Gray-hat support for Iranian dissidents. Selling access wholesale in the C2C market. Novel malware\u2019s discovered targeting VMware hypervisors. The Witchetty espionage group uses an updated toolkit. Deepen Desai from Zscaler has a\xa0Technical Analysis of Industrial Spy Ransomware. Ann Johnson of Afternoon Cyber Tea speaks with Michal Braverman-Blumenstyk, CTO for Microsoft Security, about Israel's cyber innovation. And Russian troops phone call revelations.\n\nFor links to all of today's stories check out our CyberWire daily news briefing:\nhttps://thecyberwire.com/newsletters/daily-briefing/11/188\n\nSelected reading.\nHacker Groups take to Telegram, Signal and Darkweb to assist Protestors in Iran (Check Point Software)\nHackers Use Telegram and Signal to Assist Protestors in Iran (Infosecurity Magazine)\nHackers Aid Protests Against Iranian Government with Proxies, Leaks and Hacks (The Hacker News)\nHackers seek to help \u2014 and profit from \u2014 Iran protests (The Record by Recorded Future)\nRansomware and Wholesale Access Markets: A $10 investment can lead to millions in profit (Cybersixgill)\nSelling access wholesale in the C2C market. (CyberWire)\xa0\nBad VIB(E)s Part One: Investigating Novel Malware Persistence Within ESXi Hypervisors (Mandiant)\nBad VIB(E)s Part Two: Detection and Hardening within ESXi Hypervisors (Mandiant)\xa0\nMandiant has identified new malware that targets VMware ESXi, Linux vCenter servers, and Windows virtual machines. (CyberWire)\nSecuronix Threat Labs Security Advisory: Detecting STEEP#MAVERICK: New Covert Attack Campaign Targeting Military Contractors (Securonix)\nSteep#Maverick cyberespionage campaign. (CyberWire)\nWitchetty: Group Uses Updated Toolset in Attacks on Governments in Middle East (Symantec)\nWitchetty espionage group uses updated toolkit. (CyberWire)\n\u2018Putin Is a Fool\u2019: Intercepted Calls Reveal Russian Army in Disarray (New York Times)\xa0\nCyber Warfare Rife in Ukraine, But Impact Stays in Shadows (SecurityWeek)\nRussian hackers' lack of success against Ukraine shows that strong cyber defences work, says cybersecurity chief (ZDNET)\nFailure of Russia\u2019s cyber attacks on Ukraine is most important lesson for NCSC (ComputerWeekly)\nLearn more about your ad choices. Visit megaphone.fm/adchoices