CyberWire Daily

3271 Episodo

1. Following DOJ indictment, a look back on NotPetya and Olympic Destroyer research. [Research Saturday]

   Publicado: 12/12/2020
2. OceanLotus tracked. Threats to K-12 distance education. Adrozek is credential-harvesting adware. MountLocker gains criminal affiliates. FCC acts against Chinese companies. CISA internships.

   Publicado: 11/12/2020
3. Facebook faces anti-trust suit. COVID-19 vaccine cyberespionage. Emissary Panda spotting. SQL databases for sale. Notes on the FireEye breach, the end of Flash, and the Mirai botnet.

   Publicado: 10/12/2020
4. Bear prints in Oslo and Silicon Valley. Deepfakes may be finally coming... maybe... CISA issues ICS alerts, some having to do with AMNESIA:30. A quick trip through Patch Tuesday.

   Publicado: 9/12/2020
5. IoT supply chain vulnerabilities described. Spyware in the hands of drug cartels. National security and telecom equipment. US NDAA includes many cyber provisions. Fraud as a side hustle.

   Publicado: 8/12/2020
6. NSA warns that Russia is actively exploiting patched VMware vulnerabilities. CISA alert also a warning to Iran. DeathStalker update. Market pressures in the Darknet. Greetings from Pyongyang.

   Publicado: 7/12/2020
7. Ron Brash: Problem fixer in critical infrastructure. [OT] [Career Notes]

   Publicado: 6/12/2020
8. SSL-based threats remain prevalent and are becoming increasingly sophisticated. [Research Saturday]

   Publicado: 5/12/2020
9. 2021 may look a lot like 2020 in cyberspace, only moreso. Cold chain cyberespionage. Cybercriminals are also interested in COVID-19 vaccines. And beware of online dog fraud.

   Publicado: 4/12/2020
10. Cyberespionage and influence operations against prospective members of the incoming US Administration. Cold chain attacks. TrickBoot. Vasya, what do you do for a living?

    Publicado: 3/12/2020
11. The Shadow Academy schools anglophone universities. Turla’s Crutch. Cryptojacking as misdirection. Cyberespionage against think tanks. DPRK tries to steal COVID-19 treatment data.

    Publicado: 2/12/2020
12. Cryptojacking cyberspies sighted. Crooks mix banking Trojans and ransomware. Conti ransomware hits industrial IoT company. SCOTUS reviews CFAA. And predictions.

    Publicado: 1/12/2020
13. Phishing for COVID-19 vaccine data. Bandook is back, and mercenaries have it. School’s out for ransomware. Skepticism about foreign election manipulation. The forever sales.

    Publicado: 30/11/2020
14. Camille Stewart: Technology becomes more of an equalizer. [Legal] [Career Notes]

    Publicado: 29/11/2020
15. Encore: Using global events as lures for malicious activity.

    Publicado: 28/11/2020
16. Influence the gullible, and maybe others will follow. Event site sustains a data breach. Contact tracing and privacy protection. Ransomware, again. Social media used to intimidate witnesses.

    Publicado: 25/11/2020
17. Mustang Panda needs to repent. Not the FBI. Dodgy consumer routers and smart doorbells. Prospective Presidential appointees and cyber. Crime and investigation.

    Publicado: 24/11/2020
18. Ups and downs in the cyber underworld. Enduring effects of COVID-19 in cyberspace. Safer online shopping. “Take me home, United Road, to the place I belong, to Old Trafford, to see United…”

    Publicado: 23/11/2020
19. James Hadley: Spend time on what interests you. [CEO] [Career Notes]

    Publicado: 22/11/2020
20. Misconfigured identity and access management (IAM) is much more widespread. [Research Saturday]

    Publicado: 21/11/2020