PowerDrop’s capabilities are up in the air. A Russian cyberespionage campaign channels their inner 007. A disconnect between law firms and cybersecurity protections.
CyberWire Daily
00:00
The Disconnects Between Cyber Security and the Legal Profession
PowerDrop is a new malicious power shell script discovered by researchers at Adlumen to have infected machines at an unspecified U.S. aerospace defense contractor. Based on the target and living off the land tactics, it's likely that the threat actors are operating on behalf of a nation-state. CERTUA warned Monday of a Russian cyber campaign that prospects government and media targets for the purpose of data collection. A bug in Microsoft Visual Studio allows a hacker to spoof an extension signature and effectively impersonate any publisher.
Play episode from 01:40
Transcript
