A year after the Panama Papers, a massive leak of confidential information from the Bermuda law firm Appleby Group Services, dubbed the Paradise Papers, has shone another light on the use of offshore accounts, writes RUDI DICKS, Head of Cyber Security at BDO Cyber and Forensics Lab
A new set of data taken from an offshore law firm again threatens to expose the hidden wealth of individuals and show how corporations, hedge funds and others may have skirted taxes. A year after the Panama Papers, a massive leak of confidential information from the Bermuda law firm Appleby Group Services, dubbed the Paradise Papers, has shone another light on the use of offshore accounts.
1. What are your views / interpretation on / of the ‘Paradise Papers’ data leaks?
Appleby publicly stated that it was not the subject of a leak but of an illegal computer hack. Their systems were accessed by an intruder who deployed the tactics of a professional hacker and covered his/her tracks to the extent that the forensic investigation concluded that there was no definitive evidence that any data had left their systems. While the mechanics of the breach itself have yet to be revealed, this was clearly a targeted attack. Law firms are particularly susceptible to hacking as they house a treasure trove of sensitive data that, when compromised, can result in sometimes irrecoverable damage.
The paradise papers, like the panama papers is an excellent example of the reputational harm that attackers can cause, rather than financial. Here we saw many wealthy people shown to have offshore accounts in tax havens. Most of these transactions are perfectly legal but the implication is that these wealthy and often famous people are skirting their tax obligations. For the company that these documents were stolen from, this leak will most likely destroy the business.
This class of events demonstrates why law firms must protect their clients’ confidential information. No amount of cyber insurance, data backup strategies, nor business continuity planning can ever put this genie back in the bottle.
2. In your opinion, should we concentrate on the content aspect of these leaks or the security aspect?
For Appleby, the concern is with the content because their clients will be far less likely to conduct sensitive business with them in the future. By releasing the Paradise Papers, the aim of the International Consortium of Investigative Journalists (ICIJ) was to expose significant failures and weaknesses inside the offshore industry. As per ICIJ, “those stories and others they are pursuing serve the public interest by bringing accountability to the offshore industry, its users and operators. Other parts of the data are of a private nature and of no interest to the public. ICIJ will not release personal data en masse but will continue to mine the full data with its media partners.” The content released will certainly have far-reaching impacts for those affected.
For security specialists, the concern is with how this happened, and making sure we do everything possible to ensure that the same attack vectors cannot be used against our clients. This event, allegedly conducted by external hackers, could likely have been detected and mitigated. What ends in a business disrupting event often begins with the ‘click’ on a harmless looking link. Sometimes it involves complex social engineering, credential harvesting and clandestine operations inside the network to locate and slowly exfiltrate valuable data. Thus, considering heightened cyber risks, organisations have to make sure that they are taking reasonable steps to protect their clients’ confidential data. These include:
· Ensuring that software used is up-to-date and that available patches are implemented as soon as reasonably practical.
· Configuring Intrusion Prevention Systems and Firewalls policies to reject information gathering events
· Reviewing access controls regularly to ensure that they are up to date and that they restrict electronic data users to their necessary business functions.
· Utilising antivirus and malware detection software.
· Conducting periodic cybersecurity audits and penetration testing.
· Requiring multi-factor authentication for remote access into computer systems and for very sensitive internal access points.
· Requiring rotating complex passwords.
· Monitoring the activity of authorised users to detect any unauthorised file access, as well as, any large-scale downloading, copying or tampering with confidential information.
· Conducting regular cybersecurity awareness training together with phishing attacks.
3. With ‘Offshore Leaks’, ‘Panama Leaks’, ‘Paradise Papers’ – what should we be aware of / conclude?
We are living in an age of internet activism or hacktivism, which is the subversive use of computers and computer networks to promote a political agenda or a social change. With roots in hacker culture and hacker ethics, its ends are often related to the free speech, human rights, or freedom of information movements. Hacktivists seek to expose social injustice. The hack is a reminder that cybercrime is sometimes motivated by loftier aspirations than making money.
4. How come hackers can still obtain sensitive information when security conscious companies invest so much in safeguarding their data?
No matter how much a company invests in latest security technologies, the human factor remains the weakness link. The lack of effective cybersecurity training for all employees is the root cause of companies failing to keep their data safe. It is extremely pertinent to every organisation to protect its reputation, competitive advantage and operational stability against social engineering with effective company-wide security awareness. BDO’s cybersecurity education program sets employees up for success by instilling cutting edge knowledge and practical know-how into the workplace. Through integrated communication and hacker-led training, BDO helps organisation fight cybercrime strategically and beyond the scope of technology.
As selfie cameras rise, so must selfie etiquette
Selfies were once a sign of narcissism or self-obsession. Now they are the new normal, writes ARTHUR GOLDSTUCK.
You can blame Oxford Dictionaries for making the “selfie” respectable. After all, being named Word of the Year, as it was in 2013, does tend to soften some of the self-consciousness in this most self-conscious of actions.
