Daily brief for 2018-10-10

ASIA

1. KeyBoy Abuses Popular Office Exploits for Malware Delivery
2. The Many Faces of Necurs: How the Botnet Spewed Millions of Spam Emails for Cyber Extortion
3. Thieves and Geeks: Russian and Chinese Hacking Communities
4. WTB: Phishing Attack Uses Azure Blob Storage To Impersonate Microsoft
5. MuddyWater expands operations
6. Group-IB: $49.4 million of damage caused to Russia’s financial sector from cyber attacks
7. Leak reveals Google's Chinese search engine is months away from launch

WORLD

8. Rapidly Evolving Ransomware GandCrab Version 5 Partners With Crypter Service for Obfuscation
9. Campaign 2018: These hacking groups could target the 2018 midterm elections
10. Top 5 ThreatConnect Resources for Malware Analysis
11. Cyber Fraud Ring Used Phishing to Steal $4 Million, Alleged Leader Faces Charges
12. A Google security audit uncovered a glitch in Google+ that exposed data from nearly 500,000 accounts. Ping CTO West @baber
13. The Many Faces of Necurs: How the Botnet Spewed Millions of Spam Emails for Cyber Extortion
14. Thieves and Geeks: Russian and Chinese Hacking Communities
15. CVE-2018-8453 Zero-Day flaw exploited by FruityArmor APT in attacks aimed at Middle East
16. New Threat Insight research: German-language threats span #phishing, BEC, #malware, and more...
17. Rebound Orthopedics & Neurosurgery hacked; 2,800 records exposed
18. A @Google #SecurityAudit uncovered privacy flaws and potential exposure of #PersonalData, leading to API changes, the shutdown of #GooglePlus and
19. Security Vulnerabilities in US Weapons Systems
20. Don't make us pay compensation for employee data breach, Morrisons begs UK court
21. WTB: Phishing Attack Uses Azure Blob Storage To Impersonate Microsoft
22. MuddyWater expands operations
23. Ubisoft Hit With DDoS Attack During The Launch of Assassin’s Creed: Odyssey
24. Magecart Hits Popular Customer Review Plugin
25. A #Google security audit uncovered a glitch in #GooglePlus that exposed data from nearly 500,000 accounts, causing the company to
26. Group-IB: $49.4 million of damage caused to Russia’s financial sector from cyber attacks
27. '5,000 UK firms' financial details exposed in data breaches' http://www.cityam.com/264491/uk-business-emails-could-represent-major-cyber-security … @CityAM Read the full research report here:
28. Zero-day exploit (CVE-2018-8453) used in targeted attacks
29. My Health Record justifications 'kind of lame': Godwin
30. Shopper Approved, the new victim of the Magecart hacking group
31. Acorus Network protects enterprises and service providers from DDoS attacks

ATTACKS

32. Campaign 2018: These hacking groups could target the 2018 midterm elections
33. 4.5 Billion Records Stolen in Data Breaches in the First Six Months of 2018
34. “You have 48 hours after reading this letter”– How to Identify the Latest Phishing Scam
35. Threat Actors Prey on Drupalgeddon Vulnerability to Mass-Compromise Websites and Underlying Servers
36. Google Restricts Android Apps From Accessing Your Personal Data
37. Triangulating Beyond the Hack: Stolen Records Just One Tool in a Comprehensive Kit
38. Cyber Fraud Ring Used Phishing to Steal $4 Million, Alleged Leader Faces Charges
39. #NetSpectre exploits leak data remotely via side-channel attacks. Learn how to use #ThreatModeling to stop speculative execution from expert Ed
40. A Google security audit uncovered a glitch in Google+ that exposed data from nearly 500,000 accounts. Ping CTO West @baber
41. Innovative Phishing Tactic Makes Inroads Using Azure Blob
42. Razer Phone 2 leaks hours before announcement: wireless charging and IP67 water resistance
43. Goodbye Google Plus – Google Plans Google+ Shut Down After Data Breach
44. The #TLBleed vulnerability uses @Intel's HTT chip feature to leak data. Learn about how hackers could use #malware to launch
45. New state-backed espionage campaign targets military and government using freely available hacking tools
46. Follow @PhishingAi to stay up to date on #phishing attacks and trends!
47. Flaw in Ghostscript sandbox allowed system compromise
48. Emerging threat: password stuffing explained
49. New Threat Insight research: German-language threats span #phishing, BEC, #malware, and more...
50. Leaks suggest Samsung is working on a mid-range smartphone with four cameras
51. Rebound Orthopedics & Neurosurgery hacked; 2,800 records exposed
52. Business email compromise made easy for #cybercriminals as 12.5 million company email boxes and 33,000 finance department credentials are openly
53. The spearphishing email contained a zip folder with a custom-built remote access trojan (RAT). Once executed, it would connect back to
54. Hackers can compromise your WhatsApp account by tricking you into answering a video call
55. Google+ API glitch exposed user profile data to developers
56. 291 records breached per second in first half of 2018
57. Hackers can use legitimate #AdminTools to compromise networks. Learn more about "living off the land" attacks from expert Michael Cobb
58. Don't make us pay compensation for employee data breach, Morrisons begs UK court
59. WTB: Phishing Attack Uses Azure Blob Storage To Impersonate Microsoft
60. A $12 million case of business email compromise.
61. Microsoft WindowsCodecs.dll SniffAndConvertToWideString Information Leak Vulnerability
62. A #Google security audit uncovered a glitch in #GooglePlus that exposed data from nearly 500,000 accounts, causing the company to
63. California state primaries put spotlight on election campaign vulnerabilities #cybersecurity @5ean5ullivan
64. '5,000 UK firms' financial details exposed in data breaches' http://www.cityam.com/264491/uk-business-emails-could-represent-major-cyber-security … @CityAM Read the full research report here:
65. New Phishing Campaign Drops Ursnif into Conversation Threads
66. October Patch Tuesday: Microsoft Repairs JET Database Engine Bug, Win32K EoP Zero-Day
67. October Patch Tuesday: Microsoft Repairs JET Database Engine Bug, Win32K EoP Zero-Day
68. Leak reveals Google's Chinese search engine is months away from launch
69. PHASE 2 - INITIAL INTRUSION Number One decides it is time to launch a targeted spearphishing campaign. Through the newsletter, he learns
70. My Health Record justifications 'kind of lame': Godwin
71. Just Answering A Video Call Could Compromise Your WhatsApp Account
72. Acorus Network protects enterprises and service providers from DDoS attacks
73. Zero trust security: 5 reasons it’s not just about passwords
74. .@Google Firebase #DatabaseSecurity proved insufficient when bypassed by hackers to leak data. Learn more about this #SecurityFlaw from expert Michael

