Czechs and the FBI cleaned routers from Russian hackers | CCTV NEWS Ep.329

The main topic of the episode is an international operation by the FBI and the Czech Vojenské zpravodajství against the infrastructure of the Russian group APT28 linked to the GRU. According to both U.S. and Czech authorities, the attackers abused compromised routers and other network devices worldwide for cyberespionage, concealment of attacks, and the collection of sensitive data. The Czech Vojenské zpravodajství actively participated in securing part of the affected infrastructure during the operation.

In the next segment we cover the decision by Meta to end support for end-to-end šifrovaných chatů on Instagram. We break down why Meta is stepping back from this feature, what arguments are being voiced by security services, and why the debate about privacy, lawful access and the phenomenon „Going Dark“ is igniting again.

We also look at a new malware campaign targeting macOS users that abuses Google ads and publicly shared chats on the Claude.ai platform. The attackers used the legitimate AI platform to spread malicious instructions that lead to the download of an infostealer for macOS.

Another topic is a troubling survey by Cifas, which finds that approximately one in eight employees in the United Kingdom sold corporate access credentials or knows someone who did. The study also shows that part of management does not regard such behavior as a major problem, which again raises the issue of insider threat risks.

To close the episode we analyze a new Linux kernel vulnerability, Dirty Frag, which enables privilege escalation and obtaining root oprávnění across a number of popular Linux distributions. Researchers warn in particular about the high reliability of the exploit and the first signs of real-world abuse.