Threat report for 2018-10-03

DATA BREACH

1. FakeSpy Is Back as Part of New SmiShing Campaign, Adds New Features
2. The ultimate fallout from the Facebook data breach could be massive
3. Gwinnett Medical Center Investigates Possible Data Breach
4. Gwinnett Medical Center investigates possible data breach
5. GhostDNS hijacking campaign steps up attacks on Brazilians; 100K+ devices compromised
6. #DanaBot Observed in Large Campaign Targeting U.S. Organizations
7. Ransomware operators breach 40.000+ records from Fetal Diagnostic Institute of the Pacific
8. Facebook Reveals That Trio of Bugs Led to Data Breach
9. Vietnam-Born Worker in U.S Intelligence Ordered Prison over Data Theft and Leakage
10. New Danabot Banking Malware campaign now targets banks in the U.S.
11. Zoho domains central to keylogger, data theft campaigns worldwide
12. 100,000-Plus Home Routers Hijacked in Campaign to Steal Banking Credentials
13. .@Lookout’s @VijayaKaza is at @FedNewsRadio’s studio recording with @gschumm!
14. How Ashley Madison Recovered From Its Massive Data Breach
15. An extremely high number of keylogger #phishing campaigns have been seen tied to the Zoho online office suite software:
16. New Betabot campaign under the microscope
17. CyberSecurity Asean security alert on A Vulnerability in Microsoft Windows JET Database Engine Could Allow for Remote Code Execution
18. Facebook faces legal actions after data breach
19. Norton by Symantec Urges Consumers to Help Protect Their Personal Data
20. DanaBot Observed in Large Campaign Targeting U.S. Organizations

DENIAL-OF-SERVICE

21. Torii Botnet - Definitely Not a Mirai Wannabe
22. Instagram Used as Marketplace to Sell Stolen Fortnite Accounts and Botnets
23. Hacked Fortnite accounts and rent-a-botnet being pushed on Instagram
24. Hackers Use Instagram For Selling Stolen ‘Fortnite’ Accounts And Botnets
25. Enormous botnet used to hijack traffic destined for Brazilian banks
26. BYOB – Build Your Own Botnet
27. The @activereach guide to #DDoS, is aimed at technically aware business people who do not necessarily have a background in

MALVERTISING

Nothing to report

PHISHING

28. Phishing 101: Protection for Everyone
29. How to use the Firefox Master Password
30. Phishing gets more complex as decoy PDF pops up with Microsoft-issued SSL certificate
31. LastPass study shines new light on global password security practices
32. Do you know the top myths and facts of #mobile #phishing? If not, don't worry, we've compiled a list of
33. Phishing Attack Impersonates Law Firm
34. Phishing Attack Uses Azure Blob Storage to Impersonate Microsoft
35. Phishing Attack Impersonates Law Firm
36. Password-sharing is still prevalent in the workplace – although 45 percent of businesses do now use multifactor authentication:
37. GhostDNS hijacked 100,000 router traffic directed to phishing sites
38. Dark Web Malware Builder Allow Attackers To Create Malware That Steals Passwords & Credit Card Data
39. An extremely high number of keylogger #phishing campaigns have been seen tied to the Zoho online office suite software:
40. What is the future of authentication? Hint: It’s not passwords, passphrases or MFA
41. 100,000 routers hijacked by GhostDNS, traffic directed to phishing sites

WEB DEFACEMENT

42. Hacker Faces Jail Time After Defacing West Point, NYC Sites
43. Hacker Defacing 11,000 US Websites Faces 10 Years behind Bars
44. Hacktivist pleads guilty to defacing websites for NYC comptroller, Combating Terrorism Center
45. Hacker faces jail time after defacing US military academy, NYC sites

