Daily brief for 2018-10-04

ASIA

1. Should You Worry About Software Supply Chain Attacks?
2. .@FireEye researchers tracked an aggressive #cybertheft campaign -- attributed to North Korean #APT38 -- in which threat actors attempted to
3. Shedding Skin – Turla’s Fresh Faces
4. China allegedly infiltrated US companies through implanted hardware backdoors
5. Report: In Huge Hack, Chinese Manufacturer Sneaks Backdoors Onto Motherboards
6. Apple, Amazon deny claims Chinese spies implanted backdoor chips in company hardware: report
7. Canadian restaurant chain Recipe suffered a network outage, is it a ransomware attack?
8. A Remote iOS Bug
9. APT38 is behind financially motivated attacks carried out by North Korea
10. Security Investigator who Compromised Hotel Wi-Fi, Shared Pass-Codes Online, is Fined

WORLD

11. UK pins ‘reckless campaign of cyber attacks’ on Russian military intelligence
12. Virus Bulletin 2018: Turla APT Changes Shape with New Code and Targets
13. Should You Worry About Software Supply Chain Attacks?
14. Bug bounty scheme uncovers 150 vulnerabilities in US Marine Corps websites
15. China allegedly infiltrated US companies through implanted hardware backdoors
16. US charges Russian military officers over international hacking and disinformation campaigns
17. LoJack for computers used to attack European government bodies
18. Hacker Pleads Guilty of Defacing 11,000 Websites, Could Get up to 20 Years
19. Justice Department charges 7 Russian intelligence officers
20. CVE-2018-4251 – Apple did not disable Intel Manufacturing Mode in its laptops
21. Russian Fancy Bear APT Linked To Earworm Hacking Group
22. ICYMI - CISO @rickhholland joins @drshellface and @mazzazone in this week's ShadowTalk episode: Security Flaws Affect 50 Million Facebook Accounts
23. HIDDEN COBRA – FASTCash Campaign
24. Pacific Northwest burger chain hit by FIN7
25. Irish Data Regulator Likely to Fine Facebook for Data Breach
26. Russian Fancy Bear APT linked to Earworm hacking group
27. Apple, Amazon deny claims Chinese spies implanted backdoor chips in company hardware: report
28. 5,000 UK firms' financial details exposed in data breaches, finds @digitalshadows
29. Canadian restaurant chain Recipe suffered a network outage, is it a ransomware attack?
30. Burgerville customer credit card info stolen in data breach laid at Fin7's feet
31. LoJax: First UEFI Malware seen in the Wild
32. Hackers Earn $150,000 in Marine Corps Bug Bounty Program
33. APT38 is behind financially motivated attacks carried out by North Korea
34. UK and allies accuse Russia of cyber attack campaign
35. New DanaBot Banking Malware Attack in Various Countries with Stealer and Remote Access Futures
36. Experts recommend avoiding single step logins
37. U.S. Capitol Police Arrest Suspect for Doxing U.S. Senators
38. DanaBot Observed in Large Campaign Targeting U.S. Organizations

ATTACKS

39. UK pins ‘reckless campaign of cyber attacks’ on Russian military intelligence
40. .@FireEye researchers tracked an aggressive #cybertheft campaign -- attributed to North Korean #APT38 -- in which threat actors attempted to
41. Campaign 2018: Cyberattacks on infrastructure could suppress voter turnout
42. Sony accidentally leaked November's PS Plus free games
43. US charges Russian military officers over international hacking and disinformation campaigns
44. Hacker Pleads Guilty of Defacing 11,000 Websites, Could Get up to 20 Years
45. Burgerville Customer Credit Card Info Stolen In Data Breach
46. Exclusive: Moving away from passwords to two-factor authentication
47. HIDDEN COBRA – FASTCash Campaign
48. Database of 200 Million Records Stolen from Apollo in Data Breach
49. Irish Data Regulator Likely to Fine Facebook for Data Breach
50. 5,000 UK firms' financial details exposed in data breaches, finds @digitalshadows
51. The @UN accidentally exposed credentials on public @trello boards. Plus, #Uber is set to pay $148 million settlement following its
52. Burgerville customer credit card info stolen in data breach laid at Fin7's feet
53. Block Blocking Login Items
54. How #livechatsoftware leak personal #employeedata?
55. Democratic congressional intern arrested for doxing GOP senators during Kavanaugh hearing
56. California bill bans bots during elections
57. Hacktivist pleads guilty to defacing websites for NYC comptroller, Combating Terrorism Center
58. Business Email Compromise: When You Don’t Need to Phish.
59. Business email compromise made easy for cyber criminals
60. In manufacturing, almost half – 47 percent – of breaches involve the theft of intellectual property to gain competitive advantage.
61. Hackers Selling Facebook Account Logins Details On Dark Web For $3
62. Security Investigator who Compromised Hotel Wi-Fi, Shared Pass-Codes Online, is Fined
63. UK and allies accuse Russia of cyber attack campaign
64. Business email compromise made easy for #cybercriminals as 12.5 million company email boxes and 33,000 finance department credentials found openly
65. Experts recommend avoiding single step logins
66. Phishing Attacks Distributed Through CloudFlare's IPFS Gateway
67. Why It’s Time to Nuke the Password
68. Why It’s Time to Nuke the Password
69. U.S. Capitol Police Arrest Suspect for Doxing U.S. Senators
70. DanaBot Observed in Large Campaign Targeting U.S. Organizations

