Threat report for 2018-09-28

DATA BREACH

1. Facebook leaks data (including private conversations) from 50 million accounts
2. Facebook leaks data (including private conversations) from 50 million accounts
3. Facebook hacked – 50 Million Users’ Data exposed in the security breach
4. Big Facebook data breach: 50 million accounts affected
5. Facebook Data Breach Impacts Almost 50 Million Accounts
6. Vulnerabilities in PureVPN Client Leak User Credentials
7. New Phishing Campaign Targets US Employees' Online Payrolls
8. 3 GOP senators doxed during Kavanaugh hearing
9. Chegg Resets Passwords After Data Breach That Affected 40 Million Users
10. Facebook Discloses Data Breach, 50 Million User Accounts Affected
11. United Nations data found exposed on web: researcher
12. Magecart campaign remains active
13. “Firefox Monitor” will allow users to check whether their personal information and passwords have been part of a data breach
14. Bupa fined £175,000 for 2017 data breach affecting 547,000 customers
15. The @ironscales #whitepaper explores how modern #phishing techniques, such as business email compromise (#BEC), #ransomware, spear-phishing and advanced persistent threats
16. United Nations data found exposed on web: researcher
17. How can live chat widgets leak personal employee data?
18. Chegg Data Breach Affects 40 Million Customers

DENIAL-OF-SERVICE

19. 7 new modules for VPNFilter malware, Hide & Seek botnet targets Android, and house oversight takes on AI | Avast
20. Torii malware could be gateway to more sophisticated IoT botnet attacks
21. Meet Torii, a Stealthy, Versatile and Highly Persistent IoT Botnet
22. Hide 'N Seek IoT Botnet Now Targets Android Devices
23. Who’s behind DDoS attacks at UK universities?
24. Stealthy and Persistent Torii IoT Botnet Infects Devices via Telnet
25. Meet Torii, a new IoT botnet far more sophisticated than Mirai variants
26. New "Torii" Botnet's Sophisticated Techniques Set It Apart From Mirai
27. Phorpiex bots target remote access servers to deliver ransomware
28. New Iot Botnet Torii Uses Six Methods for Persistence, Has No Clear Purpose
29. New "Torii" Botnet's Sophisticated Techniques Set It Apart From Mirai

MALVERTISING

Nothing to report

PHISHING

30. Aspire Health, Another Healthcare Firm as a Phishing Victim
31. New Phishing Campaign Targets US Employees' Online Payrolls
32. Learn how our @PhishingAI successfully detected a custom #phishing kit targeted at the DNC last month:
33. Chegg forces password reset on 40 million users
34. SHEIN breach exposes emails, encrypted passwords of 6.42M customers
35. Do you know the top myths and facts of #mobile #phishing? If not, don't worry, we've compiled a list of
36. Android App Verification Issues Pave Way For Phishing Attacks
37. Facebook Resets 90 Million User Passwords as Flaw is Discovered
38. Facebook Resets 90 Million User Passwords as Flaw is Discovered
39. Chegg Resets Passwords After Data Breach That Affected 40 Million Users
40. Android password managers vulnerable to phishing apps
41. “Firefox Monitor” will allow users to check whether their personal information and passwords have been part of a data breach
42. The @ironscales #whitepaper explores how modern #phishing techniques, such as business email compromise (#BEC), #ransomware, spear-phishing and advanced persistent threats
43. Power to the people! Google backtracks (a bit) on forced Chrome logins
44. Microsoft is trying to kill passwords in Azure AD application
45. Android password managers not as secure as desktop counterparts
46. 7 Most Prevalent Phishing Subject Lines

