CyberWire Daily - The CyberWire: The 12 Days of Malware. [Special edition]

Episode Date: December 25, 2024

Merry Christmas and Happy Holidays from the CyberWire and our friends! Enjoy our rendition of the 12 Days of Malware created by Dave Bittner and performed by Dave and friends: Rachel Tobac, Jayson Street, Ron Eddings & Chris Cochran, Ray [Redacted], Dinah Davis, Camille Stewart, Rick Howard, Michelle Dennedy, Jack Rhysider, Johannes Ullrich, and Charity Wright. Ba dum bum bum. Sing along if you are game! Check out our video for the full effect! The 12 Days of Malware lyrics On the first day of Christmas, my malware gave to me: A keylogger logging my keys. On the second day of Christmas, my malware gave to me: 2 Trojan Apps... And a keylogger logging my keys. On the third day of Christmas, my malware gave to me: 3 Web shells... 2 Trojan Apps... And a keylogger logging my keys. On the fourth day of Christmas, my malware gave to me: 4 Crypto scams... 3 Web shells... 2 Trojan Apps... And a keylogger logging my keys. On the fifth day of Christmas, my malware gave to me: 5 Zero Days! 4 Crypto scams... 3 Web shells... 2 Trojan Apps... And a keylogger logging my keys. On the sixth day of Christmas, my malware gave to me: 6 Passwords spraying... 5 Zero Days! 4 Crypto scams... 3 Web shells... 2 Trojan Apps... And a keylogger logging my keys. On the seventh day of Christmas, my malware gave to me: 7 Scripts a scraping... 6 Passwords spraying... 5 Zero Days! 4 Crypto scams... 3 Web shells... 2 Trojan Apps... And a keylogger logging my keys. On the eighth day of Christmas, my malware gave to me: 8 Worms a wiping... 7 Scripts a scraping... 6 Passwords spraying... 5 Zero Days! 4 Crypto scams... 3 Web shells... 2 Trojan Apps... And a keylogger logging my keys. On the ninth day of Christmas, my malware gave to me: 9 Rootkits rooting... 8 Worms a wiping... 7 Scripts a scraping... 6 Passwords spraying... 5 Zero Days! 4 Crypto scams... 3 Web shells... 2 Trojan Apps... And a keylogger logging my keys. On the tenth day of Christmas, my malware gave to me: 10 Darknet markets... 9 Rootkits rooting... 8 Worms a wiping... 7 Scripts a scraping... 6 Passwords spraying... 5 Zero Days! (Bah-dum-dum-dum!) 4 Crypto scams... 3 Web shells... 2 Trojan Apps... And a keylogger logging my keys. On the eleventh day of Christmas, my malware gave to me: 11 Phishers phishing... 10 Darknet markets... 9 Rootkits rooting... 8 Worms a wiping... 7 Scripts a scraping... 6 Passwords spraying... 5 Zero Days! (Bah-dum-dum-dum!) 4 Crypto scams... 3 Web shells... 2 Trojan Apps... And a keylogger logging my keys. On the twelfth day of Christmas, my malware gave to me: 12 Hackers hacking... 11 Phishers phishing... 10 Darknet markets... 9 Rootkits rooting... 8 Worms a wiping... 7 Scripts a scraping... 6 Passwords spraying... 5 Zero Days! 4 Crypto scams... 3 Web shells... 2 Trojan Apps... And a keylogger logging my keys. Learn more about your ad choices. Visit megaphone.fm/adchoices

You're listening to the Cyber Wire Network, powered by N2K. Air Transat presents two friends traveling in Europe for the first time and feeling some pretty big emotions. This coffee is so good. How do they make it so rich and tasty? Those paintings we saw today weren't prints. They were the actual paintings. I have never seen tomatoes like this. How are they so red? With flight deals starting at just $589, it's time for you to see what Europe has to offer.

Don't worry. You can handle it. Visit airtransat.com for details. Conditions apply. AirTransat. Travel moves us. Hey, everybody. Dave here.

