Digital Shadows

Bem-vindo ao Shadow Talk em Português! Neste episódio, Ivan, Matheus, e Daniel falam sobre:- A história do grupo Lapsus$ e como eles são diferentes- Conexões do Lapsus$ no Brasil- Reações de outros hackers sobre este grupo- Recomendações de como se proteger do Lapsus$***Recursos deste podcast***Meet Lapsus$: An Unusual Group In The Cyber Extortion Businesshttps://www.digitalshadows.com/blog-and-research/meet-lapsus-an-unusual-group-in-the-cyber-extortion-business/Weekly Intelligence Summary 25th Marhttps://resources.digitalshadows.com/digitalshadows/weekly-intelligence-summary-25th-marAssine nosso e-mail de inteligência de ameaças:https://info.digitalshadows.com/SubscribetoEmail-Podcast_Reg.html

ShadowTalk host Stefano alongside Kim, Xue, and Rick bring you the latest in threat intelligence. This week they cover a recap of a highly dynamic quarter including:* Log4j complex mitigation and remediation* REvil arrests* Cybercrime and Russia-Ukraine War* Extortion and the emergence of Lapsus$***Resources from this week’s podcast***Log4j: What’s Happened Sincehttps://www.digitalshadows.com/blog-and-research/log4j-whats-happened-since/The Log4j Zero-Day: What We Know So Farhttps://www.digitalshadows.com/blog-and-research/the-log4j-zero-day-what-we-know-so-far/Meet Lapsus$: An Unusual Group In The Cyber Extortion Businesshttps://www.digitalshadows.com/blog-and-research/meet-lapsus-an-unusual-group-in-the-cyber-extortion-business/How Cybercriminals Are Using Messaging Platformshttps://www.digitalshadows.com/blog-and-research/how-cybercriminals-are-using-messaging-platforms/Ransomware Q4 Overviewhttps://www.digitalshadows.com/blog-and-research/ransomware-q4-overview/Subscribe to our threat intelligence email:

Bienvenido a ShadowTalk en Español! En este episodio, Stefano y Dani van a discutir:* Lapsus$: Un grupo inusual en el negocio de la extorsión cibernética* Cómo Lapsus$ conducen sus ataques* Ataques de alto perfil y la brecha de Okta*** Si hoy has escuchado algo que te resulte curioso, no olvides consultar el contenido disponible en la sección de archivos adjuntos más abajo ***Los blogs de Digital Shadows en Lapsus$:Meet Lapsus$: An Unusual Group In The Cyber Extortion Businesshttps://www.digitalshadows.com/blog-and-research/meet-lapsus-an-unusual-group-in-the-cyber-extortion-business/The Okta Breach: What We Know So Farhttps://www.digitalshadows.com/blog-and-research/the-okta-breach-what-we-know-so-far/Come siempre, si teneis algún comentario sobre este episodio o si queréis saber mas de algún tema, escribenos a shadowtalk@digitalshadows.com y estaremos muy felices para tomar sus preguntas!

ShadowTalk host Chris alongside Kim, Ivan, and Rick bring you the latest in threat intelligence. This week they cover:* Lapsus$ threat group targets several large companies* Russia/Ukraine war shows no sign of slowing down* TransUnion unveils enhanced data breach***Resources from this week’s podcast***Vulnerability Intelligence Round-Up: Russia-Ukraine Warhttps://www.digitalshadows.com/blog-and-research/vulnerability-intelligence-round-up-russia-ukraine-war/The Okta Breach: What We Know So Farhttps://www.digitalshadows.com/blog-and-research/the-okta-breach-what-we-know-so-far/Russia’s Second Front: The War On Informationhttps://www.digitalshadows.com/blog-and-research/russias-second-front-the-war-on-information/Okta hack puts thousands of businesses on high alerthttps://www.theverge.com/2022/3/22/22990637/okta-breach-single-sign-on-lapsus-hacker-group?utm_campaign=theverge&utm_content=chorus&utm_medium=social&utm_source=twitterStatement by President Biden on our Nation’s Cybersecurityhttps://www.w

ShadowTalk host Chris alongside Austin, Stefano, and Rick bring you the latest on the war between Russia and Ukraine. This episode they cover:* Putin and the Russian military forces * The cybersecurity realm in the midst of war* Continuation and timeline of the ongoing conflict ***Resources from this special podcast***Statement by President Biden on Our Nation's Cybersecurityhttps://www.whitehouse.gov/briefing-room/statements-releases/2022/03/21/statement-by-president-biden-on-our-nations-cybersecurity/News and Updates Related to the Russian Invasion of Ukrainehttps://resources.digitalshadows.com/russian-news-and-updatesDonate to the Ukraine crisis via Red Crosshttps://donate.redcross.org.uk/appeal/ukraine-crisis-appealDigital Forensic Research Labmedium.com/dfrlab

