Start / The Cybersecurity Defenders Podcast / 44 intel chat fake github repos npm poison vidar mac malware tsunami ddos cl0p reward and the edr killer spyboy

#44 - Intel Chat: Fake GitHub repos, NPM poison, Vidar, Mac malware, Tsunami DDOS, Cl0p reward, and the EDR killer: Spyboy

43 min • 24 juni 2023

In this episode of The Cybersecurity Defenders Podcast, we discuss some cutting-edge intel coming out of LimaCharlie's community Slack channel.

VulnCheck comes across a malicious GitHub repository that is claimed to be a Signal 0-day.
CheckMarx are reporting that Without altering a single line of code, attackers poisoned the NPM package “bignum” by hijacking a S3 bucket.
Team CYMRU has released a detailed publication on Vidar infrastructure which encompasses both the primary administrative aspects and the underlying backend.
Bit Defender Mac researchers stumbled upon a small set of files with backdoor capabilities that seem to form part of a more complex malware toolkit.
Researchers have found an unofficial package called 'https' that exists on NPM with over 1600 other packages that depend on it.
An attack campaign that consists of the Tsunami DDoS Bot being installed on inadequately managed Linux SSH servers.
Cl0p rewards of up to $10 million are being offered by the U.S. State Department's Rewards for Justice program.
SentinelOne is reporting on the Terminator EDR killer - Spyboy.

The Cybersecurity Defenders Podcast: a show about cybersecurity and the people that defend the internet.

Senaste avsnitt

#238 - Defender Fridays: Building trusted ecosystems for incident response with Dr. Mike Saylor, CEO of Blackswan Cybersecurity

15 augusti | 31 min

#237 - Intel Chat: Black Hat roundup - Gemini AI, NeuralTrust & SPLX, VisionSpace Tech, BCM5820X - & CISA/FEMA grant funding

11 augusti | 43 min

#236 - Defender Fridays: Explore the Challenges of Securing AI Adoption with Jeremy Snyder, Founder and CEO of FireTail.ai

8 augusti | 30 min

#237 - Intel Chat: Black Hat roundup - Gemini AI, NeuralTrust & SPLX, VisionSpace Tech, BCM5820X - & CISA/FEMA cyber grant funding

6 augusti | 40 min

#234 - Defender Fridays: Autonomous SOC, AI for cybersecurity, and security automation with Filip Stojkovski, Staff Security Engineer at Snyk

2 augusti | 29 min

#44 - Intel Chat: Fake GitHub repos, NPM poison, Vidar, Mac malware, Tsunami DDOS, Cl0p reward, and the EDR killer: Spyboy

Senaste avsnitt

#238 - Defender Fridays: Building trusted ecosystems for incident response with Dr. Mike Saylor, CEO of Blackswan Cybersecurity

#237 - Intel Chat: Black Hat roundup - Gemini AI, NeuralTrust & SPLX, VisionSpace Tech, BCM5820X - & CISA/FEMA grant funding

#236 - Defender Fridays: Explore the Challenges of Securing AI Adoption with Jeremy Snyder, Founder and CEO of FireTail.ai

#237 - Intel Chat: Black Hat roundup - Gemini AI, NeuralTrust & SPLX, VisionSpace Tech, BCM5820X - & CISA/FEMA cyber grant funding

#234 - Defender Fridays: Autonomous SOC, AI for cybersecurity, and security automation with Filip Stojkovski, Staff Security Engineer at Snyk

#233 - Intel Chat: SharePoint, ToolShell, UK bans payment & cryptojacking

#232 - Defender Fridays: AI scarping and internal threat with Lera Leonteva, Founder of Leo AI

#231 - Intel Chat: CISCO CVE 10/10, Matanbuchus, Cambodian takedown & Overstep

#230 - Defender Fridays: Cyberphysical protection for high value assets with Lennart Koopman, Founder of

#229 - Intel Chat: IntelBroker, Hunters International, Brazilian insider, Ruckus Networks & Patch Tuesday

#228 - Defender Fridays: Building detection and response processes that scale with Ryan Cox, Senior Security Engineer at Revinate

#227 - Intel Chat: Sudo, browser vulns, Medusa & Cloudflare blocks AI

#226 - Intel Chat: Thai takedown, Salt Typhoon, Iran & BlueNoroff

#225 - Defender Fridays: EDR, DFIR & endpoint triage with Brian Carrier, CEO of Sleauth Kit Labs

#224 - Intel Chat: OtterCookie, Flodrix, Water Curse & Scattered Spider

#223 - Defender Fridays: Maintaining the human touch in security operations with Hayden Covington, SOC SecOps Lead at BHIS

#222 - Intel Chat: PurpleHaze, KEV++, ChatGPT & Mirai botnet

#221 - AI and Automation for security operations with Filip Stojkovski, Staff Security Engineer at Snyk

#220 - Defender Fridays: AI on the edge with David (DWIZZLE) Weston, Corporate Vice President, Enterprise and OS Security at Microsoft

#219 - Intel Chat: MSFT-Crowdstrike, GangExposed, Fastlane & HashiCorp Nomad servers

#218 - Coinbase + Cetus, Hazy Hawk, BadSuccesssor & DCIS takedown

#217 - Navigating compliance and risk with Joshua Hoffman, CRO at ControlCase

#216 - Intel Chat: Scattered Spider, TA406, Oriental Gudgeon & Apple patches

#215 - Inside cyber warfare, intelligence, and investment with Hank Thomas, Managing Partner and Founder at Strategic Cyber Ventures

