Forest Global Training Partners

Cyber Risks · Cisco Talos

Threat Source newsletter (July 14, 2022) — Are virtual IDs worth the security risk of saving a few seconds in the TSA line?

Summary: Cisco Talos' Threat Source newsletter notes that Maryland has rolled out state IDs in Apple Wallet for airport use and American Airlines now offers an app consolidating driver's license, passport and TSA Pre-Check, while the author cites past state app failures including North Dakota's app sending location and personal data to advertisers and a Pennsylvania third-party contact-tracing leak affecting up to 72,000 people. The same edition reports Transparent Tribe shifting to target college-aged students in India with CrimsonRAT, Predatory Sparrow claiming attacks on Iranian steel facilities including one that caused a fire and leaking nearly 20 GBs of documents, and NIST selecting four quantum-resistant encryption algorithms with a new standard expected in about two years.

Key Takeaway: The convenience pitch for digital IDs rests on state and third-party apps whose track record already includes up to 72,000 people's data exposed through a single contact-tracing vendor, and Transparent Tribe's CrimsonRAT shows what an intruder does once inside an endpoint - screenshots, keystrokes, and long-term access.

Read the original at Cisco Talos ↗

Topics
Malware
Related