Adversary-in-the-middle sites support business email compromise. Silent validation carding bot discovered. Attempted social engineering at the European Central Bank. Germany puts its shields up. Carole Theriault speaks with Jen Caltrider about Mozilla's *Privacy Not Included initiative. Our guest is Lucia Milica on Proofpoint\u2019s\xa0Voice of the CISO report. And Hacktivism in a hybrid war.\n\nFor links to all of today's stories check out our CyberWire daily news briefing:\nhttps://thecyberwire.com/newsletters/daily-briefing/11/133\n\nSelected reading.\nFrom cookie theft to BEC: Attackers use AiTM phishing sites as entry point to further financial fraud (Microsoft Security Blog)\xa0\nPerimeterX Discovers New Silent Validation Carding Bot (PerimeterX)\nHackers posing as Merkel target ECB's Lagarde - German source (Reuters)\xa0\nEuropean Central Bank head targeted in hacking attempt (AP NEWS)\nCyberangriff auf Spitzenpolitiker: Hacker nutzten Merkels Handynummer, um das Whatsapp-Konto von Lagarde zu knacken (Business Insider)\nGermany bolsters defenses against Russian cyber threats (Deutsche Welle)\xa0\nUkraine's cyber army hits Russian cinemas (CyberNews)\nDDoS attacks surge in popularity in Ukraine \u2014 but are they more than a cheap thrill? (The Record by Recorded Future)\nMicrosoft Releases July 2022 Security Updates (CISA)\nCISA orders agencies to patch new Windows zero-day used in attacks (BleepingComputer)\nSAP Releases July 2022 Security Updates (CISA)\nSchneider Electric Easergy P5 and P3 (CISA)\nDahua ASI7213X-T1 (CISA)\nLearn more about your ad choices. Visit megaphone.fm/adchoices