I tried InfoSec Institute’s Phishing service, and here is how it played out!
Over the past couple of days, while having some discussions regarding social engineering at work, I stumbled across this service. The InfoSec Institute provides phishing as a service, called Phish.io, and will give you 10 free phishing attempts to mock-attack, non-maliciously, your family, friends, and co-workers, with tried and true fake emails.
I went ahead and opened the email to check it’s authenticity :)
Since I’ve never banked at Chase, I have no true way of knowing if this is what it legitimately looks like. I do remember being a poor network administrator back in my early 20s though and having received low balance emails from a bank I did bank at, back in the day. :|
There are two links in the email, which will let me know as the sender, what my victim/target clicked on. I’m not suggesting that you copy and paste those into a browser! http://mandrillapp.com/track/click/30337826/www.phish.io?p=eyJzIjoiWThBMklSV3ZyM1R4aFN3aXdOdmxoekJrTXZvIiwidiI6MSwicCI6IntcInVcIjozMDMzNzgyNixcInZcIjoxLFwidXJsXCI6XCJodHRwOlxcXC9cXFwvd3d3LnBoaXNoLmlvXFxcL3BoaXNoZWRcXFwvaW5kZXhcXFwvNWIzNmFhNTAtYzlkNi00NGRlLTg2MWYtM2E4MDk2ZTgwYjBiXCIsXCJpZFwiOlwiYTM2NjMzYjQ2MTI2NDJlNGI4NmQ3MjBiMTRhOGJmMTdcIixcInVybF9pZHNcIjpbXCJiMTBhNmNjOTc0ZDg4YWVjZDJjNDE0N2RjZmQ5ZTFiMWRiODJjNGRiXCJdfSJ9
To check out the reporting functions, I’ve decided to click on the “see your statement” link.
I immediately got notified:
And as a mock-victim, I had to sit through an interactive video.
The report I got wasn’t all that spectacular, definitely not something I could build metrics off of. But it did let me know what type of email I sent and if that person fell for it or not.
This is definitely a cool service to use, with a nice lesson to help your family and friends learn about spear phishing. Give it a try, go to http://phish.io
A new phishing scam, to out cheaters, is being played out by bad actors. A phishing scam like the one below is being sent in mass in both phishing and spear phishing.
Unfortunately, your data was leaked in the recent hacking of Ashley Madison and I now have your information.
If you would like to prevent me from finding and sharing this information with your significant other send exactly 1.0000001 Bitcoins (approx. value $225 USD) to the following address:
1B8eH7HR87vbVbMzX4gk9nYyus3KnXs4Ez [link]
Sending the wrong amount means I won’t know it’s you who paid.
You have 7 days from receipt of this email to send the BTC [bitcoins]. If you
need help locating a place to purchase BTC, you can start here…..
Send everyone you know the below information, regardless of if you think they are cheating on their spouses or not.
“37 million names, addresses and phone numbers of registered users at the Ashley Madison site (which makes it easy to cheat on your spouse) were posted on the Internet. All these records are now out in the open, exposing highly sensitive personal information.
Internet criminals are going to exploit this in many ways, sending spam, phishing and possibly blackmail messages, using social engineering tactics to make people click on links or open infected attachments. Be on the lookout for threatening email messages which slip through spam filters that have anything to do with Ashley Madison, or that refer to cheating spouses and delete them immediately, in the office or at the house.”
For Beau’s first birthday ever, a handful of people flew in. Mom, Auntie Nila, Agnes, and Lorri. The pictures in the gallery are of the whole weekend from Carmelo and Jaime’s perspective, so there are some that aren’t Beau related.
Posted inlife|Comments Off on Beau’s First Birthday Pictures!
Atlas is a humanoid robot. In the video, you can see it walking through the woods. Since they are Google owned, I wonder if they are running a version of Android… haha
All photos are linked to their full sized pictures. Just click on them to “zoom in”. Alternatively, here are the photos without the story, but in chronological order.
Jaime and Carmelo wanted their own little personal, romantic, and fun vacation. Since Oahu was a good time in 2014, they wanted to repeat it, but just with each other!
July 14th, 2015
Carmelo got a quick run in before the day and vacation started. He pre-registered to run a 5K out in Hawaii.
Just a quick 2 mile jog to get the blood pumping!
We got to the airport early enough to not feel rushed. We took our sweet time!
It was very nice to just not feel rushed. We sat, ate, and bought some waters to take with us on the plane.
We boarded and settled in for a long-ass flight
Flying out in style!
