The CyberWire Daily Podcast 12.6.22
Ep 1717 | 12.6.22

Cyberespionage, privateering, hacktivism and influence operations, in Ukraine, Russia, the Middle East, and elsewhere. Criminals need quality control, too. A new entry in CISA’s KEV Catalog.

Show Notes

A Chinese cyberespionage campaign is believed to be active in the Middle East. Poor quality control turns ransomware into a wiper, and a typo crashes a cryptojacker. A large DDoS attack is reported to have hit a Russian state-owned bank. Privateers compromise Western infrastructure to stage cyberattacks. Cyber operations against national morale. A look at the Vice Society. Ben Yelin on the growing concerns over TicTok. Ann Johnson from Afternoon Cyber Tea speaks with Charles Blauner about the evolution of the CISO role. And CISA has added an entry to its Known Exploited Vulnerabilities Catalog.

Selected reading.

BackdoorDiplomacy Wields New Tools in Fresh Middle East Campaign (Bitdefender Labs) 

The Story of a Ransomware Turning into an Accidental Wiper | FortiGuard Labs (Fortinet Blog) 

Syntax errors are the doom of us all, including botnet authors (Ars Technica) 

Russia's No. 2 bank VTB suffers largest DDoS in history (Computing) 

Russia compromises major UK and US organisations to attack Ukraine (Lupovis) 

Russia’s online attacks target Ukrainians’ feelings (POLITICO) 

Vice Society: Profiling a Persistent Threat to the Education Sector (Unit 42)