SentinelSneak is out in the wild. XLLs for malware delivery. CERT-UA warns of attacks against the DELTA situational awareness system. FSB cyber operations against Ukraine. Trends in the cyber phases of Russia's hybrid war. Mr. Security Answer Person John Pescatore offers his sage wisdom. Microsoft\u2019s Ann Johnson from Afternoon Cyber Tea speaks with Dr. Chenxi Wang from Rain Capital. And an unusually unpleasant sextortion campaign.\n\nFor links to all of today's stories check out our CyberWire daily news briefing:\nhttps://thecyberwire.com/newsletters/daily-briefing/11/242\n\nSelected reading.\nSentinelSneak is not a legitimate SDK. (CyberWire)\nSentinelSneak: Malicious PyPI module poses as security software development kit (ReversingLabs)\nMalicious Python Trojan Impersonates SentinelOne Security Client (Dark Reading)\nMalicious \u2018SentinelOne\u2019 PyPI package steals data from developers (BleepingComputer)\nCisco research on XLL Abuse. (CyberWire)\nThreat Spotlight: XLLing in Excel - threat actors using malicious add-ins (Cisco Talos Blog)\xa0\nUkraine at D+299: Cyber operations 300 days into the war. (CyberWire)\nCyber Dimensions of the Armed Conflict in Ukraine (CyberPeace Institute)\nUkraine's DELTA military system users targeted by info-stealing malware (BleepingComputer)\nUkraine's Delta Military Intel System Hit by Attacks (Infosecurity Magazine)\nRussia\u2019s Trident Ursa (aka Gamaredon APT) Cyber Conflict Operations Unwavering Since Invasion of Ukraine (Unit 42)\nFBI and Partners Issue National Public Safety Alert on Financial Sextortion Schemes | Federal Bureau of Investigation (Federal Bureau of Investigation)\nHSI, federal partners issue national public safety alert on sextortion schemes (US Immigration and Customs Enforcement)\nLearn more about your ad choices. Visit megaphone.fm/adchoices