"Read the Manual" and the ransomware-as-a-service market. Bitter APT may be targeting Asia-Pacific energy companies. A Cozy Bear sighting. Hacktivist auxiliaries hit Canadian targets. Deepen Desai of Zscaler describes job scams following tech layoffs. Our guest is Kelly Shortridge from Fastly with insights on the risks from bots. And there’s been an arrest in the Discord Papers case.

For links to all of today's stories check out our CyberWire daily news briefing:
https://thecyberwire.com/newsletters/daily-briefing/12/71

Selected reading.
Read The Manual Locker: A Private RaaS Provider (Trellix)
Phishing Campaign Targets Chinese Nuclear Energy Industry (Intezer)
Espionage campaign linked to Russian intelligence services (Baza wiedzy)
Russian cyberspies hit NATO and EU organizations with new malware toolset (CSO Online)
Pro-Russia hackers say they were behind Hydro-Quebec cyberattack (Montreal CTV News - 04-13-2023)
Cyberattack knocks out website and mobile app for Quebec’s hydro utility (Toronto Star)
F.B.I. Arrests National Guardsman in Leak of Classified Document (New York Times)
DOD Calls Document Leak 'a Criminal Act' (U.S. Department of Defense)