WEB DEFACEMENT

Nothing to report

MALWARE

47. Port of San Diego suffers ransomware attack | Avast
48. Port of San Diego suffers ransomware attack | Avast
49. Russian Sednit APT used the first UEFI rootkit of ever in attacks in the wild
50. Zoho Was Blacklisted by Domain Registrar TierraNet
51. The Week in Ransomware - September 28th 2018 - RDP and gandCrab
52. 7 new modules for VPNFilter malware, Hide & Seek botnet targets Android, and house oversight takes on AI | Avast
53. 'Torii' Breaks New Ground For IoT Malware
54. Port of San Diego, The Newest Victim of Ransomware Attack
55. Powerful Ransomware Attack Hit on Port of San Diego
56. Torii malware could be gateway to more sophisticated IoT botnet attacks
57. Docs reveal how Fruitfly Mac spyware initially spread
58. Fancy Bear’s Lojax is First UEFI Rootkit in the Wild
59. FBI solves mystery surrounding 15-year-old Fruitfly Mac malware
60. USB malware and cryptominers are threat to emerging markets
61. Potential Misuse of Legitimate Websites to Avoid Malware Detection
62. Port of San Diego Suffers Ransomware Attack
63. Delphi Packer Increasingly Used to Evade Malware Classification
64. QRecorder app in the Play Store was hiding a Banking Trojan that targets European banks
65. The @ironscales #whitepaper explores how modern #phishing techniques, such as business email compromise (#BEC), #ransomware, spear-phishing and advanced persistent threats
66. Port of San Diego Hit by Ransomware
67. Fancy Bear Attacks Governments Using LoJax UEFI Rootkit
68. Windows 10 security: Here's how we're hitting back at fileless malware, says Microsoft
69. Resident evil: Inside a UEFI rootkit used to spy on govts, made by you-know-who (hi, Russia)
70. Sunny Cali goes ballistic, this ransomware is atrocious. Even our IT bill will be something quite ferocious
71. Fancy Bear still Putin out new modules for VPNFilter malware
72. How Data Security Improves When You Engage Employees in the Process
73. Users Clicking Through Warnings, Leading to RAT Infections
74. Google Play Store Swarmed with Malware
75. Phorpiex bots target remote access servers to deliver ransomware
76. Port of San Diego Suffers Ransomware Attack
77. ICS Cybersecurity: Visibility, Protective Controls & Continuous Monitoring
78. ICS Cybersecurity: Visibility, Protective Controls & Continuous Monitoring

EXPLOIT

79. Tripwire Patch Priority Index for September 2018
80. IC3 Alerts of Increasing Danger of RDP Exploitation Attacks
81. Google Hacker Discloses New Linux Kernel Vulnerability and PoC Exploit

VULNERABILITY

82. CVE-2018-11776 RCE Flaw in Apache Struts Could Be Root Cause of Clamorous Hacks
83. Critical Security Vulnerability in Facebook Affects 50 million Users!
84. Facebook Security Bug Affects 90M Users
85. [SingCERT] Alert on 14 High-Severity Vulnerabilities in Cisco Products
86. Another Linux Kernel Bug Surfaces, Allowing Root Access
87. Vulnerabilities in PureVPN Client Leak User Credentials
88. FBI IC3 Warns of RDP Vulnerability
89. Facebook Vulnerability Affecting 50 Million Users Allowed Account Takeover
90. Facebook Resets 90 Million User Passwords as Flaw is Discovered
91. Facebook Resets 90 Million User Passwords as Flaw is Discovered
92. Hackers Stole 50 Million Facebook Users' Access Tokens Using Zero-Day Flaw
93. Researchers: 11-Year-Old Flaw in Vote Scanner Still Unfixed
94. Facebook: 50 million accounts impacted by security flaw
95. 'Mutagen Astronomy' Linux kernel vulnerability sighted
96. SECURITY UPDATE: Facebook said a breach affected 50 million people on the social network. The vulnerability stemmed from Facebook's "View As"
97. Connected car cyber-security getting better, fewer critical vulnerabilities found
98. No Patches for Critical Flaws in Fuji Electric Servo System, Drives
99. CVE-2018-1718 -Google Project Zero reports a new Linux Kernel flaw
100. Vulnerabilities and architectural considerations in industrial control systems
101. Google Project Zero Discloses New Linux Kernel Flaw
102. Google Hacker Discloses New Linux Kernel Vulnerability and PoC Exploit
103. Tripwire Patch Priority Index for September 2018