Daily brief for 2018-09-20

ASIA

1. Hundreds of Indian Government Websites Hit with Cryptojacking Malware
2. The public's trust, politics and race, and dignity for the LGBT community: MP Murali Pillai goes On the Record
3. China Arrests Suspect for Customer Data Leak at Accor Partner

WORLD

4. A worrying future for the next generation?
5. US authorities Have Pardoned Authors of Mirai Ransomware in Return For Government “Cooperation”
6. Book Review: Malware Data Science
7. New Magecart victims ABS-CBN and Newegg are just the tip of the iceberg
8. Magecart Strikes Again, Siphoning Payment Info from Newegg
9. Wyden: Tech company has told multiple senators of foreign hacking attempts
10. Data commissioner fines Equifax £500,000 for US data breach affecting UK customers
11. LG V40 ThinQ Alleged Specifications Sheet Leaked; Reveals 8GB RAM Model With a 6.4-Inch Display, but No Triple-Rear-Camera
12. UK organisations’ email accounts used in mass phishing campaigns
13. Newegg Inc. Suffers Hack, Credit Card Data Stolen
14. This Russian botnet mimics your click to prevent Android device factory resets
15. 7GB of Medical Data Publicly Exposed Thanks to Misconfigured AWS S3 Bucket
16. US State Department confirms data breach to unclassified email system
17. HMRC Tax Refund Scam via Phishing Campaign
18. Threats posed by using RATs in ICS
19. NewEgg Network is attacked by hackers
20. Privacy advocates have failed to engage on My Health Record
21. UK Regulator Fines Equifax £500,000 Over 2017 Data Breach
22. Magecart cybercrime group stole customers’ credit cards from Newegg electronics retailer
23. GovPayNow Leak of 14M+ Records The All Time Low in Processing
24. Latest Hacking News Podcast
25. Card Data-Scraping Magecart Code Found on Newegg
26. Newegg hacked: The new victim of Magecart malware
27. Mirai botnet developers collaborate with the FBI
28. Western Digital My Cloud vulnerability, let’s hacker gives full access
29. US Signal partners with Cloudflare to deliver DDoS protection service

