Threat report for 2018-09-21

DATA BREACH

1. What Are Honeywords? Password Protection for Database Breaches
2. Snap! Microsoft database flaw, internet to split? Plus, asteroid probed
3. Twitter Flaw Exposed Direct Messages To External Developers
4. Twitter Flaw Exposed Direct Messages To External Developers
5. Twitter API bug leaked private data to other accounts
6. The @aberdeengroup analyzed the likelihood and business impact of #phishing attacks based on lost productivity of 1,000 users with a confirmed #databreach of between 100k - 1m records, for 10 different industries. Download the @cyreninc #whitepaper here
7. Independence Blue Cross Breach Exposed 17K Records
8. Independence Blue Cross Breach Exposed 17K Records  …
9. Newegg leaked credit card information for more than a month
10. ZDI Shares Details of Microsoft JET Database Zero-Day
11. Fully 61 percent of ASX100 exposed as email fraud gets personal
12. Pegasus spyware spotted in 45 countries, many with questionable human rights records
13. ICO to Fine Equifax £500,000 for 2017 Data Breach   via @DMBisson #GDPR #databreach
14. Adams County clerk resigns over role in data breach
15. SC Media September Product Reviews: Threat Intelligence Recorded Future l
16. 0Day Windows JET Database Vulnerability disclosed by Zero Day Initiative
17. Who ate all the PII? Not the blockchain, thankfully
18. Tick-tock, tick-tock. Oh, that's just the sound of compromised logins waiting to ruin your day
19. Equifax IT staff had to rerun hackers' database queries to work out what was nicked – audit
20. Veeam holds its hands up, admits database leak was plain 'complacency'
21. Back up a minute: Veeam database config snafu exposed millions of customer records
22. Law firm seeking leak victims to launch £500m suit at British Airways
23. #SecurityNews: The Information Commissioner’s Office (ICO) has fined #Equifax £500K after the 2017 #databreach. For the 2nd time the #ICO has issued a max fine after the credit agency exposed data on 15 million UK customers. Read more here:   #
24. SingHealth data breach reveals several 'inadequate' security measures
25. Cisco releases fixes for remote code execution flaws in Webex Network Recording Player
26. ICO Slaps Equifax with Maximum Fine for the 2017 Data Breach
27. Cisco fixes Remote Code Execution flaws in Webex Network Recording Player
28. MageCart Hacked Customers’ In NewEgg Credit Card Data Breach
29. ZDI Exposed Unpatched Microsoft RCE Zero-day Flaw in Public After it Crossed the 120 Days Deadline
30. ICO to Fine Equifax £500,000 for 2017 Data Breach   via @DMBisson #databreach #GDPR
31. Magecart’s Next Attack Resulted In ABS-CBN Data Breach
32. £500k fine for Equifax 2017 data breach

DENIAL-OF-SERVICE

33. New Virobot Ransomware and Botnet Emerges
34. New Virobot ransomware will also log keystrokes, add PC to a spam botnet
35. Apache Struts and SonicWall Targeted by Mirai and Gafgyt Botnets
36. Virobot Ransomware with Botnet Capability Breaks Through
37. No, the Mirai botnet masters aren't going to jail. Why? 'Cos they help Feds nab cyber-crims
38. ZombieBoy
39. The makers of the Mirai IoT-hijacking botnet are sentenced   via @gcluley #DDoS #FBI
40. Mirai Botnet Creators To Help Law Enforcement Agencies On Cybercrime Investigations
41. The makers of the Mirai IoT-hijacking botnet are sentenced   via @gcluley #botnets #Mirai

MALVERTISING

42. This blog post explores how #malvertising works and identifies key defense strategies for #businesses  … #malware #cyberattacks

