Molerats update their tactics, but not their target list. Protestware in open-source products. NSA warns of China-backed attacks on US critical infrastructure. GRU’s Sandworm implicated in campaign against Danish electrical power providers. Cyberespionage campaign attributed to Russia’s SVR. Anonymous Sudan claims attacks on ChatGPT and Cloudflare. Australian ports recovering from cyberattack. Rhysida malware: a warning and a description. BlackCat uses malicious Google ads. SysAid exploitation by Cl0p user Lace Tempest. Phobos ransomware: an affiliate crimeware-as-a-service program. LockBit doxes Boeing as Boeing hangs tough on paying ransom. Ransomware attack against China’s largest bank. Read More
The CyberWire
