Kevin's Security Scrapbook

Corporate Espionage 101: The Missing Business School Course.

2026-03-15T12:03:00.001-04:00

I'm fine. Thank you for asking.

Coming soon...

Several Scrapbook readers have contacted me asking why I haven't posted lately. The reason is that I have been busy working on a textbook, Corporate Espionage 101: The Missing Business School Course.

Writing, organizing, editing, graphic creation, layout, etc., take up my time. This is in addition to running Murray Associates TSCM (counterespionage.com), conducting inspections, writing reports for clients, research, instrumentation maintenence, and general correspondence.

The textbook is almost finished and should be available in a few months. I'll keep you posted here.

At this point, here is what to expect, excepting the cover, which is still in the works...

15 sections – 35 chapters
≈ 600 pages of expert guidance
150 color photos and graphics
3 ready-to-use security policy templates
15 operational security checklists
10 personal case histories
13 practical case examples
Chapter review multiple-choice exams
40 Spybuster tips
294-term professional glossary
Full index

CISA Warning: Commercial Spyware & SS7

2025-12-22T13:32:00.001-05:00

The long-held assumption among corporate executives and government officials that switching to encrypted messaging apps like Signal or WhatsApp guarantees immunity from surveillance is rapidly eroding...

CISA’s warning touches upon legacy vulnerabilities in the telecommunications infrastructure itself. The agency highlights the continued abuse of Signaling System 7 (SS7), the protocol suite used by phone networks globally to route calls and texts. Despite decades of warnings, SS7 remains vulnerable to interception and location tracking. Sophisticated attackers can exploit these network flaws to intercept the SMS verification codes used to register Signal or WhatsApp accounts. By “porting” the target’s number to a device controlled by the attacker, they can effectively hijack the victim’s identity on these platforms. While Signal has introduced features like Registration Lock to mitigate this, adoption remains low among general users. (more)

Extortionography: Leaked Tape Forces Outcome

2025-12-22T13:32:00.000-05:00

Campbell’s said on Wednesday that it no longer employed an executive who was accused in a lawsuit of making offensive comments and disparaging the company’s food products.

An audiotape that was released this month reportedly featured the voice of Martin Bally, a vice president of information technology, saying Campbell’s made processed food for “poor people” and making racist remarks...

A former employee who leaked the tape to the news media, Robert Garza, did so in conjunction with a lawsuit he filed last week in Michigan against Mr. Bally and Campbell’s. The person on the audio also refers to Campbell’s canned soup containing a “piece of chicken that came from a 3-D printer.” (more)

------

“What is corporate extortionography, and why is it important to me?”
Extortionography is a word coined to cover the use of audio, video, or photographic evidence for personal or monetary gain, or to force a desired result or outcome. (more)

See Cruise Headed to Court May Divert to Arbitration

2025-12-22T13:31:00.004-05:00

A cruise ship crew member who planted a hidden camera to watch a young girl undress in her cabin may have spied on over 900 passengers, a class action lawsuit alleges. Lawyers who filed the civil lawsuit in a Miami federal court last October want each of those people to be able to hold the company accountable and receive damages. But Royal Caribbean, the world’s second-largest cruise ship company, has pushed back.

Background: Mirasol, a room attendant, regularly cleaned passenger rooms, restocked towels and changed sheets on Royal Caribbean’s Symphony of the Seas, a vessel that carries 5,518 passengers and 2,200 crew members. But that wasn’t all he did, according to court filings and the criminal complaint from the Broward County Sheriff’s office. Searching his electronic equipment including a USB stick device, law enforcement agents found “several videos of naked females undressing in their bathrooms.” One girl seemed to be 10 years old, they said. He’d planted small, secret cameras in passengers’ rooms.

