Prank or vendetta, but in any case a wiper. SFO hacked. Ransomware updates. DDoS-for-hire busts. COVID-19 and cybersecurity.

Today's issue includes events affecting Australia, China, European Union, India, Italy, Democratic Peoples Republic of Korea, Republic of Korea, Netherlands, Pakistan, Russia, Singapore, United Kingdom, and United States.

Bring your own context.

The layers in a multi-layered phishing defense:

"So there are a variety of defenses out there. We can call it the multi-layered kind of defense. The first point is email gateways, where everybody are getting their emails - their organization gets emails. Those emails can be inspected if there is something malicious in the content of the email. And therefore, you can filter some of that malicious content out. That's the first line of defense. 

"The second line of defense will be once those emails being transformed or whether the phishing was actually propagated through other means. And you can see the phishing from the network point of view, meaning if you press that link for a malicious phishing website, once you press the link, there is actually an HTTP request to that given website, and you can track that - the level of the network and try to mitigate that kind of attack. 

"The third layer of defense, as far as I see, is actually related to education and awareness - our ability to go to our users and tell them, these are the things that you need to do in order to make sure you are well-protected and that you are doing the right actions once you see something that looks suspicious and you want to make sure that it's not." 

—Or Katz, principal lead security researcher at Akamai, on the CyberWire Daily Podcast, 4.9.20.

The first two layers are technical, the third human.

CSO Perspectives, now available to CyberWire Pro subscribers.

CyberWire Pro, our new subscription program designed for security professionals and all others who want to stay abreast of cybersecurity news, launched a new offering this week: CSO Perspectives. This new service—available as both a weekly column and a podcast—features Rick Howard, the CyberWire's CSO, Chief Analyst and Senior Fellow, who offers an informed, nuanced perspective on the ideas, strategies and technologies that senior cybersecurity executives grapple with daily. Reevaluating the network defender's core tenets in the face of technological change and threat actors' evolving strategies and sorting through the deluge of marketing claims and buzzwords, CSO Perspectives will inform and challenge readers and listeners to think critically about cybersecurity. CSO Perspectives will also be available in the CyberWire Daily Podcast feed for its inaugural three weeks.