Biscayne Strategic Solutions

1.2K posts

Biscayne Strategic Solutions

@BiscayneSecure

▪️Due Diligence ▪️Threat Monitoring

Wyoming/Florida 加入时间 Mayıs 2021

256 关注920 粉丝

Chad Nelson@Chad_Nelson_·1d

If you’re a crypto executive please beware! It is super important to make sure your devices (laptops, phone, and tablets) are all equipped with endpoint security to detect and block malicious links. If you need recommendations, reach out.

CoinMarketCap@CoinMarketCap

LATEST: 🚨 Lazarus Group is targeting crypto executives with new macOS malware spread through fake meeting links, according to CertiK.

English

315

Biscayne Strategic Solutions@BiscayneSecure·1d

@Chad_Nelson_ @glaciersecurity

QAM

Biscayne Strategic Solutions 已转推

Chad Nelson@Chad_Nelson_·2d

A new client came to us after their phone got hacked. He had lost a lot of money and was understandably freaked out because he had no idea what happened or who had hacked him. What he didn't realize is that the Asia-based hacker was STILL inside his iCloud account. The hacker had access to all of his text messages, photos, and everything else on his device that was backed up to iCloud. This meant that the text message 2FA codes sent from his bank were also compromised and enabled the hacker to access my client's bank account and start taking out money. We figured it out by having him check what devices were logged into his iCloud account. The device located in Asia definitely stood out to our new client so we helped him take immediate action to ensure that device no longer had access to his phone. If you ever suspect you've been hacked or- more specifically that your iPhone got hacked- here's what you should do: In your iPhone, go to Settings. Click on the Name listed for your Apple iCloud account Then scroll down just below where it says “Sign in with Apple” and you will see the devices that are logged into your iCloud account. If there is a device logged into your iCloud account that you don’t recognize, tap the suspicious device and select “Remove from Account.” In fact, we recommend that our clients routinely check their iCloud account to ensure that no suspicious devices are logged in. Last bit of advice on this: STOP using text messages for 2FA and at a minimum start using an authenticator app like Ente. If you want to go the extra mile skip the authenticator app and get yourself a YubiKey.

English

3.2K

Biscayne Strategic Solutions 已转推

Chad Nelson@Chad_Nelson_·2d

On 11 April, a French family narrowly escaped an armed home invasion after a man posing as a delivery driver forced entry into the home and attempted to steal the husband’s crypto private keys at gunpoint. This delivery driver method is becoming an increasingly popular tactic used to gain entry into private residences. For high risk individuals in the crypto space (i.e. crypto influencers, execs, and well known investors) - help your family, spouse, children, and in-home staff understand the importance of NEVER letting a delivery person into your home. It’s also important to select the option to have the delivery driver leave your food outside your residence. This is an easy way to enhance your family’s safety and security!

English

1.2K

Biscayne Strategic Solutions 已转推

Chad Nelson@Chad_Nelson_·3d

If you're an executive that cares about privacy, check out this 30 minute digital footprint check list that you can do on your own. Link below.

English

360

Biscayne Strategic Solutions 已转推

Chad Nelson@Chad_Nelson_·5d

STOP posting photos of your house and your office! I’ve seen 3 different people do this so far today. They’re making it so easy for the bad guys to exploit. Please take a moment and think about the implications of what you’re posting before you post it.

English

1.2K

Biscayne Strategic Solutions 已转推

Chad Nelson@Chad_Nelson_·6d

A Florida-based luxury car theft group was wrapped up after stealing more than 30 high end vehicles - even out of gated communities. How did they do it? Simple. Every one of the vehicles had one thing in common. The keys were left inside the vehicle. So was cash, credit cards, and other valuables. Implement the easiest vehicle security practice imaginable: Take your keys out and lock your doors- even if you live in super safe neighborhoods or gated communities. fox35orlando.com/news/5-charged…

