Gangland goes to war. Is there a “cyber world war” in progress? Ukraine thinks so. A new North Korean ransomware operation is described, but it’s not yet clear if it’s a state operation or some moonlighting by Pyongyang’s operators. Media organizations remain attractive targets for state actors. NSA releases guidance on characterizing threats and risks to microelectronics. Betsy Carmelite from Booz Allen talks about why now is the time to plan for post-quantum cryptography. Our guest is Cybersecurity and Infrastructure Security Agency (CISA) Director Jen Easterly discussing her time at CISA and the work of her team. 

For links to all of today’s stories check out our CyberWire daily news briefing:

https://thecyberwire.com/newsletters/daily-briefing/11/135

Selected reading.

Inside The Russian Cybergang Thought To Be Attacking Ukraine—The Trickbot Leaks (Forbes)

Who is Trickbot? (Cyjax)

Who is Trickbot? (Cyjax)

NATO and the European Union work together to counter cyber threats (NATO) 

The Man at the Center of the New Cyber World War (POLITICO)

Russian cyber threat to Canada worse than previously reported: CSE (National Post) 

North Korean threat actor targets small and midsize businesses with H0lyGh0st ransomware (Microsoft Security) 

Above the Fold and in Your Inbox: Tracing State-Aligned Activity Targeting Journalists, Media (Proofpoint)

NSA Publishes Guidance on Characterizing Threats, Risks to DoD Microelectronics (National Security Agency/Central Security Service)