logo
episode-header-image
Sep 2023
23m 10s

Crooks phish for guests; spies phish for...

N2K Networks
About this episode

An advanced phishing campaign hits hospitality industry. An information-stealing campaign deploys ZenRAT. More MOVEit-related data breaches are disclosed. Mixin Network suspends deposits and withdrawals. The OpenSea NFT market warns of third-party risk to its API. Phishing for Ukrainian military drone operators. Mr. Security Answer Person John Pescatore shares thoughts in Cisco acquiring Splunk. Ann Johnson from the Afternoon Cyber Tea podcast interviews Deb Cupp sharing a lesson in leadership. And the UK adopts a hunt-forward approach to cyber war.


For links to all of today's stories check out our CyberWire daily news briefing:

https://thecyberwire.com/newsletters/daily-briefing/12/184


Selected reading.

Luxury Hotels Major Target of Ongoing Social Engineering Attack (Cofense) 

ZenRAT: Malware Brings More Chaos Than Calm (Proofpoint) 

More MOVEit-related data breaches are disclosed. (CyberWire)

Mixin Network suspends deposits and withdrawals. (CyberWire)

OpenSea NFT market warns of third-party risk to its API. (CyberWire)

Threat Labs Security Advisory: New STARK#VORTEX Attack Campaign: Threat Actors Use Drone Manual Lures to Deliver MerlinAgent Payloads (Securonix) 

Ukrainian Military Targeted in Phishing Campaign Leveraging Drone Manuals (The Hacker News) 

British Army general says UK now conducting ‘hunt forward’ operations (Record)

Learn more about your ad choices. Visit megaphone.fm/adchoices

Up next
Today
When the breachers get breached.
International law enforcement take down the Breachforums domains. Researchers link exploitation campaigns targeting Cisco, Palo Alto Networks, and Fortinet. Juniper Networks patches over 200 vulnerabilities. Apple and Google update their bug bounties. Evaluating AI use in applica ... Show More
28m 50s
Yesterday
Cyber defenders pulled into deportation duty.
DHS reassigns cyberstaff to immigration duties. A massive DDoS attack disrupts several major gaming platforms. Discord refuses ransom after a third-party support system breach. Researchers examine Chaos ransomware and creative log-poisoning web intrusions. The FCC reconsiders its ... Show More
29m 49s
Oct 8
Chinese hackers serve up espionage.
Chinese hackers infiltrate a major U.S. law firm. The EU Commission President warns Russia is waging a hybrid war against Europe. Researchers say LoJax is the latest malware from Russia’s Fancy Bear. Salesforce refuses ransom demands. London Police arrest two teens over an allege ... Show More
32m 4s
Recommended Episodes
Mar 2022
Thu. 03/31 – Hackers Forging Emergency Data Requests
Another day of all the hacking news. Now the hackers are forging Emergency Data Requests. Apparently there have been vulnerabilities in Wyze security cameras that no one bothered to fix. TSMC warns of a tech slowdown. Masa Son orders his lieutenants to slow down investing just a ... Show More
16m 22s
Sep 2023
TWiG 732: Unidentified Flying Skellington - New Android Branding, Twitter Spy
Britain Admits Defeat in Controversial Online Safety Bill When Tech Says "No" Apple Backs Down on Its Controversial Photo-Scanning Plans The FBI secretly launched an encrypted messaging system for criminals Former Twitter Employees Charged With Spying for Saudi Arabia Jeff Jarvis ... Show More
2h 14m
Dec 2020
Fri. 12/18 – Chinese Drone Maker DJI Blacklisted By The US
Drone maker DJI is blacklisted by the commerce department. Group video comes to Echo devices. Twitter launches Spaces. Sony offers refunds for Cyberpunk 2077. Coinbase files to go public. And, of course, the weekend longreads suggestions.Sponsors:Masterworks.io, promocode RIDE to ... Show More
20m 34s
Oct 2019
Thu. 10/24 - Is TikTok A “National Security Risk?”
Is TikTok a national security risk? Inquiring Senators want to know. Earnings running the gamut from bad to surprisingly good from Twitter, Amazon and Tesla. And to paraphrase an old saw: if a voicemail system goes down how would anyone even notice?Sponsors:MealimeLegalForce RAPC ... Show More
16m 48s
Mar 2022
Thu. 03/03 – Epic Buys Bandcamp; Amazon Retrenches From Physical Retail
The story of the young Ukrainian Minister who has bent the conscience of western tech companies, and coordinated the reachout to crypto. Is regulation coming for NFTs? Epic Games acquired Bandcamp. Amazon pulls back from its IRL retail experiments. And a big update on the return ... Show More
15m 21s
Jul 2024
CYBER UNCUT: LockBit out for revenge and the latest insights from the Australian Cyber Security Summit
In this episode of Cyber Uncut, Liam Garman and Daniel Croft unpack the latest cyber security news, complete with some interesting lessons for business leaders from this year’s Australian Cyber Security Summit. The pair begin the podcast with an update on allegations of a breach ... Show More
28m 4s
Sep 2022
CYBER SECURITY UNCUT: SPECIAL EPISODE: Millions of Australians at risk of identity theft from Optus hack
In this special episode of the Cyber Security Uncut podcast, Major General (Ret'd) Marcus Thompson, inaugural head of the ADF's Information Warfare Division and Phil Tarrant, director – defence and security at Momentum Media, unpack the extent of the Optus hack, and how the data ... Show More
23m 33s
Feb 2022
The Cyber Front in the War on Ukraine
There are a lot of companies out there willing to sell shady customers the tools they need to spy on just about anyone. All over the world software vendors like Hacking Team and NSO Group will help you break into a cellphone or read an email you’re not supposed to. But that might ... Show More
37m 52s
Jul 2023
Barking up the wrong Facebook page.
Mallory Sofastaii, consumer investigative reporter from WMAR TV, is discussing animal rescue organizations on Facebook pages being taken over by hackers. Listener George writes in to share how his bank is not doing enough to protect against fraud going on. Dave's story follows sc ... Show More
54m 52s