CyberWire Daily

Episodes

• Operation Pinball. Implausibly spoofed, not really official, COVID-19 emails. CISA updates US Federal telework guidance. ICO defers some big GDPR fines. Zoom agonistes. Fleeceware in Apple’s store.

  Apr 9, 2020

  Not summarized yet

• Joint UK-US warning on COVID-19-themed cyber threats. Disinformation in the subcontinent. Public and private apps with privacy issues. A new IoT botnet. APT notes. Frontiers in biometrics.

  Apr 8, 2020

  Not summarized yet

• Trends in COVID-19-themed cybercrime. Social media seek to inhibit the misinformation pandemic. Corp[dot] off the market. BEC in cloud services. Investment notes. Big big fraud.

  Apr 7, 2020

  Not summarized yet

• COVID-19 updates: crime, propaganda, and craziness. (Also telework.) BGP hijacking. DarkHotel sighting. Apps behaving badly. And a risk of sim-swapping.

  Apr 6, 2020

  Not summarized yet

• A rough year ahead for ransomware attacks - and how to stop them. [Research Saturday]

  Apr 4, 2020

  Not summarized yet

• Cybersecurity notes during the pandemic emergency. Twitter bots. Ransomware attack on a biotech firm. WHO updates. And how are the cyber gangs doing these days?

  Apr 3, 2020

  Not summarized yet

• WHO email accounts prospected. Mandrake versus Android users. Vollgar versus MS-SQL servers. Ransomware and hospitals. Notes on the effects of COVID-19, and a disinformation campaign.

  Apr 2, 2020

  Not summarized yet

• More data breaches. DPRK spearphishing. DoJ IG sees problems in FISA warrant processes. Houseparty updates. Huawei sanctions. And notes about the pandemic.

  Apr 1, 2020

  Not summarized yet

• Supply chain attack warning. CFAA clarified. COVID-19 and its economic squalls.

  Mar 31, 2020

  Not summarized yet

• Updates on the cyber ramifications of the coronavirus pandemic. Saudi surveillance program. Ransomware developments. Lost USB attacks are in progress.

  Mar 30, 2020

  Not summarized yet

• Hidden dangers inside Windows and LINUX computers. [Research Saturday]

  Mar 28, 2020

  Not summarized yet

• Some notes on cyber gangland. South Koren APT using zero days against North Koreans? USB attacks. Telework challenges. CMMC remains on schedule.

  Mar 27, 2020

  Not summarized yet

• Advice on secure telework. Magecart infestations. DNS hijacking with a COVID-19 twist and an info-stealer hook. Patch notes. The US 5G security strategy.

  Mar 26, 2020

  Not summarized yet

• APT41 is back from its Lunar New Year break. Commodity attack tools for states and gangs. Russia takes down a domestic carding crew. Restricting misinformation.

  Mar 25, 2020

  Not summarized yet

• Active ICS threats. TrickBot and TrickMo. RCE vulnerability in Windows. Google ejects click-fraud malware infested apps from Play. Attackers hit WHO, hospitals, and biomedical research.

  Mar 24, 2020

  Not summarized yet

• Coronavirus fraud booms; prosecutors are taking note. Stolen data on the dark net. Software updates affected by pandemic. A new Mirai variant is out. A DDoS that wasn’t.

  Mar 23, 2020

  Not summarized yet

• The security implications of cloud infrastructure in IoT. [Research Saturday]

  Mar 21, 2020

  Not summarized yet

• CISA on running critical sectors during an emergency. Disinformation, phishbait, and rumor. What’s Fancy Bear up to these days? Distinguishing altruism from self-interest.

  Mar 20, 2020

  Not summarized yet

• EU suspects Russia of disinformation. TrickBot’s latest module is a brute. Parallax RAT and the MaaS black market. Pandemic hacking trends. What to do with time on your hands.

  Mar 19, 2020

  Not summarized yet

• Coronavirus phishing. Money mule recruiting. Remote work and behavioral baselining. HHS incident seems to have been...an incident. Advice from NIST, and from Dame Vera Lynne.

  Mar 18, 2020

  Not summarized yet