This may look goofy, but it’s hella comfy for what it is.
Our car rental was a much quicker and nicer experience than last year where we waited for an hour for a car. Alamo all the way, never going to use that shitty Thrifty out in Oahu ever again.
Peep the awesome rainbow that greeted us in Hawaii! We got our car just in time to catch rush hour traffic.
Our hotel check in at the Aqua Pacific Monarch, the same place we stayed at last year, was pretty smooth, we got all set up and got a room way up high enough to have a great view of the city and ocean. Well, not that great of a view of the ocean. We were ready to head out and eat… but first, a selfie!
Beautiful-ish view of the city, looks like last year’s view… lol
Loco Mocos for dinner! Good golly, I love these! So bad and so good! I got double the eggs on mine since Jaime doesn’t like eggs. MMMMmmmmm!!!!
Loco Moco (Spanish translation is crazy booger, lol!)!
After dinner, we walked on the beach and took these photos by the sidewalk.
Afterwards, we went to go get some groceries at the Food Pantry to stock our fridge for the week. Hawaii did away with plastic bags (nice!) so we carried paper bags full of groceries home.
July 15th, 2015
Carmelo ran close to 4 miles, just to see if he could. It was cloudy so there was GPS problems. The starting point should have been the same as the end point.
and he took a few pictures
This humidity is killer, I’m soaked!
Please excuse the trashcan that photobombed my picture of the Ala Wai Canal
Jaime just happened to be downstairs when Carmelo got back from his run, so they had a Musubi Breakfast.
Musubi and Coffee
After a little bit, we dressed and went to the Aloha Stadium swap meet and market place for a bunch of shopping
This pastry was as big as my head!
Looking for deals, my backpack is already full!
It’s noon and we are beat!
Afterwards, still looking for souvenirs, the GPS led us to a Costco in the hood! I swear I think most people around here pretend to not look where they are going so they don’t have to get out of your way.
We drove through some ghetto-ass neighborhoods to get here.
After a short stop at the hotel, we walked down to Waikiki beach for swimming and… wait for it… Turtle watching! Two turtles were in the area and one totally swam up to us! The water had some shitty visibility so I wonder if the turtles were lost!
Welcome to Waikiki beach, Hawaii!
Jaime looking off in the distance
Woah, large swell!
A turtle that swam right up to us!
Holy shit, look! Another turtle!
After all that excitement, we went back to the hotel, changed, and went out for some Marukame Udon dinner.
Udon means noodles in Japanese
Yum Yum! Ontama noodles with Musubi and tempura!
Kake Udon with Tempura
July 16th, 2015
Woke up late… We were so tired from yesterday’s activities! For breakfast, we just ate leftovers from the night before. We started to get ready to go about 12:30/1:00 PM on an hour long drive to Ko Olina/Ewa. The area looks like a cross between San Francisco’s nice areas and Scottsdale Arizona. Not even kidding! The purpose of our trip today was two-fold. To spend time at the lagoons and snorkel there and to pick up Carmelo’s Nite-Run registration packet. On the way we got fun coffee/tea and macaroons!
Though there was 9 people working at Vintage coffee here in Ko Olina, it still took like 10 minutes… You can tell from their conversations with each other, that they don’t need to work, but their parents made them get a job.
The macaroons here are better than the ones we had in Paris. I shit you not!
My Haleiwa Iced Tea that took way too long (and it wasn’t that great!)
Swam at the lagoons, tried to snorkel, couldn’t see much though. The water was too silty and not much was visible. Jaime saw another turtle but we couldn’t see it under water.
There are four man-made lagoons. Jaime read a book that recommended lagoon number two for snorkeling. It was so beautiful!
I tried for a romantic selfie… Hey, at least I tried!
Carmelo did Yoga at the beach, lol, no kidding!
I don’t know what I’m doing…
I’ve seen this pose before… it looks cool. You can see my abs in this pose!
oh look! a penny!
This is not how to Yoga… Nice try Carmelo….
The lagoons are very pretty, here are some more pictures of it!
While waiting for traffic to die down, we ate at Outback.
By the way, our car is so small. Carmelo can reach the trunk while driving.
July 17th, 2015
Surprise, surprise, Carmelo went for another run. Mid run selfie!
Fun building! This building is on McCully near the Ala Wai Canal
Afterwards, Jaime made some kick-ass breakfast of Portuguese sausage and eggs with a croissant.