DATA LEAK

Nothing to report

PHISHING

43. What Are Honeywords? Password Protection for Database Breaches
44. Spam or Phish? How to Tell the Difference Between a Marketing Email and a Malicious Spam Email
45. Phishing finance apps make way back into Google Play
46. The @aberdeengroup analyzed the likelihood and business impact of #phishing attacks based on lost productivity of 1,000 users with a confirmed #databreach of between 100k - 1m records, for 10 different industries. Download the @cyreninc #whitepaper here
47. Securing industrial IoT passwords: For Pete's sake, engineers, don't all jump in at once
48. Tick-tock, tick-tock. Oh, that's just the sound of compromised logins waiting to ruin your day
49. Solid password practice on Capital One's site? Don't bank on it
50. When is a patch not a patch? When it's for this McAfee password bug
51. Warning issued as Netflix subscribers hit by phishing attack
52. Security data reveals worldwide malicious login attempts are on the rise
53. AD FS 2016 Password Change from non workplace joined devices
54. The most used email subjects used in phishing attacks
55. AdGuard resets all user passwords after credential stuffing attack

WEB DEFACEMENT

Nothing to report

MALWARE

56. Brewery breach: Not even beer is safe from ransomware
57. The Week in Ransomware – September 21st 2018 – Beer, Airports, & Dharma
58. PMP®️ Domain Information & Overview
59. Gamma, Bkp, & Monro Dharma Ransomware Variants Released in One Week
60. Spam or Phish? How to Tell the Difference Between a Marketing Email and a Malicious Spam Email
61. Romanian Citizen Admits Guilt in Police Department Ransomware Attack   via @DMBisson #police #ransomware
62. Malware Disguised as Job Offers Distributed on Freelance Sites
63. Romanian Hacker Pleads Guilty for Role in Inauguration Surveillance Ransomware
64. Proofpoint: One month out from deadline, half of agency domains are #DMARC compliant   via CyberScoopNews #FinSec
65. Delphi Packer Looks for Human Behavior Before Deploying Payload
66. Delphi Packer Looks for Human Behavior Before Deploying Payload
67. The Week in Ransomware - September 21st 2018 - Beer, Airports, & Dharma
68. Operator of 'VirusTotal for criminals' gets 14-year prison sentence
69. Gamma, Bkp, & Monro Dharma Ransomware Variants Released in One Week
70. New Virobot Ransomware and Botnet Emerges
71. Staying King Krab: GandCrab Malware Keeps a Step Ahead of Network Defenses
72. Malware Disguised as Job Offers Distributed on Freelance Sites
73. New Virobot ransomware will also log keystrokes, add PC to a spam botnet
74. Security news: All-in-one malware out, GovPayNow drops the ball on security, and Newegg suffers a crack | Avast
75. Romanian Hacker Pleads Guilty for Role in Inauguration Surveillance Ransomware
76. Pegasus spyware spotted in 45 countries, many with questionable human rights records
77. Discover how Tripwire Malware Detection... - Protects against zero-day exploits and other known threats. - Offers an enterprise view of suspicious malware objects across all monitored systems. - Protects from repeat #malware attacks. Learn more here:
78. Legitimate RATs Pose Serious Risk to Industrial Systems
79. Crooks turn to Delphi packers to evade malware detection
80. This blog post explores how #malvertising works and identifies key defense strategies for #businesses  … #malware #cyberattacks
81. Malware Businesses Blending the Legitimate and the Illegitimate
82. Avoidable mistakes lead to iOS cryptomining attacks
83. Romanian Citizen Admits Guilt in Police Department Ransomware Attack   via @DMBisson #ransomware #police
84. Thousands of WordPress sites backdoored with malicious code
85. Virobot Ransomware with Botnet Capability Breaks Through
86. DMARC Fully Implemented on Two Thirds of U.S. Government Domains
87. Guilty: The Romanian ransomware mastermind who infected Trump inauguration CCTV cams
88. FDIC: Supervisory Approach to Payment Processing Relationships with Merchant Customers
89. MassMiner Malware Targeting Web Servers
90. Malware Analysis using Osquery Part 2
91. Off-the-shelf RATs Targeting Pakistan
92. Malware Analysis using Osquery Part 1
93. Malicious Documents from Lazarus Group Targeting South Korea
94. GZipDe: An Encrypted Downloader Serving Metasploit
95. Satan Ransomware Spawns New Methods to Spread
96. Woman Pleads Guilty to DC CCTV Ransomware Blitz
97. Woman Pleads Guilty to DC CCTV Ransomware Blitz  …
98. Report: Cryptomining malware detections up more than 459 percent since 2017
99. The most dangerous mobile spyware, Pegasus that has infected 45 countries
100. Security data reveals worldwide malicious login attempts are on the rise
101. Why voice fraud rates continue to rise with no signs of slowing down

