What I’ve learned in my first 7-ish years in cybersecurity
Summary: A Cisco Talos staffer marking their last week after nearly seven years recounts hosting a podcast that ran nearly 200 episodes, relaunching the Threat Source newsletter, and researching malicious Facebook groups trading stolen personal information. The same newsletter edition reports that a Russian-speaking group tracked as UAT-5647 has attacked Ukrainian government entities and unknown Polish entities since at least late 2023, deploying an updated RomCom variant called SingleCamper that loads from the registry into memory.
Key Takeaway: UAT-5647 has shifted toward establishing long-term access to exfiltrate data of strategic interest, and it now runs four distinct malware families - RustClaw, MeltingClaw, DustyHammock and ShadyHammock - which means defenders face a broader toolset than a single ransomware crew.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026