CyberWire Daily

Iran behind attacks on PLCs.

Dec 4, 2023

Lynn Dohm, Executive director of WiCyS, discusses the power of diverse perspectives in cybersecurity. Topics also include Iran's attacks on PLCs, cyber espionage by XDSpy, mobile banking fraud, repository hijacking, and creating inclusive environments in cybersecurity.

19:27

Creator website

Episode guests

Lynn Dohm

AI Summary

AI Chapters

Episode notes

Podcast summary created with Snipd AI

Quick takeaways

Iran's Islamic Revolutionary Guard Corps is responsible for cyber threats on programmable logic controllers (PLCs) and poses a serious risk to critical national infrastructure.

Agent Raccoon, a backdoor deployed by a nation-state threat actor, targets organizations across multiple regions and uses covert communication through DNS.

Deep dives

Joint Cybersecurity Advisory on Iranian Attacks on PLCs

SISA, along with several US agencies, has issued a joint advisory highlighting the significant cyber threats posed by Iran's Islamic Revolutionary Guard Corps. The advisory focuses on the exploitation of programmable logic controllers (PLCs) across various sectors, emphasizing the seriousness of the threat to critical national infrastructure. It also criticizes the manufacturer for poor security practices, such as default passwords on devices, contributing to the vulnerability of these systems.

Introduction

3min

Manufacturer security practices, cyber-avengers, new malware variant, and backdoor discovery

3min

Cyber Espionage, Mobile Banking Fraud, Repository Hijacking, and the Power of Diverse Perspectives

5min

Creating Inclusive Environments in Cybersecurity

6min

Data exposure incident at WeMISTIC

2min

The US and Israel attribute attacks on PLCs to Iran. Agent Raccoon backdoors organizations on three continents. XDSpy is reported to be phishing the Russian defense sector. Trends in digital banking fraud. Repojacking Go module repositories. Ann Johnson from Afternoon Cyber Tea speaks with Lynn Dohm, executive director of WiCyS, about the power of diverse perspectives. And when it comes to security, don't look to the stars.

CyberWire Guest

Guest is Ann Johnson from Afternoon Cyber Tea talking with Lynn Dohm, executive director of WiCyS, about the power of diverse perspectives. Tune in to Microsoft Security’s Afternoon Cyber Tea podcast every other Tuesday on the N2K Network. You can hear Ann’s full interview with Lynn here.

For links to all of today's stories check out our CyberWire daily news briefing:

https://thecyberwire.com/newsletters/daily-briefing/12/229