#214 - Intel Chat: UTA0352/UTA0355, Commvault, Sonic wall & Bot Traffic

#213 - Building cybersecurity products with Jonathan Haas, Product at Vanta

#212 - Intel Chat: RSA 2025

#211 - Intel Chat: Fog, Operation Endgame, Mustang Panda & Atomic macOS Stealer (AMOS)

#210 - The current cybersecurity landscape with Ian L. Paterson, CEO of Plurilock

#209 - Intel Chat: OCC, CentreStack, UNC5174 & Oracle

#208 - Cybersecurity in space with Blake Hershey and Gabe Garrett from MORI Associates

#207 - Intel Chat: MirrorFace, Neptune, Sparrow door & CrushFTP

#206 - The AI Threat Landscape Report with Eoin Wickens, Director of Threat Intelligence at HiddenLayer

#205 - Intel Chat: OPSEC FAIL, Manifest Confusion & Github Actions

#204 - Intel Chat: Wiz, Windows, SocGholish, WDAC & BLE

#203 - Breaking the stigma of addiction in cyber with Jen VanAntwerp, Founder of Sober in Cyber

#202 - Intel Chat: CISA, BianLian (not), Crafty Camel, Github malvertising & SCADA

#201 - Scaling Managed Security Operations with Andrew Cook, CTO of Recon InfoSec

#200 - Multimodal Offensive Artificial Intelligence with Philippe Humeau, CEO of CrowdSec

#199 - Intel Chat: Lazarus Group, BadPilot, PAN-OS, emoji exfil, Kitty Stealer & PolarEdge

#198 - AI risk and safety with John Vaina, AI Researcher & Red Teamer

#197 - Avoiding burnout and a managing stress with Amanda Berlin, CEO of Mental Health Hackers

#196 - Security challenges in the Arctic with Deepak Dutt, Founder of Zighra

#195 - Intel Chat: APT tunnelling, BadPilot, CVE-2025-0108, emojis & Kitty Stealer (take 2)

#194 – Exploring MSSP partnerships and technology providers with Raffaele Mautone, CEO of Judy Security

#193 - Intel Chat: Ransomware drops, 8Base, XE Group, SolarWinds-esque attack & cyber-espionage in South Asia

#192 - Talent acquisition, training, and retention in the MSSP space with Paul Ihme, Cofounder & Managing Principle at Soteria

#191 - Intel Chat: Lumma Stealer, xWorm, WSDOT & FortiOS

#190 - How MSSPs can help clients meet regulatory requirements with Garret Grajek, CEO at YouAttest

#189 - Intel Chat: Docker, LDAPNightmare, Codefinger & Fortinet FortiGate

#188 - The MSSP Alert 2024 Pricing Benchmark Report with Sharon Florentine, Senior Managing Editor at CyberRisk Alliance

#187 - Automation in MSSP Operations with David Burkett, Cloud Security Researcher at Corelight

#186 - Intel Chat: Amit Yoran, USDoD, BeyondTrust & LDAPNightmare

#185 - Bootstrapping an MSSP with Nick Gipson, Founder & CEO at Gipson Cyber

#184 - Hacker Holidays: The Colonial Pipeline

#183 - Hacker Holidays: When the lights went out in Ukraine (Part 1 & 2)

#182 - Hacker Holidays: Stuxnet (Part 1 & 2)

#181 - Hacker Holidays: WannaCry

#180 - Hacker Holidays: Titan Rain

#179 - Hacker Holidays: Operation Flyhook

#178 - Intel Chat: ptcpdump, Target adopts TLSH, Clop, XLoader & HeartCrypt

#177 - Intel Chat: Supply-Chain Firewall, Scattered Spider, Linux malware & another NTLM exploit

#176 - The reality of modern browser threats with John Tuckner, Founder at Secure Annex

#175 - Intel Chat: Hydra dark web, DOC entity list, Venom Spider & flowbreaking,

#174 - Predictions for the future of cybersecurity from 2024

#173 - Intel Chat: ClickFix, Raspberry Robin, Gelsemium, Fancy Bear & Salt Typhoon

#172 - Cybercrime cottage industries with Reed McGinley-Stempel, the Co-Founder and CEO of Stytch

#171 - Intel Chat: Snowflake, Scattered Spider, CCP, Melofee backdoor, SilkSpecter & Palo Alto Networks

#170 - A novel path into cybersecurity with Jibby Saetang, Security Researcher with Microsoft GHOST

#169 - Intel Chat: Tools, N. Korean IT workers, GootLoader, FakeBat & Pacific Rim

#168 - Intel Chat: Latrodectus, WarmCookie, FortiManager, EU's Product Liability Directive & Linus Torvalds

#167 - Running and MDR company with Joshua Sitta, Co-Founder and CTO at Sittadel

#166 - Intel Chat: Microsoft logs, USDoD, SolarWinds WHD, & CISA KEV

#165 - How AI is revolutionizing compliance with Dr. Gaurav Banga, CEO of Balbix

#164 - Intel Chat: Wazuh, .io, AI, Discord, Palo Alto & GoldenJackal

#163 - Practical applications of AI in cybersecurity with Rich Heimann, AI researcher & author

#162 - Intel Chat: FIN7, COLDRIVER, perfectly, Comcast & EKUwu

#161 - Intel Chat: MSSN CTRL, CRI summit, Shadow AI, More_Eggs, Andariel hacking group & DrayTek routers