Daily brief for 2018-10-05

ASIA

1. Virus Bulletin 2018: Saudi Dissident Spyware Attack Belies Bigger Threat
2. Trojans go after MS Office vulnerabilities and China hacks US hardware
3. The Kronos banking trojan is back from the malware dustbin. After years of lying dormant, hackers have reworked the underlying
4. DHS issued an alert on attacks aimed at Managed Service Providers
5. VP Mike Pence slams Google over Chinese search engine project
6. North Korean hacking operation behind SWIFT attacks

WORLD

7. Virus Bulletin 2018: Saudi Dissident Spyware Attack Belies Bigger Threat
8. Trojans go after MS Office vulnerabilities and China hacks US hardware
9. Russian State-Sponsored Operations Begin to Overlap: Kaspersky
10. California Is Making It Illegal for Devices to Have Shitty Default Passwords
11. AirNaine Uses New ARS RAT Strain Named ZeroEvil Against Canadian Businesses
12. Danabot Banking Malware Targets U.S. Organizations
13. The Virus Bulletin conference returns home: VB2019 to take place in London
14. Uncle Sam Charges Seven Russians With Fancy Bear Hack Sprees
15. DanaBot Banking Trojan’s Journey to North America
16. The Kronos banking trojan is back from the malware dustbin. After years of lying dormant, hackers have reworked the underlying
17. The fur is not gonna fly: Uncle Sam charges seven Russians with Fancy Bear hack sprees
18. UK pins 'reckless campaign of cyber attacks' on Russian military intelligence
19. Experts warns of a new extortion campaign based on the Breach Compilation archive
20. US users open 30% of phishing emails with 12% of those clicking on infected links or attachments. Prepare for 2019's
21. Facebook Logins Available on the Dark Web for $2.60
22. DHS issued an alert on attacks aimed at Managed Service Providers
23. New research reveals the DanaBot banking Trojan is now targeting banks in the United States as well. The campaign attempts to
24. Fake News Domains Spoof UK News Sites
25. Russia's elite hacking unit has been silent, but busy
26. Fin7 Hackers Breached US Chain Burgerville
27. Fin7 Hackers Breached US Chain Burgerville

ATTACKS

28. Sales intel firm Apollo data breach exposed more than 200 million contact records
29. Facebook Found “No Evidence” Of Facebook Login Exploited To Access Linked Apps
30. Fortnite gamers targeted by data theft malware
31. Remove Ursnif Trojan (Purolator Phishing) Scam
32. California Is Making It Illegal for Devices to Have Shitty Default Passwords
33. Report: The bigger the company, the messier the password practices
34. The most commonly used passwords in the world are... 1. 123456 2. password 3. 123456789 4. 12345678 5. 12345 6. qwerty
35. Apollo hackers steal info from database of 200M contact
36. Can the @Microsoft Authenticator really replace passwords in the enterprise? Microsoft says the answer is yes and proclaimed the password
37. Security researchers @proofpoint recently uncovered new #DanaBot campaigns.
38. Weak Passwords Banned In California From 2020
39. New IoT legislation bans shared default passwords
40. GhostDNS hijacking campaign steps up attacks on Brazilians; 100K+ devices compromised
41. Smart TV kit featuring Google Home Mini and third-gen Chromecast leaks
42. Hacked #Fortnite accounts and rent-a-botnet being pushed on Instagram
43. UK pins 'reckless campaign of cyber attacks' on Russian military intelligence
44. Experts warns of a new extortion campaign based on the Breach Compilation archive
45. US users open 30% of phishing emails with 12% of those clicking on infected links or attachments. Prepare for 2019's
46. Credential-Phishing Attempts Highest on Tuesdays
47. Cryptomining malware steals Fortnite gamers' Bitcoins and personal data
48. Credential-Phishing Attempts Highest on Tuesdays
49. If you're thinking passwords, check out #CyberSauna episode #13: A Hacker's Take on Cracking & Protecting Your Creds
50. Intel, AMD both claim server speed records
51. FYI: "password" is the 2nd most popular password in the world. Can you guess the first?
52. Facebook Logins Available on the Dark Web for $2.60
53. Samsung predicts a return to record profits in Q3
54. New research reveals the DanaBot banking Trojan is now targeting banks in the United States as well. The campaign attempts to
55. Passware Kit: Forensic software recovers passwords for Bitcoin wallets

