The GRU's closely coordinating with cyber criminals. An unidentified threat actor deploys malicious NPM packets. Gootloader uses blogging and SEO poisoning to attract victims. Metador is a so-far unattributed threat actor. Johannes Ullrich from SANS on Resilient DNS Infrastructure. Maria Varmazis interviews Anthony Colangelo, host of spaceflight podcast Main Engine Cutoff, about the iPhone 14 \u201cEmergency SOS via Satellite\u201d feature. And having too much time on your hands while doing time is not a good thing.\n\nFor links to all of today's stories check out our CyberWire daily news briefing:\nhttps://thecyberwire.com/newsletters/daily-briefing/11/184\n\nSelected reading.\nGRU: Rise of the (Telegram) MinIOns (Mandiant)\nVoid Balaur | The Sprawling Infrastructure of a Careless Mercenary (SentinelOne)\nAn unidentified threat actor deploys malicious NPM packets (CyberWire)\nThreat analysis: Malicious npm package mimics Material Tailwind CSS tool (ReversingLabs)\nA Multimillion Dollar Global Online Credit Card Scam Uncovered (ReasonLabs)\nGootloader Poisoned Blogs Uncovered by Deepwatch\u2019s ATI Team (Deepwatch)\xa0\nThe Mystery of Metador | An Unattributed Threat Hiding in Telcos, ISPs, and Universities (SentinelOne)\xa0\nSC inmate sentenced for \u2018sextortion\u2019 scheme that targeted military (Stars and Stripes)\nLearn more about your ad choices. Visit megaphone.fm/adchoices