Threat report for 2018-09-20

DATA BREACH

1. 14 million customer records exposed in GovPayNow leak
2. State Department email breach leaks employee PII
3. Magecart data breach possibly avoidable -magecart-data-breach-possibly-avoidable/ …
4. Adams County clerk resigns over role in data breach
5. ICO to Fine Equifax £500,000 for 2017 Data Breach   via
6. Pegasus spyware spotted in 45 countries, many with questionable human rights records
7. State Department: Some Employee Info Possibly Exposed in Security Incident   via
8. This breach is a great example of how CT logs can be useful as an early indicator of an ongoing attack campaign. Orgs should be monitoring CT for certificates issued to look-alike domains to improve their situational awareness. -magazine.com/news/magecart-skimmed-newegg-cards/ …
9. Data commissioner fines Equifax £500,000 for US data breach affecting UK customers
10. Newegg Electronic Retailers Suffered a Data Breach and Hackers Stole Customers Credit Card Data
11. LG V40 ThinQ Alleged Specifications Sheet Leaked; Reveals 8GB RAM Model With a 6.4-Inch Display, but No Triple-Rear-Camera
12. ICO to Fine Equifax £500,000 for 2017 Data Breach   via
13. UK organisations’ email accounts used in mass phishing campaigns
14. Threat Spotlight: Barracuda study finds account takeover incidents widespread, most commonly used for phishing campaigns
15. 7GB of Medical Data Publicly Exposed Thanks to Misconfigured AWS S3 Bucket
16. The public's trust, politics and race, and dignity for the LGBT community: MP Murali Pillai goes On the Record
17. US State Department confirms data breach to unclassified email system
18. Researcher discovers buffer overflow vulnerability in Microsoft's JET Database Engine
19. HMRC Tax Refund Scam via Phishing Campaign
20. China Arrests Suspect for Customer Data Leak at Accor Partner
21. State Department Email Breach Exposed Personal Data Of Employees
22. Equifax fined £500,000 over customer data breach
23. Privacy advocates have failed to engage on My Health Record
24. UK Regulator Fines Equifax £500,000 Over 2017 Data Breach
25. GovPayNow Leak of 14M+ Records The All Time Low in Processing
26. State Department: Some Employee Info Possibly Exposed in Security Incident   via

DENIAL-OF-SERVICE

27. Snap! Adobe patches, sneaky Android botnets, Alexa invasion, robot skins
28. The makers of the Mirai IoT-hijacking botnet are sentenced   via
29. 3 Drivers Behind the Increasing Frequency of DDoS Attacks
30. New XBash malware combines features from ransomware, cryptocurrency miners, botnets, and worms
31. : The 3 people suspected of the have escaped jail after agreeing to provide “substantial assistance” to the in ongoing cases. Read more about this story here:   .twitter.com/Yzb9wM7KzU
32. 3 Drivers Behind the Increasing Frequency of DDoS Attacks
33. This Russian botnet mimics your click to prevent Android device factory resets
34. FBI wants to keep “helpful” Mirai botnet authors around
35. The makers of the Mirai IoT-hijacking botnet are sentenced   via
36. Mirai botnet developers collaborate with the FBI
37. Identifying botnets before an attack: The new DARPA challenge
38. US Signal partners with Cloudflare to deliver DDoS protection service

MALVERTISING

Nothing to report

DATA LEAK

39. Hackers Uploaded Fake Apps into Google Play Store to Steal Credit card details and Login Credentials

PHISHING

40. Account Takeover Attacks Become a Phishing Fave
41. Account Takeover Attacks Result in Phishing Scams  pic.twitter.com/hR2kSqlpCN
42. Malicious Login Attempts Spike in Finance, Retail  pic.twitter.com/OQPWqymDRB
43. Account Takeover Attacks Result in Phishing Scams -magazine.com/news/account-takeover-attacks-result-in?utm_source=twitterfeed&utm_medium=twitter …
44. Malicious Login Attempts Spike in Finance, Retail -magazine.com/news/malicious-login-attempts-spike-in?utm_source=twitterfeed&utm_medium=twitter …
45. Account Takeover Attacks Become a Phishing Fave
46. : malware detections have soared 273% since 2017 according to new stats from . The most popular way to spread is brute-forcing of passwords, used in 93% of detected attacks. Read more here:   .twitter.com/Ct8Z7qckRC
47. UK organisations’ email accounts used in mass phishing campaigns
48. Threat Spotlight: Barracuda study finds account takeover incidents widespread, most commonly used for phishing campaigns
49. Hackers Uploaded Fake Apps into Google Play Store to Steal Credit card details and Login Credentials
50. HMRC Tax Refund Scam via Phishing Campaign
51. Phishing finance apps make way back into Google Play
52. Manipulation tactics that you fall for in phishing attacks

