Light

Episode #824 Quiz

Avaddon Ransonomics
Date: 2021-06-22 | Length: 2 hrs | Episode page at twit.tv

About this episode

Chrome patched its seventh 2021 zero-day, CVE-2021-30554, a WebGL use-after-free enabling remote code execution. Avaddon’s ransomware model increasingly used purchased initial access, malware backdoors, Cobalt Strike, lateral movement, and Active Directory compromise. A WiFi SSID format-string bug in iOS caused crashes until network settings reset.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: According to the Proofpoint attack chain Steve described, what role does the initial access broker play before the ransomware affiliate deploys Cobalt Strike?

Question 1

According to the Proofpoint attack chain Steve described, what role does the initial access broker play before the ransomware affiliate deploys Cobalt Strike?

It encrypts the victim’s backups to force negotiation It exfiltrates system information from the victim network It performs full domain compromise through Active Directory It deploys ransomware to all domain-joined workstations

Question 2: What exact SSID value did Steve say could make an iOS device’s WiFi become immediately and semi-permanently inoperative when it tried to join that network?

Question 2

What exact SSID value did Steve say could make an iOS device’s WiFi become immediately and semi-permanently inoperative when it tried to join that network?

%s%s%s%s%p%n %p%p%s%s%n %p%s%s%s%s%n %p%s%n%s%s%s

Question 3: What mechanism did Adam discover for bypassing Windows 11 Home’s insistence on connecting to the Internet during setup?

Question 3

What mechanism did Adam discover for bypassing Windows 11 Home’s insistence on connecting to the Internet during setup?

Open tpm.msc and disable the network requirement Press ALT+F4 to close the prompt Press CTRL+ALT+DEL to restart the setup wizard Disconnect the Ethernet cable after the account screen appears

Question 4: What did Steve say the new SpinRite 6.1 logging approach would do instead of retaining the most recent N log entries?

Question 4

What did Steve say the new SpinRite 6.1 logging approach would do instead of retaining the most recent N log entries?

Create sequentially numbered logs and pick the next number Compress all prior logs into the boot media root directory Rewrite a single log file in place and truncate older entries Store one log per sector and merge them at shutdown

Question 5: According to the Russian researchers Steve quoted, what was the main reason Avaddon shut down?

Question 5

According to the Russian researchers Steve quoted, what was the main reason Avaddon shut down?

A sudden shortage of effective encryption libraries A decision to pivot entirely into public bug disclosure A collapse in affiliate interest because of lower ransom demand Fear of increased political and law-enforcement pressure

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.