Tracking the World's Dumbest Cyber Mercenaries
EFF researcher Cooper Quintin recounts tracking Dark Caracal, a Lebanese state-backed cyber-mercenary group whose comical operational security blunders exposed their operations.
Summary
Tracking the Dark Caracal Mercenary Group
For over six years, Electronic Frontier Foundation (EFF) researchers monitored Dark Caracal, a state-aligned cyber-mercenary group operating out of Lebanon targeting journalists and dissidents.
Hilarious Operational Security Failures
Cooper Quintin highlights unbelievable OPSEC mistakes committed by the group—including leaving C2 control panels unauthenticated, running surveillance apps from personal test devices, and exposing target databases.
The Surprising Efficacy of Low-Skill Threat Actors
Despite rudimentary tradecraft, Dark Caracal successfully compromised thousands of victims worldwide by deploying off-the-shelf mobile malware via phishing.
Insights into the Commercial Surveillance Industry
Quintin analyzes the growing market for budget cyber mercenaries, emphasizing that even unsophisticated actors pose serious threats to vulnerable human rights defenders.
Related talks
War Stories·48 min
Mikko Hypponen
Mikko Hypponen reflects on living 100 miles from Russia, tracing the evolution of Russian state cyber programs, patriotic hacker collectives, and NATO integration.
Will Thomas
How Russian state-sponsored APTs weaponize public red team tools and POCs within days of release.
Community Stage·36 min
N Case · J McCoy
Analyzes real-world breaches in research laboratories and manufacturing facilities to examine how nation-state actors exploit human error and misconfigurations.