Vous avez TOR de ne pas connaitre NYM !

 

Avant tout, parlons de TOR (The Onion Router). 

C'est un réseau de communication décentralisé, inventé par l'US Navy, qui permet aux utilisateurs de naviguer sur Internet de manière "presque anonyme" et privée. 

Le réseau TOR fonctionne en envoyant les données des utilisateurs à travers plusieurs relais intermédiaires (le nœud d'entrée, le nœud intermédiaire et le nœud de sortie).

 À chaque noeud, les données sont chiffrées pour le noeud suivant, ce qui rend très difficile l'identification de la source et de la destination des données. 

Mais TOR a aussi ses faiblesses:

💥  La confidentialité offerte par TOR dépend en grande partie du nombre de relais intermédiaires utilisés. Si un attaquant contrôle une grande partie de ces relais, il peut potentiellement désanonymiser les utilisateurs du réseau. 

💥 En surveillant les noeuds d'entrée et les noeuds de sortie qui s'activent au même moment, on peut parfois trouver une correspondance entre les 2 et déterminer ainsi l'adresse IP de l'utilisateur (je schématise beaucoup)  

 

Et puis vint NYM ! 

NYM peut fournir une confidentialité plus puissante via une infrastructure réseau décentralisée, construit sur une blockchain, ce qui signifie que toutes les transactions et les échanges de données sont enregistrés de manière décentralisée et vérifiable. 

Pour atteindre cet objectif, NYM utilise le MIXNET, en chiffrant et en relayant votre trafic Internet via un réseau multicouche. Dans chaque couche du mixnet, les nœuds mixtes mélangent votre trafic Internet avec celui des autres utilisateurs, rendant les communications privées et masquant vos métadonnées.

Le réseau mixte Nym est incitatif et décentralisé. Les utilisateurs paient des frais en NYM pour envoyer leurs données via le mixnet. 

En promettant une caution initiale de NYM, n'importe qui peut exécuter un nœud mixte à condition d'avoir été autorisé par un "Valideur". 

Les fournisseurs de nœuds sont ensuite récompensés en jetons NYM en fonction de la bonne qualité de service, en effectuant le travail de mélange des paquets et en assurant la confidentialité des utilisateurs finaux. 

 
C'est ce qu'on appelle la «preuve de mélange», similaire à la façon dont Bitcoin récompense les mineurs pour l'extraction de nouveaux blocs. Le mécanisme de récompense permet au mixnet de se développer et de se décentraliser.

 En plus de la confidentialité, NYM vise également à améliorer la sécurité et la résilience des communications en ligne en permettant la création de réseaux privés virtuels (VPN) décentralisés et en permettant le chiffrement de bout en bout des données. 

Crédit : https://nymtech.net

 

 

Sources:
✔ https://nymtech.net
✔ https://podcasts-francais.fr/podcast/la-cybersecurite-expliquee-a-ma-grand-mere/-8-mon-nom-est-personne
✔ https://twitter.com/NymFrance 

La fin de la double authentification par SMS chez Twitter pour les non-abonnés à Twitter Blue

 

Twitter a annoncé la fin de sa double authentification par SMS (celui ne sera en fait réservé qu'aux seuls abonnés à Twitter Blue).

Voila une belle occasion pour passer à autre chose que le "SMS" comme moyen de double authentification. 

 

Le plus drôle dans cette histoire c'est que ceux qui paieront sur Twitter seront les moins bien protégés ! 

 

Je voulais par ce billet simplement partage cet article de InWebo ( je n'ai aucune action chez eux hein ! 😊 ) 

 

 L' article :

Je sais qu'à la suite de ce billet des commentaires vous vanteront les qualités de nombreux produits prévu à cet effet ! 

Je vais donc vous laisser la parole !

Une interview du groupe LOCKBIT

 Piratage de THALES  ? De CONTINENTAL ?
Pour ceux qui souhaitent en apprendre d'avantage sur ce groupe spécialisé dans le ransomware ! 

 

Source : vx-underground

* In this interview this person will be identified as LB0 (Lockbit administrator, founding member)
* vx-underground conducted this interview over TOX
	- Text and grammar has been modified to improve legibility


смелли: 		When did you start Lockbit and why?
LB0: 			Lockbit was founded September 3rd, 2019. Other groups were autistic or drug addicts.

смелли: 		Hahahaha. So, was this your first ransomware group? Or were you a veteran of the ransomware scene?
LB0:			I am a veteran.

смелли:			How'd you come up with the name Lockbit? It's a cool name
LB0:			Normal logic, lock and byte, lock byte [sic]

смелли:			Did you start Lockbit by yourself? Or did you have a team?
LB0:			I had a team. I'm the boss. Lockbit 1.0 was not created alone. Currently our team has over 10 members which includes pentesters,
			developers, money launderers, testers, and negotiators.

