Risky Business #687 -- Shady deeds in sunny places: Ransomware smashes Vanuatu, Guadeloupe

PLUS: What infosec can learn from Soviet era airliner manufacturing...
30 Nov 2022 » Risky Business

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

  • UK, USA ban Chinese security cameras
  • What is the Boa webserver and why is it everywhere?
  • Vanuatu, Guadeloupe smashed by ransomware
  • REvil back with more dumps despite ASD attention
  • Much, much more

This week’s sponsor guest is Jake King from Elastic Security, who joins us to talk through the company’s most recent threat report. There’s a link to the report in our show notes.

Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.

Show notes

British government bans Chinese surveillance cameras from sensitive locations - The Record by Recorded Future
US government bans Huawei, ZTE and Hikvision tech over ‘unacceptable’ spying fears | TechCrunch
What if Russian commercial aviation cuts too many safety corners? — Meduza
Microsoft attributes alleged Chinese attack on Indian power grid to ‘Boa’ IoT vulnerability - The Record by Recorded Future
U.S. Govt. Apps Bundled Russian Code With Ties to Mobile Malware Developer – Krebs on Security
Guadeloupe kickstarts continuity plan after wide-ranging cyberattack - The Record by Recorded Future
Vanuatu hospital staff using pen and paper after cyber attack that crippled public sector - ABC News
Extortion site used in Medibank attack goes offline after Australian gov pledges ‘offensive’ actions - The Record by Recorded Future
ThreatMon Ransomware Monitoring on Twitter:
Risky Biz News: Australia passes new privacy bill with huge data breach fines
Sandworm hacking group linked to new ransomware deployed in Ukraine - The Record by Recorded Future
UK Parliament launches inquiry into national security strategy around ransomware - The Record by Recorded Future
Canadian food giant refuses to pay ransom after gang threatens data leak - The Record by Recorded Future
Almost 1,000 suspects arrested in Interpol operation which seized over $129 million - The Record by Recorded Future
Risky Biz News: Authorities seize iSpoof in major blow to fraudsters and cybercrime groups
Espionage group using USB devices to hack targets in Southeast Asia - The Record by Recorded Future
WikiLeaks' Website Is Slowly Falling Apart
European Parliament declares Russia a terrorism sponsor, then its site goes down | Ars Technica
Hackers are spreading malware via trending TikTok challenge: report - The Record by Recorded Future
Samantha Borrego iS iNfeCtEd noT pArAnOID on Twitter:
elastic-global-threat-report-vol-1-2022.pdf