio. 14:30 We can see if it’s a totally synthetic audio, 14:33 if it’s a modified deepfake is not just understanding why you’re 14:38 seeing a deepfake, 14:39 but also the reason behind people showing you that deep fake. 14:43 And they’re doing something that not a lot of people are doing right now. 14:46 They’re not just analyzing to see if it’s fake or a deep fake. 14:49 They’re analyzing intent. 14:50 We’re going to show you the intent of the. 14:53 Video. Satirical versus malicious. They can tell the difference. 14:56 Let’s say for a short period of time, 14:58 you can say that you are 100% confident that you get every lip fake, 15:02 but it doesn’t last that much, right? 15:06 And then three days later, another generator shows up. 15:09 So again, it’s a constant arms race. Bitdefender improves detection. 15:13 The criminals improve generation, rinse and repeat. 15:15 But detecting DeepFakes is only half the battle. 15:17 They’re also trying to catch these scammers in the act. This one was crazy. 15:21 They have an AI scammer honeypot. 15:25 They talk with an AI for 15 minutes and they still dunno. It’s an ai. 15:29 If you watch my friend’s Kit voa or scammer payback, 15:31 you know that scam calls are a thing and they suck and they’re not going away. 15:35 They’re just getting more powerful. They’re AI powered. 15:36 Now what are we doing about this fighting fire with fire? We’re using ai, 15:40 this AI scammer, honeypot answer scam calls and just waste their time. 15:45 So right now, 15:45 Roz is actually going to call the AI honeypot and pretend to be a scammer. 15:48 And this AI is playing the victim and it actually has personality. I’m. 15:52 Calling about the loan application. 15:54 What kind of loan are we talking about? 15:56 So you are pre-approved for a $5,000 loan. 15:59 So I’m going to send you an email. 16:02 My email address is mim [email protected]. Go ahead and send it over. 16:05 I have sent it over. Can you see the email? 16:08 I don’t see any image. I’m not very good with computers. 16:11 Can you just tell me the account number and I’ll take care of the transfer? 16:15 3 4, 5, 6 7 8 9 8 2 1. 16:21 Let me just grab a pen and paper to make sure I get it right. 16:24 Is that a checking or savings account? 16:26 It’s a checking account. 16:27 So you’re offering me a loan. That sounds great. 16:29 What’s the total amount I’d be getting? You mentioned $5,000 earlier, 16:32 is that correct? 16:34 So basically it’s going to. 16:36 Drive the scammer crazy. No, I’m not kidding. As we’re recording this, 16:40 everyone in the room is kind of looking at each other going, are you kidding me? 16:43 This sounds amazing. Even down to the southern accent, 16:45 you would not be able to tell every minute a scammer spends talking to AI is a 16:49 minute. They’re not scamming someone, 16:50 but it’s not just about wasting their time, 16:52 but defenders gathering intel data analytics. 16:55 Basically we’re going to collect the intent. So if this is a scam or not, 17:00 why we think it’s a scam, what are the red flags of the scam? 17:04 You noticed I mentioned the URL. 17:06 We’re going to catch that URL and we’re going to open it separately and analyze 17:10 it Also for additional information of scam or malicious 17:15 intent. 17:15 They even found out that some scammers don’t even know they’re working for 17:18 criminal enterprises. 17:19 You have scammers that do not know they’re working for a scamming 17:24 enterprise. 17:25 So I love this, but again, the criminals keep evolving. It keeps getting worse. 17:29 Remember how I mentioned voice cloning earlier? 17:31 That’s just one piece of the puzzle. 17:32 There are attack scammers are running that are really hard to keep track of 17:36 because yeah, we do have systems in place to kind of analyze and go, 17:40 that’s probably a scam. 17:41 But they found a way and it’s called multi-platform scams. The next. 17:46 Big thing is actually multi-touch point attack detection because you now see 17:51 scammers starting a scam on WhatsApp and continuing it on your 17:56 browser and then switching it by phone. 17:59 So here’s how it works. First, 18:00 a scammer calls you on WhatsApp and builds trust and they’re like, Hey, 18:03 can you share your screen? They want to help you. The bank’s caught on. 18:06 They got smart, so they added obfuscation. That’s a hard word to say. 18:09 So your banking app only shows blank when you’re screen sharing. That’s awesome. 18:13 But the scammers adapted. They said, you know what? Don’t do it on your phone. 18:16 Open it in your browser. Instead. 18:18 Scammers say, ah, okay, 18:19 then just going to tell the victim to go in a browser and open the banking 18:22 interface. There they are. Nothing they can do. 18:25 And this is hard to detect because there’s nothing to detect. 18:28 We cannot detect a conversation or a scammer 18:34 sending some information on WhatsApp and then calling him and then sending an 18:37 email. 