THREATS

75. Rapidly Evolving Ransomware GandCrab Version 5 Partners With Crypter Service for Obfuscation
76. Decrypting GandCrab Ransomware
77. CCSP Domain 4: Cloud Application Security
78. CCSP Domain 3: Cloud Platform and Infrastructure Security
79. FruityArmor APT Exploits Yet Another Windows Graphics Kernel Flaw
80. CCSP Domain 2: Cloud Data Security
81. CCSP Domain 1: Architectural Concepts & Design Requirements
82. The CAP Exam: Application Process, Rules and Eligibility, Exam Length and More
83. #ISC2Congress: The Promise of Blockchain
84. Top 5 ThreatConnect Resources for Malware Analysis
85. Threat Actors Prey on Drupalgeddon Vulnerability to Mass-Compromise Websites and Underlying Servers
86. WhatsApp Fixes Vulnerability That’s Triggered by Answering a Call.
87. Cryptomining replaces ransomware as 2018's top cybersecurity threat
88. WhatsApp fixes video call bug that could have let hackers in, says report
89. KeyBoy Abuses Popular Office Exploits for Malware Delivery
90. Microsoft Added Severity Levels to Feedback Hub Bug Reports for Windows 10
91. Vulnerabilities found in Intel Unified Shader compiler
92. Malware 101: How Malware Avoids Static Detection Techniques
93. The #TLBleed vulnerability uses @Intel's HTT chip feature to leak data. Learn about how hackers could use #malware to launch
94. CSEU 2018: Nato grappling with implications of cyberspace as domain of warfare
95. Flaw in Ghostscript sandbox allowed system compromise
96. Four Critical Flaws Patched in Adobe Digital Edition
97. CVE-2018-8453 Zero-Day flaw exploited by FruityArmor APT in attacks aimed at Middle East
98. SAP Patches Critical Vulnerability in BusinessObjects
99. Symantec reveals state-sponsored group that doesn’t care for malware
100. New Threat Insight research: German-language threats span #phishing, BEC, #malware, and more...
101. Stegware: How is #malware using #steganography techniques to avoid detection?
102. A @Google #SecurityAudit uncovered privacy flaws and potential exposure of #PersonalData, leading to API changes, the shutdown of #GooglePlus and
103. The spearphishing email contained a zip folder with a custom-built remote access trojan (RAT). Once executed, it would connect back to
104. #Shodan can be a helpful tool for security professionals to locate #ICSsecurity vulnerabilities. Expert Ernie Hayden explains how Shodan works
105. Security Vulnerabilities in US Weapons Systems
106. Microsoft Patch Tuesday update covers zero-day, 12 critical issues
107. Many Siemens Products Affected by Foreshadow Vulnerabilities
108. A remote access #Trojan -- dubbed #GravityRAT -- was discovered by Cisco Talos (@TalosSecurity) to be checking for #antimalware sandboxes.
109. Microsoft has fixed the Windows 10 October Update data deletion bug
110. Gallmaker: New Attack Group Eschews Malware to Live off the Land
111. It's October 2018, and Exchange can be pwned by an 8 year-old... bug
112. Adobe security update fixes a handful of critical bugs, ignores Flash Player
113. .@FBI, @DHSgov call on users to mitigate #RemoteDesktop Protocol vulnerabilities and handle RDP exploits on their own, even as the
114. October 2018 Patch Tuesday: Microsoft fixes 49 flaws, one APT-wielded zero-day
115. Microsoft WindowsCodecs.dll SniffAndConvertToWideString Information Leak Vulnerability
116. Adobe October Security Update fixes 20 security flaws
117. Apple Released Security Updates for iOS 12.0.1 & iCloud with the Fixes for 21 Vulnerabilities
118. Google+ to shut down due to lack of adoption and privacy bug
119. Microsoft Fixes Zero Day and Data Deletion Bugs
120. Why Apple must be looking into using blockchain
121. California state primaries put spotlight on election campaign vulnerabilities #cybersecurity @5ean5ullivan
122. Zero-day exploit (CVE-2018-8453) used in targeted attacks
123. Windows Zero-Day Exploited in Attacks Aimed at Middle East
124. Bug bounties not a silver bullet, Katie Moussouris warns
125. Microsoft Released Security Updates & Fixed 49 Vulnerabilities that Affected Microsoft Products
126. October Patch Tuesday: Microsoft Repairs JET Database Engine Bug, Win32K EoP Zero-Day
127. October Patch Tuesday: Microsoft Repairs JET Database Engine Bug, Win32K EoP Zero-Day
128. Port of San Diego Hit by a Ransomware Attack Affecting its Computer Systems
129. Old-School Malware Tricks Still Work
130. "Creation of complex malware and organisation of multi-layered targeted attacks has shifted from financially motivated cyber-criminals to state-sponsored threat actors"
131. Hacker steals over $30k USD in cryptocurrency of SpankChain
132. WhatsApp fixes bug that let hackers take over app when answering a video call
133. At the 2018 @RSAConference, researchers discussed the rise of stegware -- #malware that uses #steganography techniques to avoid detection. Learn