WEB DEFACEMENT

Nothing to report

MALWARE

53. US authorities Have Pardoned Authors of Mirai Ransomware in Return For Government “Cooperation”
54. Domain Joined Outlook 2016 Issues - 0x8004011D
55. Report: Cryptomining malware detections up more than 459 percent since 2017
56. Bad actors are sizing up systems via lightweight recon before attack, researchers at Proofpoint said:
57. The rate at which new threats appear now requires a much greater reliance on threat intelligence. Learn more about its opportunities and challenges in our .  pic.twitter.com/bEh9MKP6nS
58. Malicious Login Attempts Spike in Finance, Retail  pic.twitter.com/OQPWqymDRB
59. Malicious Login Attempts Spike in Finance, Retail -magazine.com/news/malicious-login-attempts-spike-in?utm_source=twitterfeed&utm_medium=twitter …
60. New XBash malware combines features from ransomware, cryptocurrency miners, botnets, and worms
61. Pegasus spyware spotted in 45 countries, many with questionable human rights records
62. Book Review: Malware Data Science
63. Increased Use of a Delphi Packer to Evade Malware Classification
64. Hundreds of Indian Government Websites Hit with Cryptojacking Malware
65. This breach is a great example of how CT logs can be useful as an early indicator of an ongoing attack campaign. Orgs should be monitoring CT for certificates issued to look-alike domains to improve their situational awareness. -magazine.com/news/magecart-skimmed-newegg-cards/ …
66. Mitigate Risk From Malicious and Accidental Insiders
67. : malware detections have soared 273% since 2017 according to new stats from . The most popular way to spread is brute-forcing of passwords, used in 93% of detected attacks. Read more here:   .twitter.com/Ct8Z7qckRC
68. Sustes Malware: CPU for Monero
69. Report: Cryptomining malware detections up more than 459 percent since 2017
70. Threats posed by using RATs in ICS
71. Report Reveals Widespread Use of Pegasus Spyware
72. GovPayNow Leak of 14M+ Records The All Time Low in Processing
73. Evil Clone Attack – Hackers Injecting Crypto-mining Malware into Legitimate PDF Software
74. Newegg hacked: The new victim of Magecart malware
75. How to detect and remove a virus from your Android phone | Avast

EXPLOIT

76. : Hackers say and have been the easiest attack vectors to exploit this year. 56% of said that social engineering is the fastest account seizing technique to use on them. Read more here:   .twitter.com/e5ogD8VYWT
77. Researcher discovers buffer overflow vulnerability in Microsoft's JET Database Engine

VULNERABILITY

78. Android bug bounty tops $3m in third year, but pay flattens out
79. Facebook Bug Bounty opens to reward access token exposure
80. Bug hunters fail third year in a row to get top prize in Android hacking program
81. Cisco Issues New Warning for 6-Month-Old Critical Bug in IOS XE
82. Guarding the Gate: Cybersecurity De-Mystified
83. Researcher discovers buffer overflow vulnerability in Microsoft's JET Database Engine
84. Interview with Daniel Stenberg: His thoughts on the Curl Bug Bounty Program
85. Western Digital goes quiet on unpatched MyCloud flaw
86. CVE-2018-0150: Cisco IOS XE Software Static Credential Vulnerability
87. Adobe releases patch out of schedule to squash critical code execution bug
88. Cisco IOS XE Software Static Credential Vulnerability
89. Adobe issued a critical out-of-band patch to address CVE-2018-12848 Acrobat flaw
90. Ubuntu Released Security Updates & Fixed Multiple Critical Vulnerabilities
91. Vulnerability in My cloud devices exposes sensitive information
92. Western Digital My Cloud vulnerability, let’s hacker gives full access
93. Guarding the Gate: Cybersecurity De-Mystified