Threat report for 2018-10-26

DATA BREACH & DATA LOSS

1. ThreatList: 1 Out of 5 Would Ditch a Business After a Data Breach
2. Facebook removes Iranian influence campaign as midterms near
3. Bushido-Powered DDoS Service Whipped Up from Leaked Code
4. British Airways: 185K Affected in Second Data Breach
5. British Airways Data Breach Takes Off Again with 185K More Victims
6. Settlement in Yahoo data breach leaves company to pay $50M
7. Pocket iNET ISP Exposed 73GB of Sensitive Data On Misconfigured S3 Bucket
8. Campaign 2018: New malware attacks target voters in key battleground states
9. Cathay Pacific Hacked, Personal Data For 9.4 Million Passengers Compromised
10. Tracking Tick Through Recent Campaigns Targeting East Asia
11. Details of 9mil compromised in Cathay Pacific data leak
12. Cathay Pacific Suffered Data Breach Affecting 9.4 Million Customers
13. BA website and data breach by Magecart deeper than first thought
14. Malicious actors attacked a back-end insurance system and the resulting @HealthCareGov #breach exposed an unknown amount of data on 75,000
15. Cathay Pacific hack: Personal data of up to 9.4 million airline passengers laid bare
16. Cathay Pacific Says 9.4 Million Affected by Data Breach
17. A #ZeroDay in the popular #jQuery File Upload plugin could affect thousands of projects and the jQuery #plugin vulnerability may
18. Airline Discovers Trove of Frequent Flyer Accounts Compromised and Posted for Sale Online:
19. British Airways data breach worse than thought
20. Spammers Behind Historic Data Breach Affecting Millions of Facebook Users
21. Cathay Pacific Airways Confirm Data Breach of its Customers
22. “Advanced attacks, spear-phishing and data breaches are the norm, instead of the exception. We need to address these issues with
23. New Malware Abusing Two Legitimate Windows Files to Steal Victims Personal Data

DENIAL-OF-SERVICE

24. University DDoS attack leads to $8.6 million fine, house arrest for New Jersey man
25. Bushido-Powered DDoS Service Whipped Up from Leaked Code
26. 16K Strong DDoS-for-Hire Botnet Provides 420+ GB/s Club to Knock Out Websites
27. DemonBot Fans DDoS Flames with Hadoop Enslavement
28. New DemonBot Attack Hadoop Clusters to Performing DDoS Attacks using Powerful Cloud infrastructure servers

MALVERTISING

Nil

PHISHING

29. Microsoft bug makes phishing easy, says cybersecurity firm
30. PhishX –Spear Phishing Tool for Capturing Credentials
31. “Advanced attacks, spear-phishing and data breaches are the norm, instead of the exception. We need to address these issues with

WEB DEFACEMENT

Nil

BOTNET

32. Exploits Block List Grows 50% Because of Spambot, Avalanche/Gamarue botnet
33. 16K Strong DDoS-for-Hire Botnet Provides 420+ GB/s Club to Knock Out Websites
34. Chalubo Botnet
35. Experts presented BOTCHAIN, the first fully functional Botnet built upon the Bitcoin Protocol
36. New DemonBot Botnet Pulls the YARN in Hadoop Servers

RANSOMWARE

37. The Week in Ransomware - October 26th 2018 - Decryptors, RaaS, and More
38. 3 Keys to Reducing the Threat of Ransomware

CRYPTOMINING & CRYPTOCURRENCIES

39. 23-year-old woman charged with stealing $320,000 worth of cryptocurrency
40. 23-year-old woman charged with stealing $320,000 worth of cryptocurrency
41. North Korea regime using and exploiting cryptocurrencies
42. North Korea Backed Two Cryptocurrency Scams This Year, Says Report
43. No Place for Security as Cryptocurrency Skills Demand Soars
44. What Is Gridcoin and How Can It Advance Science?
45. Experts presented BOTCHAIN, the first fully functional Botnet built upon the Bitcoin Protocol
46. China’s Alibaba Cloud Expands Enterprise Blockchain Offering to Global Markets
47. How to become a Monero million(th)aire in just 20 minutes [PODCAST]

MALWARE

48. Due to Misconfigured Component: DemonBot Malware Infects Multiple Apache Hadoop Servers
49. PoC Attack Leverages Microsoft Office and YouTube to Deliver Malware
50. ICMP Shell- Secret Command and Control Channel to Control Victims Machine Using Ping
51. Scammers use old browser trick to create fake virus download
52. Campaign 2018: New malware attacks target voters in key battleground states
53. DeepPhish: Simulating Malicious AI to Act Like an Adversary
54. .@FireEye #security researchers claimed the Russian government was 'most likely' behind the #Triton #malware attack on an industrial control system
55. Malicious actors attacked a back-end insurance system and the resulting @HealthCareGov #breach exposed an unknown amount of data on 75,000
56. An innovative partnership could help Cyber Command fight malware
57. New Malware Abusing Two Legitimate Windows Files to Steal Victims Personal Data

EXPLOIT

58. This two-year-old X.org give-me-root hole is so trivial to exploit, you can fit it in a single tweet

VULNERABILITY

59. CVE-2018-14665 privilege escalation flaw affects popular Linux distros
60. Cloudflare WAF Bypass Vulnerability Discovered
61. Code Execution Vulnerability Patched in Cross-Platform MKVToolNix Toolset
62. Vulnerability Spotlight: Talos-2018-0694 – MKVToolNix mkvinfo read_one_element Code Execution Vulnerability
63. Microsoft bug makes phishing easy, says cybersecurity firm
64. A flaw in @Cisco Webex -- called WebExec -- can allow #RemoteCodeExecution. And while experts don't agree on how dangerous
65. Pentagon Expands Bug Bounty To Include Physical Systems
66. WebExec vulnerability leaves Webex open to insider attacks
67. Trivial Bug in X.Org Gives Root Permission on Linux and BSD Systems
68. Researchers discovered a vulnerability in Cisco #Webex, called #WebExec, which allows local attackers to issue commands as privileged users. @iagox86
69. Cisco patches command injection bug in Webex Meetings Desktop App for Windows
70. CVE-2018-9206 was maliciously exploited that multiple websites were linked to the search page to jump to the betting site
71. CVE-2018-14665: Xorg X Server privilege escalation vulnerabilities
72. What a crane in the ass: Bug leaves construction machinery vulnerable to evil command injection
73. Researchers report vulnerability in Microsoft Word's online video feature
74. A #ZeroDay in the popular #jQuery File Upload plugin could affect thousands of projects and the jQuery #plugin vulnerability may
75. Vulnerability Spotlight: Talos-2018-0694 - MKVToolNix mkvinfo read_one_element Code Execution Vulnerability
76. LIVE NETWORKS LIVE555 Streaming Media RTSP Server Remote Code Execution Vulnerability(CVE-2018-4013) Threat Alert
77. New Privilege Escalation Flaw Affects Most Linux Distributions
78. Top 5 Application Vulnerabilities: How to Prevent Risks
79. 7 places to find threat intel beyond vulnerability databases
80. Zero-day vulnerability in Windows allows privileges escalation