BROADCASTS.com

Transparent Tribe expands its activity against India's education sector. A Lazarus sub-group is after defense sector targets. The FBI's Denver office warns of potential juicejacking. Legion: a Python-based credential harvester. The source of leaked US intelligence may be closer to identification. Johannes Ullrich from SANS explains upwork scams. Our guest is Charlie "Tuna" Moore of Vanderbilt University on the cyber lessons from Russia\u2019s war on Ukraine. Canada responds to claims of Russian cyberattacks.\n\nFor links to all of today's stories check out our CyberWire daily news briefing:\nhttps://thecyberwire.com/newsletters/daily-briefing/12/71\n\nSelected reading.\nTransparent Tribe (APT36) | Pakistan-Aligned Threat Actor Expands Interest in Indian Education Sector (SentinelOne)\nFollowing the Lazarus group by tracking DeathNote campaign (Securelist)\nDPRK threat actors target C3X and defense sector at large. (CyberWire)\nFBI office warns against using public phone charging stations at airports or malls, citing malware risk (CBS News)\nThe FBI warns of juicejacking and other risks of public tech. (CyberWire)\nLegion: an AWS Credential Harvester and SMTP Hijacker (Cado Security)\xa0\nThe Legion credential harvester. (CyberWire)\nLeaker of U.S. secret documents worked on military base, friend says (Washington Post)\nU.S. may change how it monitors the web after missing leaked documents for weeks (NBC News)\nCyberattacks on Canada\u2019s gas infrastructure left \u2018no physical damage,\u2019 Trudeau says (Global News)\nRussian attacks on Ukrainian infrastructure cause internet outages, cutting off a valuable wartime tool (CyberScoop)\nUS Warns Russia Getting Creative in Cyberspace (VOA)\nAPT Winter Vivern Resurfaces (Avertium)\nLearn more about your ad choices. Visit megaphone.fm/adchoices