State-sponsored threats training: The Long Game

The Long Game [0:00] Rob: A researcher wants to interview me. About our suppliers. Apparently I'm the expert. [0:06] Layla: Nice to be asked. What did you tell him? [0:10] Rob: Nothing. A stranger asking about our suppliers? Odd. So I pressed the Report button. [0:18] Planner: No hurry. We have all year. [0:22] Rob: Another odd one. Tessera updated our room booking screens. They all restarted at 2:45 a.m. [0:29] Rob: Now there's a sign-in box they never had. I typed nothing, and reported it. [0:36] Layla: Thanks. Leave that one with me. [0:43] Rob: Seen this? 'Nakhlora leaks customer data.' It's all over my family group, with a memo. [0:49] Rob: My team should hear before customers call. I'll forward it. [0:54] Narrator: Forward it to warn the team, reply to correct it, or ask first. Which one? [1:04] Rob: Ask first. Layla, is this real? [1:08] Layla: Not that we know of. And there's nothing in Company updates, our official source. [1:13] Layla: Don't forward it, even to warn people. And don't reply to correct it; the official source will. [1:21] Layla: Put your three odd things together. Month 1, a stranger asks about our suppliers. [1:27] Layla: Month 4, an update from a supplier we trust changes our screens. [1:32] Layla: Month 7, a story that seems made to keep us angry, afraid and busy. [1:39] Rob: You think they're connected? [1:41] Layla: That looks like one patient attacker, working for a government's interests, not money: secrets, access, influence. [1:49] Layla: They plan in months, not minutes, and often come in through someone we trust. [1:54] Layla: You reported Months 1 and 4, so we were already checking those screens. [2:02] Narrator: Report each small odd thing to your security team, even from a supplier you trust. They connect the dots. [2:10] Narrator: Alarming news about your company? Check the official source before you share, and don't forward it. [2:17] Layla: I'll call Tessera again, on the number in their supplier file. [2:25] Layla: Good afternoon. This is Layla at Nakhlora. It's about your last update. [2:31] Narrator: Something odd, even from a trusted supplier? Report it. Alarming news? Check before you share.