Push Back: Royal Caribbean wrote in a court filing. “Plaintiffs agreed in their digitally signed ticket-contract that all claims for mental or emotional injury must be resolved through arbitration.” Arbitration is a secretive process often favored by companies. (more)

A Load of Code Hits the Road

2025-12-22T13:31:00.003-05:00

A former engineering manager misappropriated millions of lines of proprietary source code during the transition period following Elon Musk’s acquisition of the social media platform now known as X... The company reports that it did not become aware of the alleged code exfiltration until nearly two years later. Case Name: X Corp. v. Yue et al. Court Name: U.S. District Court for the Northern District of California Case Number: 4:25-cv-10423 (more)

Three security safeguards recommended: Recording in the Workplace Policy, Storage Media Policy, and Data Movement Monitoring.

Smart Dust Microscopic Spy Sensors...

2025-12-22T13:31:00.002-05:00

... Nothing to sneeze at.

In a groundbreaking fusion of science fiction and reality, smart dust technology—tiny, wireless sensors capable of gathering vast amounts of data—promises to revolutionize industries from environmental monitoring to healthcare while raising significant ethical and privacy concerns.

The concept of “smart dust” might sound like something from a science fiction tale, but it’s gradually becoming an integral part of modern technology. Originating as a theoretical proposal for the Defense Advanced Research Projects Agency (DARPA), smart dust has evolved into a promising tool for various industries. From environmental monitoring to intelligence gathering, these microscopic sensors offer a wide range of applications. As they continue to develop, the potential to revolutionize data collection and interaction with our environments becomes increasingly apparent. This article delves into the origins, current developments, and future implications of smart dust technology. (more)

Potty Cam, or Dr. Crapper makes a house call.

2025-12-22T13:31:00.001-05:00

Kohler's toilet camera takes things to a new level. The company, which has been developing toilet tech for years, dropped the Dekoda, which aims a camera at the water (and everything else in it) to get various health-related readings...

Once you install the Dekoda and you're ready to use the toilet, you need to sign in. You can do this on the app or you can put your finger on the optional fingerprint scanner. After you use the toilet, the system gets to work on scanning your waste. It develops data related to your gut health and hydration and also detects blood, which can be important to know about...

Of course, it's 2025 and everything has a subscription. To get a look at all of the Dekoda's "insights" and data about your poop on the Kohler Health app, you'll pay a monthly fee. The app is going for $6.99 per month for an individual, or you can play $12.99 a month for the family plan. (more)

Furbo The Robo - Pet Surveillance Camera

2025-12-22T13:31:00.000-05:00

Robots don't have to look humanoid. Your pet doesn't care, especially if it tosses treats. Just hope it is not catnip for hackers...

FULL HD CAMERA WITH 360° ROTATING VIEW
REAL-TIME 2-WAY AUDIO & COLOR NIGHT VISION
FUN ADJUSTABLE TREAT TOSSING
INSTANT SMART ALERTS
BARKING SENSOR (Yes, there is a cat version.)
EASY SETUP, SECURE CONNECTION
SUBSCRIPTION (wait, what?!?!)

When you can't remote work, remote pet? Next up, a robot that solves the remote walking issue. (more)

10 Years Ago this Month - From the Security Scrapbook

2025-12-22T13:30:00.002-05:00

Excellent camera installation. (more)

BTW, infrequent Security Scrapbook posts recently due to working on another project. All ok here.

Spy History - 'The Spy Queen Was A Nympho!" (UPDATE)

2025-09-21T12:29:00.009-04:00

On November 23, 2011 the Security Scrapbook featured a post about Martha Dodd. Whatawoman! Well, she is back today with even more juicy background information.

Brendan McNally wrote a book about her; the only one I know of. It is called, Traitor's Odyssey: The Untold Story of Martha Dodd and a Strange Saga of Soviet Espionage. (Go ahead, buy it.)

Brendan and I crossed paths this month.

This is his story behind the story...

"When I was a reporter in Prague in 1992, I got to know her secretary. Martha was not a nice person, but she actually helped finance Vaclav Havel and the 1989 Velvet Revolution. Go Figure!

