Fraud and Misconduct Uncovered

An historic data breach that wasn’t. Aflac says it stopped a ransomware attack. Cloudflare thwarts a record breaking DDoS attack. Mocha Manakin combines clever social engineering with custom-built malware. The Godfather Android trojan uses a sophisticated virtualization technique to hijack banking and crypto apps. A British expert on Russian information warfare is targeted in a sophisticated spear phishing campaign. A federal judge dismisses a lawsuit against CrowdStrike filed by airline passengers. Banana Squad disguises malicious code as legitimate open-source software. The U.S. Justice Department wants to seize over $225 million in cryptocurrency linked to romance and investment scams.  Ben Yelin explains the recent Oversight Committee request for Microsoft to hand over GitHub logs related to alleged DOGE misconduct. This one weird audio trick leaves AI scam calls speechless.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today, we are joined Ben Yelin, co host of Caveat podcast and Program Director for Public Policy & External Affairs at the University of Maryland Center for Health and Homeland Security, discussing the recent Oversight Committee request for Microsoft to hand over GitHub logs related to alleged misconduct by Elon Musk’s "Department of Government Efficiency" (DOGE). You can learn more here.

Selected Reading

No, the 16 billion credentials leak is not a new data breach (Bleeping Computer)

Aflac says it stopped ransomware attack launched by ‘sophisticated cybercrime group’ (The Record)

Record-Breaking 7.3 Tbps DDoS Attack Targets Hosting Provider (SecurityWeek)

New Mocha Manakin Malware Deploys NodeInitRAT via Clickfix Attack (Hackread)

Godfather Android Trojan Creates Sandbox on Infected Devices (SecurityWeek)

Russia Expert Falls Prey to Elite Hackers Disguised as US Officials (Infosecurity Magazine)

Judge Axes Flight Disruption Suit Tied to CrowdStrike Outage (GovInfo Security)

Banana Squad Hides Data-Stealing Malware in Fake GitHub Repositories (Hackread)

DOJ moves to seize $225 million in crypto stolen by scammers (The Record)

Boffins devise voice-altering tech to jam 'vishing' ploys (The Register)

Audience Survey

Complete our annual audience survey before August 31.

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices