Hi, I'm Jack Riesider.

Host of the show.

Back in 2018, an interesting cyber attack took place.

It's kind of a funny thing.

I mean, it basically came onto my radar the second month I was working at Sophos.

Oh, I should introduce you to Andrew.

Yeah, so I'm Andrew Brandt, and throughout the time that the research was going on for this story, I was a principal researcher for Sophos, but I am now a principal threat researcher for a company called NetCraft.

So one of the things Sophos wanted Andrew to do was research novel threats and write about them on their newly established

Sophos blog. The team that I was on eventually didn't exist. I was the only person on it.

And one of the analysts reached out to me through the company chat and said, hey, I've got a

great story for some really cool research. I'd like to write it up

and have you publish it on the blog and do some edits on it. I said, great. Tell me more.

And he told me the story. But the one thing he didn't tell or what he said he couldn't tell me

was who the target was. So he's like, okay, fine, send me what you got, let me research it, and I'll write about it.

It started with a TV set.

So there was a sales office, and they had a bullpen, like you have a lot of, you know, in a lot of sales offices where people are on the phone, you know, trying to sell the product.

And so they had like this leaderboard that was on a computer screen that was running off a little

Linux computer.

And that was the first machine that got infected.

And the threat actors managed to pivot from that, you know, Intel Nuck, which is like a tiny

little computer that's small enough

it can mount on the back of a TV monitor that's hanging on the wall, that they were able

...