Risky Business #602 -- US DoJ hooks Sandworm

Presented by

Patrick Gray
Patrick Gray

CEO and Publisher

Adam Boileau
Adam Boileau

Technology Editor

On this week’s show Patrick and Adam discuss the week’s security news, including:

  • US DoJ unseals indictments against Sandworm operators
  • Twitter backtracks on “hacked materials” policy
  • No consensus on Trickbot c2 status
  • NSA publishes “most exploited” listicle that’s actually interesting
  • Much, much more

Cmd Security is this week’s sponsor. Its CEO Jake King and CTO Mike Sample join the show this week to talk though a new remote access tech release from Hashicorp called Boundary and what it might mean for Linux system observability in your environment.

Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.

Risky Business #602 -- US DoJ hooks Sandworm
0:00 / 0:00

Show notes

US Indicts Sandworm, Russia's Most Destructive Cyberwar Unit | WIRED

UK says Russia was preparing cyber-attacks against the Tokyo Olympics | ZDNet

Sandworm operators indicted - Risky Business

Microsoft says it took down 94% of TrickBot's command and control servers | ZDNet

NSA publishes list of top vulnerabilities currently targeted by Chinese hackers | ZDNet

800,000 SonicWall VPNs vulnerable to new remote code execution bug | ZDNet

VMSA-2020-0023

New York Post Published Hunter Biden Report Amid Newsroom Doubts - The New York Times

Twitter Says It Blocked NY Post Hunter Biden Article Because It Contains Hacked Data

The Media Just Passed a Test It Failed Four Years Ago | WIRED

Brevard voters threatened in emails purportedly from 'Proud Boys'

Google offers details on Chinese hacking group that targeted Biden campaign

Industry alert pins state, local government hacking on suspected Russian group

New York regulator faults Twitter for lax security measures prior to big account breach

German authorities raid FinFisher offices | ZDNet

Shannon Vavra on Twitter: "Details via @hsu_spencer & @kfahim https://t.co/QTRooHnw0I" / Twitter

Encrochat Hack That Brought Down Hundreds of Criminals Faces Legal Challenges

Hackney Council unable to pay housing benefit after cyber attack | Science & Tech News | Sky News

London's Hackney Borough Council hit by hack attack - BBC News

Hackney Council services to be disrupted ‘for some time’

Meet FIN11, a cybercrime outfit going after pharma companies while leaning on extortion

QAnon/8Chan Sites Briefly Knocked Offline — Krebs on Security

Alexander Vinnik heads to trial in France on ransomware, money laundering charges

Alleged KickassTorrents founder Artem Vaulin jumped bail in Poland

Thousands of infected IoT devices used in for-profit anonymity service | Ars Technica

Microsoft adds option to disable JScript in Internet Explorer | ZDNet

Zoom to roll out end-to-end encrypted (E2EE) calls | ZDNet

QRadar: Popular IBM security tool open to remote code execution attacks | The Daily Swig

Google releases Chrome security update to patch actively exploited zero-day | ZDNet

Security testing firm NSS Labs ceases operations, citing coronavirus | TechCrunch

Ryuk in 5 Hours – The DFIR Report