04 - The NSA compromise of EastNets

In 2017 the ShadowBrokers group leaked information stolen from the NSA. Within the leak was evidence that the NSA had compromised a SWIFT bureau in the Middle East called EastNets, probably so that they could gather financial intelligence.

The leak gives an unprecedented insight into how a sophisticated actor like the NSA operates.

In this episode, we talk about the operation, as well as the advice the NSA has publicly given on how organisations can improve their security. The advice is from the former head of the NSA's Tailored Access Operations (TAO), their most elite offensive security team, and potentially the folks responsible for the EastNets.

Link to the ShadowBrokers leak: https://github.com/DonnchaC/shadowbrokers-exploits/tree/master

Blog explaining the breach: https://medium.com/comae/the-nsa-compromised-swift-network-50ec3000b195

NSA advice on how to be secure: https://www.youtube.com/watch?v=bDJb8WOJYdA