18:38 So each of these individual acts look innocent. They don’t seem connected, 18:41 but they are. That WhatsApp message seems normal. The phone call chill, 18:45 you do from time to time, open your bank website. 18:48 But these three things happening in a sequence, 18:50 how do we track that and say that’s a scam? 18:52 So the next big thing is actually having all these events and 18:57 correlating them to detect the scam without actually seeing the scam. 19:01 Just looking at the events. 19:04 The defenders got it. They’re starting to learn the attack chain. 19:07 They’re studying it. 19:07 They’re constantly gathering intel on these situations and trying to develop 19:11 patterns that they can see and then stop the scammer before they complete their 19:14 job. 19:15 Now I want to get back to the AI team they have there because I actually got to 19:18 sit down with them and talk with them. 19:19 These aren’t regular IT people like you and me. 19:21 These are actual machine learning engineers, 19:24 people going for their PhD and they are studying these deep figs. 19:27 They’re developing their own models to be able to detect these things, 19:30 and that does put me at ease a little bit knowing that we have a team here doing 19:33 that, but also even they admit some things they can’t detect. 19:37 Are you guys ever tricked by ai? 19:42 I’m tricked. 19:43 Yeah. 19:43 I’m also tricked personally and in general is that you are going home, 19:48 you are watching something on social media and it just pops a rail 19:53 or something and you don’t really expect to see a deep fake 19:58 video. 19:58 So I want to ask you a question. How do you feel right now? 20:01 Do you feel like we’re winning the war with cyber crime right now? 20:04 I would say maybe again, when I asked Alex about this, he said, yeah, 20:08 they’re putting a dent in it, but it’s a pretty big dent. 20:10 They’ve saved over a billion dollars with the crypt. 20:12 They’re building AI defenses with honeypots, deepfake detection, voice analysis, 20:16 and the Draco team is working with law enforcement worldwide. You’re a poll, 20:20 the FBI, 20:21 but you’re still going to receive updates of a new ransomware coming out. 20:23 You’re going to hear about millions of people being tricked with a Taylor Swift 20:26 concert ticket scam, which actually happened in Singapore is crazy. 20:29 Rus told me about it, and by the way, 20:31 we talked a lot more in these interviews about a ton of things. 20:33 I’ll have it on my second channel if you want to go check it out and you should 20:36 check it out. It’s fascinating, 20:37 but it kind still feels like the criminals are winning, 20:41 at least it seems like they’re doing a lot. 20:42 So why keep fighting if we can’t win? Well, 20:44 because every single victim that we save is real person, 20:47 and I got to hear a few of their stories. 20:51 I mentioned Bogden earlier. 20:53 He wrote that article about the Rebuild decryption tool. 20:55 He’s actually the director of malware threat research at Bed Defender. 20:57 This guy is a wealth of knowledge and he told me some crazy iot stories about 21:01 surveillance, cameras broadcasting families lives just live on a stream. 21:05 One of the many things that you should look out for with iot against you, 21:08 the interview, 21:08 but the things that stuck with me were the stories he told about the victims 21:11 they helped save. 21:12 I have a lot of stories coming for from victims who were seeking out 21:17 help. 21:18 And what I love about this is they’re not just statistics like they’re people. 21:21 For example, there’s a PhD student on the verge of defending his thesis. 21:24 Everything was ready. Years of work coming to a conclusion, 21:26 and then ransomware hit. 21:27 I have this PhD student who was on the verge of defending his 21:32 thesis, but he didn’t have the latest version. 21:35 He kind of lost one month of work 21:40 in the backup was one month old and whatever he 21:45 had worked meantime, got lost. 21:47 An entire month of research just gone. 21:49 His defense was coming up without that latest work. He couldn’t defend it. 21:52 Years of effort about to be meaningless. But then that. 21:55 Night, 21:56 I got word from one of my colleagues that we have a decryptor and we were 22:00 able to save his PhD thesis. 22:03 How cool is that? That night they were able to figure it out, get the decryptor, 22:07 and then save that guy’s career. This story is crazier. 22:10 This very sad story of a couple in Syria. 22:15 Syria was shaken down by worst and it was 2019. 22:19 There’s this couple who were mentioning on the internet that the computer 22:24 had been infected. Well, 22:26 there was no surprise in that and that their pictures had been taken 22:31 hostage. 22:31 They couldn’t pay it. 350 bucks May as well have been $35,000. 22:35 Not much by Western standards, but a lot 22:40 in terms of how much money people in Syria have. 22:43 But here’s what made this different. 22:44 What stood apart from the rest of the cases was 22:49 that those pictures were very important to the family. 