APT report for 2018-10-30

TRANSNATIONAL / UNKNOWN

1. Treat or Trick? Six Dangerous Digital Threats Dressed up As Irresistible Treats

CHINA

2. MadoMiner Part 2 - Mask

INDIA

Nil

NORTH KOREA

Nil

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

Nil

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-10-30

WINDOWS

1. Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims
2. Kraken Cryptor Ransomware Gains Popularity Among Cybercriminals
3. Apple Fixes Creepy FaceTime Vulnerability, Crash Bug in macOS, and More
4. Zero-day Windows Deletebug: How to squash this ‘low-quality' pest
5. Ransomware Threat Continues: How Infections Take Place
6. Windows Zero-Day Vulnerability Disclosed
7. Treat or Trick? Six Dangerous Digital Threats Dressed up As Irresistible Treats
8. The analysis of the attack which uses Excel 4.0 macro to avoid antivirus software detection
9. MadoMiner Part 2 - Mask
10. Windows 10 Bug Let UWP Apps Access All Files Without Users' Consent
11. Feature to attach video to Word files could be used to send malicious code

LINUX

12. CVE-2018-15688: systemd remote code execution vulnerability affects Linux machines
13. An Update on the jQuery-File-Upload Vulnerability
14. Libssh Vulnerability Leaves Servers Open to Unauthorized Access
15. Demonbot targets cloud servers for DDoS attacks
16. New Botnet That Targets Cloud Servers for DDoS Attacks
17. Multiple Linux distributions affected by new vulnerability

UNIX

18. Multiple Linux distributions affected by new vulnerability

ANDROID

19. Malicious Apps Removed From Google Play Store
20. Treat or Trick? Six Dangerous Digital Threats Dressed up As Irresistible Treats
21. Cell Phone Security and Heads of State
22. Prominent #malspam #Nymaim campaign with #BankBot #Anubis for Android UA. APK's dropped from hxxp://pobierz48[.]tk/ SHA256: e0d17f4ff0196c6527f8aa47b3ef220d0f4e712805f99d38a0804f3ea9506ece @ThreatFabric @virqdroid @LukasStefanko @
23. Another #BianLian Android banking #Trojan in #GooglePlay showing his other face by dropping #RedAlert v2.1 CC @Bank_Security @

IOS

24. Apple Fixes Creepy FaceTime Vulnerability, Crash Bug in macOS, and More
25. Cell Phone Security and Heads of State

MACOS

26. Apple Fixes Creepy FaceTime Vulnerability, Crash Bug in macOS, and More
27. macOS Cryptomining Malware on the Rise

Threat report for 2018-10-30

DATA BREACH & DATA LOSS

1. How database hacks could impact elections and voters' fears
2. Girl Scouts data breach exposed personal information of 2,800 members
3. How database hacks could impact elections and voters' fears
4. Parties Seek to Settle Yahoo Data Breach Class Action for $50M
5. Center for Internet Security looks to expand threat sharing program to political campaigns
6. Internet-Exposed HMIs Put Energy, Water Facilities at Risk: Report
7. New SamSam ransomware campaign aims at targets across the US
8. An Update on the jQuery-File-Upload Vulnerability
9. Millions of Voter Records Up for Sale Ahead of the US Midterm Elections
10. Prominent #malspam #Nymaim campaign with #BankBot #Anubis for Android UA. APK's dropped from hxxp://pobierz48[.]tk/ SHA256: e0d17f4ff0196c6527f8aa47b3ef220d0f4e712805f99d38a0804f3ea9506ece @ThreatFabric @virqdroid @LukasStefanko @
11. Disrupting the Flow: Exposed and Vulnerable Water and Energy Infrastructures
12. Thousands of critical energy and water systems exposed online for anyone to exploit
13. If it's only able to leak data at 15 bits per hour, is #NetSpectre a serious threat? Learn more about
14. An email hack affecting the Girl Scouts of Orange County, Calif. may have compromised the personal data of 2,800 members
15. La tua azienda è davvero preparata in caso di data breach?
16. By me @Forbes: 81.5M Voter Records For Sale On Dark Web Ahead Of Midterm Elections
17. Compression File Formats of the past Come Haunting in Spam Campaigns
18. Biggest data breach penalties for 2018
19. New McAfee Report Reveals Data in the Cloud More Exposed Than Organizations Think

DENIAL-OF-SERVICE

20. Judge Ordered Man to Pay $8 Million for Launching a DDoS Attack Against Rutgers
21. Demonbot targets cloud servers for DDoS attacks
22. New Botnet That Targets Cloud Servers for DDoS Attacks
23. Anonymous knocks out Gabon government sites with DoS attack
24. Prominent #malspam #Nymaim campaign with #BankBot #Anubis for Android UA. APK's dropped from hxxp://pobierz48[.]tk/ SHA256: e0d17f4ff0196c6527f8aa47b3ef220d0f4e712805f99d38a0804f3ea9506ece @ThreatFabric @virqdroid @LukasStefanko @

