Tim Starks, Senior Reporter at CyberScoop, discusses the implications of a proposed United Nations cybercrime treaty and the U.S.'s cautious stance on it. He highlights potential misuse by authoritarian regimes and the challenges of treaty ratification. Starks also delves into the alarming hacking activities of Chinese groups impacting U.S. infrastructure, emphasizing the urgent need for enhanced cybersecurity strategies. Additionally, he touches on the rising threats targeting gamers and the critical importance of software upgrades for data protection.
China's cyber campaign, exemplified by the Volt and Salt Typhoon groups, poses significant threats to U.S. national security and infrastructure.
The new United Nations cybercrime treaty raises concerns about potential authoritarian misuse while highlighting the need for international cooperation on cybersecurity.
Deep dives
China's Hacking Campaigns and National Security Risks
China's escalating cyber campaign has become a growing concern for national security, particularly highlighted by incidents involving the Volt Typhoon group, which was behind the 2022 cyber attack on Guam's power authority. This incident demonstrated China's capability to disrupt U.S. military operations in a strategically vital region, raising alarms over the potential use of such attacks in a Taiwan conflict. Another group, Salt Typhoon, has successfully infiltrated major U.S. telecom companies, indicating a pattern of targeted cyber espionage aimed at vital infrastructure. These events underscore the urgent need for the U.S. to enhance its cybersecurity defenses against these sophisticated threats posed by state-sponsored actors.
Rise of Info-Stealing Malware Targeting Gamers
A new info-stealer campaign has emerged, specifically targeting gamers on platforms like Discord, employing tactics that capitalize on user trust and urgency. Scammers pose as game developers seeking beta testers, enticing users to download malicious software disguised as installers. This malware silently extracts sensitive information, including Discord tokens, credentials, and cryptocurrency wallet details, creating a wider web of deception as compromised accounts facilitate further scams. To combat these threats, users are advised to utilize anti-malware tools, exercise caution with unsolicited messages, and verify requests through other communication channels.
Controversial New UN Cybercrime Treaty
The recent development of a new cybercrime treaty by the United Nations, largely initiated by Russia, has sparked significant debate regarding its potential implications for human rights and international cooperation. Critics express concern about the treaty's vague definitions that could empower authoritarian regimes to repress dissent under the guise of cybersecurity, particularly concerning penalties for crimes tied to free speech. While the U.S. initially favored an alternative treaty, its eventual participation indicates a strategy to influence the treaty's implementation, though skepticism remains about the path forward. Overall, this treaty could reshape the landscape of international cybersecurity laws, but its effective enforcement and reception among member states are yet to be determined.
New reports shed light on both Volt and Salt Typhoons. Tenable updates faulty Nessus Agents and resumes plugin updates. A new infostealer campaign targets gamers on Discord. A fake version of a popular browser extension has been discovered stealing login credentials and conducting phishing attacks. ESET warns Windows 10 users of a potential “security fiasco.” A vulnerability in Nuclei allows attackers to bypass template signature verification and inject malicious code. An Indiana dental practice pays a $350,000 settlement over an alleged ransomware coverup. Tim Starks, Senior Reporter from CyberScoop, joins us today to discuss a new United Nations cybercrime treaty and his outlook for 2025. Farewell to a visionary leader.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire Guest
Tim Starks, Senior Reporter from CyberScoop, joins us today to discuss a new United Nations cybercrime treaty and his outlook for 2025. Read Tim’s article on the UN cybercrime treaty here.
We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show.
Want to hear your company in the show?
You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.