Notices by Kevin Beaumont (gossithedog@cyberplace.social), page 6

A federal judge has ruled all DOGE Teenage Mutant Ninja Incels must stop accessing US Treasury data immediately, and destroy all copies they took. A case is running claiming Elon Musk broke federal law.

The ruling backs up the CTI assessment by the now fired US Treasury analyst. https://www.bbc.co.uk/news/articles/cjw4g2q62xqo

Teenage mutant incel techbros.

The employee who wrote the CTI assessment around DOGE has been terminated https://www.bloomberg.com/news/articles/2025-02-08/treasury-warned-of-insider-threat-risk-from-musk-s-doge-access

The tweets of the DOGE staff member who said he was a racist etc have been removed from archive.org after a takedown request.

One of the people in DOGE is behind multiple cryptocurrency scams https://cryptadamus.substack.com/p/the-crypto-grifters-of-doge

One of the people in DOGE and given access to US government systems now is from the Telegram group The Com - known in cyber circles for swatting, doxxing, MFA abuse etc.

https://krebsonsecurity.com/2025/02/teen-on-musks-doge-team-graduated-from-the-com/

Took off from Dulles, Virginia, United States.

The US Treasury Department has put out a cyber threat intelligence briefing saying "Continued access to any payment systems by DOGE members, even 'read only,' likely poses the single greatest insider threat risk the Bureau of the Fiscal Service has ever faced." https://www.wired.com/story/treasury-bfs-doge-insider-threat/

#threatintel

Inspector Generals across five US federal government agencies investigating Elon Musk’s businesses have been fired. https://www.levernews.com/trump-purges-inspectors-general-investigating-musks-businesses/

Elon Musk's guide to handling his staff being directly racist.

Elon has decided to bring back the DOGE staffer who tweeted about being a racist, wanted to normalize Indian hate, and said he wants a eugenics immigration policy.

I’ve bookmarked this thread so it doesn’t auto delete the toots, put it that way. You could just automate spraying the internet with this one.

Microsoft released a blog this week which I don’t think people have fully understood the implications of, but it’s great research and a great attack by the threat actor.

I think it’s highly likely multiple threat actors will now jump on this, it’s even automatable.

The attack:

1) take a web.config file. They’re really easy to find.
2) POST request to RCE in IIS

The architecture of .net means this is surprisingly easy to do and you don’t patch your way out of it.

https://www.microsoft.com/en-us/security/blog/2025/02/06/code-injection-attacks-using-publicly-disclosed-asp-net-machine-keys/

ProRepublica is building a live list of those working for DOGE, since DOGE hasn’t actually disclosed this info and Elon keeps saying reporting it is illegal. Includes many InfoSec people. https://projects.propublica.org/elon-musk-doge-tracker/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon-post

Journalists probably want to look through this guys tweets, too. https://web.archive.org/web/*/https://twitter.com/Gavin_Kliger (press the button for all content, Mastodon breaks the link).

One of the members of DOGE, 25 year old Marko Elez, has resigned after journalists reported on his X posts.

Examples: “I just want a eugenic immigration policy, is that too much to ask”, “I was a racist before it was cool”, “Normalize Indian hate”.

He had tried to delete the posts. Elon tried threatening those reporting on it with legal action.

https://www.tpr.org/2025-02-06/member-of-elon-musks-doge-team-resigns-after-racist-posts-resurface

Congrats to CrowdStrike for being top right of the latest magic quadrant, for world's biggest cyber attacks!

Treasury agrees to block additional DOGE staff from accessing sensitive payment systems https://therecord.media/treasury-agrees-block-doge-access

New, by me: Elon Musk's DOGE has taken control of large swathes of Americans' private information held by the U.S. government, representing the widest known compromise of government-held data by a private group of individuals — and little has gotten in their way.

https://techcrunch.com/2025/02/05/the-biggest-breach-of-u-s-government-data-is-under-way/

A 19 year old has been given admin access to the core US treasury financial system by Elon Musk’s DOGE.

He goes by the name of “Mr. Big Balls” online, is on Russian forums, and has tried to purchase DDoS botnets.

Elon has said sharing this information is illegal, so please do not press the boost button.

https://www.wired.com/story/edward-coristine-tesla-sexy-path-networks-doge/