Russia’s hybrid war against Ukraine is currently heavier on the cyber than it is on the kinetic. BlackCat’s connection with DarkSide. An alert on LockBit. And six Indian call centers indicted.
CyberWire Daily
00:00
Actinium, a Thread Actor, and Gameridon, or Primitive Bear
Microsoft released more information on the thread actor it calls actinium, and that others call gameridon. Ucranian security services have attributed the activity to an f s b unit oper ing out of crimea. Primitive bear is not generally reckoned as smarter than the average bear, but neither are its operators complete rookies either. The group also hosts the malicious macros remotely, which helps them evade detection by static analytical systems. In general, actinium quickly develops new obfuscated and light weight capabilities to deploy more advanced malwar later.
Play episode from 02:44
Transcript
