An African power generator has been targeted by ransomware. The APT31 group is believed to be responsible for attacks on industrial systems in Eastern Europe. There have been arrests related to the takedown of LolekHosted. Ukraine's SBU has alleged that Russia's GRU is using specialized malware to attack Starlink. Microsoft has decided not to extend licenses for its products in Russia. Rick Howard opens his toolbox on DDOS. In our Solution Spotlight: Simone Petrella and Camille Stewart Gloster discuss the White House release of its cybersecurity workforce and education strategy. And the Cyber Safety Review Board will be investigating cases of cyberespionage against Exchange.\n\nWatch the full video of Simone and Camille here: Solution Spotlight: Simone Petrella and Camille Stewart Gloster\n\nFor links to all of today's stories check out our CyberWire daily news briefing:\nhttps://thecyberwire.com/newsletters/daily-briefing/12/154\n\nSelected reading.\nDroxiDat-Cobalt Strike Duo Targets Power Generator Network (Infosecurity Magazine)\nNew SystemBC Malware Variant Targets Southern African Power Company (The Hacker News)\nPower Generator in South Africa hit with DroxiDat and Cobalt Strike (Security Affairs)\xa0\nSouthern African power generator targeted with DroxiDat malware (Record)\xa0\nCommon TTPs of attacks against industrial organizations. Implants for uploading data (Kaspersky ICS CERT)\nAPT31 Linked to Recent Industrial Attacks in Eastern Europe (Infosecurity Magazine)\xa0\nResearchers Shed Light on APT31's Advanced Backdoors and Data Exfiltration Tactics (The Hacker News)\xa0\nLOLEKHosted admin arrested for aiding Netwalker ransomware gang (BleepingComputer)\nRussian spy agencies targeting Starlink with custom malware, Ukraine warns (The Telegraph)\nRussia Bans iPhones And iPads For Official Use: Report (BW Businessworld)\nMicrosoft Suspends Extending Licenses For Companies in Russia (RadioFreeEurope/RadioLiberty)\xa0\nDepartment of Homeland Security\u2019s Cyber Safety Review Board to Conduct Review on Cloud Security (US Department of Homeland Security)\nMicrosoft Exchange hack is focus of cyber board\u2019s next review (Record)\xa0\nMicrosoft is under scrutiny after a recent attack by suspected Chinese hackers (Windows Central)\xa0\nThe DHS\u2019s CSRB to review cloud security practices following the hack of Microsoft Exchange govt email accounts (Security Affairs)\nMicrosoft's role in data breach by Chinese hackers to be part of US cyber inquiry (Firstpost)\nLearn more about your ad choices. Visit megaphone.fm/adchoices