"Having spent altogether too much of my post-adolescence researching Martha, what parting thoughts do I have on her? Well, for someone as incredibly guilty as she was, she wasn't actually guilty of very much. Her intent was all there. She was ready, willing, and able, but the officers of the New York rezidentura* were too busy trying to steal the atomic bomb to even have the spare moment about how she could be used as a spy. It's like a dirty movie where the character can't manage to get anyone to have sex with them. She did everything she could: hosting fun country weekends for everyone at the Soviet consulate, pool tennis courts, pony rides, open bar... but nothing!

"Dora, the colleague of mine who'd worked for her, called Martha Dodd, 'a nobody trying to be a somebody.' In the end, she died inadvertently at the hands of the secret police, who'd gotten it into their heads that she had gold!

"If they ever make a movie about this woman's life, I hope John Waters directs it."

I am still laughing.

* In the context of espionage, a rezidentura is a Russian intelligence station in a foreign country, often located within an embassy, that serves as a base for a group of agents known as resident spies.

Spybuster Tip: How to Set Up and Use a Burner Phone

2025-09-21T12:29:00.001-04:00

Obtaining and using a true burner phone is hard—but not impossible. Here are the steps you need to take to protect your mobile communications based on the risks you face.

Burner phones, which are often “dumb” flip phones, can be loaded with prepaid minutes and offer anonymity when rotated frequently, purchased with cash, and siloed from any connections to you or your digital life. The idea is that cops, or other actors, are unlikely to be tracking a fresh burner phone in real time. But the crucial additional layer of protection that properly used burner phones offer is that even if they are—or they later tie communications from a burner phone to activity they are investigating—they can’t use digital ties to establish who was using it. (Full article in Wired Magazine.)

Sextortion with a Twist: Spyware takes Webcam Pics of Users Watching Porn

2025-09-21T12:29:00.000-04:00

SEXTORTION-BASED HACKING, WHICH hijacks a victim's webcam or blackmails them with nudes they're tricked or coerced into sharing, has long represented one of the most disturbing forms of cybercrime. Now one specimen of widely available spyware has turned that relatively manual crime into an automated feature, detecting when the user is browsing pornography on their PC, screenshotting it, and taking a candid photo of the victim through their webcam.

Researchers at security firm Proofpoint published their analysis of an open-source variant of “infostealer” malware known as Stealerium that the company has seen used in multiple cybercriminal campaigns since May of this year.

The malware, like all infostealers, is designed to infect a target's computer and automatically send a hacker a wide variety of stolen sensitive data, including banking information, usernames and passwords, and keys to victims' crypto wallets. Stealerium, however, adds another, more humiliating form of espionage: It also monitors the victim's browser for web addresses that include certain NSFW keywords, screenshots browser tabs that include those words, photographs the victim via their webcam while they're watching those porn pages, and sends all the images to a hacker—who can then blackmail the victim with the threat of releasing them. more

Maybe Minority Report was a Documentary All Along?

2025-09-21T12:28:00.000-04:00

Flock Safety’s CEO Garrett Langley told Forbes he believes his surveillance tech company could curb most US crime in the next decade, which is… quite a statement.

His $7.5B business is actually off to a strong start, though: eight years in, Flock has 80k+ cameras keeping watch over roads and parking lots nationwide. And now they’re upping their dystopian pursuits, rolling out their own drones — with their cameras mounted on them, naturally.

For now, Flock is mostly reading license plates and detecting gunshots. For now. more

Hackers Are Using AI to Steal Corporate Secrets and Plant Ransomware

2025-09-03T12:02:00.004-04:00

In one of the most recent examples, a hacker discovered an exploit in Anthropic’s Claude chatbot that allowed them to “commit large-scale theft and extortion of personal data” at 17 (and perhaps more) organizations in the health care, emergency services, government, and religion industries.

