Cobalt Mirage deploys Drokbk malware. Zombinder in the C2C market. Impersonation scams: that's not Ukraine’s Ministry of Digital Transformation. On the cyber front, nothing new. CISA releases three new ICS advisories. Caleb Barlow on attack surface management. Mike Hamilton from Critical Insight explains how state and local governments apply for the $1 billion allocated by the feds for cybersecurity funding. And criminals prey on other criminals.

For links to all of today's stories check out our CyberWire daily news briefing:
https://thecyberwire.com/newsletters/daily-briefing/11/235

Selected reading.
Drokbk Malware Uses GitHub as Dead Drop Resolver (Secureworks)
Zombinder: new obfuscation service used by Ermac, now distributed next to desktop stealers (ThreatFabric)
Crypto Winter: Fraudsters Impersonate Ukraine’s Government to Steal NFTs and Cryptocurrency (DomainTools)
Danish defence ministry says its websites hit by cyberattack (Reuters)
Kela website hit by DoS attack (Yle)
Advantech iView (CISA) 
AVEVA InTouch Access Anywhere (CISA)
Rockwell Automation Logix controllers (CISA) 
The scammers who scam scammers on cybercrime forums: Part 1 (Sophos News) 
Cyber-criminals Scammed Each Other Out of Millions in 2022 (Infosecurity Magazine)