Risky Business #678 -- Iranians Gone Wild

PLUS: Sh-tposting dogs on the bird app make vatniks seethe and cope…
14 Sep 2022 » Risky Business

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

  • Albania suffers under another crippling Iranian attack
  • Iran’s APT42 using clever, multi-persona phishing
  • State Department cyber snitching program paying off
  • Former NSA director Gen. Keith Alexander sued over alleged IronNet pump and dump
  • Mudge fronts US Senate Judiciary Committee
  • Much, much more…

This week’s show is brought to you by Stairwell. Mike Wiacek, Stairwell’s founder and CEO is this week’s sponsor guest and he talks about why they’ve pushed their Inception platform beyond YARA hunting. You can see a demo of Inception on our YouTube product demo page.

Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.

Show notes

Risky Biz News: Albania-Iran cyber drama far from over
US sanctions Iran intelligence agency over Albania cyberattack - The Record by Recorded Future
Tom Uren on Cyber Embuggerance
Iranian military using spoofed personas to target nuclear security researchers - The Record by Recorded Future
Iranian hackers spy on journalists and government officials, researchers warn - The Record by Recorded Future
FBI, DOJ defend ‘offensive’ actions against Chinese, Russian operations - The Record by Recorded Future
State Department bounty program for cybercriminal tips has 'born fruit,' top FBI official says
More than $30 million seized from North Korean hackers involved in Axie crypto-theft - The Record by Recorded Future
$30 Million Seized: How the Cryptocurrency Community Is Making It Difficult for North Korean Hackers To Profit - Chainalysis
Twitter whistleblower testifies to Congress, calls for tech regulation reforms - The Record by Recorded Future
Twitter whistleblower testifies before Senate
Former NSA Head Keith Alexander Accused of Pump-and-Dump Scheme
Google: Conti repurposing tools for Ukraine attacks using Follina bug, Musk impersonation - The Record by Recorded Future
Pro-Ukraine hackers claim attack on Russian TV broadcasts - The Record by Recorded Future
Initial access broker or ransomware gang has 'exclusive' access to Mitel zero-day exploit: report - The Record by Recorded Future
Cyberattacks against U.S. hospitals mean higher mortality rates, study finds
Buenos Aires legislature announces ransomware attack - The Record by Recorded Future
Ransomware attack knocked a Kentucky city-operated ISP offline before holiday - The Record by Recorded Future
Ransomware attacks on retail increase, average retail payment grows to more than $200K - The Record by Recorded Future
Cisco: Log4j vulnerability used to attack energy companies in Canada, US and Japan - The Record by Recorded Future
Patreon security team layoffs cause backlash in creator community
This Clever Anti-Censorship Tool Lets Russians Read Blocked News | WIRED
Apple Kills Passwords in iOS 16 and macOS Ventura | WIRED
Catalin Cimpanu on Twitter: "They're still recruiting, btw" / Twitter
Cyberfella on Twitter: "@campuscodi Please convince Patrick to have a segment about NAFO named "Shitposting Dogs on the Bird App are making Vatniks Seethe and Cope" on the next riskybizz ep 🙏🙏🙏" / Twitter
ironnet chart - Google Search
Stairwell's Inception Platform - YouTube
Все Буде Україна (Everything Will Be Ukraine) - YouTube
Pink Floyd - Hey Hey Rise Up (feat. Andriy Khlyvnyuk of Boombox) - YouTube