Episode #128: Data Stealing Libraries Found in Rust Registry; Lazarus Group NK RATs; Spamouflage; Adversaries say, "Show me the Money!"; This Day in Tech History
ЁЯОЩя╕П Free, ungated access to all 200+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates. тЩ╗я╕П You’re welcome to ЁЭЧ┐ЁЭЧ▓ЁЭЧ╜ЁЭЧ╝ЁЭШАЁЭШБ if your followers will find this of value.Data Stealing Libraries Found in Rust RegistryЁЯЗжЁЯЗ║ Edwin Kwan, Sydney, Australia тЖЧEarly this month, malicious libraries were discovered in the RUST programming language 's crate registry. It is suspected that the libraries were discovered in the early stages of a campaign. It is unclear what the goal of the attackers were. Lazarus Group NK RATsЁЯЗ║ЁЯЗ╕ Katy Craig, San Diego, California тЖЧLet's talk CollectionRAT. This one is the new kid on the block, but don't underestimate it. It gathers data, reads and writes files, and even has its own tricks to avoid detection. This ain't no one trick pony. SpamouflageЁЯЗ║ЁЯЗ╕ Hillary Coover, Washington, DC тЖЧтАКMeta, the parent company of Facebook, has successfully dismantled a massive Chinese disinformation campaign known as Spamouflage. It was the largest cross-platform covert influence operation they've ever encountered. Adversaries say, "Show me the Money!"ЁЯЗ║ЁЯЗ╕ Mark Miller, New York CityтЖЧOne of the iconic scenes in Jerry McGuire is Cuba Gooding Jr. forcing Tom Cruise to scream, "Show me the money. Show me the money!" I was reminded of the scene as I was reading Hazel Burton's update on how Cisco Talos found clues of post authentication adversaries who left tracks that said, "show" me. Yeah, literally, "show" me. This Day, August 30, in Tech HistoryЁЯЗ║ЁЯЗ╕ Marcel Brown, St. Louis, Missouri тЖЧAugust 30th, 1963. A direct line of communication between the leaders of the US and the Soviet Union dubbed the Hotline, begins operation today. It was most famously represented as a red phone. From Sourced Network Production in New York city, it's 5 0 5. I'm Pokie Huang. Today's Wednesday, August 30th, 2023. Here's the full story behind today's cybersecurity and open source headlines.