ShadowTalk host Stefano alongside Kim and Dani bring you the latest in threat intelligence. This week they cover:* New Malware against Ukrainian targets: CaddyWiper* Crypto ATM and cybercriminals' reactions* Russia to start using homegrown TLS certificates***Resources from this week’s podcast***Meet Lapsus$: An Unusual Group In The Cyber Extortion Businesshttps://www.digitalshadows.com/blog-and-research/meet-lapsus-an-unusual-group-in-the-cyber-extortion-business/The Russia-Ukraine War And The Revival Of Hacktivismhttps://www.digitalshadows.com/blog-and-research/the-russia-ukraine-war-and-the-revival-of-hacktivism/Biden’s Executive Order On Crypto: What You Need To Knowhttps://www.digitalshadows.com/blog-and-research/bidens-executive-order-on-crypto-what-you-need-to-know/Subscribe to our threat intelligence email: https://info.digitalshadows.com/SubscribetoEmail-Podcast_Reg.htmlAlso, don’t forget to reach out to - shadowtalk@digitalshadows.com - if you have any questions, comments, or suggestions for the

ShadowTalk host Chris alongside Ivan and Austin bring you the latest in threat intelligence. This week they cover:* New Linux Vulnerability "Dirty Pipe"* Ransomware Landscape in 2022 So Far* Coinbase Blocks More than 25,000 Addresses Linked to Russia***Resources from this week’s podcast***Exploring SIM Swapping Services On Cybercriminal Forumshttps://www.digitalshadows.com/blog-and-research/exploring-sim-swapping-services-on-cybercriminal-forums/Can Cryptocurrency Be Used To Bypass The Impact Of Sanctions Being Applied Against Russia?https://www.digitalshadows.com/blog-and-research/can-cryptocurrency-be-used-to-bypass-the-impact-of-sanctions-being-applied-against-russia/New Linux bug gives root on all major distros, exploit releasedhttps://www.bleepingcomputer.com/news/security/new-linux-bug-gives-root-on-all-major-distros-exploit-released/FBI: Ragnar Locker ransomware breached 52 US critical infrastructure orgshttps://www.itpro.co.uk/security/ransomware/365375/fbi-ragnar-locker-ransomware-us-critic

ShadowTalk host Chris alongside Stefano and Rory bring you the latest on the escalating tension between Russia and Ukraine. This episode they cover:* IDNS rejects Ukraine's request to block Russian Internet content* Anonymous claimed to have hacked Russian channels to broadcast footage from Ukraine***Resources from this special podcast***News and Updates Related to the Russian Invasion of Ukrainehttps://resources.digitalshadows.com/russian-news-and-updatesDonate to the Ukraine crisis via Red Crosshttps://donate.redcross.org.uk/appeal/ukraine-crisis-appealDigital Forensic Research Labmedium.com/dfrlab

Bienvenido a ShadowTalk en Español! En este episodio, Stefano y Dani van a discutir:* Rusia y Ucrania crisis* Las reacciones de los cibercriminales a estos eventos* La Sociedad para las Comunicaciones Interbancarias y Financieras Mundiales (SWIFT)* Consejos de mitigación y reducción del riesgoCome siempre, si teneis algún comentario sobre este episodio o si queréis saber mas de algún tema, escribenos a shadowtalk@digitalshadows.com y estaremos muy felices para tomar sus preguntas!

ShadowTalk host Stefano alongside Kim and Xue bring you the latest in threat intelligence. This week they cover:* Conti Leaks* Reactions from Cybercriminals* Priority Intelligence Requirements***Resources from this week’s podcast***Russian Cyber Threats: Practical Advice For Security Leadershttps://www.digitalshadows.com/blog-and-research/russian-cyber-threats-practical-advice-for-security-leaders/Cybercriminals React To Ukraine-Russia Conflicthttps://www.digitalshadows.com/blog-and-research/cybercriminals-react-to-ukraine-russia-conflict/Intelligence Requirements: Planning Your Cyber Response To The Russia-Ukraine Warhttps://www.digitalshadows.com/blog-and-research/planning-your-cyber-response-to-the-russia-ukraine-war/ Conti Ransomware Group Diaries, Part I: Evasionhttps://krebsonsecurity.com/2022/03/conti-ransomware-group-diaries-part-i-evasion/Subscribe to our threat intelligence email: https://info.digitalshadows.com/SubscribetoEmail-Podcast_Reg.html Also, don’t forget to reach out to - shadowtalk@digita

