Cybercrime: fighting with ‘whatever it takes

A Reuters press release announces that ‘governments are reacting against the Revil gang and taking it offline’. The article refers to an action concluded towards the end of October 2021 in which the FBI, together with Cyber Command, intelligence services and ‘likeminded countries’ blocked the activities of the criminal group REvil, blamed for the attacks on the US Colonial pipeline and Quanta Computer, the Taiwanese Apple supplier from which new product designs were allegedly stolen. by Andrea Monti – Initially published in Italian by Strategikon – an Italian Tech Blog Continue reading “Cybercrime: fighting with ‘whatever it takes”

Apple to take public powers’ role in children protection

Apple anticipates Italy and the European Union and announces the forthcoming adoption of technological tools that, in order to protect minors, will analyse the contents conveyed through its products. At stake is not (only) privacy, but above all national political sovereignty, writes Andrea Monti, adjunct professor of Digital Law at the University of Chieti-Pescara – Initially published in Italian by Formiche.net Continue reading “Apple to take public powers’ role in children protection”

Regione Lazio, a ransomware and the Italian public policy about digital technology

The ransomware that hit the Regione Lazio infrastructure exposes once again the decades-old problem of the Italian public policy on technology. There has been a time when the Country had the chance to decide for the best. It did not by Andrea Monti – Initially published in Italian by Strategikon – an Italian Tech Blog. Continue reading “Regione Lazio, a ransomware and the Italian public policy about digital technology”

SIM hijacking, security measures and bank’s liability

Threats change, but security measures to protect account holders do not. Can banks still blame users in case of frauds? by Andrea Monti – Originally published in Italian by Infosec News

One of the many recent cases reported by the press in Italy accounts for the umpteenth fraud committed against a bank account holder exploiting a SIM hijacking attack. Not even a week ago, I had to deal with a similar case, where through a social engineering attack, the scammers mislead the customer into giving them by telephone the OTP to finalise the fraudulent transaction.

In many cases, the victim manages to obtain a refund of the stolen amount, but in others the bank refuses, claiming the client’s negligence for not recognising the fraudulent nature of the criminal behaviour. In other words and rough terms: the bank does not pay for the outcomes of the stupidity or ignorance of the victim.

However, is that so? Continue reading “SIM hijacking, security measures and bank’s liability”