Our goal today was pretty much to go to the Royal Hawaiian and take pictures of this HUGE Monkey Pod tree (‘Ohai Lau Nui) with lanterns hanging off of it. Here are a few of the pictures.
Beautiful lights in the trees
Jaime for scale, the trees are HUGE!
Just around the corner, there was a few more photo opportunities.
More lanterns in trees
Water lilies
Cool huge lantern
We went on over to the U.S. Army Museum after that, just to look around and get some history.
U.S. Army Museum
IYAOYAS! (If You Ain’t Ordnance, You Ain’t Shit. A Marine saying)
Get to the choppah!
That’s a big gun, back in the day, there were two of these and they would rise up over the wall and shoot at attacking boats!
Try to zoom right into the barrel!
July 18th, 2015
We tried to relax most of the day and not do too much. Carmelo was conserving his energy for tonight. We laid out on the beach and floated for a good couple of hours. Around 3:30 PM we went to Ewa (pronounced evah) for the nite run.
It was really pretty there and after posting this picture to Facebook…
Jaime at Kapilina/Ewa Beach
we were prompted by good friends, Emily & Raquel, to contact Andrew who lives there. We didn’t know he moved out to this beautiful area. Last year he lived by Ft. Shafter.
He was out in the Honolulu and drove out fairly quickly to come see us.
Jaime and Andrew
It was good to see him!
After chatting a little bit, he left and I got my gear for the run. I also put my costume on. It was a “wear a costume” night run.
Got my official race bib. My very first one!
Superman must be super if he can put tights on quickly!
I asked this little girl if I could take a picture with her :)
Batman vs Superman?
Some asked Carmelo to be in pictures
Pre-niterun selfie!
Right before the start of the run, Sunshine and her boyfriend Brandon, came to see us!
Jaime, Sunshine, and Brandon
Pre-run selfie!
Up, Up, and Away!!!
The run was fun, but the humidity was killer!
That’s not water…
July 19th, 2015
We lazed away the morning inside and not doing a whole heck of a lot. About noonish, Sunshine and Brandon picked us up and we went to go buy some Siopao except over here they call them Manapua. Same-same!
Manapua or Siopao
Got an 8 pack of siopao!
We then went to the Raging Crab for a big old feast! A large bag of main entree (ours was Dungeness crab, then other bits of crab, muscles, oysters, corn, sausage, and shrimp. With a side of rice!
Ready to get messy!
Ask Jaime about these… lol!
Dungeness crab in our feast.
group photo
shave ice… with ice cream at the bottom!
After we ate, we said our good-byes and then Jaime and Carmelo decided to check out the Honolulu Pulse to see if any photos from the Nite Run were posted and they were!
Carmelo and Jaime! How cool!
Superman!
There was a Ukulele festival at the park nearby so we decided to check it out.
Uke Fest at Kapiolani park
A lot of visitors and locals alike enjoyed the Ukulele Festival
Jake Shimabukuro was there. He’s native to Honolulu and has been on Ted Talks.
Here is the performance he gave at the Ukulele Festival
Willie K was there as well!
Leonard’s Malasadas, in food truck form!
Jaime enjoying her hot malasada
At the end of the night, we went grocery shopping again.
Flowers for Jaime ;)
July 20th, 2015
Carmelo woke up early, went for a run, was all energized and after a bit of a cool down, both Carmelo and Jaime went to Hanauma Bay for some awesome snorkeling!
Kissing at Hanauma Bay
Jaime
Underwater Selfie!
Jaime
Humuhumunukunukuapua’a
Carmelo
Jaime
We even fed some birds!
Fed two birds, whatever kind they are
Tried the panorama feature, had to do something silly!
Posed for a panorama! Like a Creed album cover
After a long day of checking out fish, snorkeling, and having a nice and healthy lunch we took off and went sightseeing.
Cool shot through a hole in the wall
A lava tube in Hanola that Carmelo went through
AAAAaaahhhhhhh!!!!!
My hot wife!
Doing something silly again!
This is the famous “From Here to Eternity” beach where the sexy kiss happened
Selfie by the long trail up the mountain
A really cool banyan tree
The island below is often seen on postcards, it is really pretty from far, but when you get up close to it, it’s like yuck, and wtf is going on with that?
A cool little island that’s like 20 feet across
Tiny palm trees are cute!
We have matching flip flop stamps!
July 21st, 2015
Carmelo started the day with a run to the Honolulu Zoo
Then after breakfast, went exploring the Kaniakapupu (hee hee! I’m so childish) waterfall and ruins…
This way, down Pali Lookout Drive
Under this tree!
