Darknet Diaries
124: Synthetic Remittance
· Summarized
Key takeaways
- Long-term investing strategies, like Warren Buffett's, are more reliable than get rich quick schemes.
- Cybercriminals like Evaldas Rimašauskas use social engineering, fake documents, and domain impersonation to commit massive fraud.
- Even the most sophisticated companies can fall victim to well-executed scams, emphasizing the need for vigilance and strong security practices.
- Education, awareness, and verification are crucial in preventing business email compromise scams.
- Law enforcement agencies are vital in capturing cybercriminals and recovering stolen assets, but prevention is the best strategy.
Summary
The Wisdom of Warren Buffett and the Illusion of Get Rich Quick
The episode opens with a reflection on Warren Buffett's investment philosophy—buy wonderful companies at fair prices and hold long-term, slow wealth accumulation. Buffett's approach contrasts sharply with the prevalent get rich quick schemes online, which promise rapid wealth through training courses and shortcuts. This sets the stage for the dark story that follows, about Evaldas Rimašauskas, who exploited the inefficiencies of the internet for quick personal gain.
Evaldas Rimašauskas' Business Email Compromise Scam
Evaldas Rimašauskas orchestrated a sophisticated BEC scam targeting major tech companies like Facebook, Google, Apple, and Amazon. Using detailed social engineering, fake invoices, and lookalike domains, he posed as a trusted partner, Quanta Computer, and successfully manipulated employees into rerouting large payments to his accounts. Over two years, he stole hundreds of millions, laundering the money through multiple bank accounts worldwide, highlighting the vulnerabilities in even the most secure corporations.
The Fall and Lessons from a Cybercriminal's Empire
Evaldas and his team accumulated nearly $122 million before their scheme was discovered. Their operation was meticulously planned, exploiting trust and technical deception. Ultimately, the scheme unraveled when a domain discrepancy was noticed, leading to FBI intervention and his arrest. The story underscores the importance of rigorous email and transaction verification, increased awareness, and the shared responsibility of cybersecurity across all levels of a firm.
Sponsors
- Delete Me · Delete Me is here to make it easy, quick, and safe to remove your personal data online. Take control of your data and keep your private life private by signing up for Delete Me. Now at a special discount for Dark Net Diaries listeners, get 20% off your Delete Me plan when you go to joindeleteme.com/darknetdiaries and use promo code dd20@checkout.
- Black Hills Information Security · Black Hills Information Security has earned the trust of the cybersecurity industry with their hands-on training, webcasts, blogs, and courses designed by hackers for hackers. They offer pen testing, active SOC monitoring, continuous penetration tests, and a new cybersecurity-themed comic series called The Future Is.
Show notes
What do you get when you combine social engineering, email, crime, finance, and the money stream flowing through big tech? Evaldas Rimašauskas comes to mind. He combined all these to make his big move. A whale of a move.
Sponsors
Support for this show comes from Linode. Linode supplies you with virtual servers. Visit linode.com/darknet and get a special offer.
Support for this show comes from Axonius. The Axonius solution correlates asset data from your existing IT and security solutions to provide an always up-to-date inventory of all devices, users, cloud instances, and SaaS apps, so you can easily identify coverage gaps and automate response actions. Axonius gives IT and security teams the confidence to control complexity by mitigating threats, navigating risk, decreasing incidents, and informing business-level strategy — all while eliminating manual, repetitive tasks. Visit axonius.com/darknet to learn more and try it free.
Follow this show on AudioBrevity and new episodes get summarized for you. Create a free account