MALVERTISING

Nil

PHISHING

25. 4 tips to keep safe when phishing for treats this Halloween
26. AI-Facilitated Product Aims to Stop Spear-Phishing Attacks
27. INKY emerges from stealth with email spoofing, phishing protection service
28. Is it a Phish? Halloween Edition
29. There are plenty of different types of phishing attacks, but they all rely on the same basic mechanism: exploiting human
30. Report on Phishing Attack Shows Microsoft, Paypal as well as Netflix as the Top Targets
31. Cofense Triggers its Increased Phishing Defense Services

WEB DEFACEMENT

Nil

BOTNET

32. Bushido Botnet Offered as MaaS
33. New Botnet That Targets Cloud Servers for DDoS Attacks
34. The author of the Mirai botnet gets six months of house arrest
35. The Russian built #VPNFilter #botnet was previously taken down after 500,000 routers were infected. However, recently it attempted a comeback.
36. Recently discovered DemonBot Botnet targets Hadoop servers

RANSOMWARE

37. Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims
38. Kraken Cryptor Ransomware Gains Popularity Among Cybercriminals
39. SamSam ransomware group has hit 67 organizations in 2018, researchers say
40. Ransomware Threat Continues: How Infections Take Place
41. New SamSam ransomware campaign aims at targets across the US
42. GandCrab: The Most Popular Multi-Million Dollar Ransomware of the Year
43. SamSam: Targeted Ransomware Attacks Continue
44. Threat Report: Jaff Ransomware Causes Havoc
45. CommonRansom Ransomware Demands RDP Access to Decrypt Files

CRYPTOMINING & CRYPTOCURRENCIES

46. Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims
47. Kraken Cryptor Ransomware Gains Popularity Among Cybercriminals
48. Bitcoin Dealer Who Operated Unlicensed Bitcoin Exchange Faces Five Years in Jail
49. Kraken Resurfaces From the Deep Web
50. macOS Cryptomining Malware on the Rise
51. 3 Reasons Enterprises Are Moving to Decentralized Blockchain Applications
52. Widely Used Cryptocurrency App Launching 2 Different Powerful Backdoor on Mac Users

MALWARE

53. Malware Targeting Smartphones via Three DSP Providers
54. GPlayed Trojan's Baby Brother Is After Your Bank Account
55. macOS Cryptomining Malware on the Rise
56. Malware Infection at USGS Traced to Employee’s Habit of Viewing Adult Content
57. Malicious Apps Removed From Google Play Store
58. .@FireEye security researchers claimed the Russian government was 'most likely' behind the #Triton #Malware attack on an industrial control system
59. Employee Watched Porn at Work via 9000 Web pages Drops Malware on U.S Government Network
60. A fed visited 9,000 porn sites, infecting government networks with Russian malware
61. GPlayed Trojan's baby brother is after your bank account
62. Nastiest malware of 2018: Top attack payloads wreaking havoc
63. Snakes in the grass! Malicious code slithers into Python PyPI repository
64. The analysis of the attack which uses Excel 4.0 macro to avoid antivirus software detection
65. Prominent #malspam #Nymaim campaign with #BankBot #Anubis for Android UA. APK's dropped from hxxp://pobierz48[.]tk/ SHA256: e0d17f4ff0196c6527f8aa47b3ef220d0f4e712805f99d38a0804f3ea9506ece @ThreatFabric @virqdroid @LukasStefanko @
66. How to Be Protected from Malicious Message Crashing PS4 Console
67. Another #BianLian Android banking #Trojan in #GooglePlay showing his other face by dropping #RedAlert v2.1 CC @Bank_Security @
68. Widely Used Cryptocurrency App Launching 2 Different Powerful Backdoor on Mac Users
69. Attackers getting better at quickly generating countless versions of existing #malware #antivirus @MariaKorolov -
70. Malicious hackers and their interest in bypassing CAPTCHA
71. Feature to attach video to Word files could be used to send malicious code
72. Most Important Security Tools and Resources For Security Researcher and Malware Analyst
73. A good insight for Europeans on the process of the US mid-term elections and whether or it they are hackable

EXPLOIT

74. Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims
75. Thousands of critical energy and water systems exposed online for anyone to exploit

VULNERABILITY

76. Apple Fixes Creepy FaceTime Vulnerability, Crash Bug in macOS, and More
77. Talos Vulnerability Discovery Year in Review – 2018
78. CVE-2018-15688: systemd remote code execution vulnerability affects Linux machines
79. A #RemoteCodeExecution flaw in @Cisco Webex -- called WebExec -- could be an easy vector for insider attacks, and the
80. Zero-day Windows Deletebug: How to squash this ‘low-quality' pest
81. Microsoft Office Vulnerability Found, Check Point Research To The Rescue
82. An Update on the jQuery-File-Upload Vulnerability
83. Libssh Vulnerability Leaves Servers Open to Unauthorized Access
84. Windows Zero-Day Vulnerability Disclosed
85. .@Siemens SICLOCK central plant clocks were recently found to be affected by several vulnerabilities, some of which have been rated
86. Talos Vulnerability Discovery Year in Review - 2018
87. 92% of External Web Apps Have Exploitable Security Flaws or Weaknesses: Report
88. Windows 10 Bug Let UWP Apps Access All Files Without Users' Consent
89. Unpatched MS Word Flaw Could Allow Hackers to Infect Your Computer
90. Multiple Linux distributions affected by new vulnerability
91. Spring Framework 5.1.2 releases: bugs fix