Over this tree! Follow me!
Over these branches!
Found the falls! Karate Kid moment!
Follow me to the ruins!
Note! Go left to the ruins, going right goes to the trees blocking the water falls
Nuuanu Pali Lookout
Catching some air in a sarong
Selfie from PaliLookout
It was windy, not as windy as last year, but still pretty windy
Where does the ‘road closed’ path lead to?
Some beautiful views!
Zippy’s for dinner
Zip Pac from Zippy’s
Puu Ualakaa State Park and View from the top of Round Top Drive
July 22nd, 2015
Ho`omaluhia Botanical Gardens were beautiful, and this is totally the largest botanical garden we’ve ever been to. It’s so huge you have to drive through it! It’s also a great way for them to preserve some beauty of Hawaii by just planting a few extra things, putting up signs, and now the whole thing is a preserve.
Ho’omaluhia
Selfie!
A walk down to the lake in the botanical garden
Jaime’s all sexy!
You must zoom in to see Carmelo meditating!
Just a beautiful picture of the road we were on
Byodo-In Temple
Selfie by the Byodo-in Temple
Sign
Jaime ringing the bell
Panoramic View
Cool!
Metal Sign
Remove your shoes
Amida Buddha
Lanikai Beach
Lanikai
The path to the beach
Lanikai Islands in Jaime’s Glasses
Cool fish
I’m OK!
Some coral
Ah! The sun is in our eyes
Love this picture!
The islands
Holding the islands
My hot woman!
Eating an island!
Shadow selfie!
When we got back to the hotel, Sunshine posted that there is a Comicon out here in Hawaii THIS WEEKEND!!
July 23rd, 2015
Carmelo went for his run this morning, super energized!
morning run halfway selfie at ala wai canal bridge
Our plan today was to hike up to the top of Manoa falls, but when we got there, found that the lot was full with too many cars and buses and thought that with the trail packed with people, it wouldn’t even be a fun hike.
Manoa Falls is tooooo busy and there isn’t any parking
We decided to go to the Makapu’u lighthouse and check out the views from there.
Our climb up the road to the lighthouse
The benefits of having a strong husband, he carries your pink backpack for you
Lighthouse selfie!
The lighthouse isn’t actually at the top, its down a little bit, and there is no access to it
Warning travelers! There is no restroom at the top, so if you hydrate on your way up… Be prepared to hold it!
Taking a seat and soaking in the view
Hey is that a beach over there?
Selfie!
We made it to the top!
The road up is long and steep!
June 24th, 2015
We woke up late and went to Comic Con Honolulu! Wow… It was nothing compared to Phoenix’s Comic Con…
Panoramic view of Comiccon HNL
Selfie outside the HNL Convention Center
This Baymax was so cute!
Selfie at Comic Con HNL
Superwoman!
Really cool motorcycle helmet/mask
After a quick walk about through the comic convention, we decided to leave. We went back to the hotel for a few hours of relaxation and recovery from walking a lot and then decided to go back out. There was a concert in the Kapiolani park that we listened to but did not visit as we walk over to take pictures from behind the aquarium of the sunset.
Sunset selfie
Sunset kisses!
Fireworks at the beach
More fireworks
Before we went back to the hotel for the night, we stopped by some fancy pants place for sushi.
Carmelo’s salad
Shrimp Tempura
Combination Sashimi
CUTE mushroom miso soup
There was 18 of these when we started
July 25th, 2015
Carmelo ran and visited Queen Kapi’Olani
A four-pack of turtles that Carmelo saw on his run
Had to visit Queen Kapi’Olani
We spent the day at North shore, first, visiting turtles on Turtle Beach
Green sea turtle
Selfie with the green sea turtles
Green sea turtles
Then snorkeling at Shark’s Cove
Shaka!
Found a heart shaped rock
Shark’s Cove selfie!
Swimming to position to wave ‘hi’
hi!
Cool shot
Jaime’s selfie
Stalker fish that stalked Jaime
Getting close enough to touch
But always out of reach
It’s a humuhumunukunukuapua’a!
Then ending the day at Sunset Beach, watching the sunset and the waves on a near empty beach.
Aww!
Panoramic view of the empty beach!
A picture of Jaime taking a picture of the sunset with the sunset in the background!
Lens flair!
Sunsets on the beach are cool
Cool sunset
July 26th, 2015
Not much happening today as we wind down on our vacation. We had lunch with Nestor at a restaurant called Thelma’s. The service sucked ass but the food was tasty and yummy!