The hacker then threatened to expose that data, demanding ransoms that, in some cases, topped $500,000. (Anthropic did not name any of the 17 organizations that were impacted by the hack.) more

People Are REALLY Mad at These AI Glasses That Record Everything Constantly

2025-09-03T12:02:00.002-04:00

Users on social media have responded with horror and outrage to a pair of smart glasses developed by a startup called Halo that its creators, a pair of Harvard dropouts, claim will feed you live AI-powered insights while logging and transcribing every conversation you take part in. So transformative will it prove to the human brain, the twenty-something-year-old inventors promise, that wearers will soon be not just thinking, but "vibe thinking."

Many were quick to raise alarm over the obvious nightmare this would be for personal privacy — not just for the wearers, crucially, but anyone they interact with. more

Security Director Alert: Employees Are Packing

2025-09-03T12:02:00.001-04:00

This media advice to employees may lead to corporate espionage. BOLO

Worried About Losing Your Job? Pack a Digital Go Bag

It’s now more common for layoffs to happen through account lockouts. Every employee needs to download their most important files from work, and update them periodically.

What Is a Digital Go Bag?
A digital go bag or virtual go bag is an electronic version of a traditional go bag—a bag you pack ahead of time that has everything you need in case you have to leave in a hurry—and it's meant specifically for work. If you got laid off or fired without notice, what documents and information would you most want to keep hold of?

How to Make a Digital Go Bag
First, identify the documents you want to take with you. Second, decide how often you need to download the items in order to keep your go bag up to date. Some, like performance reviews and tax documents, might only be updated once per year. Others, such as emails between you and your supervisor, might pile up quickly enough that you decide to download them quarterly. more

Spybuster Tip: iPhone 'secret code' reveals if someone is spying on your text message

2025-09-03T12:02:00.000-04:00

Apple has a little-known security feature, often described as a hidden 'secret code,' that can reveal if someone is snooping on your private conversations.

Every iMessage chat generates a unique security code, like a digital fingerprint. If you and your contact see the same code, your messages are safe and fully encrypted.

To make this process easier, Apple introduced Contact Key Verification, found under Settings and Apple ID, which displays a verification code that you and your iMessage contacts can compare.

If the codes line up, you can tap Mark As Verified, which saves the code to that person's contact card. more

Recent Spy Camera News

2025-09-03T12:01:00.001-04:00

• Student’s Federal Suit Claims URI Defamed Her After She Was Victim of Video Voyeurism in Bathroom

A University of Rhode Island (URI) student has sued the school, after she says a man in a unisex bathroom on campus recorded her while she was showering - and that the university subsequently “defamed” her...She has filed the lawsuit as “Jane Doe,” and she is seeking “an order that the Defendants make whole the Plaintiff with appropriate compensation for emotional and physical distress, loss of consortium, and interest, in amounts to be proved at trial, and other affirmative relief necessary to eradicate the effects of their conduct.” more

• London teacher banned from classroom after changing room voyeurism conviction
UK - A teacher who tried to take photos inside some female changing rooms has been banned from the classroom indefinitely. Christopher Arnold, 40, was convicted of a voyeurism offence and placed on the sex offenders register for five years in 2022 after holding up his phone camera to the window of some changing rooms, but maintains he did not actually manage to photograph anyone. more

• Stalker escapes jail after installing covert camera in his ex-wife’s home

NI - A Co. Antrim man whose “appalling behaviour” saw him cable-tie a tracking device to his ex-wife’s car and install a covert camera in her home during a two-month stalking campaign escaped jail today...The stalking was uncovered in April last year when his ex-wife found a tracking device attached to her car. Initially there was no evidence linking Dougan, but two days later she produced proof the device had been cable-tied behind her rear wheel.

• Five MSPs 'filmed by spy cam hidden in parliament toilet

UK - At least five MSPs along with several journalists and staff have been contacted by police over alleged secret toilet recordings in Parliament. Detectives have begun interviewing people already identified in footage understood to be from a covert camera hidden in a cubicle in the Holyrood building. more

• Hidden camera in the women’s toilets at his workplace

Greece - The case came to light when a 50-year-old female coworker at the office in Pallini, in eastern Athens, discovered the device and filed a complaint with local police. Officers recovered a memory card from the camera containing footage of the man adjusting the device. (doh! Darwin Award) more

• Police arrest man after recording device found in North Grenville daycare

Canada - Ontario Provincial Police are investigating the discovery of a recording device inside a daycare in North Grenville.