смелли:			You mentioned other competitors were drug addicts. Is substance abuse an issue in ransomware groups?
LB0:			Yes, cocaine or marijuana. I use drugs, but in very reasonable quantities and in rare occasion

смелли:			Understood. Well, is the current Lockbit team still present in Lockbit 3.0?
LB0:			Yes, people very rarely leave. If they do leave, I find and recruit.

смелли:			Do you ever see internal conflicts in the group? How do you manage that?
LB0:			If I see that the person behaves inadequately and does not correct himself, then I fire such a person or create conditions under 
			which he leaves on his own.
			
смелли:			Do you ever hire outside of your team? Like contractors?
LB0:			Naturally, I hire different specialists for any work. I can't do everything with my own hands. In fact, I am a manager.

смелли:			This is a lot of work. Are you stressed from running the largest cyber cartel in history?
LB0:			I don't have any stress, I love my job, it's a lot of fun. I love when when I have 5 stars and helicopters like 
			in GTA, I have fun.
			
смелли:			Your group is extremely active, how many affiliates do you have?
LB0:			No more than 100 people at the moment. My dream is 300 partners like 300 Spartans. In my blog there is a detailed description of how to 
			become a partner, it can become any person from the planet earth and even aliens. 
			http://lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion/rules
			
смелли:			Regarding affiliates, you mentioned you have over 100... do you have ban affiliates? Do affiliates know each other? Do you have a chatroom?
LB0:			No, we don't have a chatroom. If someone wants to share they're a partner, they can do so. As far as banning affiliates - I do regular 
			purges and block those who are not active.

смелли:			Do you ever reward affiliates for being active or doing big ransoms?
LB0:			The best reward for my partners is a stable platform to work with an impeccable reputation, the fourth year of stability what could be better?

смелли:			Do you negotiate for affiliates? Or do they do it themselves?
LB0:			I negotiate personally, for an increased percentage, the usual percentage is 20%, but if the negotiations are conducted by me personally, 
			the percentage ranges from 30 to 50% depending on the complexity and effectiveness of the negotiations.
			
смелли:			Have you seen a decrease of affiliates since the beginning of the Russian / Ukrainian conflict?
LB0:			Yes I observe, 1-20% of the partners have gone to other countries to avoid being mobilized, the FBI has a great opportunity to 
			catch someone who is not watching their anonymity and not quality laundering of money obtained by criminal means.
			
смелли:			Do you ever casually talk with affiliates or consider them your friends?
LB0:			Every partner is my friend) 
			
смелли:			Regarding affiliates, people have discussed the difficulty of cashing out ransoms. Is it hard?
LB0:			I don't believe it, it's very simple.

смелли:			What really? Its easy to cash out?
LB0:			There's nothing easier than cashing out, it's the easiest thing in my job. Just transfer the money to Chinese exchangers, from there 
			to another exchange, then to drop *** cards. You send the *** to the ATM and they bring you the cash.
			
смелли:			How do *** get the crypto on a card?
LB0:			There are a lot of online services, from cryptocurrency exchanges to exchangers and localbitcoins. I always use different ways 
			to blend in with the crowd.

смелли:			You trust ***?
LB0:			I don't trust ***, but if you cash out long over several years and in small installments there is no problem.

смелли: 		Where do you find ***? Forums?
LB0:			Yes

смелли:			... Do you meet them in person?
LB0:			Yes

смелли:			Do these money mules know you're the leader of Lockbit?
LB0:			No lol they think I'm just some random hacker

смелли:			Wow. How much cash do you have these mules move?
LB0:			1000-7000$

смелли:			Do the mules go to the same ATM? Or multiple?
LB0:			lol? Of course not, they go to different ATMs, I trust *** no more than $7,000

смелли:			Do you give these mules a percentage of the money they cashed out?
LB0:			Yes, 5%

смелли:			In a video that was released, some cl0p ransomware affiliates stored their money under a mattress. Is that where you keep your money too?
LB0:			I don't have money under my mattress, everything I cash out I immediately invest in the business and mix it with legal money, this 
			way I inflate my business profits and launder money. And I spend only the money that is obtained in an honest way from the profits of 
			my business and pay with my card)))
			
смелли:			Hahahaha. Yes, its been rumored you own a restaurant. Is this true?
LB0:			It's true, now I have 3 restaurants in China, and 2 restaurants in New York

смелли:			Random question: If you had the chance to tell threat intelligence something, what would you say?
LB0:			Work better bums, you have to find all my competitors, but you can never find me.

смелли:			Random question: If you had the chance to talk to the FBI, what would you say?
LB0:			Free Assange.

смелли:			Random question: If you had a chance to tell an anti virus company something. What would you say?
LB0:			Don't watch your users please