Have you ever wondered where your personal information is lurking online? Like many of you, I was concerned about my data being sold by data brokers. So I decided to try Delete.me. I have to say, Delete.me is a game changer. Within days of signing up, they started removing my personal information from hundreds of data brokers. I finally have peace of mind knowing my data privacy is protected. Delete.me's team does all the work for you with detailed reports so you know exactly what's been done. Take control of your data and keep your private life private by signing up for Delete.me.

Now at a special discount for our listeners. private by signing up for Delete Me. Now at a special discount for our listeners, today get 20% off your Delete Me plan when you go to joindeleteme.com slash n2k and use promo code n2k at checkout. The only way to get 20% off is to go to joindeleteme.com slash n2k and enter code n2k at checkout. That's joindeleteme.com slash n2k code n2k. And now, a message from our sponsor, Zscaler, the leader in cloud security. Enterprises have spent billions of dollars on firewalls and VPNs, Thank you. that are exploited by bad actors more easily than ever with AI tools. It's time to rethink your security. Zscaler Zero Trust Plus AI stops attackers by hiding your attack surface, making apps and IPs invisible, eliminating lateral movement,

connecting users only to specific apps, not the entire network, continuously verifying every request based on identity and context, Thank you. organization with Zscaler, Zero Trust, and AI. Learn more at zscaler.com slash security. On the first day of Christmas, my malware sent to me a keylogger logging my keys. On the second day of Christmas, my malware gave to me two Trojan apps and a keylogger logging my keys. On the third day of Christmas, my malware gave to me three web shells, two Trojan apps, and a keylogger logging my keys. On the fourth day of Christmas, my malware gave to me four crypto scams, three web shells, two Trojan apps, and a keylogger logging my keys.

Now, on the fifth day of Christmas, my malware gave to me five zero days. Four crypto scams. Three web shells. Two Trojan ants. And a keylogger logging my keys. On the sixth day of Christmas, my malware gave to me Six password spraying Five zero days

Four crypto scams Three web shells Two Trojan apps And a keylogger logging my keys On the seventh day of Christmas, my malware gave to me seven scripts of scraping, six passwords spraying, five secure days. Four crypto scams, three web shells, two Trojan apps,

and a keylogger logging my keys On the eighth day of Christmas my malware gave to me Eight worms unwiping, seven scripts unscraping, six passwords spraying Live serial days Four crypto scams Three web shells Two Trojan ants And a keylogger logging my keys On the ninth day of Christmas

My malware gave to me Nine new kits routing Eight worms a-wiping Seven scripts a-scraping Six passwords spraying Five zero days 6 password sprays 5 serial days 4 crypto scams 3 web shells

2 trojan apps and a key logger loading black keys on the 10th day of Christmas my malware gave to me 10 darknet markets my rootkits rooting Eight worms are wiping Seven scripts are scraping

Six passwords spraying Five zero days Ba-dum-bum-bum Four crypto scams Three web shell Two Trojan apps And a keylogger loading my keys. On the eleventh day

of Christmas, my malware gave to me eleven fishers fishing, ten darknet markets, five rickets rooting, eight worms are wiping, seven scripts are scraping, six passwords spraying, five zero

days. Four crypto scams. Three web shells. Two Trojan apps. And a tea logger logging my keys. On the twelfth day of Christmas, my malware gave to me twelve hackers hacking. Eleven fishers fishing.

Ten darknet markets 9 rootkits rooting 8 worms are wiping 7 scripts are scraping 6 passwords spraying 5 0 days

4 crypto scams 3 web shells 2 trojan hats and a keylogger logging my keys. Love it. Hey, everybody. Dave here. Hope you enjoyed our 12 Days of Malware.

There is a video version of that that includes the names of all of our special friends who helped us out with that production. You can find that on our website. It's also over on YouTube. Please do check it out. Happy holidays and Merry Christmas.