Daily brief for 2018-10-30

ASIA

1. Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims
2. Kraken Cryptor Ransomware Gains Popularity Among Cybercriminals
3. Parties Seek to Settle Yahoo Data Breach Class Action for $50M
4. macOS Cryptomining Malware on the Rise
5. Ransomware Threat Continues: How Infections Take Place
6. .@FireEye security researchers claimed the Russian government was 'most likely' behind the #Triton #Malware attack on an industrial control system
7. Cell Phone Security and Heads of State
8. Disrupting the Flow: Exposed and Vulnerable Water and Energy Infrastructures

WORLD

9. Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims
10. Kraken Cryptor Ransomware Gains Popularity Among Cybercriminals
11. Girl Scouts data breach exposed personal information of 2,800 members
12. SamSam ransomware group has hit 67 organizations in 2018, researchers say
13. Parties Seek to Settle Yahoo Data Breach Class Action for $50M
14. Bitcoin Dealer Who Operated Unlicensed Bitcoin Exchange Faces Five Years in Jail
15. Malware Targeting Smartphones via Three DSP Providers
16. macOS Cryptomining Malware on the Rise
17. Malware Infection at USGS Traced to Employee’s Habit of Viewing Adult Content
18. Ransomware Threat Continues: How Infections Take Place
19. New SamSam ransomware campaign aims at targets across the US
20. .@FireEye security researchers claimed the Russian government was 'most likely' behind the #Triton #Malware attack on an industrial control system
21. Employee Watched Porn at Work via 9000 Web pages Drops Malware on U.S Government Network
22. Treat or Trick? Six Dangerous Digital Threats Dressed up As Irresistible Treats
23. SamSam: Targeted Ransomware Attacks Continue
24. Is it a Phish? Halloween Edition
25. A fed visited 9,000 porn sites, infecting government networks with Russian malware
26. Threat Report: Jaff Ransomware Causes Havoc
27. Cell Phone Security and Heads of State
28. Millions of Voter Records Up for Sale Ahead of the US Midterm Elections
29. There are plenty of different types of phishing attacks, but they all rely on the same basic mechanism: exploiting human
30. 92% of External Web Apps Have Exploitable Security Flaws or Weaknesses: Report
31. Anonymous knocks out Gabon government sites with DoS attack
32. Disrupting the Flow: Exposed and Vulnerable Water and Energy Infrastructures
33. The author of the Mirai botnet gets six months of house arrest
34. The Russian built #VPNFilter #botnet was previously taken down after 500,000 routers were infected. However, recently it attempted a comeback.
35. A good insight for Europeans on the process of the US mid-term elections and whether or it they are hackable

ATTACKS

36. 4 tips to keep safe when phishing for treats this Halloween
37. How database hacks could impact elections and voters' fears
38. Girl Scouts data breach exposed personal information of 2,800 members
39. How database hacks could impact elections and voters' fears
40. Parties Seek to Settle Yahoo Data Breach Class Action for $50M
41. Center for Internet Security looks to expand threat sharing program to political campaigns
42. AI-Facilitated Product Aims to Stop Spear-Phishing Attacks
43. Internet-Exposed HMIs Put Energy, Water Facilities at Risk: Report
44. New SamSam ransomware campaign aims at targets across the US
45. An Update on the jQuery-File-Upload Vulnerability
46. INKY emerges from stealth with email spoofing, phishing protection service
47. Is it a Phish? Halloween Edition
48. Millions of Voter Records Up for Sale Ahead of the US Midterm Elections
49. There are plenty of different types of phishing attacks, but they all rely on the same basic mechanism: exploiting human
50. Prominent #malspam #Nymaim campaign with #BankBot #Anubis for Android UA. APK's dropped from hxxp://pobierz48[.]tk/ SHA256: e0d17f4ff0196c6527f8aa47b3ef220d0f4e712805f99d38a0804f3ea9506ece @ThreatFabric @virqdroid @LukasStefanko @
51. Disrupting the Flow: Exposed and Vulnerable Water and Energy Infrastructures
52. Thousands of critical energy and water systems exposed online for anyone to exploit
53. If it's only able to leak data at 15 bits per hour, is #NetSpectre a serious threat? Learn more about
54. An email hack affecting the Girl Scouts of Orange County, Calif. may have compromised the personal data of 2,800 members
55. La tua azienda è davvero preparata in caso di data breach?
56. By me @Forbes: 81.5M Voter Records For Sale On Dark Web Ahead Of Midterm Elections
57. Compression File Formats of the past Come Haunting in Spam Campaigns
58. Report on Phishing Attack Shows Microsoft, Paypal as well as Netflix as the Top Targets
59. Cofense Triggers its Increased Phishing Defense Services
60. Biggest data breach penalties for 2018
61. New McAfee Report Reveals Data in the Cloud More Exposed Than Organizations Think

