Risky Business #656 – We expected a cyberwar but got an infowar

On this week’s show Patrick Gray, Dmitri Alperovitch and Adam Boileau discuss the week’s security news, including:

We expected a cyberwar but got an information war
People with SDR kits are doing SIGINT in Ukraine
Conti has imploded and it’s hilarious
Much, much more

This week’s show is brought to you by Proofpoint. Sherrod DeGrippo, Proofpoint’s Vice President of Threat Research and Detection is this week’s sponsor guest. She joins us to talk about how there isn’t really any magic advice she can dispense to protect customers from Russian attacks.

There are some show notes below, but they’re not exhaustive.

Show notes




The propaganda war has eclipsed cyberwar in Ukraine | MIT Technology Review

Ukrainian Researcher Leaks Conti Ransomware Gang Data

Signal on Twitter: "We've had an uptick in usage in Eastern Europe & rumors are circulating that Signal is hacked & compromised. This is false. Signal is not hacked. We believe these rumors are part of a coordinated misinformation campaign meant to encourage people to use less secure alternatives." / Twitter

Cyber insurance policies may be put to the test by Russian attacks, credit ratings firm warns - The Record by Recorded Future

Phishing campaign targets European officials assisting in refugee operations - The Record by Recorded Future

https://twitter.com/sbreakintl/status/1498619303717142529?s=21

Apple halts sales of products to Russia, restricts access to Russian news apps

Belarusian hackers launch another attack, adding to chaotic hacktivist activity around Ukraine - CyberScoop

Russian State Media Hacked to Show Casualty Numbers for Russian Soldiers in Ukraine War

Would Banning Russia From Getting Software Updates Make It Easier to Hack?

Ukraine’s Volunteer ‘IT Army’ Is Hacking in Uncharted Territory | WIRED

vx-underground on Twitter: "Conti ransomware group previously put out a message siding with the Russian government. Today a Conti member has begun leaking data with the message "Fuck the Russian government, Glory to Ukraine!" You can download the leaked Conti data here: https://t.co/BDzHQU5mgw https://t.co/AL7BXnihza" / Twitter

Active Measures, LLC on Twitter: "That keyboard sound you hear is lawyers at US CYBERCOMMAND updating some opinions." / Twitter

Conti ransomware gang chats leaked by pro-Ukraine member - The Record by Recorded Future

Russia appears to deploy digital defenses after DDoS attacks - The Record by Recorded Future

Russia’s Sandworm Hackers Have Built a Botnet of Firewalls | WIRED

Auth0 co-founder and CEO Eugenio Pace walks us through the Auth0 platform - YouTube

Dmitri Alperovitch on Twitter: "In the last few weeks, I have become increasingly convinced that Kremlin has unfortunately made a decision to invade Ukraine later this winter. While it is still possible for Putin to deescalate, I believe the likelihood is now quite low. Allow me to explain why 🧵" / Twitter