Region brief for 2018-10-30

ASIA

1. Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims
2. Kraken Cryptor Ransomware Gains Popularity Among Cybercriminals
3. Parties Seek to Settle Yahoo Data Breach Class Action for $50M
4. macOS Cryptomining Malware on the Rise
5. Ransomware Threat Continues: How Infections Take Place
6. .@FireEye security researchers claimed the Russian government was 'most likely' behind the #Triton #Malware attack on an industrial control system
7. Cell Phone Security and Heads of State
8. Disrupting the Flow: Exposed and Vulnerable Water and Energy Infrastructures

OCEANIA

Nil

NORTH AMERICA

9. Kraken Cryptor Ransomware Gains Popularity Among Cybercriminals
10. Girl Scouts data breach exposed personal information of 2,800 members
11. SamSam ransomware group has hit 67 organizations in 2018, researchers say
12. Parties Seek to Settle Yahoo Data Breach Class Action for $50M
13. Bitcoin Dealer Who Operated Unlicensed Bitcoin Exchange Faces Five Years in Jail
14. Malware Targeting Smartphones via Three DSP Providers
15. macOS Cryptomining Malware on the Rise
16. Malware Infection at USGS Traced to Employee’s Habit of Viewing Adult Content
17. Ransomware Threat Continues: How Infections Take Place
18. New SamSam ransomware campaign aims at targets across the US
19. Employee Watched Porn at Work via 9000 Web pages Drops Malware on U.S Government Network
20. Treat or Trick? Six Dangerous Digital Threats Dressed up As Irresistible Treats
21. SamSam: Targeted Ransomware Attacks Continue
22. Is it a Phish? Halloween Edition
23. Threat Report: Jaff Ransomware Causes Havoc
24. Cell Phone Security and Heads of State
25. Millions of Voter Records Up for Sale Ahead of the US Midterm Elections
26. There are plenty of different types of phishing attacks, but they all rely on the same basic mechanism: exploiting human
27. 92% of External Web Apps Have Exploitable Security Flaws or Weaknesses: Report
28. Disrupting the Flow: Exposed and Vulnerable Water and Energy Infrastructures
29. The author of the Mirai botnet gets six months of house arrest
30. A good insight for Europeans on the process of the US mid-term elections and whether or it they are hackable

SOUTH AMERICA

31. Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims
32. Kraken Cryptor Ransomware Gains Popularity Among Cybercriminals
33. Ransomware Threat Continues: How Infections Take Place

EUROPE

34. Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims
35. Kraken Cryptor Ransomware Gains Popularity Among Cybercriminals
36. .@FireEye security researchers claimed the Russian government was 'most likely' behind the #Triton #Malware attack on an industrial control system
37. Treat or Trick? Six Dangerous Digital Threats Dressed up As Irresistible Treats
38. A fed visited 9,000 porn sites, infecting government networks with Russian malware
39. Threat Report: Jaff Ransomware Causes Havoc
40. Cell Phone Security and Heads of State
41. Disrupting the Flow: Exposed and Vulnerable Water and Energy Infrastructures
42. The author of the Mirai botnet gets six months of house arrest
43. The Russian built #VPNFilter #botnet was previously taken down after 500,000 routers were infected. However, recently it attempted a comeback.

AFRICA

44. Cell Phone Security and Heads of State
45. Anonymous knocks out Gabon government sites with DoS attack

Sector brief for 2018-10-30

HEALTHCARE

1. SamSam ransomware group has hit 67 organizations in 2018, researchers say
2. Is it a Phish? Halloween Edition
3. An email hack affecting the Girl Scouts of Orange County, Calif. may have compromised the personal data of 2,800 members

TRANSPORT

4. Spring Framework 5.1.2 releases: bugs fix

BANKING & FINANCE

5. Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims
6. Kraken Cryptor Ransomware Gains Popularity Among Cybercriminals
7. Parties Seek to Settle Yahoo Data Breach Class Action for $50M
8. Bitcoin Dealer Who Operated Unlicensed Bitcoin Exchange Faces Five Years in Jail
9. GPlayed Trojan's Baby Brother Is After Your Bank Account
10. Ransomware Threat Continues: How Infections Take Place
11. GandCrab: The Most Popular Multi-Million Dollar Ransomware of the Year
12. Treat or Trick? Six Dangerous Digital Threats Dressed up As Irresistible Treats
13. GPlayed Trojan's baby brother is after your bank account
14. Nastiest malware of 2018: Top attack payloads wreaking havoc
15. Threat Report: Jaff Ransomware Causes Havoc
16. CommonRansom Ransomware Demands RDP Access to Decrypt Files
17. Another #BianLian Android banking #Trojan in #GooglePlay showing his other face by dropping #RedAlert v2.1 CC @Bank_Security @