ATTACKS

30. 14 million customer records exposed in GovPayNow leak
31. State Department email breach leaks employee PII
32. Magecart data breach possibly avoidable -magecart-data-breach-possibly-avoidable/ …
33. Adams County clerk resigns over role in data breach
34. Snap! Adobe patches, sneaky Android botnets, Alexa invasion, robot skins
35. Account Takeover Attacks Become a Phishing Fave
36. ICO to Fine Equifax £500,000 for 2017 Data Breach   via
37. Account Takeover Attacks Result in Phishing Scams  pic.twitter.com/hR2kSqlpCN
38. Malicious Login Attempts Spike in Finance, Retail  pic.twitter.com/OQPWqymDRB
39. Account Takeover Attacks Result in Phishing Scams -magazine.com/news/account-takeover-attacks-result-in?utm_source=twitterfeed&utm_medium=twitter …
40. Malicious Login Attempts Spike in Finance, Retail -magazine.com/news/malicious-login-attempts-spike-in?utm_source=twitterfeed&utm_medium=twitter …
41. The makers of the Mirai IoT-hijacking botnet are sentenced   via
42. 3 Drivers Behind the Increasing Frequency of DDoS Attacks
43. New XBash malware combines features from ransomware, cryptocurrency miners, botnets, and worms
44. Pegasus spyware spotted in 45 countries, many with questionable human rights records
45. Account Takeover Attacks Become a Phishing Fave
46. : The 3 people suspected of the have escaped jail after agreeing to provide “substantial assistance” to the in ongoing cases. Read more about this story here:   .twitter.com/Yzb9wM7KzU
47. State Department: Some Employee Info Possibly Exposed in Security Incident   via
48. This breach is a great example of how CT logs can be useful as an early indicator of an ongoing attack campaign. Orgs should be monitoring CT for certificates issued to look-alike domains to improve their situational awareness. -magazine.com/news/magecart-skimmed-newegg-cards/ …
49. 3 Drivers Behind the Increasing Frequency of DDoS Attacks
50. Data commissioner fines Equifax £500,000 for US data breach affecting UK customers
51. Newegg Electronic Retailers Suffered a Data Breach and Hackers Stole Customers Credit Card Data
52. LG V40 ThinQ Alleged Specifications Sheet Leaked; Reveals 8GB RAM Model With a 6.4-Inch Display, but No Triple-Rear-Camera
53. : malware detections have soared 273% since 2017 according to new stats from . The most popular way to spread is brute-forcing of passwords, used in 93% of detected attacks. Read more here:   .twitter.com/Ct8Z7qckRC
54. ICO to Fine Equifax £500,000 for 2017 Data Breach   via
55. UK organisations’ email accounts used in mass phishing campaigns
56. Threat Spotlight: Barracuda study finds account takeover incidents widespread, most commonly used for phishing campaigns
57. Hackers Uploaded Fake Apps into Google Play Store to Steal Credit card details and Login Credentials
58. This Russian botnet mimics your click to prevent Android device factory resets
59. 7GB of Medical Data Publicly Exposed Thanks to Misconfigured AWS S3 Bucket
60. The public's trust, politics and race, and dignity for the LGBT community: MP Murali Pillai goes On the Record
61. FBI wants to keep “helpful” Mirai botnet authors around
62. US State Department confirms data breach to unclassified email system
63. Researcher discovers buffer overflow vulnerability in Microsoft's JET Database Engine
64. HMRC Tax Refund Scam via Phishing Campaign
65. China Arrests Suspect for Customer Data Leak at Accor Partner
66. Phishing finance apps make way back into Google Play
67. State Department Email Breach Exposed Personal Data Of Employees
68. Equifax fined £500,000 over customer data breach
69. The makers of the Mirai IoT-hijacking botnet are sentenced   via
70. Privacy advocates have failed to engage on My Health Record
71. UK Regulator Fines Equifax £500,000 Over 2017 Data Breach
72. Manipulation tactics that you fall for in phishing attacks
73. GovPayNow Leak of 14M+ Records The All Time Low in Processing
74. Mirai botnet developers collaborate with the FBI
75. State Department: Some Employee Info Possibly Exposed in Security Incident   via
76. Identifying botnets before an attack: The new DARPA challenge
77. US Signal partners with Cloudflare to deliver DDoS protection service

