Cybercriminals favor cyberespionage in North Korea, Russia, and parts unknown. Movements and activity in the cyber underworld.

Published: May 24, 2023, 8:15 p.m.

Kimsuky's tailored reconnaissance tools. GoldenJackal is an APT quietly active since 2019.\xa0Criminals target Youtube viewers with free cracked software.\xa0Rheinmetall\u2019s data was posted to BlackBasta's extortion site. The "Cuba" gang claims credit for the attack on the Philadelphia Inquirer. CERT-UA identifies a probable Russian cyberespionage campaign. Ireland views cyber assistance to Ukraine as a contribution to collective security. Ann Johnson from Afternoon Cyber Tea speaks with Tyrance Billingsley about Black Tech. Our guest is Oz Alashe from CybSafe on raising VC money amidst a down economy. And KillNet's underperforming hacktivists.\n\nFor links to all of today's stories check out our CyberWire daily news briefing:\nhttps://thecyberwire.com/newsletters/daily-briefing/12/100\n\nSelected reading.\nKimsuky | Ongoing Campaign Using Tailored Reconnaissance Toolkit (SentinelOne)\nNorth Korean Kimsuky Hackers Strike Again with Advanced Reconnaissance Malware (The Hacker News)\nMeet the GoldenJackal APT group. Don\u2019t expect any howls (Kaspersky)\nFollina \u2014 a Microsoft Office code execution vulnerability (DoublePulsar)\nYouTube Pirated Software Videos Deliver Triple Threat: Vidar Stealer, Laplas Clipper, XMRig Miner (FortiGuard Labs)\nArms maker Rheinmetall confirms BlackBasta ransomware attack (Bleeping Computer)\nInquirer and forensics team investigating computer disruptions to publishing (Philadelphia Inquirer)\nCuba ransomware claims cyberattack on Philadelphia Inquirer (Bleeping Computer)\nEspionage activity UAC-0063 in relation to Ukraine, Kazakhstan, Kyrgyzstan, Mongolia, Israel, India (CERT-UA#6549) (CERT-UA)\nUkraine Identifies Central Asian Cyberespionage Campaign (BankInfoSecurity)\nIreland\u2019s cyber security agency has been providing \u2018non-lethal aid\u2019 to Ukraine (Irish Times)\nLearn more about your ad choices. Visit megaphone.fm/adchoices