Cybersecurity News
Daily Briefing
SpyCast
Before he became one of the world's most notorious terrorists in the 1970s and '80s, inspiring movies, books, and future terrorists, Carlos the Jackal was born Ilich Ramírez Sánchez to a privileged family in Venezuela. Over time, his crimes grew bolder, from an attempted assassination to abductions, murder, hijackings, and bombings. Some state leaders tolerated him out of fear he would target their countries, yet his alliances with militants and dictators soured as the years passed. In his new book, The Jackal: The Rise and Fall of Carlos, the World's First Super Terrorist, journalist Joby Warrick profiles the mercenary terrorist and details how American and French intelligence took him down. 
CyberWire Daily
Daily Briefing
Signals and Space
Special Editions
T-Minus
Research Saturday
Today we are joined by Dr. Renée Burton, VP of Threat Intelligence at Infoblox, discussing their work on Lurking Lizard, "Fake Installers, Fake Reviews, Fake Services – Real Proxies, Real." The research uncovers Lurking Lizard, a threat actor that has operated since at least 2022 by using fake software installers, VPNs, and lookalike domains to secretly turn victims’ devices into residential proxy nodes.
Researchers identified more than 230 related domains and connected seemingly separate campaigns—including fake 7-Zip, downloader tools, and WireVPN—through shared infrastructure, tracking URLs, deployment patterns, and APIs. The investigation suggests the actor runs an end-to-end proxy operation, recruiting compromised devices and then monetizing their bandwidth through proxy services and fake review sites, with WireVPN appearing to be the latest evolution of the campaign. 
Week that Was
CyberWire Daily
Daily Briefing
Hacking Humans
This week, hosts of N2K CyberWire Maria Varmazis and Dave Bittner alongside Joe Carrigan are discussing the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines. We start with some follow-up from Gordy, who has questions about a fairground contest collecting personal information, plus an update on Joe’s backpack. Joe covers the takedown of Xinbi Guarantee, an illicit marketplace allegedly providing services to scam centers, including money laundering, fake investment sites, and other tools for fraud. Maria looks at QR-code scams and a growing wave of rental scams on TikTok, where fake listings use stolen property photos, below-market prices, and upfront fees to target prospective renters. Dave explores a report on how hundreds of ads promoting AI “nudify” tools and other abusive content were able to reach users through Meta’s advertising system. Our Catch of the Day comes from Tim, who received a suspicious board-position offer that appears to have scraped details directly from his LinkedIn profile—and somehow offered him a seat on the board of his own company. 
