647: Karim Hijazi | When Cyber War Goes Kinetic

Nation-State Actors

Nation-state actors play a significant role in cyber warfare, often blurring lines between government and criminal activities. Karim Hijazi explains how operatives from Russian intelligence services like the GRU and FSB moonlight as cybercriminals, using similar tactics for both state and personal gain 1. This dual role complicates global security efforts, as these actors can easily transition between espionage and cybercrime. Hijazi emphasizes the challenge of defending against such threats, noting that traditional cybersecurity measures are often inadequate 2.

The asymmetric nature of bad guys is that they can always try, fail, try again, and finally get it right. Security, we essentially can never mess up. If you mess up once, it's all over.

--- Karim Hijazi

The pervasive influence of these actors underscores the need for innovative defensive strategies that go beyond conventional approaches 3.

   

Hacktivism & Cybercrime

Hacktivism and cybercrime are increasingly intertwined, with non-state actors like Anonymous playing a complex role in the cybersecurity landscape. Karim Hijazi describes Anonymous as a leaderless collective known for its hacktivist activities, which often lack the intelligence to fully understand the ramifications of their actions 4. These groups can inadvertently cause significant harm, as seen in past incidents where their actions led to severe consequences for innocent parties.

Anonymous went after a border patrol group out of Arizona, I believe. And they exposed long-term culverts to the cartels and all those people got killed.

--- Karim Hijazi

The blurred lines between hacktivism and cybercrime highlight the challenges in addressing these threats, as motivations can range from political activism to financial gain 5.

   

Defensive Strategies

Effective defensive strategies against cyber threats require a proactive approach, leveraging intelligence to preempt attacks. Karim Hijazi discusses how his company, Prevailion, intercepts communication channels used by malware, akin to intercepting a spy's call to their handler 6. This method allows for real-time identification and neutralization of threats before they can cause harm.

The only way to catch it to your point is that Achilles heel of it communicating out. That communication need by that spy is how we catch them.

--- Karim Hijazi

Additionally, the rise of remote work has increased vulnerabilities, as many companies rely on VPNs that can inadvertently bypass security measures, creating new entry points for attackers 7.