📝 Show notes
CyberAware Daily — 2026-09-02
- DarkWatch flags a live ransomware leak site (.onion) — check backups and beware of extortion emails.
- FBI investigates sale of 153M+ driver's licenses — watch for phishing texts related to driving.
- TeamPCP hackers arrested in Australia — law enforcement making progress on extortion gangs.
- New tracker service is for researchers; for us, review app permissions to limit tracking.
- Breeze Comet malware hits Brazilian banking — monitor your statements for unusual transactions.
- Malicious packages target iPhones to steal crypto wallet seeds — use hardware wallets and never share seeds.
- North Korean job fraud expands into healthcare and sales — verify remote job candidates carefully.
- Actionable tip: In your phone settings, revoke permissions for apps you don't use.
More at https://cyberawareuk.co.uk
📄 Full transcript
Welcome back to CyberAware UK, your Wednesday Midweek Intel Briefing.
I am your host, and joining me is Alex.
We've got the latest from Darkwatch and some big stories you need to know.
Morning.
So, what's the big one today?
I saw something about ransomware and a dark website.
That's right, Alex.
Our Darkwatch system has flagged a live ransomware leak site on the dark web,
at a dark web address.
It's active and responding, which means stolen UK data could be posted there soon.
If you're a business, now's the time to double-check your backups.
That's scary.
But what can the average person do about that?
Honestly, not much directly.
But it's a reminder to be vigilant,
if you get an email demanding money or saying your data is leaked, don't pay.
Report it to Action Fraud and change your passwords.
Got it.
Any other big headlines today?
There's a huge FBI investigation into a service selling over 153 million drivers' licenses.
That means your license details, photo, and address could be out there.
So, watch out for phishing texts that reference your car or driving.
153 million.
That's a lot of data.
What about those hackers arrested in Australia, Team PCP?
Yes, two alleged members of a group called Team PCP have been arrested in Australia.
These are the folks believed to be behind the lapsus dollar extortion gang,
which hit big tech companies.
It shows that law enforcement is catching up.
Good to hear.
Is there anything new about tracking?
I saw a headline about a service to find out who's tracking you.
That headline's a bit clickbait.
The new service is more for privacy researchers.
For us, the takeaway is, check your app permissions on your phone.
Go to settings and see which apps have access to your location or camera.
Revoke anything you don't use.
That's practical.
And what about that breeze comet thing?
Sounds like a weather event.
It's actually a malware that's doing hundreds of fraudulent transactions in Brazil.
Not a big threat to us here, but it reminds us to review our bank statements regularly.
If you see a purchase you don't recognize, tell your bank right away.
Finally, I heard something about crypto wallet seeds being stolen through fake packages on iPhones.
Weird.
Yeah, cybercriminals are getting crafty.
They posted malicious code in a software library that tricks unpatched iPhones into stealing crypto wallet seeds.
So, if you hold crypto, use a hardware wallet and never share your seed phrase with anyone.
Right.
And the job fraud from North Korea.
That's spreading into healthcare and sales.
Yes, that's a big issue.
Fake job seekers, actually working for a foreign state, are getting remote jobs in healthcare and sales, not just IT.
If you do hiring, verify identities carefully and watch for red flags in interviews.
Wow, that's a lot.
So, what's our one actionable takeaway for today?
Today's takeaway is simple.
Check your phone's app permissions and revoke access to anything you don't use.
It takes two minutes and it tightens up your privacy.
That's the easiest win today.
Perfect.
Thanks, everyone, for tuning in.
Stay safe and we'll see you tomorrow.
And remember, if you spot a scam, report it to Action Fraud.
Goodbye.