Some perspective on the cybercriminal labor market. DocuSign is impersonated in a credential-harvesting campaign. Social engineering pursues financial advisors. Killnet is active against the US healthcare sector. Mr. Security Answer Person John Pescatore has thoughts on cryptocurrency. Ben Yelin and I debate the limits of section 230. And, hey, who\u2019s the real victim in cyberspace? A hint: probably not you, Mr. Putin.\n\nFor links to all of today's stories check out our CyberWire daily news briefing:\nhttps://thecyberwire.com/newsletters/daily-briefing/12/20\n\nSelected reading.\nPerspectives on the cybercriminal labor market. (CyberWire).\nIT specialists search and recruitment on the dark web (Securelist)\nCybercrime job ads on the dark web pay up to $20k per month (BleepingComputer)\xa0\nReport on hackers' salaries shows poor wages for developers (Register)\nCybercrime groups offer six-figure salaries, bonuses, paid time off to attract talent on dark web (CyberScoop)\nApplication security risks. (CyberWire)\nSurvey gives insight into new app security challenges (Cisco App Dynamics)\nDocuSign impersonated in credential phishing attack. (CyberWIre)\nBreaking the Impersonation: Armorblox Stops DocuSign Attack (Armorblox)\n"Pig butchering" and financial advisor impersonation scams. (CyberWire)\nNo Blocking, No Issue: The Curious Ecosystem of Financial Advisor Impersonation Scams (Domain Tools)\nUkraine at D+341: Killnet hits US hospitals.(CyberWire)\nHC3 TLP Clear Analyst Note: Pro-Russian Hacktivist Group Threat to HPH Sector (American Hospital Association)\nHHS, AHA Warn of Surge in Russian DDoS Attacks on Hospitals (Gov Info Security)\xa0\nRussian hackers allegedly take down Duke University Hospital\u2019s website (Carolina Journal)\nThe Evolution of DDoS: Return of the Hacktivist (FSISAC)\nRussia becomes target of West\u2019s coordinated aggression in cyberspace \u2014 MFA (TASS)\nLearn more about your ad choices. Visit megaphone.fm/adchoices