Once seen as a symbol of narcissism and self-obsession, it is now the new normal, to the extent that most smartphones are sold on the basis of the front camera. Or, as that feature is now almost universally named by manufacturers, the “selfie camera”.
I was one of the hold-outs, having a near-allergy to the selfie. I still resist, but succumb more often than I would like. The reason for continued resistance is that it remains a big leap from the word becoming respectable to the action itself shedding its narcissistic image.
For most, it’s already happened, and for that you can blame Ellen DeGeneres. She choreographed the most famous group selfie yet at the 2014 Oscars, when she roped a bunch of actors into a group selfie, using the then-new Samsung Galaxy S5 smartphone. Her tweet of the photo became what was then the most retweeted posting ever on Twitter, and was estimated to have been worth a million dollars in marketing value to Samsung.
Ironically, it was Samsung’s up-and-coming challenger, Huawei, that came up with a new word for this type of selfie: the “groufie”. Thanks to an 8 Megapixel front camera on the new Huawei Ascend P7 camera that year which took the highest quality selfies – and groufies – possible on a smartphone at the time.
It didn’t end there, and selfies and groufies have morphed into variations like selfscapes (selfie in a landscape), skyfies (selfies from the air, using remote controlled devices) and jerkies (selfies to make an idiot out of yourself). I invented all of those on the fly, so it’s easy to imagine a new word emerging for every type of selfie.
Continue reading about selfie improvements through the years.
Mickey’s 90th for SA
Disney Africa announced the local launch of the Mickey the True Original campaign, joining the global festivities honouring 9 decades of Mickey Mouse, his heritage, personality and status as a pop-culture icon.
As 18 November 2018 marks 90 years since his first appearance in Steamboat Willie in November 1928, a series of world-wide celebrations will be taking place this year and South Africa is no different.
The campaign will come to life with engaging content and events that embrace Mickey’s impact on the past, present and future. The local festivities kick off in earnest this month, leading up to Mickey’s 90th anniversary on 18 November 2018 and beyond:
- An exclusive local design project where ten highly talented South African artists will apply their own inspiration and artistic interpretation on 6-foot Mickey Mouse statues.
- Once revealed to the public, the statues will form part of the Mickey the True Original South African Exhibition, inspired by Mickey’s status as a ‘true original’ and his global impact on popular culture. The exhibition will travel to 3 cities and delight fans and families alike as they journey with Mickey over the years. Featuring 4 sections highlighting Mickey’s innovation, his evolution, influence on fashion and also pop culture, the exhibition is in collaboration with Samsung and Edgars, and will visit:
o Sandton City, Centre Court: 28 September – 14 October
o Gateway Theatre of Shopping, Expo Explore Court: 19 October – 11 November
o Canal Walk Shopping Centre. Centre Court: 16 November – 26 November
- Samsung continues their collaboration with Disney as they honour Mickey’s 90th anniversary nationally at all Samsung and Edgars Stores. Entitled Unlocking the Imagination, fans are encouraged to visit these stores, take a selfie with a giant Mickey plush toy using their Samsung Galaxy Note9 and stand a chance to win not only a giant Mickey plush, but also an international family trip. Visit www.Samsung.com for more information
- Mickey’s 90th Spectacular, a two-hour prime-time special, will be screened on M-Net 101 later this year. The elegant affair will feature star-studded musical performances, moving tributes and never-before-seen short films. Superstars from music, film and television will join the birthday fun for the internationally beloved character.
- In addition, look out for special programming on Mickey’s birthday (18 November) across Disney Channel (DStv, Channel 303), Disney XD (DStv, Channel 304) and Disney Junior (DStv, Channel 309).
- In retailers, Edgars will be stocking a complete collection of trendy fashion, accessories and footwear for the whole family, inspired entirely by Mickey Mouse.
- Mickey will be the central theme of an in-store campaign nationwide this November and December, with brand new products, apparel, toys, as well as titles from Disney Publishing Worldwide, including books, arts & crafts and comics
- Discovery Vitality and Disney are celebrating healthy, happy families this festive season by offering helpful and exciting tips and tricks on how to eat nutritious, yet delicious, foods, all inspired by Mickey. There’s also a trip to Disneyland Paris up for grabs. Log on to www.discovery.co.za/vitality for information.
- And much more – check the press for updates
“Binding generations together more than any other animated character, Mickey Mouse is the “True Original” who reminds people of all ages of the benefits of laughter, optimism and hope,” says Christine Service, Senior Vice President and Country Manager of The Walt Disney Company Africa. “With his universal appeal and ability to emotionally connect with generations all over the world, no other character quite occupies a similar space in the hearts and minds of a global fan base and we are thrilled to be sharing these local festivities.”
Mickey’s birthday is celebrated in honour of the release of his first theatrical film, Steamboat Willie, on 18th November 1928, at the Colony Theatre in New York City. Since then, he has starred in more than 100 cartoons and can currently be seen on Disney Channel (DStv, Channel 303) in the Mickey Mouse cartoon series and on Disney Junior (DStv, Channel 309) in Mickey and the Roadster Racers.
South African fans are encouraged to share their Mickey Mouse moments on social media using the hashtag#Mickey90Africa.