Dark Reading Daily -- August 31, 2023

APT Attacks From 'Earth Estries' Hit Gov't, Tech With Custom Malware

A sophisticated threat actor managed to fly under the radar for three years, despite flexing serious muscle.

Chinese Group Spreads Android Spyware via Trojan Signal, Telegram Apps

Thousands of devices have become infected with "BadBazaar," malware previously used to spy on Uyghur and Turkic ethnic minorities in China.

Performance-Enhanced Android MMRat Scurries Onto Devices via Fake App Stores

The stealthy Trojan targets users in Southeast Asia, allowing attackers to remotely control devices to commit bank fraud.

New York Times Spoofed to Hide Russian Disinformation Campaign

"Operation Doppelganger" has convincingly masqueraded as multiple news sites with elaborate fake stories containing real bylines of journalists, blasting them out on social media platforms.

In Airbnb, Cybercriminals Find a Comfortable Home for Fraud

The popular travel rental site is an ideal destination for cybercrooks bent on taking over accounts and bookings.

Should Senior IT Professionals Be Accountable for Professional Decisions?

Everyone makes mistakes — but what if your mistakes risk the security of millions of people?

4 Strategies to Safeguard the Finance Industry Against Deepfake Onslaught

Through strategic measures and a united front, the finance industry can overcome the looming threat of deepfakes.

(Sponsored Article) 3 Mobile or Client-Side Security Myths Debunked

The industry's understanding of mobile or client-side security is too limited, leaving many mobile apps vulnerable. Don't let these three myths lead you astray.

Rackspace Faces Massive Cleanup Costs After Ransomware Attack

Eight months after the cyberattack, the cloud hosting services company's remediation costs top $10 million as it tries to repair the damage caused by the Play ransomware gang.

Meta Cripples China's Signature 'Spamouflage' Influence Op

The social media giant is taking on Dragonbridge, the "largest known cross-platform covert influence operation in the world."

5 Ways to Prepare for Google's 90-Day TLS Certificate Expiration

With bad guys frequently upping their game, security can't leave these protections to a once-a-year upgrade.

Here's What Your Breach Response Plan Might Be Missing

The best way to withstand a data breach is to be prepared. Here are four elements that are easily overlooked in breach response plans.

Sprawling Qakbot Malware Takedown Spans 700,000 Infected Machines

"Operation Duck Hunt" is not likely to eliminate the initial access botnet forever, but the proactive removal of the malware from victim machines by law enforcement is one of the largest and most significant efforts of its kind.

LATEST FROM THE EDGE

MOVEit Breach Shows Us SQL Injections Are Still Our Achilles' Heel

SQL injection and its ilk will stop being "a thing" only after organizations focus on security by construction.

LATEST FROM DR TECHNOLOGY

NIST Publishes First Draft Standards for Post-Quantum Cryptography

Publication of the first draft PQC standards opens a 90-day period for public comment and paves the way for interoperability testing.

LATEST FROM DR GLOBAL

Somalia Orders ISPs to Block Telegram and TikTok

Officials said the apps were used to "spread horrific content and misinformation to the public."

What Ransomware Groups Look for in Enterprise Victims