The Hamas-Israel war continues to be marked by hacktivism. Arid Viper's exploitation of Arabic speaker's Android devices. Iran shows improved cyberespionage capabilities. A URL shortener in the C2C market. Taking down the Mozi botnet. Ransomware in healthcare. Two are Russians arrested on treason charges, accused of hacking for Ukraine. In our sponsored Industry Voices segment, Anna Belak from Sysdig shares a new threat framework for the cloud. Rick Howard previews his new online course on cyber security first principles. And no, Russia hasn’t really replaced its currency with Arctic Ocean gastropods.

For links to all of today's stories check out our CyberWire daily news briefing:

https://thecyberwire.com/newsletters/daily-briefing/12/209

Selected reading.

‘Hacktivists’ join the front lines in Israel-Hamas war (C4ISRNet) 

The global cyber divide between Gaza and Israel - IT-Online (IT-Online)

Arid Viper disguising mobile spyware as updates for non-malicious Android applications (Cisco Talos Blog)

In Cyberattacks, Iran Shows Signs of Improved Hacking Capabilities (New York Times)

FBI ‘keeping a close eye’ on Iranian hackers as Israel-Hamas war intensifies (Record)

Why Iran Is Gambling on Hamas (Foreign Affairs)

To Aid and Abet: Prolific Puma Helps Cybercriminals Evade Detection (Infoblox Blog)

Who killed Mozi? Finally putting the IoT zombie botnet in its grave (ESET)

The State of Ransomware in Healthcare 2023 (Sophos)

Russian security service detains two hackers allegedly working for Ukraine (Record) 

Pro-Ukraine group says it breached Russian card payment system (Record) 

Learn more about your ad choices. Visit megaphone.fm/adchoices