English

2.4K

Biscayne Strategic Solutions 已转推

Chad Nelson@Chad_Nelson_·17 Nis

If you’ve blurred the Google Street View images of your home, here are a couple quick things to consider next if you want to increase your safety and security. Make sure you have security cameras and an alarm system. Ring Alarm systems have had some privacy issues, but they are the easy button and the fastest way to have both cameras and an alarm system in place immediately. For those with a bigger budget and more significant privacy concerns there are plenty of other good and highly secure options. Do not neglect the lighting on the exterior of your residence. All entry/exit points should have good lighting and outward facing motion activated flood lights are best on the perimeter of your house. “Beware of Dog” and ADT Signs: two old school methods can serve as solid deterrents. Alarm signs and even small indications of the presence of a dog like a dog bowl, bag of food, or dog chews can serve as a deterrent. Neither signs or indicators are a true replacement for the real thing, but both of those can be helpful in giving the appearance that your residence is not an easy target. Obviously having a big and ferocious dog is a huge upgrade from just having a sign, but dogs aren’t for everyone. Keep weapons secured and away from children but make sure that you can access them in an emergency. There are plenty of experts on weapons for home defense, so I won’t get into that here. Whatever you choose, please make sure they are not easily accessible to children and that you have trained with the weapons and know how to use them. Your life could depend on it. Have a Family Plan No one typically expects a home invasion, but having a plan as a family could make the difference. Have conversations with your spouse and kids about what they should do in a worst case scenario. A plan like this can vary greatly depending on the age of the kids and the set up at your house, but whatever you do, make sure you have a plan. Most Importantly: Ensure your home has functioning smoke/C02 alarms, a fire extinguisher, and a STOP THE BLEED emergency trauma kit. You are far more likely to have a fire or other type of medical emergency than a home invasion, so make sure you have these basic necessities to protect yourself and your family.

Chad Nelson@Chad_Nelson_

Bad actors are exploiting Google Street View to conduct virtual surveillance and quickly gain intel on your home’s security features. The good news is that you can take 2 minutes right now to request that the Street View Images are blurred out by Google. Here’s how to do it: Using a laptop or tablet, type in your address into Google Maps. Click on the Street View image. At the bottom right hand corner of the Street View image, click “Report a Problem.” Click Request Blurring of “my home” and, when prompted, provide an explanation for the need to blur the image for privacy and safety reasons. If you have specific concerns related to doxxing, stalking, or have received physical threats- make sure to include that in the explanation. In our experience, a more robust justification will increase the likelihood that Google takes action to blur the images. And if it gets denied, try again. Sometimes it can take a few attempts to get it blurred. Criminals are looking for low hanging fruit. Make yourself a hard target!

English

24.3K

Biscayne Strategic Solutions 已转推

Chad Nelson@Chad_Nelson_·16 Nis

AI leaders need to pay close attention to what happened at San Altman’s house last Friday! Not just because of what he did that night but because the 20 year old who allegedly traveled from Texas to Altman’s house in California to attack Altman had made a long list of board members and CEOs of AI companies and investors that he also planned to target. He wasn’t planning to only target 1 exec, he had a list of people to go after. Something that we see quite often is the unhinged and mentally unstable people who threaten our clients on social media are often threatening a variety of other individuals in the same industries. That said, attacks like these are likely not going away any time soon and after this situation we strongly recommend that AI execs and investors ensure they have both physical security and threat monitoring teams watching their back.

English

588

Biscayne Strategic Solutions@BiscayneSecure·15 Nis

Don’t become a victim. Vet your inner circle.

Chad Nelson@Chad_Nelson_

An $18 Million oceanfront estate in Beverly Massachusetts was targeted in a brutal pre-dawn home invasion that was enabled by an insider. A housekeeper who held the keys to the kingdom. The housekeeper’s boyfriend allegedly used their relationship to learn the layout of the estate, knew what valuables were available for the taking and had a very clear picture of the family's routine. The intruders walked through an unlocked door in the middle of the night and held the housekeeper at gunpoint, pistol-whipped her, made her bag $1M+ in gold coins, luxury watches and cash. They then stole a Porsche and used it as the getaway car. When we think of insider risk we usually think about the impact to governments and Fortune 500 companies, but high profile and high net worth families also need to take it very seriously. Anyone who is high risk should be thoroughly vetting every individual who has access to their kids, their residence, and their routine. Vet your inner circle.

