Security Protocol

Staying safe: Practical Tools for Investigative Journalist

Luis Assardo | @luisssardo

Digital Security

Surveillance

Online harassment

Digital attacks

Legal harassment

Financial block

Evolution of the types of attacks to journalists

Increase the level of attacks

Capacity building

Hardening devices

Personal Protection Plan

Prepare for the worst

Community building

Risk Assessment

Advocacy for regulations

Internal activities

External activities

Awareness

Instinct + experience

How do we recognize a threat actor?

Like this?

Awareness

The skill we develop (in our brain) that allow us to recognize, identify and take action according to the level of risk we are facing.

Risks

Risks

A combination of threats and vulnerabilities.

Threat

+

Vulnerabilities

Risks

A combination of threats and vulnerabilities.

Vulnerabilities are our weaknesses.

Threat

+

Vulnerabilities

Threats are external and out of our control.

Risks

Establish what do you want to protect.

Identity

Data

Comms

Risks

Start profiling with data from every attack.

Proximity

Expertise

Resources

Threat actors

Threat actors

Individual, group, or entity that carries out malicious activities with the intent of causing harm, exploiting vulnerabilities, or gaining unauthorized access to computer systems, networks, data, or other valuable assets.

Threat actors

Threat actors are adversaries, but not all adversaries seek to do harm.

Attack vectors

Attack vector

Is the pathway an attacker (threat actor) reach us to cause harm. Usually they try to gain access, steal data, infect a device, delete data, etc. Any vulnerability can be exploited.

Attack vectors a journalists may face:

Phishing Attacks

• Attackers send deceptive emails or messages impersonating legitimate sources, aiming to trick the journalist into revealing sensitive information, credentials, or clicking on malicious links.

​

Malware and Spyware

• Malicious software may be embedded in documents or links sent to journalists, designed to compromise devices, monitor activity, steal sensitive data, or even remotely control systems.

Attack vectors a journalists may face:

Man-in-the-Middle (MitM) Attacks

• Attackers intercept communication channels (email, chat apps, phone calls, or public Wi-Fi) used by journalists to capture sensitive information, conversations, or metadata.

​

Social Engineering

• Attackers exploit personal information publicly available or gathered through deception, manipulating journalists into sharing confidential data or providing unauthorized access.

Attack vectors a journalists may face:

Credential Theft and Account Hijacking

• Attackers target weak passwords, reused credentials, or leverage breached databases to gain unauthorized access to email accounts, cloud storage, or social media platforms, potentially compromising sensitive sources or reporting materials.

​

Physical Device Compromise

• Attackers physically access or steal a journalist’s devices (laptop, smartphone, USB drives), install keyloggers or hardware implants, or tamper with devices to extract or compromise confidential information and communication.

Layers of security

Layers of security

The way you configure your protection according to the context and the risks you are facing

Awareness

+ Preparation

Strong Passwords

MFA

Encryption

Device updates

Managing passwords

Passwords

Factors to consider:

​

• We want to memorize.

​

• Too many accounts.

​

• Standards according to platforms.

Passwords

• Weak passwords
• Repeated
• Recycled
• Compromised
• Easy to guess

Risks

Passwords

Risks

Passwords

Passwords Managers

Passwords Managers

Authentication

Authentication

Data and Privacy Hygiene

Digital footprint

• Compromised credentials
• Search engines
• Reverse image search
• Use OSINT

(Ask for assistance if you are not prepared to see what is out there)

Audit

Digital footprint

• Secure all access
• Use services to delete information
• Anonymize personal data
• Use available laws
• Control your name in popular platforms

Actions

Basic Device Security Practices

Basic Security Practices

Physical Access

Vulnerabilities

Internet connection

Update software

Basic Security Practices

WiFi attacks:

• evil twin (cloning)
• Man-in-the-Midle (MitM)
• Deauthentication

Encrypted Communications

https://www.securemessagingapps.com/

Phishing Prevention

Phishing Attacks

• Get information
• Steal credentials
• Infect a device
• Farming clicks

Target

Digital Threats Analysis

Website(s)

One or many websites in parallel or cascade to be used as source.

Digital Threats

Online harassment

Social Media

Fake Accounts in any social media platform. Hybrid or bot.

Newsletter

Using hired or fake sources to reach users as any other newsletter.

Brigading

Accounts use to flood comment section or reply in social media.

Podcasts

Owned and mentions in allied podcasters.

Printed Media

With fake authors using cascade of sources making difficult to trace back.

Messaging Apps

Groups and online communities spreading fabricated content.

Influencers

Allied and hired influencers to spread fabricated content.

• Emotional manipulation: Trolls often use emotionally charged language and provocative content to elicit strong reactions from users. So-called rage farming is very common.

​

• Targeting influential individuals: Trolls may target celebrities, politicians, or high-profile individuals to capitalize on their followings and gain more attention.

​

• Creating and spreading memes: Trolls use humorous or provocative memes to spread disinformation or offensive content. Memes go viral quickly, reaching large audiences.

​

• Deepfakes and manipulated media: Trolls may use advanced technology to create fake videos, images, or audio recordings to spread disinformation, discredit individuals, or fuel conspiracy theories.

Digital Threats

Online harassment

Digital Threats

Tactics

• Identify if is an isolated event or part of a campaign.

​

• Identify if they are using external resources.

​

• Document and preserve.

​

• Prepare answers in advance.

​

• Control the narrative.

​

• Block pollution of your conversations.

Digital Threats

Response (basics to remember)

Thank you