Sign up for our daily briefing

Make your busy days simpler with Axios AM/PM. Catch up on what's new and why it matters in just 5 minutes.

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Catch up on coronavirus stories and special reports, curated by Mike Allen everyday

Catch up on coronavirus stories and special reports, curated by Mike Allen everyday

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Denver news in your inbox

Catch up on the most important stories affecting your hometown with Axios Denver

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Des Moines news in your inbox

Catch up on the most important stories affecting your hometown with Axios Des Moines

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Minneapolis-St. Paul news in your inbox

Catch up on the most important stories affecting your hometown with Axios Twin Cities

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Tampa Bay news in your inbox

Catch up on the most important stories affecting your hometown with Axios Tampa Bay

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Charlotte news in your inbox

Catch up on the most important stories affecting your hometown with Axios Charlotte

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

“Operation GhostSecret,” a global data theft and reconnaissance campaign with suspected links to North Korean hackers, is targeting critical infrastructure, finance, healthcare firms and entertainment industries in 17 countries, McAfee Advanced Threat Research reports.

The takeaway: The new report suggests North Korea is moving beyond its typical focus on trying to steal cash or military secrets, and is now targeting a much broader swath of society.

The threat level: The campaign is currently active. McAfee's chief scientist, Raj Samani, writes that "the publicity associated with the (we assume) first phase of this campaign did nothing to slow the attacks. The threat actors not only continued but also increased the scope of the attack, both in types of targets and in the tools they used."

Flashback: Last month’s cyberattack on Turkish banks, which McAfee also uncovered, was just the beginning of this global hack, per McAffee.

Go deeper

Mike Allen, author of AM
2 hours ago - Politics & Policy

Biden's "overwhelming force" doctrine

President-elect Biden arrives to introduce his science team in Wilmington yesterday. Photo: Kevin Lamarque/Reuters

President-elect Biden has ordered up a shock-and-awe campaign for his first days in office to signal, as dramatically as possible, the radical shift coming to America and global affairs, his advisers tell us. 

The plan, Part 1 ... Biden, as detailed in a "First Ten Days" memo from incoming chief of staff Ron Klain, plans to unleash executive orders, federal powers and speeches to shift to a stark, national plan for "100 million shots" in three months.

Off the Rails

Episode 2: Barbarians at the Oval

Photo illustration: Sarah Grillo/Axios. Photo: Jim Watson/AFP/Getty Images

Beginning on election night 2020 and continuing through his final days in office, Donald Trump unraveled and dragged America with him, to the point that his followers sacked the U.S. Capitol with two weeks left in his term. This Axios series takes you inside the collapse of a president.

Episode 2: Trump stops buying what his professional staff are telling him, and increasingly turns to radical voices telling him what he wants to hear. Read episode 1.

President Trump plunked down in an armchair in the White House residence, still dressed from his golf game — navy fleece, black pants, white MAGA cap. It was Saturday, Nov. 7. The networks had just called the election for Joe Biden.

Fringe right plots new attacks out of sight

Illustration: Aïda Amer/Axios

Domestic extremists are using obscure and private corners of the internet to plot new attacks ahead of Inauguration Day. Their plans are also hidden in plain sight, buried in podcasts and online video platforms.

Why it matters: Because law enforcement was caught flat-footed during last week's Capitol siege, researchers and intelligence agencies are paying more attention to online threats that could turn into real-world violence.