DDoS as a holiday-season threat to e-commerce. A TikTok challenge spreads malware. Meta's GDPR fine. Mr. Security Answer Person John Pescatore has thoughts on phishing resistant MFA. Joe Carrigan describes Intel’s latest efforts to thwart deepfakes. And US Cyber Command describes support for Ukraine's cyber defense.

For links to all of today's stories check out our CyberWire daily news briefing:
https://thecyberwire.com/newsletters/daily-briefing/11/227

Selected reading.
Holiday DDoS Cyberattacks Can Hurt E-Commerce, Lack Legal Remedy (Bloomberg Law)
TikTok ‘Invisible Body’ challenge exploited to push malware (BleepingComputer) 
$275M Fine for Meta After Facebook Data Scrape (Dark Reading) 
Before the Invasion: Hunt Forward Operations in Ukraine (U.S. Cyber Command)