ShadowTalk host Chris alongside Stefano, Rory, and Rick bring you the latest on the escalating tension between Russia and Ukraine. This episode they cover:* Recent cyber developments* Malware targeting Ukrainian organizations* New sanctions against Russia***Resources from this special podcast***Donate to the Ukraine crisis via Red Crosshttps://donate.redcross.org.uk/appeal/ukraine-crisis-appealDigital Forensic Research Labmedium.com/dfrlabPhoton BriefingSHAPING YOUR RESPONSE TO THE RUSSIA - UKRAINE WAR SESSION DETAILS: 03 Mar 2022Session 1: 12pm GMT | Session 2: 8:30am PThttps://info.digitalshadows.com/PhotonIntelBriefing-RussiaUkraine.html

ShadowTalk host Chris alongside Stefano, Rory, and Rick bring you the latest on the escalating tension between Russia and Ukraine. This episode they cover:* Continuing attacks between Russia and Ukraine* New sanctions against Russian banks* Cybercriminal developments * Nuclear forces on high alert/peace talks***Resources from this special podcast***Donate to the Ukraine crisis via Red Crosshttps://donate.redcross.org.uk/appeal/ukraine-crisis-appealDigital Forensic Research Labhttps://medium.com/dfrlabWar via TikTok: Russia's new tool for propaganda machinehttps://apnews.com/article/russia-ukraine-technology-europe-media-nationalism-2186dbc533560cb666f59655ecf1ee8e

ShadowTalk host Chris alongside Ivan, Austin, and Rick bring you the latest in threat intelligence. This week they cover:* Russian Offensive Cyber-Team* Conti-Trickbot* OpenSea NFT Breach***Resources from this week’s podcast***Russia Invades Ukraine: What Happens Next?https://www.digitalshadows.com/blog-and-research/russia-invades-ukraine-what-happens-next/Recruitment Fraud In 2022https://www.digitalshadows.com/blog-and-research/recruitment-fraud-in-2022/Of Death And Taxes: File Early To Beat The Scammershttps://www.digitalshadows.com/blog-and-research/of-death-and-taxes-file-early-to-beat-the-scammers/Russia unleashed data-wiper malware on Ukraine, say cyber expertshttps://www.theguardian.com/world/2022/feb/24/russia-unleashed-data-wiper-virus-on-ukraine-say-cyber-expertsConti ransomware gang takes over TrickBot malware operationhttps://www.bleepingcomputer.com/news/security/conti-ransomware-gang-takes-over-trickbot-malware-operation/OpenSea users lose $2 million worth of NFTs in phishing attackhttps://www.b

ShadowTalk host Chris alongside Stefano, Rory, and Austin bring you the latest on the escalating tension between Russia and Ukraine. This episode they cover:* The current situation between Russia and Ukraine* Reasons for Russia’s invasions* International reactions to the escalation* Future projections and likely cybersecurity outcomes

ShadowTalk host Stefano alongside Saul, Rory, and Dylan bring you the latest in threat intelligence. This week they cover:* US DoJ Indictment Against Weird-Acting BTC Laundering Couple* Grey Hat and ETH's Phat Bug Bounty* Crypto Superbowl Ads***Resources from this week’s podcast***Automate Alert Investigation And Response With XSOAR And SearchLighthttps://www.digitalshadows.com/blog-and-research/automate-alert-investigation-and-response-with-xsoar-and-searchlight/Initial Access Brokers In 2021: An Ever Expanding Threathttps://www.digitalshadows.com/blog-and-research/initial-access-brokers-in-2021-an-ever-expanding-threat/“No Cards = No Work = No Money”: Russian Law Enforcement’s Assault On Carding Platformshttps://www.digitalshadows.com/blog-and-research/russian-law-enforcements-assault-on-carding-platforms/Two Arrested for Alleged Conspiracy to Launder $4.5 Billion in Stolen Cryptocurrencyhttps://www.justice.gov/opa/pr/two-arrested-alleged-conspiracy-launder-45-billion-stolen-cryptocurrencyDeFi Takes on

ShadowTalk host Chris alongside Ivan and Austin bring you the latest in threat intelligence. This week they cover:* Microsoft Announces Plans to Enable Macros in Office Applications* Russia Arrests Six People Linking to Hacking Group* Things To Be Aware of This Valentine's Day ***Resources from this week’s podcast***Valentine's Day: Share Your Love, Not Your Credentialshttps://www.digitalshadows.com/blog-and-research/valentines-day-share-your-love-not-your-credentials/Growing Tension Between Russia And Ukraine: Should You Be Concerned?https://www.digitalshadows.com/blog-and-research/growing-tension-between-russia-and-ukraine/CVEs You Might Have Missed While Log4j Stole The Headlineshttps://www.digitalshadows.com/blog-and-research/cves-you-might-have-missed-whilst-log4j-stole-the-headlines/Microsoft plans to kill malware delivery via Office macroshttps://www.bleepingcomputer.com/news/microsoft/microsoft-plans-to-kill-malware-delivery-via-office-macros/Russia arrests third hacking group, seizes cardin