THREATS

62. Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims
63. Kraken Cryptor Ransomware Gains Popularity Among Cybercriminals
64. SamSam ransomware group has hit 67 organizations in 2018, researchers say
65. Apple Fixes Creepy FaceTime Vulnerability, Crash Bug in macOS, and More
66. Talos Vulnerability Discovery Year in Review – 2018
67. Bitcoin Dealer Who Operated Unlicensed Bitcoin Exchange Faces Five Years in Jail
68. Kraken Resurfaces From the Deep Web
69. Malware Targeting Smartphones via Three DSP Providers
70. GPlayed Trojan's Baby Brother Is After Your Bank Account
71. macOS Cryptomining Malware on the Rise
72. CVE-2018-15688: systemd remote code execution vulnerability affects Linux machines
73. A #RemoteCodeExecution flaw in @Cisco Webex -- called WebExec -- could be an easy vector for insider attacks, and the
74. Zero-day Windows Deletebug: How to squash this ‘low-quality' pest
75. Microsoft Office Vulnerability Found, Check Point Research To The Rescue
76. Malware Infection at USGS Traced to Employee’s Habit of Viewing Adult Content
77. Ransomware Threat Continues: How Infections Take Place
78. New SamSam ransomware campaign aims at targets across the US
79. An Update on the jQuery-File-Upload Vulnerability
80. Libssh Vulnerability Leaves Servers Open to Unauthorized Access
81. Windows Zero-Day Vulnerability Disclosed
82. Malicious Apps Removed From Google Play Store
83. .@FireEye security researchers claimed the Russian government was 'most likely' behind the #Triton #Malware attack on an industrial control system
84. Employee Watched Porn at Work via 9000 Web pages Drops Malware on U.S Government Network
85. GandCrab: The Most Popular Multi-Million Dollar Ransomware of the Year
86. SamSam: Targeted Ransomware Attacks Continue
87. A fed visited 9,000 porn sites, infecting government networks with Russian malware
88. GPlayed Trojan's baby brother is after your bank account
89. .@Siemens SICLOCK central plant clocks were recently found to be affected by several vulnerabilities, some of which have been rated
90. Nastiest malware of 2018: Top attack payloads wreaking havoc
91. Threat Report: Jaff Ransomware Causes Havoc
92. Snakes in the grass! Malicious code slithers into Python PyPI repository
93. CommonRansom Ransomware Demands RDP Access to Decrypt Files
94. Talos Vulnerability Discovery Year in Review - 2018
95. The analysis of the attack which uses Excel 4.0 macro to avoid antivirus software detection
96. 92% of External Web Apps Have Exploitable Security Flaws or Weaknesses: Report
97. Prominent #malspam #Nymaim campaign with #BankBot #Anubis for Android UA. APK's dropped from hxxp://pobierz48[.]tk/ SHA256: e0d17f4ff0196c6527f8aa47b3ef220d0f4e712805f99d38a0804f3ea9506ece @ThreatFabric @virqdroid @LukasStefanko @
98. 3 Reasons Enterprises Are Moving to Decentralized Blockchain Applications
99. How to Be Protected from Malicious Message Crashing PS4 Console
100. Windows 10 Bug Let UWP Apps Access All Files Without Users' Consent
101. Another #BianLian Android banking #Trojan in #GooglePlay showing his other face by dropping #RedAlert v2.1 CC @Bank_Security @
102. Widely Used Cryptocurrency App Launching 2 Different Powerful Backdoor on Mac Users
103. Attackers getting better at quickly generating countless versions of existing #malware #antivirus @MariaKorolov -
104. Unpatched MS Word Flaw Could Allow Hackers to Infect Your Computer
105. Multiple Linux distributions affected by new vulnerability
106. Malicious hackers and their interest in bypassing CAPTCHA
107. Feature to attach video to Word files could be used to send malicious code
108. Spring Framework 5.1.2 releases: bugs fix
109. Most Important Security Tools and Resources For Security Researcher and Malware Analyst
110. A good insight for Europeans on the process of the US mid-term elections and whether or it they are hackable

CRIME

111. 4 tips to keep safe when phishing for treats this Halloween
112. Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims
113. Kraken Cryptor Ransomware Gains Popularity Among Cybercriminals
114. Parties Seek to Settle Yahoo Data Breach Class Action for $50M
115. Bitcoin Dealer Who Operated Unlicensed Bitcoin Exchange Faces Five Years in Jail
116. Malware Targeting Smartphones via Three DSP Providers
117. macOS Cryptomining Malware on the Rise
118. Judge Ordered Man to Pay $8 Million for Launching a DDoS Attack Against Rutgers
119. AI-Facilitated Product Aims to Stop Spear-Phishing Attacks
120. Ransomware Threat Continues: How Infections Take Place
121. Treat or Trick? Six Dangerous Digital Threats Dressed up As Irresistible Treats
122. INKY emerges from stealth with email spoofing, phishing protection service
123. Is it a Phish? Halloween Edition
124. Bushido Botnet Offered as MaaS
125. 3 Reasons Enterprises Are Moving to Decentralized Blockchain Applications
126. The author of the Mirai botnet gets six months of house arrest
127. Malicious hackers and their interest in bypassing CAPTCHA
128. New McAfee Report Reveals Data in the Cloud More Exposed Than Organizations Think
129. Spring Framework 5.1.2 releases: bugs fix

POLITICS

130. How database hacks could impact elections and voters' fears
131. How database hacks could impact elections and voters' fears
132. SamSam ransomware group has hit 67 organizations in 2018, researchers say
133. Center for Internet Security looks to expand threat sharing program to political campaigns
134. Cell Phone Security and Heads of State
135. Anonymous knocks out Gabon government sites with DoS attack