IcedID is evolving away from its banking malware roots. An Emotet phishing campaign spoofs IRS W9s. The FBI warns of BEC scams. A Fake booter service as a law enforcement honeypot. Phishing in China's nuclear energy sector. Reports of an OpenAI and a ChatGPT data leak. Does Iran receive Russian support in cyberattacks against Albania? My conversation with Linda Gray Martin and Britta Glade from RSAC with a preview of this year's conference. Our own Rick Howard takes a field trip to the National Cryptologic Museum. And De-anonymizing Telegram.\n\nFor links to all of today's stories check out our CyberWire daily news briefing:\nhttps://thecyberwire.com/newsletters/daily-briefing/12/58\n\nSelected reading.\nFork in the Ice: The New Era of IcedID (Proofpoint)\nEmotet malware distributed as fake W-9 tax forms from the IRS (BleepingComputer)\nInternet Crime Complaint Center (IC3) | Business Email Compromise Tactics Used to Facilitate the Acquisition of Commodities and Defrauding Vendors (IC3)\nPhishing Campaign Targets Chinese Nuclear Energy Industry (Intezer)\xa0\n'Bitter' espionage hackers target Chinese nuclear energy orgs (BleepingComputer)\nUK Sets Up Fake DDoS-for-Hire Sites to Trap Hackers (PCMag Middle East)\nUK National Crime Agency reveals it ran fake DDoS-for-hire sites to collect users\u2019 data (Record)\nOpenAI: ChatGPT payment data leak caused by open-source bug (BleepingComputer)\nOpenAI says a bug leaked sensitive ChatGPT user data (Engadget)\nMarch 20 ChatGPT outage: Here\u2019s what happened (OpenAI)\nHow Albania Became a Target for Cyberattacks (Foreign Policy)\xa0\nRussia\u2019s Rostec allegedly can de-anonymize Telegram users (BleepingComputer)\nLearn more about your ad choices. Visit megaphone.fm/adchoices