English

154

Biscayne Strategic Solutions 已转推

Chad Nelson@Chad_Nelson_·14 Nis

English

328

148.1K

Biscayne Strategic Solutions 已转推

Chad Nelson@Chad_Nelson_·11 Nis

Individuals in this type of disturbed mental state are far more common than people think. The only difference is many of the deranged individuals who are extremely vocal online just haven’t hit their breaking point. We need to be prepared for more and more encounters like this. I’m going to start sharing more info on securing your home and protecting your family from this type of insanity.

Collin Rugg@CollinRugg

NEW: Man who identified himself as ‘Harry Dresden’ in the viral Ring doorbell footage, seen breaking into the home in footage from inside the house. The resident was seen threatening to hit the intruder with a shovel. The intruder has been identified as Jason Thomas Nichols, according to Solano County records. He is facing four felony charges and his bail was set at $35,000.

English

1.6K

Biscayne Strategic Solutions 已转推

Chad Nelson@Chad_Nelson_·11 Nis

Security spending for elected officials has gone up 5X over the past decade. Threats to politicians ranging from doxxing and swatting to physical attacks are greatly impacting security spending budgets across the US. Anyone running for office should at a minimum clean up their digital footprint. Here’s the most immediate things they can do right now: - Use a service like Optery to remove their personal info from data broker sites - Use a password manager like 1Password to create complex single use passwords - Use 2FA on EVERYTHING - Stop using their long term email account for sensitive log ins - Use a VPN like ProtonVPN - Delete posts that reference or show their house, kids’ school, or other places they frequent. This list could go on and on, but this is a good start and could be done today. knsiradio.com/2026/04/09/era…

English

648

Biscayne Strategic Solutions 已转推

Chad Nelson@Chad_Nelson_·10 Nis

Back in the day, criminals would spend hours if not days driving past houses in upscale neighborhoods to identify potential victims. They cased houses and conducted dry runs in-person to collect intel on when their target left the house or where they spent time. They were looking for the perfect opportunity. Times have changed. Now criminals save significant time and energy by simply exploiting the digital footprint of their victims. Beyond just the info you post on social media, they are taking advantage of all the locational info, photos, and other sensitive details you don’t realize are exposed. And they are looking for low hanging fruit. Most criminals are lazy and they won’t waste time on people who have made themselves a hard target. Protecting yourself and your family is about hardening your defenses and it starts with knowing exactly what your digital footprint looks like so that you can lock it down in a manner that is organic to your lifestyle. Today is the day to start taking steps to increase your privacy and enhance your security. Reach out if you have questions.

English

10.6K

Biscayne Strategic Solutions 已转推

Chad Nelson@Chad_Nelson_·10 Nis

This is super important! And to be explicitly clear the concern is not the FBI, it’s criminals stealing your device and exploiting this vulnerability to access your sensitive messages because you didn’t turn your notification previews off. Make sure you update your Signal notifications so they don't show previews!

International Cyber Digest@IntCyberDigest

🚨 BREAKING: The FBI has successfully extracted deleted Signal messages from a suspect's iPhone via notification storage, the place where all your notifications are stored for up to one month. Notification storage stores data from all messaging apps, it's a big flaw in iOS. But there's a way to turn it off...

English

3.5K

Biscayne Strategic Solutions 已转推

Chad Nelson@Chad_Nelson_·9 Nis

Your Digital Footprint Tells a Story For executives, investors, and influencers that story can reveal digital vulnerabilities that competitors, disgruntled customers, or bad actors can exploit to physically target you and your family. Nearly every day there is a story of someone being physical targeted as a result of digital exposure. The good news is that Biscayne’s Privacy and Threat Monitoring Service helps close the gaps in your digital and physical security posture. If you want the peace of mind that comes with having a team of former US national security experts helping you and your family harden your digital footprint and monitor for online threats, send me a DM.

English

465

Biscayne Strategic Solutions 已转推

Chad Nelson@Chad_Nelson_·6 Nis

Colorado just handed down what appears to be the first conviction under its anti-doxxing legislation, finding a woman guilty of publishing a Denver police commander’s home address during a livestreamed protest. The individual highlighted the home address of the police commander and suggested people should meet up there so they could “have a pig roast party.” Its worth noting that Colorado’s anti-doxxing statute applies specifically to “protected persons” a defined category including law enforcement and elected officials. In our experience doxxing happens frequently to high profile executives and influencers making it all the more important to take steps to limit your personal exposure. If you're an at risk individual that needs help with digital security, lets chat.

