Encore: Welcome to New York, it's been waitin' for you. [Research Saturday]

CyberWire Daily

N2K Networks, Inc.

Daily News, Tech News, News, Technology

4.6 • 1K Ratings

🗓️ 6 July 2024

⏱️ 18 minutes

🔗️ Recording | iTunes | RSS

🧾️ Download transcript

Summary

Joshua Miller from Proofpoint joins Dave to discuss findings on "Welcome to New York: Exploring TA453's Foray into LNKs and Mac Malware." In mid May, TA453, also known as Charming Kitten, APT42, Mint Sandstorm, and Yellow Garuda, was found sending a benign conversation lure masquerading as a senior fellow with the Royal United Services Institute (RUSI) to the public media contact for a nuclear security expert at a US-based think tank focused on foreign affairs. The research states that "the email solicited feedback on a project called “Iran in the Global Security Context” and requested permission to send a draft for review." Proofpoint shares it's findings and what you can expect from the threat group. The research can be found here: Welcome to New York: Exploring TA453's Foray into LNKs and Mac Malware Learn more about your ad choices. Visit megaphone.fm/adchoices

Transcript

Click on a timestamp to play from that location

0:00.0	You're listening to the CyberWire Network, powered by N2K.
0:07.0	The IT world used to be simpler. You only had to secure and manage environments that you controlled.
0:20.0	Then came new technologies and new ways to work. Now employees, apps, and networks are everywhere.
0:27.0	This means poor visibility, security gaps, and added risk.
0:31.0	That's why Cloudflare created the first ever connectivity cloud.
0:35.6	Visit Cloud.com to protect your business everywhere you do business. Hello. Hello everyone and welcome to the CyberWire's research Saturday.
0:56.0	I'm Dave Bitner and this is our weekly conversation with researchers and analysts tracking down the threats and vulnerabilities,
1:03.5	solving some of the hard problems and protecting ourselves
1:06.9	in a rapidly evolving cyberspace.
1:09.4	Thanks for joining us.
1:13.0	Yeah, so as part of my daily job, I track advanced adversaries that we saw us to come from places like Iran or the Middle East.
1:25.4	And we have in place different detections that we use to sort of find these and look in our
1:30.4	emails to try to find these. It's very much with some of these benign conversations,
1:35.0	it's like hunting for a needle in a haystack.
1:37.4	That's Joshua Miller.
1:38.8	He's a senior threat researcher with ProofPoints
1:41.4	threat research team.
1:42.8	The research we're discussing today is titled,
1:44.8	Welcome to New York,
1:46.3	exploring TA 453's foray into LNCs and Mac malware. Malware.
1:54.0	And so one of our detection rules that I had written triggered and came up that it was
2:04.7	T.F. 53 so we investigated it, talked to our customer and then went through the whole
	...

Please login to see the full transcript.

Previous episode | Next episode

Disclaimer: The podcast and artwork embedded on this page are from N2K Networks, Inc., and are the property of its owner and not affiliated with or endorsed by Tapesearch.

Generated transcripts are the property of N2K Networks, Inc. and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.