Police say officers with the Grenville County OPP Detachment received a report on Aug. 20 that a recording device was found and an investigation was launched into the “apparent act of voyeurism.”

more

• Foot Cam Man

Australia - A man has been charged after allegedly filming teenage girls with video cameras hidden inside his shoes (photo) in Sydney’s inner west. Police allege the 49-year-old man placed modified cameras within the lacings of his shoes and filmed teenage girls in public without their consent. The girls were believed to be aged between 12 and 15, police said. more

Eavesdropping Prevention: Acoustical Leakage Attenuator - Stick it Up Your Air Duct

2025-09-03T12:01:00.000-04:00

The Phase Gradient Ultra-Open Metamaterial developed at Boston University has the potential to solve a long-standing problem in acoustics.

A new breakthrough from the Zhang Lab at Boston University is making waves in the world of sound control...making the technology viable in new environments such as factories, offices, and public spaces, where diverse and unpredictable sound frequencies are common and airflow remains essential.

Their latest advance centers on broadband silencing...the use of phase-gradient metamaterials, giving rise to the Phase Gradient Ultra-Open Metamaterial (PGUOM).

“PGUOM takes a smarter approach — more like noise-canceling headphones — effectively silencing a broadband of unwanted sounds,” said Zhang. “It remains highly effective even as the noise shifts in pitch or volume, making it far more practical in dynamic settings like open offices, ventilation systems, or transportation hubs, where sound sources are unpredictable and span a wide range of frequencies.” more

Recent Spy News

2025-08-26T16:58:00.006-04:00

U.S. military contractor accused of trying to spy for China charged with espionage in Germany
CBS News
An American man who worked at a U.S. military facility in Germany has been indicted for allegedly offering to supply sensitive information to ...

Australia expels Iranian ambassador after spy agency finds Iran directed antisemitic attacks on its soil
CNN
Australia is expelling the Iranian ambassador to Canberra after the country's intelligence agency found that Iran was behind at least two ...

Schools' safety tools are spying on kids — even at home - Fox News
Fox News
Schools' safety tools are spying on kids — even at home. UC San Diego study finds early one-third of school safety companies rate students based on ...

Popular free VPN caught spying on users | Information Age | ACS
Information Age | ACS
A popular free VPN has been accused of spying on its userbase after security researchers observed it taking non-consenting screenshots of user ...

YouTuber appears in Hisar court in spying case - The Tribune
The Tribune
YouTuber Jyoti Malhotra, who is facing allegations of spying for Pakistan, appeared in person before a Hisar court on Monday after spending 95 ...

Corporate Leaders Targeted by Android Spyware Masquerading as Security Apps

2025-08-26T16:58:00.005-04:00

Security experts at Doctor Web have uncovered the spread of a sophisticated Android spyware campaign aimed at Russian business leaders...

Distributed through APK files disguised as security programs, the spyware is most commonly presented as an application called GuardCB, complete with an icon that mimics the emblem of the Central Bank of the

Other versions carry names such as “SECURITY_FSB” or simply “FSB,” in an attempt to masquerade as software from law enforcement or regulatory bodies.

With an interface available only in Russian, the malicious application is clearly designed for a narrow target audience rather than the global user base. more

Guess who might be behind this.

Corporate Espionage: Apple vs Oppo Legal Battle

2025-08-26T16:58:00.004-04:00

Apple and Oppo are embroiled in a major corporate espionage battle that has raised questions about the theft of trade secrets in the global tech industry.

Apple has just lodged a federal lawsuit against Oppo, claiming the Chinese tech titan purloined vital trade secrets. The allegations are grave, and Apple had delivered a compelling evidence in support of the allegations.

