Daily brief for 2018-10-01

ASIA

1. Cyber Security Roundup for September 2018
2. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
3. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
4. Roaming Mantis Group Adds Phishing and Web Crypto Mining for iOS Devices
5. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
6. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
7. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
8. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
9. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
10. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers

WORLD

11. Cyber Security Roundup for September 2018
12. Hacking Week Call for Pitches: Who Is the Weakest Link In Cybersecurity?
13. GhostDNS malware already infected over 100K+ devices and targets 70+ different types of home routers
14. A week in security (September 24 – 30)
15. 4 Ways to Protect Your Files from a Data Breach
16. Gemalto ID Card Provider Sued for €152 Million in eID Vulnerability Case
17. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
18. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
19. Facebook: How to minimize the risk of vulnerabilities
20. Voice Phishing Scams Are Getting More Clever
21. Malwarebytes is a champion of National Cybersecurity Awareness Month
22. Formjacking in the Nutshell
23. TrickBot Banking Trojan Takes Center Stage in 2018
24. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
25. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
26. Facebook faces a whopping €1.4 billion penalty under GDPR for Sept. 30 data breach
27. UK firms’ password security score ‘average’
28. CISO @rickhholland joins @drshellface and @mazzazone to discuss the latest #cybersecurity news: Security Flaws Affect 50 Million Facebook Accounts and
29. Gigantic 100,000-strong botnet used to hijack traffic meant for Brazilian banks
30. New Banking Malware Steal Money From Victim’s Bank Accounts Using Weaponized Adobe Reader

ATTACKS

31. 100K Routers Hijacked for Phishing in GhostDNS Campaign
32. Picture-in-Picture Phishing Campaign Goes After Steam Credentials
33. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
34. Roaming Mantis Group Adds Phishing and Web Crypto Mining for iOS Devices
35. 4 Ways to Protect Your Files from a Data Breach
36. Facebook hacked – 50 Million Users’ Data exposed in the security breach
37. Instagram Being Used To Sell Botnets And Stolen Fortnite Accounts
38. Telegram Patched IP Address Leak Problem In Its Desktop Client
39. Weak Passwords Abused for 'FruitFly' Mac Malware Distribution
40. Hackers Are Selling Botnets and Stolen ‘Fortnite’ Accounts Over Instagram
41. Third-Party Apps Using Facebook Login Also Affected by Latest Hacking Incident
42. How to Orchestrate a Smarter Phishing Response
43. Voice Phishing Scams Are Getting More Clever
44. Why nearly 50% of organizations are failing at password security
45. Employees Share Average of 6 Passwords With Co-Workers
46. Telegram Leaks User IP Addresses
47. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
48. Flaws in Tory party conference app leak ministers' personal information
49. Facebook faces a whopping €1.4 billion penalty under GDPR for Sept. 30 data breach
50. UK firms’ password security score ‘average’
51. Torii malware could be gateway to more sophisticated IoT botnet attacks
52. Phishing campaign targets developers of Chrome extensions
53. Password Security Better, Still Poses Business Risk
54. New vicious Torii IoT botnet discovered
55. Password Security Better, Still Poses Business Risk
56. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
57. 3 GOP senators doxed during Kavanaugh hearing
58. Facebook Data Breach Extended to Third-Party Applications
59. Following a loud critical backlash to a new #Chrome login feature and cookie retention functionality, @Google will make changes in
60. Facebook could face up to $1.6bn fine for data breach
61. Telegram CVE-2018-17780 flaw causes the leak of IP addresses when initiating calls
62. Telegram Calling Feature Leaks Your IP Addresses—Patch Released
63. Gigantic 100,000-strong botnet used to hijack traffic meant for Brazilian banks
64. Torii IoT Botnet Takes Mirai to the Next Level
65. High-Profile Instagram Accounts Hacked For Ransom In A Recent Campaign

