The GRU's closely coordinating with cyber criminals. An unidentified threat actor deploys malicious NPM packets. Gootloader uses blogging and SEO poisoning to attract victims. Metador is a so-far unattributed threat actor. Johannes Ullrich from SANS on Resilient DNS Infrastructure. Maria Varmazis interviews Anthony Colangelo, host of spaceflight podcast Main Engine Cutoff, about the iPhone 14 “Emergency SOS via Satellite” feature. And having too much time on your hands while doing time is not a good thing.

For links to all of today's stories check out our CyberWire daily news briefing:
https://thecyberwire.com/newsletters/daily-briefing/11/184

Selected reading.
GRU: Rise of the (Telegram) MinIOns (Mandiant)
Void Balaur | The Sprawling Infrastructure of a Careless Mercenary (SentinelOne)
An unidentified threat actor deploys malicious NPM packets (CyberWire)
Threat analysis: Malicious npm package mimics Material Tailwind CSS tool (ReversingLabs)
A Multimillion Dollar Global Online Credit Card Scam Uncovered (ReasonLabs)
Gootloader Poisoned Blogs Uncovered by Deepwatch’s ATI Team (Deepwatch) 
The Mystery of Metador | An Unattributed Threat Hiding in Telcos, ISPs, and Universities (SentinelOne) 
SC inmate sentenced for ‘sextortion’ scheme that targeted military (Stars and Stripes)