Sorry if the audio feels a bit rushed on this one, I'm recovering from dental surgery atm so it's a bit difficult to speak. But I had to get this video out, the topics were too interesting :)))

An idea for the drone attack could be "Drone nesting" The drone will perch on a building and kind of make it its nest.

I'd call that drone attack a "Pi in the Sky" attack or something similar.

For the drone case, I think a "Mosquito attack" would be a suitable name. The drone lands, siphons some data, and flies off again while also having the opportunity to leave some nasty viruses behind. Edit: Grammar

Just one small thing, the Lora protocol definitely does not have a large enough bandwidth to transfer stolen data - Lora could be used to transfer user credentials, and for everything else a 4G module is necessary. I used Lora and for long distances the bandwidth is ridiculously small, just for transferring a few bytes per second.

It'd be interesting how companies would have to send someone to the roof to check for hacker drones. Like, imagine going to the roof and finding a couple of drones with a bunch of hardware strapped to them.

Ironically I made SpiPi - a quadcopter with a Pi running Kali and (especially Aircrack :) ) - as a Uni project for my degree over a decade ago...surprised it took this long to be "discovered"

I love this channel, also, whenever discussing a crime, my boy Seytonic comes with suggestions on how to better the tactics :)))

Of course, these attacks are gonna get more sophisticated in the future. You told us all the ways to improve upon their flaws.

We did this with a Parrot drone in 2014 "Try and keep up " You seem like a blast from the past to me

I like the term "fly by" attack.

Mmm bird analogies would work well honestly. 'stalking' for when the drone/attacker is staying within the area *of the victim itself* and is trying to find a good place to 'nest' while also trying to find an attack vector. 'Nesting' for when the drone is staying within the area *where the victim frequently tends to be* (work building, home, some coffee shop) and, after a vector has been found, optionally, 'littering'. 'littering' for when the drone is setting up devices ('litters') that can run independently from the drone's power, probably making multiple trips to carry the tools to nest so that the attack can be carried out without risking the drone and thus making finding the culprit all the more difficult. As for the attack itself: 'swooping' So in this case it'd be a simple 'swooping' attack where the drone only 'nested' and didn't 'litter'. While if the drone *did* litter it would be a 'litter swooping' attack, as it'd be the litter carrying out the attack instead of the drone (so to speak).

The problem with using a Lora module is the bandwidth is so slow. And the range is line of sight. It's not often actually several kilometers. The 4g modem would have been much faster and allow the hackers to work from the comfort of their own homes.

Drone attacks are going to revolve around remote connection to a device as if you were there, yet not. In that case, to make it hardware agnostic, the name of the attack should be a Poltergeist Attack, where you use a remote controlled malicious device to connect as if you were there. It doesn't just include drones, but can also include any device under your control you use remotely.

Great video. The Hacker Drone operators must have been close to the office to land on the roof.

Ideally the drone didn't need to stay on the roof, they could have simply dropped a battery powered rig via the drone.

WiFly attack?

If malware drones get popular enough, will we have to use physical anti-malware weapons? "Blow that piece of junk OUT OF THE SKY!"

The drone attack where they just leave them on site, should be called a "Dive bomb attack"

I think a simple name for attacks like this would be "Droning"

Packet Perching - the act of using a drone to physically pen test a facility remotely

This represents a serious security threat.

Warflying. Also: Why the heck would you not strap a CAMERA or at the very least a motion sensor to the drone to detect humans? I can't imagine they wanted to lose those drones.

I'm from 2056 and this attack is commonly called "droning"

"What you are seeing is advanced warfare!"

my man this is absolutely beautiful. being an engineering student who's pretty interested in particle physics and nuclear power i am stoked to try this

Drone hacker can be named Cuckoo attack because it's like laying it's trap right in the persons building

I wanna call it "Proxy nodding" or "nodeing" because I had an idea on attached a drone with such devices and use them to set up proxy nodes to further boast signal, or create a small web. This idea was for LoRa or "Meshtastic" communication only. Probably be good for directly breaking into places that rely on electronic security via wifi.

Automated aerial penetration vectors

Thanks Man! I love your informational viedeos and sometimes the info you give even helps me on projects and on.

the GPD, unless reported specifically as a miniature laptop was probably a typo of GPS since they may want to know when they're detected without using the drone's built-in GPS. I think there's an unfortunate sociological problem here as well: landing on the top floor of the building (the only place that is likely unseen) means you're likely to be targeting the C-suite office, where users have escalated privileges. Security by obscurity is mocked, but should businesses rethink putting their most important credentials on the top floor? Will a new need for security guards to patrol or monitor roofs arise?

The drone attack method should obviously be called CloudStrike.

😂😂 Not monitoring the Bicoin transaction for multiple confirmations before releasing the decryption key is what makes this hack so human and hilarious😂😂

Wasp hack. It's a small flying drone that attacks often unprovolked and has a sting that can wound very deeply relative to it's size.