ShadowTalk host Stefano alongside Saul and Rory bring you the latest in threat intelligence. This week they cover:*Cyber Operations as part of Hybrid Warfare in the Russia-Ukraine context***Resources from this week’s podcast***Beijing 2022: Why You Should Or Shouldn’t Care About The Winter Olympicshttps://www.digitalshadows.com/blog-and-research/beijing-2022-why-you-should-or-shouldnt-care-about-the-winter-olympics/What We’re Reading This Month – January 2022https://www.digitalshadows.com/blog-and-research/what-were-reading-this-month-january-2022/Vulnerability Intelligence: Introducing SearchLight’s Newest Capabilityhttps://www.digitalshadows.com/blog-and-research/vulnerability-intelligence-introducing-searchlights-newest-capability/Destructive malware targeting Ukrainian organizationshttps://www.microsoft.com/security/blog/2022/01/15/destructive-malware-targeting-ukrainian-organizations/Putin Says the U.S. Wants to Push Russia into Warhttps://www.nytimes.com/live/2022/02/01/world/russia-ukraine-news#putin-a

ShadowTalk host Chris alongside Austin and Ivan bring you the latest in threat intelligence. This week they cover:* Maliciously crafted Quick Response (QR) Codes* Ransomware Insider Attacks* Growing Russia/Ukraine Conflict***Resources from this week’s podcast***Life In Prison: The Cybercriminal Perspectivehttps://www.digitalshadows.com/blog-and-research/life-in-prison-the-cybercriminal-perspective/Vulnerability Intelligence: A Best Practice Guidehttps://www.digitalshadows.com/blog-and-research/vulnerability-intelligence-a-best-practice-guide/FBI warns of malicious QR codes used to steal your moneyhttps://www.bleepingcomputer.com/news/security/fbi-warns-of-malicious-qr-codes-used-to-steal-your-money/Ransomware gangs increase efforts to enlist insiders for attackshttps://www.bleepingcomputer.com/news/security/ransomware-gangs-increase-efforts-to-enlist-insiders-for-attacks/Belarusian hacktivist group attacks Belarusian Railways as military frictions mounthttps://www.cyberscoop.com/cyber-partisans-belarus-russia

ShadowTalk host Stefano alongside Kimberley, Dani, Rory, and Xueyin bring you the latest in threat intelligence. This week they cover:* Defacement attack against Ukrainian government websites* REvil arrests* Microsoft Wiper***Resources from this week’s podcast***Navigating The Threat Intelligence Market In 2022https://www.digitalshadows.com/blog-and-research/navigating-the-threat-intelligence-market-in-2022/Ransomware Q4 Overviewhttps://www.digitalshadows.com/blog-and-research/ransomware-q4-overview/More than 70 Ukrainian government websites have been defaced in cyberattackshttps://www.npr.org/2022/01/19/1074172805/more-than-70-ukrainian-government-websites-have-been-defaced-in-cyber-attacks#:~:text=About%2070%20Ukrainian%20government%20websites,system%20for%20all%20those%20websites.Russia arrests 14 alleged members of REvil ransomware gang, including hacker U.S. says conducted Colonial Pipeline attackhttps://www.washingtonpost.com/world/2022/01/14/russia-hacker-revil/Destructive malware targeting Ukrainian o

ShadowTalk host Chris alongside Ivan and Austin bring you the latest in threat intelligence. This week they cover: * A Critical H2 Database Vulnerability* DDoS Extortion* Alternate ransomware techniques***Resources from this week’s podcast***Cyber Threats to the Education Systemhttps://www.digitalshadows.com/blog-and-research/cyber-threats-to-education/How Do Ransomware Groups Launder Paymentshttps://www.digitalshadows.com/blog-and-research/how-do-ransomware-groups-launder-payments/JFrog researchers find JNDI vulnerability in H2 database consoles similar to Log4Shellhttps://www.zdnet.com/article/jfrog-researchers-find-jndi-vulnerability-in-h2-database-consoles-similar-to-log4shell/ Extortion DDoS attacks grow stronger and more commonhttps://www.bleepingcomputer.com/news/security/extortion-ddos-attacks-grow-stronger-and-more-commonFBI: Hackers use BadUSB to target defense firms with ransomwarehttps://www.bleepingcomputer.com/news/security/fbi-hackers-use-badusb-to-target-defense-firms-with-ransomware/Subscribe