Phishing humanitarian organizations. Close-reading NCSC and NSA. Bad apps booted. Good dark web. ICS event notes from Atlanta.

Lookout has found a large phishing campaign targeting United Nations agencies and a range of humanitarian aid organizations.

The Russian embassy to the UK has told Reuters that reports of Turla piggybacking on Iranian attack methods are "unsavoury" misreadings of GCHQ and NSA warnings.

Google scrubbed forty-two apps from the Play store that served Ashas adware. ESET discovered Ashas and traced the developer to a university in Vietnam. In another purge, Apple removed seventeen Trojanized iOS apps that Wandera identified and reported.

The dark web gets more bad press than good, but it's worth noting that it has benign uses, like the BBC's adoption of TOR to help its users avoid censorship by repressive governments. The network particularly mentions China, Iran, and Vietnam as countries who've sought to restrict its content. The BBC News international site will be available in the mirror, as will the BBC's Arabic, Persian and Russian services.

US Senators Wyden (Democrat of Oregon) and Warren (Democrat of Massachusetts) have asked the Federal Trade Commission to investigate any role Amazon may have had in the Capital One breach. The Washington Post reports that Senators Cotton (Republican of Arkansas) and Schumer (Democrat of New York) have asked the Intelligence Community to determine whether the Chinese-owned social network TikTok represented a security threat. With respect to content moderation, TikTok told BuzzFeed its moderators are in the US, not China.

Shopping bots are the ticket-scalpers of e-commerce. Cequence, looking ahead to the holidays, explains how the secondary gray market works.