Carmelo, Nestor, and Jaime having lunch… or waiting to have lunch. We did a lot of waiting.
After lunch, the waves were huge over in Waikiki, so we decided to hit the beach for several hours. At least until we were tired of getting salt water in our mouths, up our noses, and in our eyes.
Selfie in the big swells
large swells
After our swim and a break of resting on the beach, we went to Jamba Juice
The Tropical Dragon. I highly recommend it.
Then sat at the beach, watched the sunset and went back to the hotel.
Sunset kiss selfie
sunset!
We then saw fireworks from our room!
July 27th, 2015
Carmelo went on a long ass run, recreating his first run in Oahu. It’s his last run for Oahu for this year!
Most of the day was spent lazing around, content with our vacation, and packing to go back to Phoenix.
The only trip they made was to get more Jamba Juice.
July 28th, 2015
Sadly, we finished packing and headed to the airport.
This looks so sad!
A freaky sculpture in the airport. You can see his wiener!
Thanks Oahu for the great vacation! Aloha and Mahalo!
Again, the best of all photos without having to read the whole story, can be seen here.
Charlie Miller and Chris Valasek, frontier vehicle hackers, are at it again, this time they remotely controlled a jeep from about 10 miles away.
Uconnect, an Internet-connected computer feature in hundreds of thousands of Fiat Chrysler cars, SUVs, and trucks, controls the vehicle’s entertainment and navigation, enables phone calls, and even offers a Wi-Fi hot spot has one vulnerable element, which Miller and Valasek won’t identify until their Black Hat talk, Uconnect’s cellular connection also lets anyone who knows the car’s IP address gain access from anywhere in the country.
Miller and Valasek have been sharing their research with Chrysler for nearly nine months, enabling the company to quietly release a patch ahead of the Black Hat conference. Unfortunately, Chrysler’s patch must be manually implemented via a USB stick or by a dealership mechanic. That means most vehicles affected by the vulnerability, will probably stay vulnerable until they start getting hacked.
Miller has scanned Sprint’s network multiple times for vulnerable vehicles and recorded their vehicle identification numbers. Plugging that data into an algorithm sometimes used for tagging and tracking wild animals to estimate their population size, he estimated that there are as many as 471,000 vehicles with vulnerable Uconnect systems on the road.
Are insurance companies looking at adjusting their rates? Perhaps it’s time to think about that.
The ‘find some secret sex’ website, Ashley Madison, was breached and 37-40 million records were leaked. Bad guys, making themselves known as the Impact Team, are looking to blackmail/extort all targets. Amid the customer data, the hackers also leaked maps of internal company servers, employee network account information, company bank account data and salary information.
The Impact Team, yes, the bad guys, are asking cheaters to come forward and pay the low price of $19 to have their data erased!
Hacking Team is an Italian company that develops the legal-ish spyware called the RCS (remote control systems) and supposedly sells it to governments as a surveillance devices. Bruce Schneier, security legend, says, “Hacking Team is a pretty sleazy company, selling surveillance software to all sorts of authoritarian governments around the world.”
Someone hacked the cyberweapons arms manufacturer Hacking Team and posted 400 GB of internal company data!!!!1, including a spreadsheet listing every government client, when they first bought the surveillance software, and how much money they have paid the company to date. Not surprising, the company has been lying about who its customers are.
Some of the data showed spreadsheets of the security professionals stored passwords for their clients, including the password pa$$w0rd… Many commenters have gone through some of the data leaked and have found laughable passwords for this company being security consultants. Hacking team has sold their product to many Governments. The tools could give governments access to emails, text messages, call history and address books, as well as logging keystrokes and obtaining search history data.
From this point onwards, the tool can track a user’s location via the phone’s GPS signal, take screenshots, record audio from the phones to monitor calls or conversations, or hijack the phone’s camera to take pictures.
The source code for the RCS is now available on mirror sites. Expect an increase in spying on phones.
The NSA has their own version of Google. It collects, supposedly, way more information than the search giant. The NSA system pulls in countless people’s Internet searches, emails, documents, usernames and passwords, and other private communications. XKEYSCORE is fed a constant flow of Internet traffic from fiber optic cables that make up the backbone of the world’s communication network, among other sources, for processing. Of course it’s there in the name of Freedom and Merica!
From reading this article, it’s possible for NSA analysts to perform some really deep background searches on you, but of course there are administrative access controls to prevent them from doing so… Which means they are told not to, but that doesn’t stop their ability to.