Scott Jasper

Naval Postgraduate School, Senior Lecturer, PhD. Author of Russian Cyber Operations: Coding the Boundaries of Conflict - Paperback with New Preface @SpartanRace

[Scott Jasper @ScotJasper]

Please enjoy my article Chinese and Russian Legitimate Tool Attacks Mandate AI-Enabled Cyber Defenses at The Cyber Edge by Signal Magazine @NPS_Monterey @Georgetown_UP @AFCEA #CyberAttack #UkraineWar #China #AI
https://t.co/62VDDpakeQ

[David DiMolfetta @ddimolfetta]

Salt Typhoon scoop —>

-Hundreds of orgs notified of possible compromise
-Hackers exploited years-old flaws that had patches, but telcos never implemented them
-FCC CALEA ruling expected to pass before Trump takes office

https://t.co/A3gpJHyb2i

[780th Military Intelligence Brigade (Cyber) @780thC]

An APT group that Trend Micro tracks as Earth Koshchei (also known as APT29 and Midnight Blizzard), likely used a rogue remote desktop protocol (RDP) attack methodology against numerous targets. https://t.co/p9gVE34r21 @TrendMicro

[780th Military Intelligence Brigade (Cyber) @780thC]

Radiant links $50 million crypto heist to North Korean hackers | https://t.co/oSmgVIz7cG @BleepinComputer

[780th Military Intelligence Brigade (Cyber) @780thC]

A Russian state-sponsored hacker group, known as Gamaredon, has been targeting Ukrainian-speaking victims in an ongoing cyber-espionage campaign, researchers have found. https://t.co/8Tz3bog44I @TheRecord_Media

[FBI @FBI]

Threat actors affiliated with the Chinese government have compromised telecom provider networks to conduct a cyber espionage campaign. Network defenders should read new guidance from the #FBI and our partners to harden their systems against this activity: https://t.co/yzh7NedOAe

[Dark Reading @DarkReading]

Hundreds of private cybersecurity firms, technology services providers, and universities are helping China's state apparatus develop offensive cyber capabilities to support the country's strategic military, economic, and geopolitical goals. https://t.co/4VsLMZFmrj

[780th Military Intelligence Brigade (Cyber) @780thC]

CyberVolk | A Deep Dive into the Hacktivists, Tools and Ransomware Fueling Pro-Russian Cyber Attacks | https://t.co/rMW4AglegA @LabsSentinel

[780th Military Intelligence Brigade (Cyber) @780thC]

Sandworm, a group linked to Russian intelligence, has been hacking Ukrainian targets in recent years, but “we’re now seeing that they’re interested in the energy sector across Europe” | https://t.co/roOIBm1Jxl @POLITICOEurope

[Ellen Nakashima @nakashimae]

Sen. Mark Warner, chairman of the Senate Intelligence Committee, calls Salt Typhoon “worst telecom hack in our nation’s history”

The Chinese state-affiliated hackers moved from telco network to another. They listened in real-time to calls. 1/ https://t.co/OJqY7WqzNj

[Dark Reading @DarkReading]

Hamas Hackers Spy on Mideast Gov'ts, Disrupt Israel: https://t.co/Rh2E1mvJhw by Nate Nelson #DRGlobal

[FBI @FBI]

Joint Statement from #FBI and @CISAgov on the People's Republic of China Targeting of Commercial Telecommunications Infrastructure: https://t.co/M1dcXCTKI5

[780th Military Intelligence Brigade (Cyber) @780thC]

China's Volt Typhoon crew and its botnet are back, compromising old Cisco routers once again to break into critical infrastructure networks and kick off cyberattacks, according to security researchers. https://t.co/GfOcPrZTOc @TheRegister

[FBI @FBI]

Today, the Office of the Director of National Intelligence (@ODNIgov), the Federal Bureau of Investigation (FBI), and the Cybersecurity and Infrastructure Security Agency (@CISAgov) released the following statement: https://t.co/JNJDVCY0Oo

[Andrew Morris (afk) @Andrew___Morris]

INSANE writeup from @SophosXOps. I read it and re-read it a few times when it came out, just to wrap my mind around all of the incredible tradecraft from both attacker and defender.

Hats off to the team at @Sophos for documenting this so thoroughly.

https://t.co/vHJKUBKb48

[Tal Be'ery @TalBeerySec]

Defense strikes back!
@SophosXOps hacked back ("counter-offensive") their China-based 🇨🇳 #APT attackers by installing an implant on the hacked box.
Impose cost, attribution matters.

[Dark Reading @DarkReading]

Microsoft warns that Russia's "Midnight Blizzard" hacking team is using a digitally signed Remote Desktop Protocol (RDP) configuration file in its spear-phishing emails. Heads up: https://t.co/ICRKdqrkwI

[780th Military Intelligence Brigade (Cyber) @780thC]

Report to Congress on Chinese Hacks of U.S. Telecoms | https://t.co/KwJ1YBD50s @USNINews

[Unit 42 @Unit42_Intel]

We've witnessed a notable tactical evolution in DPRK-affiliated Jumpy Pisces' recent activity: teaming up with established ransomware operation Play. This marks the first documented joint effort of this North Korean state-funded group and a ransom network. https://t.co/gPTvWsFshA

[Microsoft Threat Intelligence @MsftSecIntel]

Microsoft Threat Intelligence has observed Russian threat actor Midnight Blizzard sending a series of highly targeted spear-phishing emails to individuals in government, academia, defense, non-governmental organizations, and other sectors. https://t.co/W6EZWOM6W1

[Dark Reading @DarkReading]

Russia's SVR hacking group used malicious domain names designed to seem like they were associated with Amazon Web Services (AWS) in an effort to steal Windows credentials. https://t.co/MvZTUSaeeF