EXPLOIT

102. Discover how Tripwire Malware Detection... - Protects against zero-day exploits and other known threats. - Offers an enterprise view of suspicious malware objects across all monitored systems. - Protects from repeat #malware attacks. Learn more here:
103. Docker fave Alpine Linux suffers bug miscreants can exploit to poison containers
104. New Hacker Exploits and How to Fight Them

VULNERABILITY

105. Western Digital Releases Hotfix for My Cloud Auth Bypass Vulnerability
106. Critical Vulnerability Found in Cisco Video Surveillance Manager
107. Critical Vulnerability Found in Cisco Video Surveillance Manager
108. Expert disclosed an unpatched zero-day flaw in all supported versions of Microsoft Windows
109. Snap! Microsoft database flaw, internet to split? Plus, asteroid probed
110. Bug allowing unlimited spiceups in "Answer Question" section
111. Optional Cumulative Update KB4457139 for Windows 7 Released With Bug Fixes
112. Twitter Flaw Exposed Direct Messages To External Developers
113. Twitter Flaw Exposed Direct Messages To External Developers
114. Twitter API bug leaked private data to other accounts
115. Western Digital Releases Hotfix for My Cloud Auth Bypass Vulnerability
116. Twitter notifies users about API bug that shared DMs with wrong devs
117. Optional Cumulative Update KB4457139 for Windows 7 Released With Bug Fixes
118. ZDI Shares Details of Microsoft JET Database Zero-Day
119. Flaw in Western Digital My Cloud exposes the content to hackers
120. Twitter Bug May Have Sent your Direct Messages to Twitter Developers As Well
121. Unpatched Microsoft Zero-Day in JET Allows Remote Code-Execution
122. Discover how Tripwire Malware Detection... - Protects against zero-day exploits and other known threats. - Offers an enterprise view of suspicious malware objects across all monitored systems. - Protects from repeat #malware attacks. Learn more here:
123. Bitcoin flaw could have allowed dreaded 51% takeover
124. 0Day Windows JET Database Vulnerability disclosed by Zero Day Initiative
125. Microsoft's Jet crash: Zero-day flaw drops after deadline passes
126. Patch for EE's 4G Wi-Fi mini modem nails local privilege escalation flaw
127. 'I am admin' bug turns WD's My Cloud boxes into Everyone's Cloud
128. Docker fave Alpine Linux suffers bug miscreants can exploit to poison containers
129. When is a patch not a patch? When it's for this McAfee password bug
130. More Details on an ActiveX Vulnerability Recently Used to Target Users in South Korea
131. Researcher Discloses New Zero-Day Affecting All Versions of Windows
132. Rockwell Automation Patches Severe Flaws in Communications Software
133. Cisco releases fixes for remote code execution flaws in Webex Network Recording Player
134. Google Cloud Service launches automatic scanning of container vulnerabilities to enhance cloud environment security
135. CVE-2018-14829: Rockwell Automation Stack Overflow High Risk Vulnerability
136. Adobe Addresses a Number of Critical Remote Execution Vulnerabilities
137. Trend Micro Zero Day team discloses unpatched Microsoft Jet RCE vulnerability
138. Singapore to offer bug bounty, set up Asean cybersecurity centre
139. Cisco fixes Remote Code Execution flaws in Webex Network Recording Player
140. ZDI Exposed Unpatched Microsoft RCE Zero-day Flaw in Public After it Crossed the 120 Days Deadline
141. iOS Webkit flaw found that forces iPhone restart
142. Flaw in 4GEE WiFi Modem Could Leave Your Computer Vulnerable
143. Authentication Bypass Vulnerability Disclosed in Western Digital My Cloud NAS Devices