22:51 They had pictures of took two of their kids who 22:56 had lost their lives at war. 22:58 So that was the only proof of them being part of this life in the past. 23:03 They were the only pictures they had left of their children, 23:05 the children that had died in the war, 23:07 and that’s what the criminals were holding hostage. 23:08 But they were able to decrypt that information and that was personal for them. 23:11 It was a very sad story. 23:13 We managed to decrypt that information and we took 23:18 it very personally. 23:20 You see, that’s what I’m talking about. It’s personal. Cyber crime is personal. 23:23 As I was talking with Bogden and Raw and Alex and hearing their stories about 23:27 what they’re doing with Bit Defender and then what the Draco team is doing after 23:30 hours fighting cyber crime. It’s not just about stopping malware. 23:34 It’s about that PhD student getting his degree about that Syrian couple getting 23:37 their memories back. 23:38 It’s about your grandma not losing her life savings to a voice scam. 23:40 You have to do it perfectly every single day because your 23:45 detections are the ones that make the 23:50 difference between Honey, I’m home and honey, 23:54 we just lost our life savings. 23:56 Every single day. 23:57 They’re standing between normal people and complete digital devastation. 24:00 I know it sounds kind of dramatic, but that was the vibe when I was there. 24:03 A lot of the people I talk with there have been a bid defender for over 10 24:06 years. They stay there because this is their mission. 24:08 Bogan told me this story during COVID, hospitals were getting attacked. 24:12 They had legacy systems running Windows 95 critical stuff, 24:15 and these hospitals had no cybersecurity budget and they were getting hammered 24:18 with ransomware. Bid Defender just reached out proactively. 24:21 And we reached out proactively to a couple of hospitals, 24:25 provided security software for free and also 24:29 expertise and SOC monitoring for their businesses to make 24:34 sure that the lights stay on and that people get treated in a timely manner. 24:39 Free software free monitoring, because people’s lives depended on it. 24:42 It wasn’t a bottom line issue at that point, and I love what Bogden said. 24:46 I’m like, why do you and Ambit Defender do all this? 24:48 I believe that cybersecurity should be a fundamental human right, 24:53 just like the right to liberty and the right to critical thinking. 24:58 It shouldn’t be conditioned by money, 25:00 but once you realize how much the digital life has impact 25:05 on your physical life, 25:07 people understand that you need to secure your digital life to enjoy 25:12 your physical life. 25:13 You love that. I love that so much. Cybersecurity is a human right. 25:18 That’s right. So much of our lives are digital now. That’s just how it’s, 25:21 and then I asked Bogged in the same question I asked Alex in the beginning, 25:24 are we winning this war? 25:26 Well, we’re still here, right? 25:29 Yeah, we’re still here. I like that. 25:31 So here we are kind of at the end of the video, and I don’t know about you, 25:34 but I’m hyped. I’m like, let’s go. Let’s fight some cyber crime. 25:37 And you might be wondering, Hey, how can I join something like the Draco team? 25:40 I asked them that. Here’s what they said. 25:42 Yeah, well, first of all, you need to work for Big Defender. 25:46 That’ll be the first, no, I mean, 25:47 there are other companies out there which have similar teams, 25:51 so it’s not like we invented Pot water or anything. 25:55 So each company has some sort of team that’s working with law enforcement. 26:01 They have their own cool names. Ours is Draco. 26:06 But yeah, so you need to work for P Defender, and second, 26:08 you need to want to do this, 26:11 and then you reach out to one of the members. 26:14 So once you talk to one of the members, 26:17 there’s going to be a meeting or a discussion, 26:20 and then it’s up to you what you want to do. 26:23 If you want to do malware analysis, sure, 26:26 there’s plenty of malware that’s involved into law enforcement investigations 26:30 that you can look at. Cryptocurrency investigations. Sure, 26:34 there’s a lot of crypto you can look at. No problem. Botnets, forensics, 26:39 anything. 26:39 So yeah, go work for Bid Defender. But seriously, 26:42 it was awesome going out to Romania to visit bid defender and learn about what 26:46 they do. 26:47 Me and my team are extremely grateful that we got to see everything we did 26:50 learning and get to know these people. Anyways, that’s all I got. 26:53 I’ll catch you guys next time.
🇮🇳 हिन्दी / Hindi / হিন্দি:
NetworkChuck Claude Code के बारे में चर्चा कर रहे हैं। वह दिखा रहे हैं कि कैसे फ़ोन से Claude Code का उपयोग किया जा सकता है — Hostinger VPS पर Terminal सेट करके, Terminus ऐप के ज़रिए SSH कनेक्शन बनाकर, और tmux से persistent session चालू रखकर। वह fail2ban, UFW firewall और SSH key authentication से सुरक्षा बढ़ाने का तरीका भी बता रहे हैं। तकनीकी शब्द जैसे VPS, SSH, tmux, fail2ban, UFW अंग्रेज़ी में ही हैं।