THREATS

71. Google Project Zero drops macOS exploit, calls out Apple for silent patching
72. Virus Bulletin 2018: Turla APT Changes Shape with New Code and Targets
73. .@ThreatFabric researchers uncovered an #Android malware, #MysteryBot, which uses overlay attacks to avoid detection. Learn how this #malware affects @Google's
74. Bug bounty scheme uncovers 150 vulnerabilities in US Marine Corps websites
75. China allegedly infiltrated US companies through implanted hardware backdoors
76. Researchers at the 2018 @RSAConference discussed #stegware: @malware that uses #steganography. Discover how this works with expert @lewisnic.
77. Report: In Huge Hack, Chinese Manufacturer Sneaks Backdoors Onto Motherboards
78. Avast AV reclassifies cryptominers | Avast
79. Researchers at Cisco Talos (@TalosSecurity) recently discovered #GravityRAT, a remote access #Trojan. Discover how this RAT can check for
80. CVE-2018-4251 – Apple did not disable Intel Manufacturing Mode in its laptops
81. macOS Flaw Allows Attackers To Hijack Installed Apps
82. ICYMI - CISO @rickhholland joins @drshellface and @mazzazone in this week's ShadowTalk episode: Security Flaws Affect 50 Million Facebook Accounts
83. CVE-2018-8373 Exploit Spotted
84. Vulnerability Scanning vs. Penetration Testing by @TripwireInc
85. This is also a good time to remind that bugdoors are far more scary than backdoors.
86. Fallout Exploit Kit Now Installing the Kraken Cryptor Ransomware
87. Apple, Amazon deny claims Chinese spies implanted backdoor chips in company hardware: report
88. Researchers from @proofpoint have announced the discovery of a remote access trojan, and an upgraded version of an old banking
89. Canadian restaurant chain Recipe suffered a network outage, is it a ransomware attack?
90. Remote Mac Exploitation Via Custom URL Schemes
91. A Remote iOS Bug
92. Tearing Apart the Undetected (OSX)Coldroot RAT
93. An Unpatched Kernel Bug
94. Mac Malware of 2017
95. From the Top to the Bottom; Tracking down CVE-2017-7149
96. WTF is Mughthesec!? poking on a piece of undetected adware
97. OSX/MacRansom; analyzing the latest ransomware to target macs
98. Two Bugs, One Func(), part three
99. Two Bugs, One Func(), part two
100. Two Bugs, One Func(), part one
101. Mac Malware of 2016
102. Towards Generic Ransomware Detection
103. Analysis of an Intrusive Cross-Platform Adware; OSX/Pirrit
104. Analyzing the Anti-Analysis Logic of an Adware Installer
105. Monitoring Process Creation via the Kernel (Part III)
106. Monitoring Process Creation via the Kernel (Part II)
107. Monitoring Process Creation via the Kernel (Part I)
108. CVE-2015-3673: Goodbye Rootpipe...(for now?)
109. More on, "Adware for OS X Distributes Trojans"
110. LoJax: First UEFI Malware seen in the Wild
111. Cisco: Two critical bugs in DNA network software need these urgent patches
112. Virus Bulletin 2018: Attack velocity ramps up
113. Paper over the Kracks: New techniques can bypass WPA2 flaw mitigations
114. Hackers Earn $150,000 in Marine Corps Bug Bounty Program
115. More than 4,000 ransomware attacks occur every day. Secure your company & build your network at #RiskSec with promo code
116. Malicious remote admin tool seemingly linked to KONNI malware, North Korea
117. Betabot trojan packed with anti-malware evasion tools
118. Cisco plugs critical flaws in DNA Center and Prime Infrastructure
119. Marine Corps bug bounty program finds 150 vulnerabilities
120. How is Android Accessibility Service affected by a banking Trojan?
121. How does stegware malware exploit steganography techniques?
122. .@Trustlook Labs discovered an #Android #Trojan stealing data from messaging apps. Learn what #mobilesecurity programs should look for to detect
123. Cisco Talos spotted 18 vulnerabilities in Foxit PDF Reader, 8 in Atlantis World Processor
124. A new group of #malware -- dubbed #GoScanSSH -- was recently discovered by researchers. Learn how this malware works and
125. Secure encrypted #virtualization: How is this technology exploited?
126. Seriously if I could make evil semiconductors I would just replace one which is already present rather than adding it. Show
127. WATCH: Top 5 Viruses of All Time by Security Expert @mikko Hyppönen
128. New DanaBot Banking Malware Attack in Various Countries with Stealer and Remote Access Futures
129. Foxit PDF Reader fixes serious remote code execution vulnerability
130. A Google bug breaks the search results in Safari
131. Researchers found that cheap Android devices were shipped pre-installed backdoors
132. Google opened the .page domain
133. Most Advanced Backdoor Obfuscation and Evasion Technique That used by Hackers
134. Zoho Heavily Used by Keyloggers to Transmit Stolen Data
135. Hacking for good uncovers over 150 Marine Corps web vulnerabilities
136. Network Outage at Some Recipe Unlimited Locations Caused by Malware
137. DanaBot Observed in Large Campaign Targeting U.S. Organizations

