📝 Show notes
CyberAware Daily — 2026-10-04
- DarkWatch week in numbers: 80,869 captures, 19,399 entities, 2,251 alerts, 13 active targets
- Why a new ransomware-as-a-service listing on a dark web leak site matters for copycat crime
- US soldier jailed for 70 months over telecom extortion attempts
- MI5 says Chinese state funding backed research involving 100+ UK-linked academics
- Data broker Radaris loses its web domains in a privacy fight
- One to watch next week: ransomware group abusing SharePoint flaws to disable security tools
- Takeaway: switch on two-factor authentication on your main email, app or passkey rather than SMS
More at https://cyberawareuk.co.uk
📄 Full transcript
It's Sunday, the 4th of October, and this is CyberAware UK,
the show that helps British families spot scams before they bite.
I am Bully.
And I am Alex.
Sunday means recap day.
So we're looking back at what Darkwatch actually captured this week instead of guessing.
Let's start with the numbers, because they tell a story on their own.
Darkwatch logged just under 81,000 captures this week.
That's captures of scam infrastructure, not victims.
Out of that they pulled together just over 19,000 entities and 2,200 alerts.
And here's the line that matters most for households, 13 active targets.
13 live campaigns being run against real organization types right now.
And the themed days this week were all about exactly that kind of thing.
So what should a normal family actually take from a stats dump like that?
Mainly perspective.
The volume is huge, but it clusters.
Most of it targets businesses and public bodies.
And the bit that reaches you is the coppercat stuff.
The fake texts, the fake delivery notes, the fake bank calls.
Same tricks, endless new phone numbers.
One more capture worth mentioning without naming anything.
A brand new ransomware as a service offering appeared this week.
Advertised on an active dark web leak site.
Meaning someone selling the tools rather than doing the crime themselves.
That lowers the barrier for copycats, which is why it matters.
In the news, US authorities jailed a serving soldier for 70 months over extortion attempts
against two major US telecoms firms.
That one's a good reminder that data insider company is worth real money,
and that insiders get caught.
Also this week, UK security services said Chinese state funding went into research,
involving more than 100 academics linked to British institutions.
That's a slow burn national security story, not a doorstep scam.
Worth knowing, not worth panicking about.
And a US data broker lost its web domains in a privacy fight,
which is quietly a good thing for anyone whose details were listed without consent.
And one to watch next week,
a ransomware group using SharePoint floors to switch off security tools before deploying ransomware.
Again, that's aimed at organisations running their own servers.
If you're on a managed cloud service, your provider handles it.
If you're not sure, ask them.
Coming up next week we'll dig into how to check whether a small business you deal with
has actually patched anything, and what to do when your bank texts you out of the blue.
Before we go, the takeaway.
This week's 13 active targets sound scary, but the action for you is small and specific.
Turn on two-factor authentication on your main email account today.
Not SMS if you can avoid it, use the app or a passkey.
That single setting blocks most of what these campaigns turn into once they reach a real person.
Have a good Sunday.
Stay sharp, stay kind, and we'll see you tomorrow.