Episode #128: Data Stealing Libraries Found in Rust Registry; Lazarus Group NK RATs; Spamouflage; Adversaries say, "Show me the Money!"; This Day in Tech History

🎙️ Free, ungated access to all 200+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates. ♻️ You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value.

Data Stealing Libraries Found in Rust Registry

🇦🇺 Edwin Kwan, Sydney, Australia ↗

Early this month, malicious libraries were discovered in the RUST programming language 's crate registry. It is suspected that the libraries were discovered in the early stages of a campaign. It is unclear what the goal of the attackers were. 

Lazarus Group NK RATs

🇺🇸 Katy Craig, San Diego, California ↗

Let's talk CollectionRAT. This one is the new kid on the block, but don't underestimate it. It gathers data, reads and writes files, and even has its own tricks to avoid detection. This ain't no one trick pony. 

Spamouflage

🇺🇸 Hillary Coover, Washington, DC ↗

 Meta, the parent company of Facebook, has successfully dismantled a massive Chinese disinformation campaign known as Spamouflage. It was the largest cross-platform covert influence operation they've ever encountered. 

Adversaries say, "Show me the Money!"

🇺🇸 Mark Miller, New York City↗

One of the iconic scenes in Jerry McGuire is Cuba Gooding Jr. forcing Tom Cruise to scream, "Show me the money. Show me the money!" I was reminded of the scene as I was reading Hazel Burton's update on how Cisco Talos found clues of post authentication adversaries who left tracks that said, "show" me. Yeah, literally, "show" me. 

This Day, August 30, in Tech History

🇺🇸 Marcel Brown, St. Louis, Missouri ↗

August 30th, 1963. A direct line of communication between the leaders of the US and the Soviet Union dubbed the Hotline, begins operation today. It was most famously represented as a red phone. 

From Sourced Network Production in New York city, it's 5 0 5. I'm Pokie Huang. Today's Wednesday, August 30th, 2023. Here's the full story behind today's cybersecurity and open source headlines.