According to Apple, Chen Shi, former Apple employee, moved the sensitive files to a USB drive one day before he parted ways with the company. Apple said Shi had viewed sensitive content in the middle of the night days before he left. The case itself is known as Oppo corporate espionage, and the phrase has started to pop up amongst the hot tech news outlets of today. more

Of Taiwan’s Inspected Hotels 50% use Measures to Detect Hidden Cameras

2025-08-26T16:58:00.002-04:00

(In the other half you could be an Only Fans free trial.)

Taiwan - The Consumer Protection Committee on Thursday announced the results of a May inspection of 21 hotels across seven cities and counties, finding that 11 had adopted measures to detect hidden cameras.

Of the hotels inspected, nine carried out hidden-camera detection on a regular schedule and two did so irregularly. Two others claimed to provide such services, but only one met its stated standards.

Inspectors ordered the removal of related signage at hotels that failed to meet their claims. more

Message to Innkeepers: Click here.

UNDERCOVER VIBES (The TSCM Song)

2025-08-26T16:58:00.001-04:00

This is my experiment to show the developing power of artificial intelligence.

Lyrics, music and vocal were all created in 2 minutes, by asking AI, ” Create a song about TSCM inspections.”

AI also suggested the following in order to make the song into a radio play hit: English, Upbeat Pop/Dance-Pop, energetic and accessible, with memorable hooks and singable melodies. Classic verse-chorus-verse-chorus-bridge-chorus structure. Production: polished vocals, punchy drums, bright synths, catchy bass lines.

You can listen to two versions of the song here.

The Arduino Bug - Want to make one?

2025-08-26T16:00:00.000-04:00

In this project, we are going to build an audio bug using Arduino and NRF24L01.

This audio spy bug is highly customizable and can be easily integrated with other devices and systems. The NRF24L01 module allows transmission over specific channel, ensuring that our transmissions remain private up to a level.

This device is perfect for monitoring a baby room, keeping an eye on a pet, or even for professional surveillance. With its small size and easy portability, this audio spy bug is a must-have for anyone in need of discreet and reliable audio recording. more video

Our variation on the theme... more

Kevin's Security Scrapbook

Corporate Espionage 101: The Missing Business School Course.

Related Stories

CISA Warning: Commercial Spyware & SS7

Related Stories

Extortionography: Leaked Tape Forces Outcome

Related Stories

See Cruise Headed to Court May Divert to Arbitration

Related Stories

A Load of Code Hits the Road

Related Stories

Smart Dust Microscopic Spy Sensors...

Related Stories

Potty Cam, or Dr. Crapper makes a house call.

Related Stories

Furbo The Robo - Pet Surveillance Camera

Related Stories

10 Years Ago this Month - From the Security Scrapbook

Related Stories

Spy History - 'The Spy Queen Was A Nympho!" (UPDATE)

Related Stories

Spybuster Tip: How to Set Up and Use a Burner Phone

Sextortion with a Twist: Spyware takes Webcam Pics of Users Watching Porn

Maybe Minority Report was a Documentary All Along?

Hackers Are Using AI to Steal Corporate Secrets and Plant Ransomware

People Are REALLY Mad at These AI Glasses That Record Everything Constantly

Security Director Alert: Employees Are Packing

Spybuster Tip: iPhone 'secret code' reveals if someone is spying on your text message

Recent Spy Camera News

• Police arrest man after recording device found in North Grenville daycare

Eavesdropping Prevention: Acoustical Leakage Attenuator - Stick it Up Your Air Duct

Recent Spy News

Corporate Leaders Targeted by Android Spyware Masquerading as Security Apps

Corporate Espionage: Apple vs Oppo Legal Battle

Of Taiwan’s Inspected Hotels 50% use Measures to Detect Hidden Cameras

UNDERCOVER VIBES (The TSCM Song)

The Arduino Bug - Want to make one?