THREATS

66. Adobe Patches 47 Critical Flaws in Acrobat and DC
67. Top Cloud Domain Controller for MSPs
68. Multiple Code Execution Vulnerabilities Found in Atlantis Word Processor
69. CVE-2018-11776 and why you need Black Duck Security Advisories
70. GhostDNS malware already infected over 100K+ devices and targets 70+ different types of home routers
71. Nine NAS Bugs Open LenovoEMC, Iomega Devices to Attack
72. GrandCrab Ransomware Spreads Using Multiple Known Vulnerabilities
73. Fileless Malware Attacks on the Rise, Microsoft Says
74. 'Short, Brutal Lives': Life Expectancy for Malicious Domains
75. Google Bug Breaks Search Results with a Plus Sign On Mac Safari
76. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
77. Roaming Mantis Group Adds Phishing and Web Crypto Mining for iOS Devices
78. Vulnerability Spotlight: Multiple Issues in Foxit PDF Reader
79. Google Adds New Rules To End Malicious Chrome Extensions
80. Gemalto ID Card Provider Sued for €152 Million in eID Vulnerability Case
81. Code Execution Vulnerabilities Uncovered In Atlantis Word Processor
82. Deep Dive Into iTranslator - MITM Malware
83. LoJax: Fisrt UEFI Rootkit Found In The Wild
84. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
85. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
86. Telegram Patched IP Address Leak Problem In Its Desktop Client
87. Weak Passwords Abused for 'FruitFly' Mac Malware Distribution
88. Facebook: How to minimize the risk of vulnerabilities
89. Code execution vulnerabilities uncovered in Atlantis Word Processor
90. A new Browser Reaper exploit can crash or freeze Mozilla #Firefox, according to a proof of concept published by a
91. Malwarebytes is a champion of National Cybersecurity Awareness Month
92. Monitor privileged execution to defend against
93. Attackers chained three bugs to breach into the Facebook platform
94. Telegram Leaks User IP Addresses
95. Vulnerability Spotlight: Multiple vulnerabilities in Atlantis Word Processor
96. TrickBot Banking Trojan Takes Center Stage in 2018
97. More on the Five Eyes Statement on Encryption and Backdoors
98. Monero fixes major ‘burning bug’ flaw, preventing mass devaluation
99. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
100. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
101. Flaws in Tory party conference app leak ministers' personal information
102. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
103. Vulnerability Spotlight: Multiple Issues in Foxit PDF Reader
104. GandCrab ransomware is spreading wildly through several known vulnerabilities
105. Python-based attack tools are the most common vector for launching exploit attempts
106. Docs reveal how Fruitfly Mac spyware initially spread
107. Torii malware could be gateway to more sophisticated IoT botnet attacks
108. SamSam ransomware: How is this version different from others?
109. Ransomware Casts Anchor at the Port of San Diego
110. Hackers Hijacked More Than 100,000 Routers DNS Settings and Redirecting Users to Malicious WebSites
111. Ransomware Casts Anchor at the Port of San Diego
112. Several Bugs Exploited in Massive Facebook Hack
113. Sophos recently discovered a #Samsam extortion code that performs whole-company attacks through a variety of vulnerability exploits. Discover how this
114. #VPNFilter #malware: How can users protect themselves?
115. Nasty Linux Kernel Vulnerability Discovered, Mandatory Kernel Update Required
116. How can attackers exploit a buffer underflow #vulnerability?
117. CISO @rickhholland joins @drshellface and @mazzazone to discuss the latest #cybersecurity news: Security Flaws Affect 50 Million Facebook Accounts and
118. Vulnerability Spotlight: Multiple vulnerabilities in Atlantis Word Processor
119. Telegram CVE-2018-17780 flaw causes the leak of IP addresses when initiating calls
120. Telegram Calling Feature Leaks Your IP Addresses—Patch Released
121. New Banking Malware Steal Money From Victim’s Bank Accounts Using Weaponized Adobe Reader

CRIME

122. Cyber Security Roundup for September 2018
123. Hacking Week Call for Pitches: Who Is the Weakest Link In Cybersecurity?
124. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
125. 4 Ways to Protect Your Files from a Data Breach
126. Gemalto ID Card Provider Sued for €152 Million in eID Vulnerability Case
127. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
128. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
129. Facebook: How to minimize the risk of vulnerabilities
130. Hackers Are Selling Botnets and Stolen ‘Fortnite’ Accounts Over Instagram
131. How to Orchestrate a Smarter Phishing Response
132. Voice Phishing Scams Are Getting More Clever
133. Formjacking in the Nutshell
134. Attackers chained three bugs to breach into the Facebook platform
135. TrickBot Banking Trojan Takes Center Stage in 2018
136. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
137. Hackers Hijacked More Than 100,000 Routers DNS Settings and Redirecting Users to Malicious WebSites
138. Sophos recently discovered a #Samsam extortion code that performs whole-company attacks through a variety of vulnerability exploits. Discover how this
139. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
140. New Banking Malware Steal Money From Victim’s Bank Accounts Using Weaponized Adobe Reader

POLITICS

141. Hacking Week Call for Pitches: Who Is the Weakest Link In Cybersecurity?
142. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
143. A week in security (September 24 – 30)
144. Facebook: How to minimize the risk of vulnerabilities
145. Hackers Are Selling Botnets and Stolen ‘Fortnite’ Accounts Over Instagram
146. Malwarebytes is a champion of National Cybersecurity Awareness Month
147. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
148. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system