There is no longer any such thing as Computer Security

In a world where digital mischief has become an everyday reality, the concept of computer security has been rendered obsolete. The once-mysterious hooded computer guys, now known as cybersecurity experts, are no longer the only ones manipulating the digital landscape. Today, anyone with access to a computer can wield the power to rewrite history, as proven by a single infamous phishing email sent on March 19th, 2016.

This email, which has become synonymous with phishing attacks, was not an isolated incident. It was part of a larger, sophisticated campaign that exploited vulnerabilities in email systems and human behavior. The attacker began by slurping up lists of public emails from a 2008 political campaign, which included the contact information of 200 staffers. One of these staffers was also hired for the 2016 political campaign, and their non-public campaign emails were stored in their address book. Among these contacts was a key campaign member with an extensive email history.

Once the attacker gained access to this person's inbox, they harvested existing email addresses, subject lines, content, and attachments to construct plausible-looking booby-trapped emails. These emails were then sent to the contacts in the victim's address book. The sophistication of the attack determined whether it was considered "spear" phishing or not. In this case, the attack was remarkably unsophisticated and generic, with no focused effort on the target.

Despite its simplicity, the attack had a significant impact. The target did not immediately click the link in the email but, fortunately, emailed IT support to verify its legitimacy. However, the IT response contained a fatal mistake. The support team's reply inadvertently confirmed the authenticity of the email, inadvertently leading the target to trust the phishing attempt. This single mistake allowed the attacker to gain access to sensitive information and further propagate their campaign.

The 2016 phishing email serves as a stark reminder that computer security is no longer a matter of mysterious hooded figures. Today, anyone can manipulate digital systems, and the line between attacker and victim is blurred. The attacker's ability to exploit vulnerabilities in email systems and human behavior highlights the need for continuous vigilance and education in the digital age. As history is increasingly rewritten through digital means, the concept of computer security has been irrevocably altered, leaving us in a world where anyone can wield the power to reshape reality.