Handala wiper attacks, APT28 implant devs are back, Signal's verification problems

About this episode

The episode discusses recent cyberattacks, including wiper attacks by the Iranian group Handala and the return of APT28 developers.

( Presented by TLPBLACK : High-fidelity threat intelligence and research tools for modern security teams. From curated Passive DNS and real-time C2 monitoring to actionable IOC feeds and daily malware samples, we help defenders detect, hunt, and disrupt threats faster, with seamless integration into SIEM and SOAR workflows. ) Three Buddy Problem - Episode 89 : We discuss Iran hacktivist group 'Handala' wiper attacks against US medical device maker Stryker, Microsoft Intune MDM tool abuse, and whether Iran's cyber retaliation is as scary as the headlines suggest. Plus, ESET's discovery that Russia's APT28 original implant developers are back after years of silence, Dutch intelligence warnings on Russian campaigns targeting Signal and WhatsApp accounts, Apple finally patching Coruna exploit kit vulnerabilities for older iPhones, and Google sharing Coruna samples that raise new questions about the exploit kit's proliferation chain. Cast: Juan Andres Guerrero-Saade , Ryan Naraine and Costin Raiu . Links: Transcript (raw, AI-generated) TLPBLACK Solutions Kim Zetter: Iranian Hacktivists Strike Medical Device Maker Stryker in "Severe" Attack that Wiped Systems Stryker Cyberattack Adds…

People in this episode

Hosts: Juan Andres Guerrero-Saade, Ryan Naraine, Costin Raiu

Topics covered

• cybersecurity
• wiper attacks
• APT28
• Iran hacktivism
• Signal security
• malware
• exploit kits

Keywords

• Handala
• wiper attacks
• APT28
• Signal
• cybersecurity
• malware
• Iran
• Russia
• exploit kits
• Stryker

Sponsors

TLPBLACK

Mentioned in this episode

Organizations: Stryker, Microsoft, ESET, Apple, Google, CISA, Malpedia

Places: Iran, Russia

More episodes of Three Buddy Problem

• Mythos, Fable, and Anthropic's Big Trust Problem · June 12, 2026 · 1h 59m
• Fast16, Fanny, and Stuxnet: Cyber Paleontology Redux · June 5, 2026 · 2h 24m
• Microsoft Threatens Vuln Researchers; Shadow Brokers Revisited · May 30, 2026 · 1h 60m
• Aaron Portnoy on Pwn2Own, the End of Easy Bugs, and AI-Fueled Offense · May 27, 2026 · 40 min
• Perri Adams on Proof Engines, LLMs, and the New Era of Verifiable Code · May 26, 2026 · 40 min
• Find 50,000 Bugs, Fix Zero: Gabriel Bernadett-Shapiro on the AI Vuln Trap · May 26, 2026 · 50 min