108: Marq

The misuse of powerful technology can cause chaos and harm to innocent people. In a darknet diary episode, Jack Rhysider narrates the story of Omar, a twenty-year-old who sought revenge on a car dealership that fired him. Omar used a login of another employee to access the Web Tech Plus system, which allowed car dealerships to remotely disable cars from starting. He started disabling cars and honking them, causing grief to the customers. This incident demonstrated how a remote kill switch for a car could be a potent technology that, when abused, could cause havoc. It highlights the importance of cybersecurity to prevent unauthorized access and ensure the safety of individuals and businesses.

Marq started exploring the dark web while in high school, but remained a mere lurker in chat rooms and hacker forums without participating. However, with job experience from companies like Oracle, Microsoft, and an MSP, he gained valuable IT skills and experience that helped him level up. With each job, he learned something new and expanded his knowledge until he became a systems administrator at a Managed Service Provider in Atlanta. Through consistent learning and building his skills, Marq was able to progress in the tech industry and move cities to explore more job opportunities.

Marq, a former MSP system administrator, had access to everything, including servers, which is normal for his job. He became fascinated with the dark web, frequented hacker forums and saw more and more people selling databases of credit cards, hacked users' information, passwords, and email addresses. He never participated in any of it but watched for curiosity. Marq liked his job as a system administrator, but a disagreement with a knowledgeable coworker over shortcuts and a PowerShell script for a client led to his sudden termination from the company. This situation was unrelated to his fascination with the dark web and visiting hacking forums.

Former employers should disable logins for former employees while changing shared passwords for clients. MSPs should consider creating a separate login for everyone who needs access to avoid such situations, to prevent unauthorized access to sensitive data. Even though Marq had access to important data, he realized it was wrong and did not misuse it. However, accessing the dark web made him believe he could do things he shouldn't. It's crucial to have strong ethics, and cybersecurity awareness training to ensure employees do not use their access maliciously and end up harming the company.

Former employees with insider knowledge of a company's systems and security protocols can be a major threat to data security. In this case, Marq, with his knowledge of the company's network and security measures, was able to easily breach their system and steal valuable customer data. He then posted it on the dark web for sale, highlighting the importance of companies implementing strong security measures to safeguard their customer information. This incident also emphasizes the need for employees to be educated on the importance of cybersecurity to prevent accidental data breaches caused by human error. Companies must also regularly monitor their network activity and limit access privileges to prevent data breaches from former employees or unauthorized users.

Using personal wallets for transactions on the dark web can connect individuals to illegal activities and put them at risk of prosecution. Exchanges are required to collect personal information, making it easier for authorities to trace transactions. Financial need and personal circumstances can also drive individuals to engage in illegal activities. Data breaches and leaks can have real-world consequences and individuals must take steps to protect their online accounts, especially those linked to security cameras. Reporting such breaches to authorities and companies can prevent harm and protect users. Companies must take responsibility for securing their customers' privacy and respond promptly to reports of breaches or leaks.

The sale of customer information on the dark web is a lucrative business. Law enforcement and security companies actively monitor these forums, often purchasing data to investigate and turn over to authorities. Selling backdoor access to a company's network is also a common occurrence, but can have serious legal consequences. Marq found himself in trouble with the FBI after attempting to sell access to a company's servers, and learned the importance of seeking legal counsel in a situation like this. The consequences of cybercrime can be severe, and individuals should think twice before engaging in any illegal activity on the dark web.

Marq's story highlights the consequences of hacking into others' systems for personal gain, even if it seems harmless. The severity of the crime can be devastating, as Marq lost a friend, spent time in jail, and faces long-term consequences such as difficulty finding employment. Lisa's insight shows that companies need to take threat prevention seriously - revoking old credentials, ensuring employees feel valued, and providing training can help to deter insider threats. Aspiring engineers like Marq should prioritize ethical behavior and seek to use their skills to positively impact society, rather than harm it.

Insider threats are not necessarily bad people, but rather a product of circumstances, timing, and personality. The most common types of attacks are fraud, sabotage, and theft, with theft being complex and motivated by various factors such as dissatisfaction, pressure, and a sense of ownership. To combat this, it is important to monitor key employees in certain departments during crucial periods, such as when they are leaving employment. Even the leader of an organization can become an insider threat, as seen in the case of General David Petraeus. Thus, it is crucial to always be vigilant and take proactive measures against insider threats.