Unpatched VMware ESXi instances attacked. Okatpus is back. Update on LockBit’s ransomware attack on ION. Charlie Hebdo hack attributed to Iran.

New ransomware exploits a VMware ESXi vulnerability. Roasted 0ktapus squads up. LockBit says ION paid the ransom. Russian cyber auxiliaries continue attacks against healthcare organizations. Attribution on the Charlie Hebdo attack. Deepen Desai from Zscaler describes recent activity by Ducktail malware. Rick Howard looks at cyber threat intelligence. And the top US cyber diplomat says his Twitter account was hacked.

For links to all of today's stories check out our CyberWire daily news briefing:
https://thecyberwire.com/newsletters/daily-briefing/12/24

Selected reading.
Ransomware Gang in …

0ktapus account attack attacks attribution back charlie hebdo continue cyber cyber threat cyber threat intelligence ducktail esxi exploits hack healthcare intelligence ion iran lockbit malware organizations paid ransom ransomware ransomware attack russian threat threat intelligence twitter unpatched update vmware vmware esxi vulnerability zscaler