Skyhack sounds pretty cool. 'Nakatomi Plaza was subject to a skyhack"

Don't want to give anybody Ideas but if I had to do a pentest with a drone I would like you said use a smaller drone. But also, I wouldn't let the drone at the top of the building but rather use it as a transportation medium. Like carring a little box with power, lora, and a dev board to to what ever building you want. And if you are very fancy even a giro movement sensor that shorts the board if the box is moved.

I've heard of drone attacks being called "Danger Drones" and "War flying"

the GPD was a redundancy backup for their man on the inside, he would probably have been expected to intercept the drone incase of crash or deployment failure, they could access the GPD to re-establish a connection with the primary controller manually. They must not have gotten a chance to get to the roof with an alibi and thus the drone was discovered before it was recovered

3:52 seytonic making a "proof of consept" of this reminds me of the arduino rubber ducky he made.

drones were always "here", therefore the title should've been "Cyber Criminals Caught Hacking With Drones"

The drone attack can be called a wi-spy attack

there was "drive by" attacks, now there's "fly by" attack

It already has a name. "Warflying" is similar to the old wardriving. The early version of this was don with actual helicopters.

After seeing how it attacks I suggest maybe Arial Wireless Phishing (AWP). Aerial because it uses a flying drone to get near its target. Wireless because it is controlled remotely and uses a wireless access point to lure the victim. Phishing because it uses a fake login page to give the victim a false sense of security. Or maybe just simply Aerial Data Snooping (ADS) Pls pardon my knowladge if its confusing im just starting my networking journy and im still going through the basics XD

That drone attack should be called a "Mosquito Attack". Just like a mosquito, it lands on its victim and bites and sits there.

I'd suggest "fly on the ceiling attack".

If I'd call this attack, I'd call it the: "drone-by attack" 😂

Sky hack? Drop hack? Cuckoo’s nest? Someone else mentioned Drone Nesting which I quite like 😂

Hacker drones have been in use for the last ten years now

Love your work man!

with the wifi pineapple you set it to pretend to be the target network, the client automatically "re-connects" to this network because it already recognizes it, then its identity can be taken over on the target network and the hacker can browse as the wifi user that was captured starbucks is a juicy target for this kind of attack because of the amount of people who go to coffee shops to log into their sensitive work/school/financial/socialnetwork accounts

5:29 what about: 👉🏻Skyjack As a name From sky and hijack As they are hijacking’s your stuff (AP, internal IP…etc)

Dronenado 666! The dirty drunk Lahey craziest drone in the world, plus tornado.

One other things that drones might do is they might be carrying devices on them to do a mousejack attack. This can also work on keyboards too. What they would do is inject keystrokes through vulnerable receivers for Bluetooth mice and keyboards. They might could make it appear that you typed a command to download and run a file. Such file would be malware that has some sort of nefarious purpose. It can be anything, they might steal your login passwords and user names, encrypt your files or even take control of your computer or all three. They might even make your computer a part of a bot net that does things like DDOS attacks even. They might install crypto miners on the computer too. They could do a variety of bad things if they ever got into your computer in any way. Not all wireless keyboards and mice are vulnerable to that attack but search before you buy if it is a concern to you. I know if I lived in a place where my computer would be closer to other rooms or apartment units I would be a little bit more concerned about it. The fact is where I am the nearest person is 300 feet away. Some WiFi routers don't have a strong enough signal to be picked up that far away or at least provide a stable connection from such a distance.

Naming this will depend a lot on how the tactics actually evolve. If you're doing simple reconnaissance ala old school war driving it would seem straight forward to call it war droning or a war droid. If you plan to fly hardware to a facility like this and abandon it then it becomes a Kamakazi drone as its sacrificed in the attack. Personally, and depending on hardware I might go with something like a Cyber-Pi, Borg-Pineapple or just an IG-88 attack. These being translated as a Cybermen-esk RPi driven attack, a Borg-esk drone carrying a Wifi Pineapple or simply an assassin drone ala IG-88. We can’t presume that all drones used for this will be airborne. At the company I work for we did an experiment where we essentially built the mouse droid form star wars controlled by ardupilot and slapped a company logo on the side. With this we were able to tailgate through security and enter a facility full of security minded people and get little more than curious glances. A smaller version built with knowledge of our facility could have gotten through without drawing any attention. The larger version could have housed all of the hardware used here, essentially enter through the front door and carried out the same attack. By just making this look like one of our potential company projects we were able to get through a lot of doors that would have otherwise been closed. When we explained to leadership that we didn’t even really need to get through those doors they started to get the point.

I would disguise the pi and batteries as a vent or something. Then drop the payload on the roof and bring the drone home. A small piece of tin would allow you to pick up with a magnet to remove payload.

dude ducttaped a whole computer to it lol

Dracking sounds like it could be a good name for drone hacking

I would call this type of drone attack a Man-in-the-air attack.

