Threat report for 2018-10-01

DATA BREACH

1. 100K Routers Hijacked for Phishing in GhostDNS Campaign
2. Picture-in-Picture Phishing Campaign Goes After Steam Credentials
3. 4 Ways to Protect Your Files from a Data Breach
4. Facebook hacked – 50 Million Users’ Data exposed in the security breach
5. Telegram Patched IP Address Leak Problem In Its Desktop Client
6. Telegram Leaks User IP Addresses
7. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
8. Flaws in Tory party conference app leak ministers' personal information
9. Facebook faces a whopping €1.4 billion penalty under GDPR for Sept. 30 data breach
10. Phishing campaign targets developers of Chrome extensions
11. 3 GOP senators doxed during Kavanaugh hearing
12. Facebook Data Breach Extended to Third-Party Applications
13. Facebook could face up to $1.6bn fine for data breach
14. Telegram CVE-2018-17780 flaw causes the leak of IP addresses when initiating calls
15. Telegram Calling Feature Leaks Your IP Addresses—Patch Released
16. High-Profile Instagram Accounts Hacked For Ransom In A Recent Campaign

DENIAL-OF-SERVICE

17. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
18. Instagram Being Used To Sell Botnets And Stolen Fortnite Accounts
19. Hackers Are Selling Botnets and Stolen ‘Fortnite’ Accounts Over Instagram
20. Torii malware could be gateway to more sophisticated IoT botnet attacks
21. New vicious Torii IoT botnet discovered
22. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
23. Gigantic 100,000-strong botnet used to hijack traffic meant for Brazilian banks
24. Torii IoT Botnet Takes Mirai to the Next Level

MALVERTISING

Nothing to report

PHISHING

25. 100K Routers Hijacked for Phishing in GhostDNS Campaign
26. Picture-in-Picture Phishing Campaign Goes After Steam Credentials
27. Roaming Mantis Group Adds Phishing and Web Crypto Mining for iOS Devices
28. Weak Passwords Abused for 'FruitFly' Mac Malware Distribution
29. Third-Party Apps Using Facebook Login Also Affected by Latest Hacking Incident
30. How to Orchestrate a Smarter Phishing Response
31. Voice Phishing Scams Are Getting More Clever
32. Why nearly 50% of organizations are failing at password security
33. Employees Share Average of 6 Passwords With Co-Workers
34. UK firms’ password security score ‘average’
35. Phishing campaign targets developers of Chrome extensions
36. Password Security Better, Still Poses Business Risk
37. Password Security Better, Still Poses Business Risk
38. Following a loud critical backlash to a new #Chrome login feature and cookie retention functionality, @Google will make changes in

WEB DEFACEMENT

Nothing to report

MALWARE

39. Top Cloud Domain Controller for MSPs
40. Multiple Code Execution Vulnerabilities Found in Atlantis Word Processor
41. GhostDNS malware already infected over 100K+ devices and targets 70+ different types of home routers
42. GrandCrab Ransomware Spreads Using Multiple Known Vulnerabilities
43. Fileless Malware Attacks on the Rise, Microsoft Says
44. 'Short, Brutal Lives': Life Expectancy for Malicious Domains
45. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
46. Roaming Mantis Group Adds Phishing and Web Crypto Mining for iOS Devices
47. Google Adds New Rules To End Malicious Chrome Extensions
48. Code Execution Vulnerabilities Uncovered In Atlantis Word Processor
49. Deep Dive Into iTranslator - MITM Malware
50. LoJax: Fisrt UEFI Rootkit Found In The Wild
51. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
52. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
53. Telegram Patched IP Address Leak Problem In Its Desktop Client
54. Weak Passwords Abused for 'FruitFly' Mac Malware Distribution
55. Code execution vulnerabilities uncovered in Atlantis Word Processor
56. Malwarebytes is a champion of National Cybersecurity Awareness Month
57. Monitor privileged execution to defend against
58. Telegram Leaks User IP Addresses
59. Vulnerability Spotlight: Multiple vulnerabilities in Atlantis Word Processor
60. TrickBot Banking Trojan Takes Center Stage in 2018
61. More on the Five Eyes Statement on Encryption and Backdoors
62. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
63. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
64. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
65. GandCrab ransomware is spreading wildly through several known vulnerabilities
66. Docs reveal how Fruitfly Mac spyware initially spread
67. Torii malware could be gateway to more sophisticated IoT botnet attacks
68. SamSam ransomware: How is this version different from others?
69. Ransomware Casts Anchor at the Port of San Diego
70. Hackers Hijacked More Than 100,000 Routers DNS Settings and Redirecting Users to Malicious WebSites
71. Ransomware Casts Anchor at the Port of San Diego
72. #VPNFilter #malware: How can users protect themselves?
73. Vulnerability Spotlight: Multiple vulnerabilities in Atlantis Word Processor
74. Telegram CVE-2018-17780 flaw causes the leak of IP addresses when initiating calls
75. Telegram Calling Feature Leaks Your IP Addresses—Patch Released
76. New Banking Malware Steal Money From Victim’s Bank Accounts Using Weaponized Adobe Reader

EXPLOIT

77. A new Browser Reaper exploit can crash or freeze Mozilla #Firefox, according to a proof of concept published by a
78. Python-based attack tools are the most common vector for launching exploit attempts
79. Several Bugs Exploited in Massive Facebook Hack
80. Sophos recently discovered a #Samsam extortion code that performs whole-company attacks through a variety of vulnerability exploits. Discover how this
81. How can attackers exploit a buffer underflow #vulnerability?
82. New Banking Malware Steal Money From Victim’s Bank Accounts Using Weaponized Adobe Reader

VULNERABILITY

83. Adobe Patches 47 Critical Flaws in Acrobat and DC
84. Multiple Code Execution Vulnerabilities Found in Atlantis Word Processor
85. CVE-2018-11776 and why you need Black Duck Security Advisories
86. Nine NAS Bugs Open LenovoEMC, Iomega Devices to Attack
87. GrandCrab Ransomware Spreads Using Multiple Known Vulnerabilities
88. Google Bug Breaks Search Results with a Plus Sign On Mac Safari
89. Vulnerability Spotlight: Multiple Issues in Foxit PDF Reader
90. Gemalto ID Card Provider Sued for €152 Million in eID Vulnerability Case
91. Code Execution Vulnerabilities Uncovered In Atlantis Word Processor
92. Facebook: How to minimize the risk of vulnerabilities
93. Code execution vulnerabilities uncovered in Atlantis Word Processor
94. Attackers chained three bugs to breach into the Facebook platform
95. Vulnerability Spotlight: Multiple vulnerabilities in Atlantis Word Processor
96. Monero fixes major ‘burning bug’ flaw, preventing mass devaluation
97. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
98. Flaws in Tory party conference app leak ministers' personal information
99. Vulnerability Spotlight: Multiple Issues in Foxit PDF Reader
100. GandCrab ransomware is spreading wildly through several known vulnerabilities
101. Several Bugs Exploited in Massive Facebook Hack
102. Sophos recently discovered a #Samsam extortion code that performs whole-company attacks through a variety of vulnerability exploits. Discover how this
103. Nasty Linux Kernel Vulnerability Discovered, Mandatory Kernel Update Required
104. How can attackers exploit a buffer underflow #vulnerability?
105. CISO @rickhholland joins @drshellface and @mazzazone to discuss the latest #cybersecurity news: Security Flaws Affect 50 Million Facebook Accounts and
106. Vulnerability Spotlight: Multiple vulnerabilities in Atlantis Word Processor
107. Telegram CVE-2018-17780 flaw causes the leak of IP addresses when initiating calls