BellaCiao from Tehran; PingPull from Beijing: two cyberespionage tools. SLP exploitation. Ransomware as an international threat. The state of hacktivism. Digital evidence or war crimes.

Published: April 26, 2023, 8:55 p.m.

BellaCiao is malware from Iran's IRGC, while PingPull is malware used by the Chinese government affiliated Tarus Group. Ransomware continues to be a pervasive international threat. An overview of hacktivism. Our guest is CyberMindz founder Peter Coroneos, discussing the importance of mental health in cybersecurity. Johannes Ullrich shares insights from his RSAC panel discussions. And Ukraine continues to collect evidence of Russian war crimes.\n\nFor links to all of today's stories check out our CyberWire daily news briefing:\nhttps://thecyberwire.com/newsletters/daily-briefing/12/80\n\nSelected reading.\nUnpacking BellaCiao: A Closer Look at Iran\u2019s Latest Malware (Bitdefender Blog)\nChinese Alloy Taurus Updates PingPull Malware (Unit 42)\nAbuse of the Service Location Protocol May Lead to DoS Attacks (Cybersecurity and Infrastructure Security Agency CISA)\n#RSAC: Ransomware Poses Growing Threat to Five Eyes Nations (Infosecurity Magazine)\nHacktivism Unveiled, April 2023 Insights into the footprints of hacktivists (Radware)\nFBI aiding Ukraine in collection of digital and physical war crime evidence (CyberScoop)\nLearn more about your ad choices. Visit megaphone.fm/adchoices