Business email compromise (BEC) exploits legitimate services. A hacktivist ransomware group demands charity donations for encrypted files. Trends and threats in API protection. The effects of hacktivism on Russia's war against Ukraine. Executive digital protection. Deepen Desai of Zscaler explains security risks in OneNote. Our guest is Ajay Bhatia of Veritas Technologies with advice for onboarding new employees. And news organizations as attractive targets.\n\nFor links to all of today's stories check out our CyberWire daily news briefing:\nhttps://thecyberwire.com/newsletters/daily-briefing/12/96\n\nSelected reading.\nLeveraging Dropbox to Soar Into Inbox (Avanan)\nMalasLocker ransomware targets Zimbra servers, demands charity donation (Bleeping Computer)\nShadow API Usage Surges 900%, Revealing Alarming Lack of API Visibility Among Enterprises (Business Wire)\nAPIs are Top Cybersecurity Priority for Most Organizations, Yet 40% Do Not Have an API Security Solution (PR Newswire)\nEvolving Cyber Operations and Capabilities (CSIS)\nFollowing the long-running Russian aggression against Ukraine. (The CyberWire)\nExecutive Digital Protection whitepaper (Agency)\nThe Philadelphia Inquirer\u2019s operations continue to be disrupted by a cyber incident (The Philadelphia Inquirer)\nCyberattack at the Philadelphia Inquirer. (The CyberWire)\nLearn more about your ad choices. Visit megaphone.fm/adchoices