CRIME

138. Bug bounty scheme uncovers 150 vulnerabilities in US Marine Corps websites
139. Shedding Skin – Turla’s Fresh Faces
140. Avast AV reclassifies cryptominers | Avast
141. Hacker Pleads Guilty of Defacing 11,000 Websites, Could Get up to 20 Years
142. Justice Department charges 7 Russian intelligence officers
143. CVE-2018-4251 – Apple did not disable Intel Manufacturing Mode in its laptops
144. Burgerville Customer Credit Card Info Stolen In Data Breach
145. HIDDEN COBRA – FASTCash Campaign
146. Pacific Northwest burger chain hit by FIN7
147. Database of 200 Million Records Stolen from Apollo in Data Breach
148. Researchers from @proofpoint have announced the discovery of a remote access trojan, and an upgraded version of an old banking
149. Canadian restaurant chain Recipe suffered a network outage, is it a ransomware attack?
150. Burgerville customer credit card info stolen in data breach laid at Fin7's feet
151. Remote Mac Exploitation Via Custom URL Schemes
152. How is Android Accessibility Service affected by a banking Trojan?
153. Hacktivist pleads guilty to defacing websites for NYC comptroller, Combating Terrorism Center
154. Business Email Compromise: When You Don’t Need to Phish.
155. Business email compromise made easy for cyber criminals
156. APT38 is behind financially motivated attacks carried out by North Korea
157. In manufacturing, almost half – 47 percent – of breaches involve the theft of intellectual property to gain competitive advantage.
158. Business email compromise made easy for #cybercriminals as 12.5 million company email boxes and 33,000 finance department credentials found openly
159. New DanaBot Banking Malware Attack in Various Countries with Stealer and Remote Access Futures
160. Experts recommend avoiding single step logins

POLITICS

161. UK pins ‘reckless campaign of cyber attacks’ on Russian military intelligence
162. Justice Department charges 7 Russian intelligence officers
163. APT28 turns away from election hacking and back to cyberespionage
164. Apple, Amazon deny claims Chinese spies implanted backdoor chips in company hardware: report
165. Hacktivist pleads guilty to defacing websites for NYC comptroller, Combating Terrorism Center
166. APT38 is behind financially motivated attacks carried out by North Korea