INFORMATION & TELECOMMUNICATION

18. Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims
19. macOS Cryptomining Malware on the Rise
20. Zero-day Windows Deletebug: How to squash this ‘low-quality' pest
21. Ransomware Threat Continues: How Infections Take Place
22. INKY emerges from stealth with email spoofing, phishing protection service
23. Is it a Phish? Halloween Edition
24. MadoMiner Part 2 - Mask
25. Prominent #malspam #Nymaim campaign with #BankBot #Anubis for Android UA. APK's dropped from hxxp://pobierz48[.]tk/ SHA256: e0d17f4ff0196c6527f8aa47b3ef220d0f4e712805f99d38a0804f3ea9506ece @ThreatFabric @virqdroid @LukasStefanko @
26. Disrupting the Flow: Exposed and Vulnerable Water and Energy Infrastructures
27. An email hack affecting the Girl Scouts of Orange County, Calif. may have compromised the personal data of 2,800 members
28. Another #BianLian Android banking #Trojan in #GooglePlay showing his other face by dropping #RedAlert v2.1 CC @Bank_Security @
29. Multiple Linux distributions affected by new vulnerability
30. Feature to attach video to Word files could be used to send malicious code
31. New McAfee Report Reveals Data in the Cloud More Exposed Than Organizations Think
32. A good insight for Europeans on the process of the US mid-term elections and whether or it they are hackable

FOOD

Nil

WATER

33. Disrupting the Flow: Exposed and Vulnerable Water and Energy Infrastructures

ENERGY

34. Internet-Exposed HMIs Put Energy, Water Facilities at Risk: Report
35. Cell Phone Security and Heads of State
36. Disrupting the Flow: Exposed and Vulnerable Water and Energy Infrastructures
37. Thousands of critical energy and water systems exposed online for anyone to exploit

GOVERNMENT & PUBLIC SERVICE

38. How database hacks could impact elections and voters' fears
39. How database hacks could impact elections and voters' fears
40. Center for Internet Security looks to expand threat sharing program to political campaigns
41. Ransomware Threat Continues: How Infections Take Place
42. .@FireEye security researchers claimed the Russian government was 'most likely' behind the #Triton #Malware attack on an industrial control system
43. Employee Watched Porn at Work via 9000 Web pages Drops Malware on U.S Government Network
44. A fed visited 9,000 porn sites, infecting government networks with Russian malware
45. Cell Phone Security and Heads of State
46. Millions of Voter Records Up for Sale Ahead of the US Midterm Elections
47. Anonymous knocks out Gabon government sites with DoS attack
48. The author of the Mirai botnet gets six months of house arrest
49. By me @Forbes: 81.5M Voter Records For Sale On Dark Web Ahead Of Midterm Elections
50. A good insight for Europeans on the process of the US mid-term elections and whether or it they are hackable

Daily brief for 2018-10-30

ASIA

1. Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims
2. Kraken Cryptor Ransomware Gains Popularity Among Cybercriminals
3. Parties Seek to Settle Yahoo Data Breach Class Action for $50M
4. macOS Cryptomining Malware on the Rise
5. Ransomware Threat Continues: How Infections Take Place
6. .@FireEye security researchers claimed the Russian government was 'most likely' behind the #Triton #Malware attack on an industrial control system
7. Cell Phone Security and Heads of State
8. Disrupting the Flow: Exposed and Vulnerable Water and Energy Infrastructures

WORLD

9. Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims
10. Kraken Cryptor Ransomware Gains Popularity Among Cybercriminals
11. Girl Scouts data breach exposed personal information of 2,800 members
12. SamSam ransomware group has hit 67 organizations in 2018, researchers say
13. Parties Seek to Settle Yahoo Data Breach Class Action for $50M
14. Bitcoin Dealer Who Operated Unlicensed Bitcoin Exchange Faces Five Years in Jail
15. Malware Targeting Smartphones via Three DSP Providers
16. macOS Cryptomining Malware on the Rise
17. Malware Infection at USGS Traced to Employee’s Habit of Viewing Adult Content
18. Ransomware Threat Continues: How Infections Take Place
19. New SamSam ransomware campaign aims at targets across the US
20. .@FireEye security researchers claimed the Russian government was 'most likely' behind the #Triton #Malware attack on an industrial control system
21. Employee Watched Porn at Work via 9000 Web pages Drops Malware on U.S Government Network
22. Treat or Trick? Six Dangerous Digital Threats Dressed up As Irresistible Treats
23. SamSam: Targeted Ransomware Attacks Continue
24. Is it a Phish? Halloween Edition
25. A fed visited 9,000 porn sites, infecting government networks with Russian malware
26. Threat Report: Jaff Ransomware Causes Havoc
27. Cell Phone Security and Heads of State
28. Millions of Voter Records Up for Sale Ahead of the US Midterm Elections
29. There are plenty of different types of phishing attacks, but they all rely on the same basic mechanism: exploiting human
30. 92% of External Web Apps Have Exploitable Security Flaws or Weaknesses: Report
31. Anonymous knocks out Gabon government sites with DoS attack
32. Disrupting the Flow: Exposed and Vulnerable Water and Energy Infrastructures
33. The author of the Mirai botnet gets six months of house arrest
34. The Russian built #VPNFilter #botnet was previously taken down after 500,000 routers were infected. However, recently it attempted a comeback.
35. A good insight for Europeans on the process of the US mid-term elections and whether or it they are hackable