THREATS

56. Adobe October Patch Update Fixed 86 Different Security Vulnerabilities
57. Ransomware Recovery at the Taxpayers’ Expense
58. Sony Smart TV Bug Allows Remote Access, Root Privileges
59. Virus Bulletin 2018: Saudi Dissident Spyware Attack Belies Bigger Threat
60. Unit 42 Vulnerability Research October 2018 Disclosures – Adobe
61. Unit 42 Vulnerability Research October 2018 Disclosures – Adobe
62. Facebook Found “No Evidence” Of Facebook Login Exploited To Access Linked Apps
63. Fortnite gamers targeted by data theft malware
64. D-Link Patches RCE Bugs in Wireless Access Point Gear
65. VMware Releases Patches for Critical A/W Console Auth Bypass Vulnerability
66. Remove Ursnif Trojan (Purolator Phishing) Scam
67. 150 Bugs Found in the Hack the Marine Corps Challenge
68. Trojans go after MS Office vulnerabilities and China hacks US hardware
69. .@alienvault researchers recently discovered #MassMiner, a #cryptocurrency mining #malware that has the ability to infect systems across the web. Discover
70. 150 Bugs Found in the Hack the Marine Corps Challenge
71. Most Home Routers Are Full of Vulnerabilities
72. Virus Bulletin 2018: Exposing the Social Media Fraud Ecosystem
73. AirNaine Uses New ARS RAT Strain Named ZeroEvil Against Canadian Businesses
74. Danabot Banking Malware Targets U.S. Organizations
75. The Virus Bulletin conference returns home: VB2019 to take place in London
76. Vulnerability Scanning vs. Penetration Testing: What's the Difference?
77. Fileless malware: part deux
78. Adobe update cleans up 86 bugs in Acrobat and Reader, many critical
79. Missing Files, Bugs Reported After Windows 10 October 2018 Update
80. Cisco Discovered Multiple Vulnerabilities In Atlantis Word Processor
81. Advanced Persistent Threat Activity Exploiting Managed Service Providers
82. Mozilla Resolves Critical Code Execution Flaw In Thunderbird
83. Hackers fly under the radar for two years after infecting chiropractic clinic with malware
84. DanaBot Banking Trojan’s Journey to North America
85. Cisco patches critical flaws in DNA Center and Prime Infrastructure
86. Virus Bulletin 2018: Supply chain hacking grows up
87. Marine Corps bug bounty program finds 150 vulnerabilities
88. The Kronos banking trojan is back from the malware dustbin. After years of lying dormant, hackers have reworked the underlying
89. Mozilla resolves critical code execution flaw in Thunderbird email client
90. Cisco Talos spotted 18 vulnerabilities in Foxit PDF Reader, 8 in Atlantis World Processor
91. D-Link Patches Code Execution, XSS Flaws in Management Tool
92. Cisco updates address 36 vulnerabilities, three critical
93. Cryptomining malware steals Fortnite gamers' Bitcoins and personal data
94. Vulnerability Scanning vs. Penetration Testing: What's the Difference?
95. How does FacexWorm malware use Facebook Messenger to spread?
96. Malicious remote admin tool seemingly linked to KONNI malware, North Korea
97. #PulseNet: How does an improper #authentication flaw affect it?
98. New research reveals the DanaBot banking Trojan is now targeting banks in the United States as well. The campaign attempts to
99. .@FireEye researches discovered that the group behind #Sanny #malware attacks has made delivery method changes that put users at risk.
100. Cisco Released Security Updates & Fixed 37 Vulnerabilities that Affected Cisco Products
101. Fake News Domains Spoof UK News Sites
102. Roaming Mantis Hacking Group Inject Web Crypto Mining for iOS Devices via Malicious Content Delivery System
103. Top 5 Viruses of All Time by Security Expert Mikko Hyppönen
104. CMake 3.12.3 releases: managing the build process of software
105. Mozilla Patches Critical Vulnerability in Thunderbird 60.2.1

CRIME

106. Fortnite gamers targeted by data theft malware
107. Remove Ursnif Trojan (Purolator Phishing) Scam
108. California Is Making It Illegal for Devices to Have Shitty Default Passwords
109. AirNaine Uses New ARS RAT Strain Named ZeroEvil Against Canadian Businesses
110. Danabot Banking Malware Targets U.S. Organizations
111. Report: The bigger the company, the messier the password practices
112. Hackers fly under the radar for two years after infecting chiropractic clinic with malware
113. DanaBot Banking Trojan’s Journey to North America
114. The Kronos banking trojan is back from the malware dustbin. After years of lying dormant, hackers have reworked the underlying
115. Detecting Credit Card Skimmers
116. The fur is not gonna fly: Uncle Sam charges seven Russians with Fancy Bear hack sprees
117. Experts warns of a new extortion campaign based on the Breach Compilation archive
118. Cryptomining malware steals Fortnite gamers' Bitcoins and personal data
119. Facebook Logins Available on the Dark Web for $2.60
120. DHS issued an alert on attacks aimed at Managed Service Providers
121. New research reveals the DanaBot banking Trojan is now targeting banks in the United States as well. The campaign attempts to
122. Roaming Mantis Hacking Group Inject Web Crypto Mining for iOS Devices via Malicious Content Delivery System
123. Passware Kit: Forensic software recovers passwords for Bitcoin wallets
124. North Korean hacking operation behind SWIFT attacks
125. Lojax, the new threat developed by Fancy Bear

POLITICS

126. Russian State-Sponsored Operations Begin to Overlap: Kaspersky
127. Advanced Persistent Threat Activity Exploiting Managed Service Providers
128. DHS issued an alert on attacks aimed at Managed Service Providers