Light

Episode #819 Quiz

The WiFi Frag Attacks
Date: 2021-05-18 | Length: 1.75 hrs | Episode page at twit.tv

About this episode

FireEye Mandiant detailed DarkSide ransomware-as-a-service operations: Tor-based admin panels, affiliate vetting, Windows/Linux builds, Salsa20/RSA-1024 encryption, automated decryption tests, DDoS extortion, and shaming blogs. Blockchain analytics traced payments, laundering through exchanges and Hydra, while forum bans and coordinated disclosure preceded patching of WiFi Frag Attacks.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: According to the episode, what were the revenue-sharing terms advertised by the DarkSide ransomware-as-a-service operators?

Question 1

According to the episode, what were the revenue-sharing terms advertised by the DarkSide ransomware-as-a-service operators?

They took a 50% fee for every payment and refunded the rest They took a flat 20% regardless of ransom amount They took 10% under $500,000 and 25% above $5 million They took 25% under $500,000 and 10% above $5 million

Question 2: What did Elliptic’s blockchain analysis conclude about the bitcoin wallet used by DarkSide to receive the Colonial Pipeline ransom?

Question 2

What did Elliptic’s blockchain analysis conclude about the bitcoin wallet used by DarkSide to receive the Colonial Pipeline ransom?

It first appeared on May 8 and had received 21 payments from 57 wallets It first appeared in August 2020 and had received 99 payments from one wallet It first appeared on May 10 and had received only one ransom payment It first appeared on March 4 and had received 57 payments from 21 wallets

Question 3: Which statement best matches the episode’s description of the DarkSide and Toshiba incident timing?

Question 3

Which statement best matches the episode’s description of the DarkSide and Toshiba incident timing?

DarkSide’s leak site was fully accessible, and Toshiba denied any intrusion occurred Toshiba was unaffected because DarkSide had already released free decryptors before the attack DarkSide’s leak site was inaccessible, yet Toshiba still saw evidence of exfiltration DarkSide publicly restored the stolen data, so Toshiba recovered all files without backups

Question 4: Which of the following was cited in the episode as a design flaw affecting essentially all WiFi devices?

Question 4

Which of the following was cited in the episode as a design flaw affecting essentially all WiFi devices?

The WiFi standard forbids fragment reassembly entirely The untrusted 'is aggregated' flag is not authenticated The WPA3 handshake always reuses the same session nonce The access point fails to encrypt any frame containing a DNS request

Question 5: What mitigation did the Frag Attacks researchers recommend while waiting for device updates?

Question 5

What mitigation did the Frag Attacks researchers recommend while waiting for device updates?

Use HTTPS and apply all other available updates Move all devices to IPv6-only networks and avoid DNS entirely Disable all WiFi encryption and rely on MAC filtering Replace WiFi with Bluetooth to avoid fragmentation attacks

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.