ATTACKS

36. 4 tips to keep safe when phishing for treats this Halloween
37. How database hacks could impact elections and voters' fears
38. Girl Scouts data breach exposed personal information of 2,800 members
39. How database hacks could impact elections and voters' fears
40. Parties Seek to Settle Yahoo Data Breach Class Action for $50M
41. Center for Internet Security looks to expand threat sharing program to political campaigns
42. AI-Facilitated Product Aims to Stop Spear-Phishing Attacks
43. Internet-Exposed HMIs Put Energy, Water Facilities at Risk: Report
44. New SamSam ransomware campaign aims at targets across the US
45. An Update on the jQuery-File-Upload Vulnerability
46. INKY emerges from stealth with email spoofing, phishing protection service
47. Is it a Phish? Halloween Edition
48. Millions of Voter Records Up for Sale Ahead of the US Midterm Elections
49. There are plenty of different types of phishing attacks, but they all rely on the same basic mechanism: exploiting human
50. Prominent #malspam #Nymaim campaign with #BankBot #Anubis for Android UA. APK's dropped from hxxp://pobierz48[.]tk/ SHA256: e0d17f4ff0196c6527f8aa47b3ef220d0f4e712805f99d38a0804f3ea9506ece @ThreatFabric @virqdroid @LukasStefanko @
51. Disrupting the Flow: Exposed and Vulnerable Water and Energy Infrastructures
52. Thousands of critical energy and water systems exposed online for anyone to exploit
53. If it's only able to leak data at 15 bits per hour, is #NetSpectre a serious threat? Learn more about
54. An email hack affecting the Girl Scouts of Orange County, Calif. may have compromised the personal data of 2,800 members
55. La tua azienda è davvero preparata in caso di data breach?
56. By me @Forbes: 81.5M Voter Records For Sale On Dark Web Ahead Of Midterm Elections
57. Compression File Formats of the past Come Haunting in Spam Campaigns
58. Report on Phishing Attack Shows Microsoft, Paypal as well as Netflix as the Top Targets
59. Cofense Triggers its Increased Phishing Defense Services
60. Biggest data breach penalties for 2018
61. New McAfee Report Reveals Data in the Cloud More Exposed Than Organizations Think

THREATS

62. Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims
63. Kraken Cryptor Ransomware Gains Popularity Among Cybercriminals
64. SamSam ransomware group has hit 67 organizations in 2018, researchers say
65. Apple Fixes Creepy FaceTime Vulnerability, Crash Bug in macOS, and More
66. Talos Vulnerability Discovery Year in Review – 2018
67. Bitcoin Dealer Who Operated Unlicensed Bitcoin Exchange Faces Five Years in Jail
68. Kraken Resurfaces From the Deep Web
69. Malware Targeting Smartphones via Three DSP Providers
70. GPlayed Trojan's Baby Brother Is After Your Bank Account
71. macOS Cryptomining Malware on the Rise
72. CVE-2018-15688: systemd remote code execution vulnerability affects Linux machines
73. A #RemoteCodeExecution flaw in @Cisco Webex -- called WebExec -- could be an easy vector for insider attacks, and the
74. Zero-day Windows Deletebug: How to squash this ‘low-quality' pest
75. Microsoft Office Vulnerability Found, Check Point Research To The Rescue
76. Malware Infection at USGS Traced to Employee’s Habit of Viewing Adult Content
77. Ransomware Threat Continues: How Infections Take Place
78. New SamSam ransomware campaign aims at targets across the US
79. An Update on the jQuery-File-Upload Vulnerability
80. Libssh Vulnerability Leaves Servers Open to Unauthorized Access
81. Windows Zero-Day Vulnerability Disclosed
82. Malicious Apps Removed From Google Play Store
83. .@FireEye security researchers claimed the Russian government was 'most likely' behind the #Triton #Malware attack on an industrial control system
84. Employee Watched Porn at Work via 9000 Web pages Drops Malware on U.S Government Network
85. GandCrab: The Most Popular Multi-Million Dollar Ransomware of the Year
86. SamSam: Targeted Ransomware Attacks Continue
87. A fed visited 9,000 porn sites, infecting government networks with Russian malware
88. GPlayed Trojan's baby brother is after your bank account
89. .@Siemens SICLOCK central plant clocks were recently found to be affected by several vulnerabilities, some of which have been rated
90. Nastiest malware of 2018: Top attack payloads wreaking havoc
91. Threat Report: Jaff Ransomware Causes Havoc
92. Snakes in the grass! Malicious code slithers into Python PyPI repository
93. CommonRansom Ransomware Demands RDP Access to Decrypt Files
94. Talos Vulnerability Discovery Year in Review - 2018
95. The analysis of the attack which uses Excel 4.0 macro to avoid antivirus software detection
96. 92% of External Web Apps Have Exploitable Security Flaws or Weaknesses: Report
97. Prominent #malspam #Nymaim campaign with #BankBot #Anubis for Android UA. APK's dropped from hxxp://pobierz48[.]tk/ SHA256: e0d17f4ff0196c6527f8aa47b3ef220d0f4e712805f99d38a0804f3ea9506ece @ThreatFabric @virqdroid @LukasStefanko @
98. 3 Reasons Enterprises Are Moving to Decentralized Blockchain Applications
99. How to Be Protected from Malicious Message Crashing PS4 Console
100. Windows 10 Bug Let UWP Apps Access All Files Without Users' Consent
101. Another #BianLian Android banking #Trojan in #GooglePlay showing his other face by dropping #RedAlert v2.1 CC @Bank_Security @
102. Widely Used Cryptocurrency App Launching 2 Different Powerful Backdoor on Mac Users
103. Attackers getting better at quickly generating countless versions of existing #malware #antivirus @MariaKorolov -
104. Unpatched MS Word Flaw Could Allow Hackers to Infect Your Computer
105. Multiple Linux distributions affected by new vulnerability
106. Malicious hackers and their interest in bypassing CAPTCHA
107. Feature to attach video to Word files could be used to send malicious code
108. Spring Framework 5.1.2 releases: bugs fix
109. Most Important Security Tools and Resources For Security Researcher and Malware Analyst
110. A good insight for Europeans on the process of the US mid-term elections and whether or it they are hackable