THREATS

78. Android bug bounty tops $3m in third year, but pay flattens out
79. Facebook Bug Bounty opens to reward access token exposure
80. US authorities Have Pardoned Authors of Mirai Ransomware in Return For Government “Cooperation”
81. Bug hunters fail third year in a row to get top prize in Android hacking program
82. Domain Joined Outlook 2016 Issues - 0x8004011D
83. Report: Cryptomining malware detections up more than 459 percent since 2017
84. Bad actors are sizing up systems via lightweight recon before attack, researchers at Proofpoint said:
85. The rate at which new threats appear now requires a much greater reliance on threat intelligence. Learn more about its opportunities and challenges in our .  pic.twitter.com/bEh9MKP6nS
86. Malicious Login Attempts Spike in Finance, Retail  pic.twitter.com/OQPWqymDRB
87. Malicious Login Attempts Spike in Finance, Retail -magazine.com/news/malicious-login-attempts-spike-in?utm_source=twitterfeed&utm_medium=twitter …
88. New XBash malware combines features from ransomware, cryptocurrency miners, botnets, and worms
89. Pegasus spyware spotted in 45 countries, many with questionable human rights records
90. Book Review: Malware Data Science
91. Increased Use of a Delphi Packer to Evade Malware Classification
92. Cisco Issues New Warning for 6-Month-Old Critical Bug in IOS XE
93. Hundreds of Indian Government Websites Hit with Cryptojacking Malware
94. This breach is a great example of how CT logs can be useful as an early indicator of an ongoing attack campaign. Orgs should be monitoring CT for certificates issued to look-alike domains to improve their situational awareness. -magazine.com/news/magecart-skimmed-newegg-cards/ …
95. Mitigate Risk From Malicious and Accidental Insiders
96. : malware detections have soared 273% since 2017 according to new stats from . The most popular way to spread is brute-forcing of passwords, used in 93% of detected attacks. Read more here:   .twitter.com/Ct8Z7qckRC
97. Sustes Malware: CPU for Monero
98. : Hackers say and have been the easiest attack vectors to exploit this year. 56% of said that social engineering is the fastest account seizing technique to use on them. Read more here:   .twitter.com/e5ogD8VYWT
99. Guarding the Gate: Cybersecurity De-Mystified
100. Researcher discovers buffer overflow vulnerability in Microsoft's JET Database Engine
101. Interview with Daniel Stenberg: His thoughts on the Curl Bug Bounty Program
102. Report: Cryptomining malware detections up more than 459 percent since 2017
103. Threats posed by using RATs in ICS
104. Western Digital goes quiet on unpatched MyCloud flaw
105. CVE-2018-0150: Cisco IOS XE Software Static Credential Vulnerability
106. Adobe releases patch out of schedule to squash critical code execution bug
107. Cisco IOS XE Software Static Credential Vulnerability
108. Report Reveals Widespread Use of Pegasus Spyware
109. GovPayNow Leak of 14M+ Records The All Time Low in Processing
110. Adobe issued a critical out-of-band patch to address CVE-2018-12848 Acrobat flaw
111. Ubuntu Released Security Updates & Fixed Multiple Critical Vulnerabilities
112. Evil Clone Attack – Hackers Injecting Crypto-mining Malware into Legitimate PDF Software
113. Newegg hacked: The new victim of Magecart malware
114. Vulnerability in My cloud devices exposes sensitive information
115. Western Digital My Cloud vulnerability, let’s hacker gives full access
116. Guarding the Gate: Cybersecurity De-Mystified
117. How to detect and remove a virus from your Android phone | Avast

CRIME

118. Report: Cryptomining malware detections up more than 459 percent since 2017
119. The makers of the Mirai IoT-hijacking botnet are sentenced   via
120. : The 3 people suspected of the have escaped jail after agreeing to provide “substantial assistance” to the in ongoing cases. Read more about this story here:   .twitter.com/Yzb9wM7KzU
121. New Magecart victims ABS-CBN and Newegg are just the tip of the iceberg
122. Magecart Strikes Again, Siphoning Payment Info from Newegg
123. Newegg Electronic Retailers Suffered a Data Breach and Hackers Stole Customers Credit Card Data
124. Newegg Inc. Suffers Hack, Credit Card Data Stolen
125. Hackers Uploaded Fake Apps into Google Play Store to Steal Credit card details and Login Credentials
126. 7GB of Medical Data Publicly Exposed Thanks to Misconfigured AWS S3 Bucket
127. HMRC Tax Refund Scam via Phishing Campaign
128. Report: Cryptomining malware detections up more than 459 percent since 2017
129. NewEgg Network is attacked by hackers
130. The makers of the Mirai IoT-hijacking botnet are sentenced   via
131. Magecart cybercrime group stole customers’ credit cards from Newegg electronics retailer
132. Manipulation tactics that you fall for in phishing attacks
133. GovPayNow Leak of 14M+ Records The All Time Low in Processing
134. Card Data-Scraping Magecart Code Found on Newegg
135. Newegg hacked: The new victim of Magecart malware
136. Mirai botnet developers collaborate with the FBI

POLITICS

137. Wyden: Tech company has told multiple senators of foreign hacking attempts
138. 7GB of Medical Data Publicly Exposed Thanks to Misconfigured AWS S3 Bucket