Threat report for 2018-09-25

DATA BREACH

1. Ex-NSA Hacker Sentenced to Jail Over Kaspersky Leak
2. Malware on SHEIN Servers Compromises Data of 6.4M Customers
3. Mozilla Launches Firefox Monitor Data Breach Notification Service
4. Third-Party Patch Available for Microsoft JET Database Zero-Day
5. 130 Million Hotel Customers Breached Due to Exposed Database
6. State Department data breach exposes employee info (w/ commentary from @TripwireInc’s @craigtweets http://bit.ly/2MTcplE
7. New Adwind RAT Campaign Targets Windows, Linux and Mac Users
8. Shein Data Breach Exposes Personal Data and Email Address of 6.42 Million Customers
9. SHEIN Data breach affected 6.42 million users
10. Security In The Crypto World: Exchanges, Wallets, Personal Data. Kiev To Host The Largest Cybersecurity Forum In Eastern Europe
11. Symantec accountancy audit uncovers customer transaction recorded as revenue
12. NewsNow suffers security breach - passwords should be considered compromised
13. First known malicious cryptomining campaign targeting Kodi discovered
14. SHEIN-Fashion Shopping Site Suffers Data Breach Affecting 6.5 Million Users
15. macOS zero-day vulnerability leads to user data leaks
16. How Long Does it Take to Find Compromised Data
17. DBeaver Community Edition 5.2.1 Releases: Free universal database tool and SQL client

DENIAL-OF-SERVICE

18. DDoS Attack on Infinite Campus Limits Parent Access http://dlvr.it/QlL12Z
19. DDoS Attack on Infinite Campus Limits Parent Access https://www.infosecurity-magazine.com/news/ddos-attacks-infinite-campus?utm_source=twitterfeed&utm_medium=twitter …
20. DDoS attack on education vendor hinders access to districts’ online portals
21. Bitcoin Core Team fixes a critical DDoS flaw in wallet software
22. Some credential-stuffing botnets don't care about being noticed any more
23. Advanced DDoS Detection and Defense
24. ZombieBoy
25. Bitcoin Core Software Patches a Critical DDoS Attack Vulnerability

MALVERTISING

Nothing to report

PHISHING

26. Firefox Monitor provides password breach alerts, Would it convince you to set up a Firefox Account
27. GrrCon Augusta 2018, Rachel Giacobozzi’s ‘The Hybrid Analyst: How Phishing Created A New Type Of Intel Analyst’
28. Tomorrow: Go beyond the usual defenses and *really* protect your email from #spearphishing attacks. Find out how with @AlexanderGTster and @illena_a from @SCmagazine. http://www.workcast.com/register?cpak=2026696370909275&referrer=valimailA …
29. Cisco patches critical default password vulnerability
30. Security researcher fined for hacking hotel Wi-Fi and putting passwords on the internet
31. Users fret over Chrome auto-login change
32. Security Engineer Hacks Hotel WiFi, Fined for Exposing Admin Password
33. AdGuard adblocker resets passwords after credential-stuffing attack
34. 5 Notable Security Incidents that Recently Affected Federal Entities https://tripwire.me/2xGwKoH
35. Anti-Phishing Requires A Three-Pronged Strategy https://www.infosecurity-magazine.com/white-papers/antiphishing-requires-threepronged?utm_source=twitterfeed&utm_medium=twitter …
36. Microsoft: Here's why we're declaring end of password era
37. Microsoft 'kills' passwords, throws up threat manager, APIs Graph Security
38. Baddies just need one email account with clout to unleash phishing hell
39. Why Was Equifax So Stupid About Passwords?
40. NewsNow suffers security breach - passwords should be considered compromised
41. Cisco patches critical default password vulnerability
42. 5 Notable Security Incidents that Recently Affected Federal Entities https://tripwire.me/2xGwKoH

