Sector brief for 2018-10-05

HEALTHCARE

1. Hackers fly under the radar for two years after infecting chiropractic clinic with malware
2. DHS issued an alert on attacks aimed at Managed Service Providers

TRANSPORT

Nothing to report

BANKING & FINANCE

3. Sales intel firm Apollo data breach exposed more than 200 million contact records
4. Remove Ursnif Trojan (Purolator Phishing) Scam
5. Trojans go after MS Office vulnerabilities and China hacks US hardware
6. California Is Making It Illegal for Devices to Have Shitty Default Passwords
7. Danabot Banking Malware Targets U.S. Organizations
8. Report: The bigger the company, the messier the password practices
9. Hackers fly under the radar for two years after infecting chiropractic clinic with malware
10. DanaBot Banking Trojan’s Journey to North America
11. The Kronos banking trojan is back from the malware dustbin. After years of lying dormant, hackers have reworked the underlying
12. Detecting Credit Card Skimmers
13. Experts warns of a new extortion campaign based on the Breach Compilation archive
14. Facebook Logins Available on the Dark Web for $2.60
15. New research reveals the DanaBot banking Trojan is now targeting banks in the United States as well. The campaign attempts to
16. Passware Kit: Forensic software recovers passwords for Bitcoin wallets
17. North Korean hacking operation behind SWIFT attacks

INFORMATION & TELECOMMUNICATION

18. Sales intel firm Apollo data breach exposed more than 200 million contact records
19. Unit 42 Vulnerability Research October 2018 Disclosures – Adobe
20. Unit 42 Vulnerability Research October 2018 Disclosures – Adobe
21. Facebook Found “No Evidence” Of Facebook Login Exploited To Access Linked Apps
22. 150 Bugs Found in the Hack the Marine Corps Challenge
23. 150 Bugs Found in the Hack the Marine Corps Challenge
24. Virus Bulletin 2018: Exposing the Social Media Fraud Ecosystem
25. California Is Making It Illegal for Devices to Have Shitty Default Passwords
26. Fileless malware: part deux
27. Can the @Microsoft Authenticator really replace passwords in the enterprise? Microsoft says the answer is yes and proclaimed the password
28. Smart TV kit featuring Google Home Mini and third-gen Chromecast leaks
29. Hacked #Fortnite accounts and rent-a-botnet being pushed on Instagram
30. US users open 30% of phishing emails with 12% of those clicking on infected links or attachments. Prepare for 2019's
31. Credential-Phishing Attempts Highest on Tuesdays
32. Credential-Phishing Attempts Highest on Tuesdays
33. If you're thinking passwords, check out #CyberSauna episode #13: A Hacker's Take on Cracking & Protecting Your Creds
34. How does FacexWorm malware use Facebook Messenger to spread?
35. FYI: "password" is the 2nd most popular password in the world. Can you guess the first?
36. Facebook Logins Available on the Dark Web for $2.60
37. VP Mike Pence slams Google over Chinese search engine project
38. Fake News Domains Spoof UK News Sites
39. Fin7 Hackers Breached US Chain Burgerville
40. Fin7 Hackers Breached US Chain Burgerville
41. Roaming Mantis Hacking Group Inject Web Crypto Mining for iOS Devices via Malicious Content Delivery System
42. CMake 3.12.3 releases: managing the build process of software

FOOD

Nothing to report

WATER

Nothing to report

ENERGY

43. DHS issued an alert on attacks aimed at Managed Service Providers

GOVERNMENT & PUBLIC SERVICE

Nothing to report