CyberWire Daily

3271 Episodo

1. Malware sometimes changes its behavior. [Research Saturday]

   Publicado: 30/10/2021
2. Iranian-Israeli cyber tensions rise. Decaf ransomware described. Philippine government phshbait. Unemployment due to cyberattack. Europol’s latest collars. Facebook rebrands as “Meta.”

   Publicado: 29/10/2021
3. The Malware Mash!

   Publicado: 29/10/2021
4. Hacktivists or intelligence services in Iran? BOLO NIkolay K. Renouncing Conti, and all its empty promises. SEO poisoning. US cyber strategic intent.

   Publicado: 28/10/2021
5. Coups and comms blackouts. Fuel sale sabotage in Iran. Wslink described. Operation Dark HunTor takes down a contraband market. FTC looks into Facebook. LockBit speaks.

   Publicado: 27/10/2021
6. Ransomware and privateering, counteroffense and deterrence. The US State Department will reestablish its cyber office. And looking forward to Halloween.

   Publicado: 26/10/2021
7. SolarMarket malware carried in some WordPress sites. Russian privateers don’t much like REvil’s takedown. The SVR in the supply chain. Malicious Squid Games app. Scary social media.

   Publicado: 25/10/2021
8. Mark Nunnikhoven: Providing clarity about security. [Cloud strategy] [Career Notes]

   Publicado: 24/10/2021
9. When big ransomware goes away, where should affiliates go? [Research Saturday]

   Publicado: 23/10/2021
10. Counting coup against REvil (and other gangs are taking note). Export controls and dual use. A timing bug will surface this weekend.

    Publicado: 22/10/2021
11. Evil Corp identified as the threat actor behind ransomware attacks on Sinclair and Olympus. Privateering. Fin7’s front company. Sentencing in a bulletproof hosting case.

    Publicado: 21/10/2021
12. Cyberespionage campaign looks a lot like SIGINT collection. Magnitude gets more capable. VPN exploits solicited. Ransomware trends. Seven years for UPMC hacker. Plenty of Candy Corn coming.

    Publicado: 20/10/2021
13. TA505’s recent activity. Advice on defending organizations from BlackMatter. CISA RFI seeks EDR information. REvil’s halting attempts to return. Sinclair’s incident response.

    Publicado: 19/10/2021
14. A US broadcaster sustains a ransomware attack. North Korean catphis expelled from Twitter. REvil’s Tor sites are hijacked. Hacking back. Prosecution and responsible disclosure?

    Publicado: 18/10/2021
15. Ell Marquez: It's okay to be new. [Linux] [Career Notes]

    Publicado: 17/10/2021
16. Groove Gang making a name for themselves. [Research Saturday]

    Publicado: 16/10/2021
17. CISA and its partners warn of threats to water and wastewater treatment facilities. The curious case of Missouri teachers’ Social Security Numbers.

    Publicado: 15/10/2021
18. Notes from the underground: data breach extortion and a criminal market shuts down. International cooperation against ransomware. Cyber risk and higher education.

    Publicado: 14/10/2021
19. Cyber Espionage, again. Patched SolarWinds yet? Patch Tuesday. The international conference on ransomware has begun. Booter customers get a warning. A disgruntled insider alters aircraft records.

    Publicado: 13/10/2021
20. Espionage by password spraying, and espionage via peanut butter sandwich. Ransomware and DDoS warnings. Two journalists get the Nobel Peace Prize

    Publicado: 12/10/2021