Risky Business #601 -- Everyone's messing with TrickBot

Presented by

Patrick Gray
Patrick Gray

CEO and Publisher

Adam Boileau
Adam Boileau

Technology Editor

On this week’s show Patrick and Adam discuss the week’s security news, including:

  • Yep, it was Cyber Command
  • Also Microsoft, Symantec, Lumen and others
  • Norwegian parliament hack pinned on Russia
  • We finally talk about “ethics in OST”
  • More

Netflix senior security engineer Scott Behrens also joins the show this week. This week’s episode if brought to you by Signal Sciences – which is now a part of Fastly – and they suggested we talk to Scott for their sponsor slot this week. So, Scott joins the show to talk through how Netflix handles appsec.

Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.

Risky Business #601 -- Everyone's messing with TrickBot
0:00 / 0:00

Show notes

Report: U.S. Cyber Command Behind Trickbot Tricks — Krebs on Security

Persistently Engaging TrickBot: USCYBERCOM Takes on a Notorious Botnet - Lawfare

(1) Ciaran Martin on Twitter: "Fascinating account from ⁦@BobbyChesney⁩ on new adaptation of persistent engagement: the hounds released against #ransomware. https://t.co/Dk5Spcjkmy" / Twitter

Trickbot and the Context of Cyber Warfare – Stranded on Pylos

TrickBot botnet survives takedown attempt, but Microsoft sets new legal precedent | ZDNet

The Man Who Speaks Softly—and Commands a Big Cyber Army | WIRED

FBI/DHS: Government election systems face threat from active Zerologon exploits | Ars Technica

DHS warns that Emotet malware is one of the most prevalent threats today | Ars Technica

Norway says Russian hackers carried out breach at parliament

Russian-speaking hackers target Russian organizations with industrial spying tools

Chinese hackers suspected in cyber-espionage operation against Russia, India

'Mercenary' hacker group runs rampant in Middle East, cybersecurity research shows | Reuters

Lined up in the sights of Vietnamese hackers

Five Eyes governments, India, and Japan make new call for encryption backdoors | ZDNet

Cyber Command and Microsoft pile in on TrickBot - Risky Business

Top reason to apply October, 2020’s Microsoft patches: Ping of Death Redux – Sophos News

German tech giant Software AG down after ransomware attack | ZDNet

Amid an Embarrassment of Riches, Ransom Gangs Increasingly Outsource Their Work — Krebs on Security

Malware gangs love open source offensive hacking tools | ZDNet

Researchers map threat actors’ use of open source offensive security tools | The Daily Swig

Researchers Found 55 Flaws in Apple's Corporate Network | WIRED

Swiss Post releases bug bounty safe harbor wording under Creative Commons license | The Daily Swig