CRIME

134. Rapidly Evolving Ransomware GandCrab Version 5 Partners With Crypter Service for Obfuscation
135. #ISC2Congress: The Promise of Blockchain
136. 4.5 Billion Records Stolen in Data Breaches in the First Six Months of 2018
137. “You have 48 hours after reading this letter”– How to Identify the Latest Phishing Scam
138. Threat Actors Prey on Drupalgeddon Vulnerability to Mass-Compromise Websites and Underlying Servers
139. Triangulating Beyond the Hack: Stolen Records Just One Tool in a Comprehensive Kit
140. The Many Faces of Necurs: How the Botnet Spewed Millions of Spam Emails for Cyber Extortion
141. Thieves and Geeks: Russian and Chinese Hacking Communities
142. New Threat Insight research: German-language threats span #phishing, BEC, #malware, and more...
143. Business email compromise made easy for #cybercriminals as 12.5 million company email boxes and 33,000 finance department credentials are openly
144. Payment-card-skimming Magecart strikes again: Zero out of five for infecting e-retail sites
145. Don't make us pay compensation for employee data breach, Morrisons begs UK court
146. WTB: Phishing Attack Uses Azure Blob Storage To Impersonate Microsoft
147. A $12 million case of business email compromise.
148. Group-IB: $49.4 million of damage caused to Russia’s financial sector from cyber attacks
149. Old-School Malware Tricks Still Work
150. "Creation of complex malware and organisation of multi-layered targeted attacks has shifted from financially motivated cyber-criminals to state-sponsored threat actors"
151. Hacker steals over $30k USD in cryptocurrency of SpankChain
152. Shopper Approved, the new victim of the Magecart hacking group
153. Acorus Network protects enterprises and service providers from DDoS attacks

POLITICS

154. Campaign 2018: These hacking groups could target the 2018 midterm elections
155. MuddyWater Threat Actor Expands Targets List
156. New state-backed espionage campaign targets military and government using freely available hacking tools
157. CSEU 2018: Nato grappling with implications of cyberspace as domain of warfare
158. The Many Faces of Necurs: How the Botnet Spewed Millions of Spam Emails for Cyber Extortion
159. Thieves and Geeks: Russian and Chinese Hacking Communities
160. CVE-2018-8453 Zero-Day flaw exploited by FruityArmor APT in attacks aimed at Middle East
161. Symantec reveals state-sponsored group that doesn’t care for malware
162. Hackers can compromise your WhatsApp account by tricking you into answering a video call
163. Gallmaker: New Attack Group Eschews Malware to Live off the Land
164. WTB: Phishing Attack Uses Azure Blob Storage To Impersonate Microsoft
165. MuddyWater expands operations
166. Group-IB: $49.4 million of damage caused to Russia’s financial sector from cyber attacks
167. California state primaries put spotlight on election campaign vulnerabilities #cybersecurity @5ean5ullivan