The CyberWire Daily Podcast 8.7.23
Ep 1879 | 8.7.23

Pyongyang’s new friendship with Moscow apparently only goes so far. Reptile rootkit in the wild. Cloudzy updates. Cl0p’s torrents. And notes on cyber phases of Russia’s hybrid war.

Show Notes

North Korean cyberespionage against a Russian aerospace firm. The Reptile rootkit is used against South Korean systems. An update on Cloudzy. Cl0p is using torrents to move data stolen in MOVEit exploitation. Andrea Little Limbago from Interos wonders about the dangers of jumping head first into new technologies? Rick Howard ponders quantum computing. And Meduza is back on Apple Podcasts.

Selected reading.

Exclusive: North Korean hackers breached top Russian missile maker (Reuters)

North Korean hackers stole secrets of Russian hypersonic missile maker (Euractiv) 

Comrades in Arms? | North Korea Compromises Sanctioned Russian Missile Engineering Company (SentinelOne)

Reptile Rootkit: Advanced Linux Malware Targeting South Korean Systems (The Hacker News) 

UPDATE: Cloudzy Command and Control Provider Report (Halcyon)

Reptile Rootkit: Advanced Linux Malware Targeting South Korean Systems (The Hacker News)

Clop ransomware now uses torrents to leak data and evade takedowns (BleepingComputer)

Ukraine may be winning ‘world’s first cyberwar’ (The Kyiv Independent)

Apple has removed Meduza’s flagship news podcast ‘What Happened’ from Apple Podcasts, without explaining the reason (Meduza)