Cyber skirmishing as Russia redeploys in Ukraine. Spyware in senior EC officials device. Sharkbot-infested apps ejected from Google Play. Advice from CISA.

Published: April 11, 2022, 8:15 p.m.

US National Security Advisor says atrocities were part of Russia's plan. Russian commanders seek to keep troops away from dangerous sections of the Internet. Cyberattacks in Finland may be a shot across Helsinki's bow. CERT-UA warns of a phishing campaign. Hacktivists hit Russian organizations. Mixed reviews for US preemptive measures against GRU botnets. Sharkbot-infested apps ejected from Google Play. Johannes Ullrich from SANS on malicious ISO files embedded in HTML. Our guest is Neal Dennis from Cyware on threat intel sharing with members of Auto-ISAC. What you should do when your Shields are Up.\n\nFor links to all of today's stories check out our CyberWire daily news briefing:\nhttps://thecyberwire.com/newsletters/daily-briefing/11/69\n\nSelected reading.\nRussia Shuffles Command in Ukraine as Thousands Flee the East (New York Times)\xa0\nSullivan: Intel indicates plan from \u2018highest levels\u2019 of Russian government to target civilians (The Hill)\xa0\nRussian soldiers banned from social media as \u2018uncomfortable truths\u2019 drain their morale (The Telegraph)\xa0\nWest Seeks to Pierce Russia\u2019s Digital Iron Curtain (Foreign Policy)\nYouTube blocks Russian parliament channel, drawing ire from officials (Reuters)\xa0\nU.S. quietly paying millions to send Starlink terminals to Ukraine, contrary to SpaceX claims (Washington Post)\nHackers use Conti's leaked ransomware to attack Russian companies (BleepingComputer)\xa0\n\u0414\u0435\u0440\u0436\u0430\u0432\u043d\u0430 \u0441\u043b\u0443\u0436\u0431\u0430 \u0441\u043f\u0435\u0446\u0456\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0437\u0432\u2019\u044f\u0437\u043a\u0443 \u0442\u0430 \u0437\u0430\u0445\u0438\u0441\u0442\u0443 \u0456\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0456\u0457 \u0423\u043a\u0440\u0430\u0457\u043d\u0438 (GUR)\nHow Russia's Invasion Triggered a US Crackdown on Its Hackers (Wired)\nThe U.S. Opens a Risky New Front in Cyberdefense (Bloomberg)\xa0\nMeet the 1,300 librarians racing to back up Ukraine\u2019s digital archives (Washington Post)\xa0\nThe Race to Save Posts That May Prove Russian War Crimes (Wired)\xa0\nExclusive: Senior EU officials were targeted with Israeli spyware (Reuters)\xa0\nSharkBot Android Malware Continues Popping Up on Google Play (SecurityWeek)\xa0\nSharkBot Banking Trojan spreads through fake AV apps on Google Play (Security Affairs)\xa0\nSharing Cyber Event Information: Observe, Act, Report (CISA)\nLearn more about your ad choices. Visit megaphone.fm/adchoices