WEB DEFACEMENT

Nothing to report

MALWARE

43. The MITRE ATT&CK Framework: Exfiltration https://tripwire.me/2NDbSJV
44. Malware on SHEIN Servers Compromises Data of 6.4M Customers
45. Operator of Scan4You Malware-Scanning sentenced to 14 Years in prison
46. New Adwind RAT Campaign Targets Windows, Linux and Mac Users
47. Cryptomining Malware Continues Rapid Growth: Report
48. Freelancers baited with job offers to download malicious macros
49. DanaBot trojan sets sights on Europe, new features
50. Crooks turn to Delphi packers to evade malware detection
51. Mac Mojave Zero-Day Allows Malicious Apps to Access Sensitive Info
52. Astaroth Trojan Resurges in South America
53. BrandPost: Malicious Tactics Have Evolved: Your DNS Needs to, Too
54. Bloodhound – A Tool For Exploring Active Directory Domain Security
55. #SecurityNews: #Cryptocurrency mining soars 459% from 2017 to 2018 with no indication of slowing down. Read more about this story here: https://bit.ly/2PXYSew
56. #SecurityNews: Scottish #Brewery recovers from #ransomware attack. #Arran Brewery in Scotland, received what they thought was a cover letter as part of a job application, but the email attachment contained malware. Read more here: https://bit.ly/2PYAR7k
57. Man gets two years in prison for sabotaging US Army servers with 'logic bomb'
58. Malware Analysis using Osquery Part 2
59. Off-the-shelf RATs Targeting Pakistan
60. Malware Analysis using Osquery Part 1
61. Malicious Documents from Lazarus Group Targeting South Korea
62. GZipDe: An Encrypted Downloader Serving Metasploit
63. Satan Ransomware Spawns New Methods to Spread
64. MassMiner Malware Targeting Web Servers
65. 14 years prison for man who helped hackers evade detection by anti-virus software
66. USB threats from malware to miners
67. DanaBot trojan sets sights on Europe, new features
68. Stealthy cryptomining apps still on Google Play
69. New Version of GandCrab Ransomware Appends 5 Character Extension To Encrypted Files
70. First known malicious cryptomining campaign targeting Kodi discovered
71. 14 years prison for man who helped hackers evade detection by anti-virus software
72. New malware-as-a-service, Black Rose Lucy targets Android devices
73. Domain registrar oversteps taking down Zoho domain, impacts over 30Mil users

EXPLOIT

74. New CVE-2018-8373 Exploit Spotted in the Wild

VULNERABILITY

75. Open-source reuse has left Android’s most-popular apps laced with critical vulnerabilities
76. Monero bug could have allowed hackers to steal massive amounts of cryptocurrency
77. New Linux 'Mutagen Astronomy' security flaw impacts Red Hat and CentOS distros
78. Third-Party Patch Available for Microsoft JET Database Zero-Day
79. Over 80 Cisco Products Affected by FragmentSmack DoS Bug
80. MacOS Mojave zero-day privacy vulnerability uncovered
81. Snyk gets $22 million for platform that tracks security flaws in open source projects
82. Cisco patches critical default password vulnerability
83. Twitter fixes API bug that shared data with wrong developers
84. Mac Mojave Zero-Day Allows Malicious Apps to Access Sensitive Info
85. Bitcoin Core Team fixes a critical DDoS flaw in wallet software
86. No Takers for Zero-Day Vulnerabilities on the Dark Web
87. macOS Mojave Patches Vulnerabilities, But New Flaws Already Emerge
88. New CVE-2018-8373 Exploit Spotted in the Wild
89. More Details on an ActiveX Vulnerability Recently Used to Target Users in South Korea
90. Vulnerability Spotlight: Epee Levin Packet Deserialization Code Execution Vulnerability
91. Twitter fixes API bug that shared data with wrong developers
92. Cisco patches critical default password vulnerability
93. White hat hacker found a macOS Mojave privacy bypass 0-day flaw on release day
94. macOS zero-day vulnerability leads to user data leaks
95. Bitcoin Core Software Patches a Critical DDoS Attack Vulnerability
96. Vulnerability in macOS Mojave allows access to protected files
97. Firefox bugs can cause browsers and even the entire operating system to crash directly
98. Why the market for zero-day vulnerabilities on the dark web is vanishing