CRIME

111. 4 tips to keep safe when phishing for treats this Halloween
112. Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims
113. Kraken Cryptor Ransomware Gains Popularity Among Cybercriminals
114. Parties Seek to Settle Yahoo Data Breach Class Action for $50M
115. Bitcoin Dealer Who Operated Unlicensed Bitcoin Exchange Faces Five Years in Jail
116. Malware Targeting Smartphones via Three DSP Providers
117. macOS Cryptomining Malware on the Rise
118. Judge Ordered Man to Pay $8 Million for Launching a DDoS Attack Against Rutgers
119. AI-Facilitated Product Aims to Stop Spear-Phishing Attacks
120. Ransomware Threat Continues: How Infections Take Place
121. Treat or Trick? Six Dangerous Digital Threats Dressed up As Irresistible Treats
122. INKY emerges from stealth with email spoofing, phishing protection service
123. Is it a Phish? Halloween Edition
124. Bushido Botnet Offered as MaaS
125. 3 Reasons Enterprises Are Moving to Decentralized Blockchain Applications
126. The author of the Mirai botnet gets six months of house arrest
127. Malicious hackers and their interest in bypassing CAPTCHA
128. New McAfee Report Reveals Data in the Cloud More Exposed Than Organizations Think
129. Spring Framework 5.1.2 releases: bugs fix

POLITICS

130. How database hacks could impact elections and voters' fears
131. How database hacks could impact elections and voters' fears
132. SamSam ransomware group has hit 67 organizations in 2018, researchers say
133. Center for Internet Security looks to expand threat sharing program to political campaigns
134. Cell Phone Security and Heads of State
135. Anonymous knocks out Gabon government sites with DoS attack

APT report for 2018-10-29

TRANSNATIONAL / UNKNOWN

1. Here's how to defend your enterprise from Magecart
2. Breaking News: Securonix Threat Research: British Airways Breach
3. Magecart Exploits Zero Day Vulnerabilities
4. 'Narwhal Spider' group's spam campaign targets Japanese recipients with URLZone malware

CHINA

5. Understanding mass data fragmentation

INDIA

Nil

NORTH KOREA

Nil

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

Nil

SERBIA

Nil

UKRAINE

6. Cobalt Gang targets banks and financial service providers by sneaking PDFs past staff

Platform report for 2018-10-29

WINDOWS

1. SandboxEscaper expert is back and disclosed a new Windows Zero-Day
2. Remote Denial of Service Vulnerability Patched in Squid Proxy Cache Server
3. Downloading Google Chrome via Microsoft Edge Endangered by Malware
4. X.Org Flaw Exposes Unix-Like OSes to Attacks
5. Windows 10 UWP Bug Could Give Malicious Devs Access To All Your Files
6. If your company uses Windows 10, watch out: there are new vulnerabilities about
7. Advanced Malware Protection Affected by Bug That Can Inhibit Intrusion Detection
8. Windows 10 UWP bug could give malicious devs access to all your files
9. Windows 10 Bug Allowed UWP Apps Full Access to File System
10. sLoad and Ramnit Campaign Against UK and Italy
11. Malware That Accompanies Google Chrome Download Detected
12. Same Old yet Brand-new: New File Types Emerge in Malware Spam Attachments
13. Cisco patched a command injection vulnerability in Webex Meetings
14. Microsoft Bing Delivered Dangerous Malware When You Try to Download Google Chrome

LINUX

15. Remote Denial of Service Vulnerability Patched in Squid Proxy Cache Server
16. X.Org Flaw Allows Privilege Escalation in Linux Systems
17. X.Org Flaw Exposes Unix-Like OSes to Attacks
18. Serious Vulnerability Discovered In X.Org Server Affects Major Linux and BSD Variants
19. Systemd flaw could cause the crash or hijack of vulnerable Linux machines
20. Cisco patched a command injection vulnerability in Webex Meetings

