Victorians, TONIC, RevStealer, Fireant, OpenClaw, PowerShell, SuperBox, Aaran Leyland - SWN #612
Summary
Host Doug White covers a range of security threats, including a $74 million DeFi exploit, the "Reverend Stealer" malware disguised as a free Claude AI tool, and the Fire Ant group targeting Cisco routers. The episode also discusses the risks of OpenClaw AI agents, a PowerShell-based click-fix attack, and Iranian hackers using fake job listings to distribute malware. Additionally, White reviews Anthropic's new AI security tool, critiques its marketing metrics, and highlights the dangers of pirated streaming devices like Superbox.
Topics discussed
Intro, show overview, and ASM Summit promo
Kronos blockchain price manipulation attack
Sponsorships: ThreatLocker and InfoSec World
Reverend Stealer malware via fake Claude Opus 5
Fire Ant targeting Cisco and Linux infrastructure
OpenClaw AI agent security risks and expansion
PowerShell click-fix attack and social engineering
Nimbus Manticore: Iranian group targeting job seekers
Historical security: 1851 Chubb safe cracking
Tenable Atlas endpoint security promotion
Interview with Aaron Leyland on Claude Security
Post-interview discussion on AI verification costs
Superbox malware ecosystem and pirated streaming
Outro and subscription call to action
Listen ad-free on Castria