Depending on weight, a couple solar cells could extend the project (hack) lifetime. Better yet, if the hack goes unnoticed, but you have drained your batteries, over several days it may provide enough to recharge the drone just enough to perform a recovery.

A name could be such a bird species that replace eggs from other birds with their own, like the Indigobird, Cowbird or Cuckoo. So, a Cuckoo hack maybe? Fly in, replace the eggs, and let the non-suspecting parents hatch the horror.

The drone attack should be called “SkyScraping” Pretty self explanatory 😂

I am not trying to give ideas here Le hacker taking notes

Only thing I can think of is these new attacks being a sort of "drive by drone attack"

I'd like to suggest we use the term "Dracking" (Hacking through drones).

@4:56 Thanks for the ideas!

I say we call the hacker drones “Hones” since they hone in on the wifi network and since hacking also starts with an H and because well drones

You could call drone hacking "strafing", like a strafing run from air support, since like that, it's meant to fly in, do a job, and then leave.

Subscribing to the idea of “cloud” services and closed-source IoT “smart networks” was the dumbest thing we collectively ever could have done with internet/tech...

Since it was such a botched together job, how about Bumblebee Attack? I love the little guys, but they're so bumbly!

the reason they used mini laptop because it was the main device connected to company network where rpi just acted as 4lte gateway, so in practice they control rpi using reverse ssh then connect to min laptop , from laptop they connect to company network using wifi

I knew somebody using a WiFi pineapple on a drone 2 years ago . Not new just newly discovered, even using captive portals .

I'm going to nickname it a Waluigi attack. The long name would be Wireless Aerial Attack. Shortened to WAA which is what Waluigi says.

5:26 Dracking or Drocking

the reason that $600 in bitcoin was used is because it is the yearly limit on what you can make without the irs considering it taxable. at the same time the transaction field can be used to put malware on the bitcoin network.

Thp has had em, they land in roofs above smart tvs and gather infor then leave , watched one hit all my neighbors

Yeah man, *Hacker Drone* ... I love the sound of that! ;D "I'll use my hacker drone" hehehe, that sounds awesome!

> What to call the hacker drones Well, it hacks via people (aka social hacking), so a manhack.

Hi Seytonic , great insight. I totally agree that drone-hacking can be a mouthful. I sure they'll come up some more befitting but I can only think of drioning (even though it has multitude of meanings including drone, male bee for mating and parasite ) and drone-swipe.

This seems like a really crude setup as the entire thing could have been done way more covertly and cheaply. The biggest issue i have with their setup is the 4G modem. If the surrounding area has for example a parking lot, i would just use a shorter range transmitter that would transmit the data to some device in a parked car which could either have the 4G modem or just be checked once in a while. The whole thing could have easily been strapped to a way smaller drone and if they took some time, they could also design their own and fit the electronics inside so that it would look less suspicious. Overall a pretty bad execution on the hackers side.

I heard Hak5 was in Watch Dogs 2. Or their gear was at least, one or the other. But yea, hacker drones are pretty popular these days. And they're becoming smaller and more badass each year. Maybe I'll build me one for Xmas 😜

Droning would be a neat name. Past tense would be Droned of course.

Might as well add a camera to it so if anyone comes near the drone, it flies off.

Hacker drones should be called skynet attacks.

I can imagine them thinking of buying a third drone and strapping it with a powerful GPU to "crack the hashes" xD

Best name would be a "pi in the sky" attack or for the really cool "sky-pi"

What about "Drone-Own" ? Bet the company was like thanks for free drones. The hackers by using a specialist drone also because of low volume of the expensive might be traceable via its serial number..

The drone thing is interesting, maybe “Cuckoo Drone” or may just the generic “parasite drone”

We should call it an Ariel ambush attack

I think we could call the drone attacks "Swarms", IDK

Soon these drones will be monstrous and they’ll be used to take entire armored vehicles along with kidnapping joggers and preferably golfers, rich golfers.

This sounds is kind of a DarkVishnya attack. May be call it Air Vishnya attack? Since the devices are not physically connected to a device on the network.

This is obviously the opportune time to call it WAR-DRONING. Since it's so akin to war-driving. Who's with me!

lol we made Danger Drone at Bishop Fox a *long* time ago.

Squidy -- like the flying squid hacker drones in the Matrix

Airdrop attack, Skynet attack, ummm shooting the moon

The drone attack shuld be called spyfly. Like the pesky insect and spy like you know but it has also badly translated danish because in denmark spyflue means blow fly but when you translate one half or use Google translate you end with spyfly

Something doesn't sit right with the drone attack. Why would the hackers not be monitoring the drones physical security? Why just leave them sitting on the roof in the open, and then not fly off when they were discovered.

awesome as always Seytonic its a pleasure ❤

Droid Attacks. Drones on steroids. Lol