UNIX

21. X.org Bug Bites OpenBSD And Other Big Operating Systems

ANDROID

22. Beware! Downloader Malware Disguised as Game Apps Found On Google Play with More Than 51,100 Installations

IOS

23. Leaked: iOS 12.1 will be released on October 30th

MACOS

24. Mac CryptoCurrency Price Tracker Caught Installing Backdoors
25. Mac cryptocurrency ticker app installs backdoors
26. Remote Denial of Service Vulnerability Patched in Squid Proxy Cache Server

Threat report for 2018-10-29

DATA BREACH & DATA LOSS

1. Girl Scouts Issues Data Breach Warning to 2,800 Members
2. Cathay Pacific Suffers World’s Largest Airline Data Breach
3. sLoad and Ramnit Campaign Against UK and Italy
4. Secret Service Confirms Focus on Email Compromise Cybercrimes Worth $12 Billion
5. Girl Scouts Alerted to Possible Data Breach
6. 'Narwhal Spider' group's spam campaign targets Japanese recipients with URLZone malware
7. DDoS and ransomware tools for starter and experienced cybercriminals exposed
8. Biggest Manufacturing Data Breaches of the 21st Century
9. The Worst Data Breach till Now 2018, and What It Means
10. Crooks continue to abuse exposed Docker APIs for Cryptojacking
11. IoT users uncertain if personal data is shared across multiple devices
12. Hackers Breach System of Healthcare.Gov Exposing Personal Data of 75,000 Users
13. Hackers steal personal data of up to 9.4 million Cathay Pacific passengers
14. Leaked: iOS 12.1 will be released on October 30th
15. 33,000 Accounting Inbox Credentials Exposed Online: BEC Made Easy | Read the details here:

DENIAL-OF-SERVICE

16. Remote Denial of Service Vulnerability Patched in Squid Proxy Cache Server
17. Man Ordered to Pay $8.6 Million for Launching DDoS Attacks against Rutgers University
18. Mirai Author Gets House Arrest for DDoS Attacks on University
19. DDoS and ransomware tools for starter and experienced cybercriminals exposed

MALVERTISING

Nil

PHISHING

20. Phishing spikes as private health continues to be most breached sector in Australia
21. Nation-State Phishing: A Country-Sized Catch
22. A new phishing report reveals Microsoft, Paypal, and Netflix are among the top brands impersonated by phishing attacks. Attackers tend to
23. This is getting worse and worse. And is going to normalize and lead to much more successful phishing through SMS
24. League of Legends Gamers Targeted by Phishing Scam | Avast
25. What can we do to tackle today’s phishing epidemic?
26. Das Geschäft mit gestohlenen Login-Daten von Privatnutzern und Unternehmensanwendern boomt. US-Journalist Brian Krebs beziffert die "Ausbeute" bei mehreren 100.000 US-Dollar
27. 19% still save their password on a piece of paper
28. Vulnerability In Microsoft Word Online Video Feature Allows for Phishing

WEB DEFACEMENT

29. Future Investment Initiative Conference Website, Defaced, Now Restored

BOTNET

30. Mirai Botnet Operator Ordered to Pay $8.6 Million
31. ‘DemonBot' Botnet Targets Hadoop Servers
32. Rise of the Bots

RANSOMWARE

33. The Ransomware Attack on a North Carolina Water Utility May Not Have Been What it Seemed
34. Ransomware and the enterprise: A new white paper
35. DDoS and ransomware tools for starter and experienced cybercriminals exposed
36. #Antivirus SW alone can't stop new #malware or #ransomware. by @MariaKorolov -
37. Have you ever wondered why #ransomware attacks happen on the Friday before a long weekend? We've teamed up with @SentinelOne

CRYPTOMINING & CRYPTOCURRENCIES

38. Mac CryptoCurrency Price Tracker Caught Installing Backdoors
39. Mac cryptocurrency ticker app installs backdoors
40. Call of Duty players caught up in cryptocurrency theft racket
41. Cyber-criminals exploit misconfigured container to deliver cryptominer
42. Crooks continue to abuse exposed Docker APIs for Cryptojacking
43. Revolutionary Blockchain 3.0 Under CSE Platform

MALWARE

44. Videos and MS Office documents - ingredients for a malware attack
45. Word documents seemingly carrying videos can deliver malicious code instead
46. Downloading Google Chrome via Microsoft Edge Endangered by Malware
47. Windows 10 UWP Bug Could Give Malicious Devs Access To All Your Files
48. Advanced Malware Protection Affected by Bug That Can Inhibit Intrusion Detection
49. Windows 10 UWP bug could give malicious devs access to all your files
50. Malware That Accompanies Google Chrome Download Detected
51. 'Narwhal Spider' group's spam campaign targets Japanese recipients with URLZone malware
52. Vulnerability found in Sophos anti-malware product
53. Privacy concerns cooling #InternetOfThings adoption in US & Europe, with consumers concerned about #DataLeaks, malware and product security (via @FSecure)
54. Same Old yet Brand-new: New File Types Emerge in Malware Spam Attachments
55. #Antivirus SW alone can't stop new #malware or #ransomware. by @MariaKorolov -
56. Beware! Downloader Malware Disguised as Game Apps Found On Google Play with More Than 51,100 Installations
57. Microsoft Bing Delivered Dangerous Malware When You Try to Download Google Chrome