English

100

11.9K

Biscayne Strategic Solutions 已转推

Chad Nelson@Chad_Nelson_·7 Nis

Does every appliance we own really need to be connected to the internet? In early April, a digital forensic investigation uncovered a significant data leak at an unnamed corporation due to a leaky espresso machine. The (smart) espresso machine was running on the corporation’s secure network using a default password, an outdated operating system, and no firewall. I guarantee the Italians who developed espresso in the early 20th century never imagined the machine used to make espresso would serve as an attack vector for stealing sensitive corporate data. Before you enable every smart device in your home or office, decide if you really need that thing connected to the internet.

English

449

26.8K

Biscayne Strategic Solutions 已转推

Beau@beausecurity·4 Nis

Solid reporting here on a string of wrench attacks in California back in December. Attackers used data leaks to find their target's weak and reused email/password combos. Then they logged into apps like DoorDash and Uber Eats to identify home addresses, ordering habits, and more to set up real world attacks. Your digital security is extremely important to protecting you in the real world. When I've spoken to wrench attack victims in this situation, they have a pretty similar story: they didn't know all this was out there for attackers to find. You probably don't know the full extent of where you're exposed either. It's important to be alert and situationally aware of threats in real time (like looking for suspicious activity on your delivery apps such as getting logged out), but you should also be proactive now! So here are some things anyone can do and what I recommend for high net worth and prominent figures: 1. Use a password manager like 1Password to generate new and unique passwords for every online account. This sounds annoying, but it's actually great because it autofills everything for you. Go from memorizing many passwords, to just memorizing one master password. They'll even tell you if one of your passwords shows up in these data breaches. 2. Sign up for @optery, which helps identify and remove data about you and your family online. You can use code BEAUSECURITY for 20% off at checkout. 3. Create good home security habits. Don't let strangers in your home under innocent excuses ("can I have a glass of water?" or "my pen isn't working for you to sign for this package, can I come inside and get one?") Provide instructions for all delivery drivers to leave packages and food outside of your front door, never let them inside. Brief your family/roommates about these threats 4. Invest in your digital security. If you are high net worth, a doxxed (or even "undoxxed") influencer, an executive, consider a digital privacy and/or threat monitoring service. I recommend @BiscayneSecure who are a boutique security firm of ex-Feds that help HNWIs with this intersection of digital and physical security Don't be a victim, take matters into your own hands If you're not sure where to get started or what's right for you, shoot me a DM. Always happy to get folks on the right track and help you evaluate where you're actually at risk.

Megan Cassidy@meganrcassidy

A violent crime ring appears to have used hacked DoorDash/other app data to target wealthy crypto holders in the Bay Area and L.A. Armed robbers, posing as delivery drivers, arrived at victims' doorsteps, carrying an item the victim had just ordered. sfchronicle.com/crime/article/…

English

261

118K

Biscayne Strategic Solutions 已转推

Chad Nelson@Chad_Nelson_·4 Nis

Wrench attacks are NOT just a physical security issue. This story explains why. Three crypto wrench attacks between SF and LA were a direct result of criminals exploiting the leaky digital footprints of their victims. The victims were targeted because they were known to have very large crypto holdings. The criminals spent time surveilling them online, identified and utilized recycled passwords they found in breach data, and then got into the victims' DoorDash and UberEATS accounts to get insights into what they were ordering. The attackers then posed as delivery drivers and showed up at the victim's houses with the same type of food that had been ordered. In one case the criminal pistol whipped the victim and held him at gunpoint before making off with $10M in BTC and $3M in ETH. These targeted attacks were enabled because of weak digital security. Here's the first step in protecting yourself from wrench attacks: Lock down your digital footprint.

Megan Cassidy@meganrcassidy

English

130

30.7K

发现

@Chad_Nelson_ @glaciersecurity @optery @elonmusk @BarackObama @taylorswift13 @cristiano @BillGates