MALWARE

46. Windows 10 October 2018 Update refines ransomware protection
47. Virus Bulletin 2018: macOS Flaw Allows Attackers to Hijack Installed Apps
48. Virus Bulletin 2018: Microsoft’s Lambert on How Cloud is Changing Security
49. Malware Outbreak Causes Disruptions, Closures at Canadian Restaurant Chain
50. Betabot - An Example of Cheap Modern Malware Sophistication
51. Instagram accounts frozen with ransomware | Avast
52. Instagram accounts frozen with ransomware | Avast
53. Did you know that 1 in 131 emails contains malware? In honor of #NCSAM, secure your spot for #RiskSec, expand
54. New KONNI Malware Attacking Eurasia and Southeast Asia
55. Google Taking New Steps To Prevent Malicious Chrome Extensions
56. 3 types of attacks with ransomware: Cyber-theft, extortion, and sabotage
57. Network Outage at Some Recipe Unlimited Locations Caused by Malware
58. Labeless Part 6: How to Resolve Obfuscated API Calls in the Ngioweb Proxy Malware
59. Banking trojans, not #ransomware, are the biggest threat to the enterprise now.
60. Labeless Part 5: How to Decrypt Strings in Boleto Banking Malware Without Reconstructing Decryption Algorithm.
61. Cisco Talos spotted 18 vulnerabilities in Foxit PDF Reader, 8 in Atlantis World Processor
62. Ransomware operators breach 40.000+ records from Fetal Diagnostic Institute of the Pacific
63. New Danabot Banking Malware campaign now targets banks in the U.S.
64. Zoho domains central to keylogger, data theft campaigns worldwide
65. Recipe Unlimited denies ransomware attack, despite alleged ransom note
66. Dark Web Malware Builder Allow Attackers To Create Malware That Steals Passwords & Credit Card Data
67. IDG Contributor Network: Will your company be valued by its price-to-data ratio?
68. Researchers from @alienvault found a new #cryptocurrency mining malware -- dubbed #MassMiner -- that infects systems across the web. Learn
69. Introducing... THE HUNT: A Cyber Attack in the Process Industry
70. Researchers associated the recently discovered NOKKI Malware to North Korean APT
71. Changes to #Sanny #malware delivery method attacks were recently discovered by @FireEye researches. Learn who is at risk and how
72. Ransomware Hits Port of San Diego
73. An extremely high number of keylogger #phishing campaigns have been seen tied to the Zoho online office suite software:
74. Z-LAB Report – Analyzing the GandCrab v5 ransomware
75. Preventing and Detecting Malicious Insiders
76. In 1999, AV-TEST reported that there were 98,428 total unique malware samples. Today, AV-TEST registers over 350,000 new pieces of
77. Cheap Android Phones and Poor Quality Control Leads to Malware Surprise
78. DanaBot Observed in Large Campaign Targeting U.S. Organizations

EXPLOIT

79. TA18-276B: Advanced Persistent Threat Activity Exploiting Managed Service Providers
80. TA18-276A: Using Rigorous Credential Control to Mitigate Trusted Network Exploitation
81. Heipparallaa! Uudessa jaksossamme sivuutamme ajankohtaiset aiheet ja keskitymme puhumaan @japi999 ja @ekoivune kanssa tietoturva-asiantuntijuudesta. Bonusvieraana tällä kertaa OpSecin sijaan @Larppa1337!

VULNERABILITY

82. Virus Bulletin 2018: macOS Flaw Allows Attackers to Hijack Installed Apps
83. [SingCERT] Alert on 47 Critical Vulnerabilities in Adobe Acrobat and Adobe Reader
84. Mozilla Firefox Releases 62.0.3 & Security Updates for 2 High Critical Vulnerabilities
85. Women in Information Security: Pam Armstrong
86. Vulnerability Spotlight: Google PDFium JBIG2 Image ComposeToOpt2WithRect Information Disclosure Vulnerability
87. Foxit patches 118 vulnerabilities in popular PDF reader
88. Experts found 9 NAS flaws that expose LenovoEMC, Iomega Devices to hack
89. The one serious MacBook Pro security flaw that nobody is talking about
90. Update now: Adobe fixes 85 serious flaws in Acrobat and Reader
91. 18 Vulnerabilities Found in Foxit PDF Reader
92. 18 Vulnerabilities Found in Foxit PDF Reader
93. Marine Corps bug bounty program finds 150 vulnerabilities
94. TP-Link router vulnerable to remote takeover flaw
95. Cisco Talos spotted 18 vulnerabilities in Foxit PDF Reader, 8 in Atlantis World Processor
96. Adobe update cleans up 86 bugs in Acrobat and Reader, many critical
97. Facebook Reveals That Trio of Bugs Led to Data Breach
98. TP-Link router vulnerable to remote takeover flaw
99. Adobe update cleans up 86 bugs in Acrobat and Reader, many critical
100. The Intel Management Engine exposes a new vulnerability
101. How an improper #authentication flaw affects
102. Vulnerability Spotlight: Google PDFium JBIG2 Image ComposeToOpt2WithRect Information Disclosure Vulnerability
103. CyberSecurity Asean security alert on A Vulnerability in Microsoft Windows JET Database Engine Could Allow for Remote Code Execution
104. Vulnerabilities expose Iomega and LenovoEMC NAS devices to attacks
105. Estonia sues Gemalto for €152M for the flaws in the identification cards issued by the company
106. Scanning for OWASP Top 10 Vulnerabilities with Metasploit for the Web(w3af)
107. Mozilla Firefox 62.0.3 releases: Fixed hangs on macOS Mojave & security bugs
108. Apple iOS 12 Texting Bug Sends Messages To Wrong Contacts