EXPLOIT

58. Researchers exploit Microsoft Word through embedded video
59. Cyber-criminals exploit misconfigured container to deliver cryptominer
60. Our adventures at @thezdi Pwn2Own Desktop 2018 for Apple Safari exploit whitepaper (https://labs.mwrinfosecurity.com/assets/BlogFiles/apple-safari-pwn2own-vuln-write-up-2018-10-29-final.pdf …) and @t2.fi slides release (https://labs.mwrinfosecurity.com/assets/BlogFiles/mwri-t2-big-game-fuzzing-pwn2own-safari-final.pdf …)

VULNERABILITY

61. SandboxEscaper expert is back and disclosed a new Windows Zero-Day
62. IoT Flaw Allows Hijacking of Connected Construction Cranes
63. Remote Denial of Service Vulnerability Patched in Squid Proxy Cache Server
64. X.Org Flaw Allows Privilege Escalation in Linux Systems
65. X.Org Flaw Exposes Unix-Like OSes to Attacks
66. Windows 10 UWP Bug Could Give Malicious Devs Access To All Your Files
67. X.org Bug Bites OpenBSD And Other Big Operating Systems
68. If your company uses Windows 10, watch out: there are new vulnerabilities about
69. Advanced Malware Protection Affected by Bug That Can Inhibit Intrusion Detection
70. Logical Bug in Microsoft Word's 'Online Video' Allows Code Execution
71. Windows 10 UWP bug could give malicious devs access to all your files
72. Windows 10 Bug Allowed UWP Apps Full Access to File System
73. Magecart Exploits Zero Day Vulnerabilities
74. Serious Vulnerability Discovered In X.Org Server Affects Major Linux and BSD Variants
75. Security Vulnerability in Internet-Connected Construction Cranes
76. Systemd flaw could cause the crash or hijack of vulnerable Linux machines
77. Pentagon’s big audit will inspect for cybersecurity flaws, comptroller says
78. Vulnerability found in Sophos anti-malware product
79. Flaws in brain stimulation tech could let hackers erase or hold memories for ransom
80. Cisco patched a command injection vulnerability in Webex Meetings
81. Vulnerability In Microsoft Word Online Video Feature Allows for Phishing

Region brief for 2018-10-29

ASIA

1. Future Investment Initiative Conference Website, Defaced, Now Restored
2. Cathay Pacific Suffers World’s Largest Airline Data Breach
3. Serious Vulnerability Discovered In X.Org Server Affects Major Linux and BSD Variants
4. 'Narwhal Spider' group's spam campaign targets Japanese recipients with URLZone malware
5. Same Old yet Brand-new: New File Types Emerge in Malware Spam Attachments
6. Revolutionary Blockchain 3.0 Under CSE Platform
7. Leaked: iOS 12.1 will be released on October 30th

OCEANIA

8. Phishing spikes as private health continues to be most breached sector in Australia

NORTH AMERICA

9. Future Investment Initiative Conference Website, Defaced, Now Restored
10. Cathay Pacific Suffers World’s Largest Airline Data Breach
11. Understanding mass data fragmentation
12. Secret Service Confirms Focus on Email Compromise Cybercrimes Worth $12 Billion
13. Man Ordered to Pay $8.6 Million for Launching DDoS Attacks against Rutgers University
14. Security Vulnerability in Internet-Connected Construction Cranes
15. Girl Scouts Alerted to Possible Data Breach
16. What can we do to tackle today’s phishing epidemic?
17. Privacy concerns cooling #InternetOfThings adoption in US & Europe, with consumers concerned about #DataLeaks, malware and product security (via @FSecure)
18. Das Geschäft mit gestohlenen Login-Daten von Privatnutzern und Unternehmensanwendern boomt. US-Journalist Brian Krebs beziffert die "Ausbeute" bei mehreren 100.000 US-Dollar
19. The Worst Data Breach till Now 2018, and What It Means
20. Same Old yet Brand-new: New File Types Emerge in Malware Spam Attachments
21. Cisco patched a command injection vulnerability in Webex Meetings
22. Leaked: iOS 12.1 will be released on October 30th

SOUTH AMERICA

Nil

EUROPE

23. Here's how to defend your enterprise from Magecart
24. Breaking News: Securonix Threat Research: British Airways Breach
25. Cathay Pacific Suffers World’s Largest Airline Data Breach
26. sLoad and Ramnit Campaign Against UK and Italy
27. Magecart Exploits Zero Day Vulnerabilities
28. What can we do to tackle today’s phishing epidemic?
29. The Worst Data Breach till Now 2018, and What It Means
30. Same Old yet Brand-new: New File Types Emerge in Malware Spam Attachments

AFRICA

Nil