Threat report for 2018-10-30

DATA BREACH & DATA LOSS

1. How database hacks could impact elections and voters' fears
2. Girl Scouts data breach exposed personal information of 2,800 members
3. How database hacks could impact elections and voters' fears
4. Parties Seek to Settle Yahoo Data Breach Class Action for $50M
5. Center for Internet Security looks to expand threat sharing program to political campaigns
6. Internet-Exposed HMIs Put Energy, Water Facilities at Risk: Report
7. New SamSam ransomware campaign aims at targets across the US
8. An Update on the jQuery-File-Upload Vulnerability
9. Millions of Voter Records Up for Sale Ahead of the US Midterm Elections
10. Prominent #malspam #Nymaim campaign with #BankBot #Anubis for Android UA. APK's dropped from hxxp://pobierz48[.]tk/ SHA256: e0d17f4ff0196c6527f8aa47b3ef220d0f4e712805f99d38a0804f3ea9506ece @ThreatFabric @virqdroid @LukasStefanko @
11. Disrupting the Flow: Exposed and Vulnerable Water and Energy Infrastructures
12. Thousands of critical energy and water systems exposed online for anyone to exploit
13. If it's only able to leak data at 15 bits per hour, is #NetSpectre a serious threat? Learn more about
14. An email hack affecting the Girl Scouts of Orange County, Calif. may have compromised the personal data of 2,800 members
15. La tua azienda è davvero preparata in caso di data breach?
16. By me @Forbes: 81.5M Voter Records For Sale On Dark Web Ahead Of Midterm Elections
17. Compression File Formats of the past Come Haunting in Spam Campaigns
18. Biggest data breach penalties for 2018
19. New McAfee Report Reveals Data in the Cloud More Exposed Than Organizations Think

DENIAL-OF-SERVICE

20. Judge Ordered Man to Pay $8 Million for Launching a DDoS Attack Against Rutgers
21. Demonbot targets cloud servers for DDoS attacks
22. New Botnet That Targets Cloud Servers for DDoS Attacks
23. Anonymous knocks out Gabon government sites with DoS attack
24. Prominent #malspam #Nymaim campaign with #BankBot #Anubis for Android UA. APK's dropped from hxxp://pobierz48[.]tk/ SHA256: e0d17f4ff0196c6527f8aa47b3ef220d0f4e712805f99d38a0804f3ea9506ece @ThreatFabric @virqdroid @LukasStefanko @

MALVERTISING

Nil

PHISHING

25. 4 tips to keep safe when phishing for treats this Halloween
26. AI-Facilitated Product Aims to Stop Spear-Phishing Attacks
27. INKY emerges from stealth with email spoofing, phishing protection service
28. Is it a Phish? Halloween Edition
29. There are plenty of different types of phishing attacks, but they all rely on the same basic mechanism: exploiting human
30. Report on Phishing Attack Shows Microsoft, Paypal as well as Netflix as the Top Targets
31. Cofense Triggers its Increased Phishing Defense Services

WEB DEFACEMENT

Nil

BOTNET

32. Bushido Botnet Offered as MaaS
33. New Botnet That Targets Cloud Servers for DDoS Attacks
34. The author of the Mirai botnet gets six months of house arrest
35. The Russian built #VPNFilter #botnet was previously taken down after 500,000 routers were infected. However, recently it attempted a comeback.
36. Recently discovered DemonBot Botnet targets Hadoop servers

RANSOMWARE

37. Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims
38. Kraken Cryptor Ransomware Gains Popularity Among Cybercriminals
39. SamSam ransomware group has hit 67 organizations in 2018, researchers say
40. Ransomware Threat Continues: How Infections Take Place
41. New SamSam ransomware campaign aims at targets across the US
42. GandCrab: The Most Popular Multi-Million Dollar Ransomware of the Year
43. SamSam: Targeted Ransomware Attacks Continue
44. Threat Report: Jaff Ransomware Causes Havoc
45. CommonRansom Ransomware Demands RDP Access to Decrypt Files

CRYPTOMINING & CRYPTOCURRENCIES

46. Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims
47. Kraken Cryptor Ransomware Gains Popularity Among Cybercriminals
48. Bitcoin Dealer Who Operated Unlicensed Bitcoin Exchange Faces Five Years in Jail
49. Kraken Resurfaces From the Deep Web
50. macOS Cryptomining Malware on the Rise
51. 3 Reasons Enterprises Are Moving to Decentralized Blockchain Applications
52. Widely Used Cryptocurrency App Launching 2 Different Powerful Backdoor on Mac Users

MALWARE

53. Malware Targeting Smartphones via Three DSP Providers
54. GPlayed Trojan's Baby Brother Is After Your Bank Account
55. macOS Cryptomining Malware on the Rise
56. Malware Infection at USGS Traced to Employee’s Habit of Viewing Adult Content
57. Malicious Apps Removed From Google Play Store
58. .@FireEye security researchers claimed the Russian government was 'most likely' behind the #Triton #Malware attack on an industrial control system
59. Employee Watched Porn at Work via 9000 Web pages Drops Malware on U.S Government Network
60. A fed visited 9,000 porn sites, infecting government networks with Russian malware
61. GPlayed Trojan's baby brother is after your bank account
62. Nastiest malware of 2018: Top attack payloads wreaking havoc
63. Snakes in the grass! Malicious code slithers into Python PyPI repository
64. The analysis of the attack which uses Excel 4.0 macro to avoid antivirus software detection
65. Prominent #malspam #Nymaim campaign with #BankBot #Anubis for Android UA. APK's dropped from hxxp://pobierz48[.]tk/ SHA256: e0d17f4ff0196c6527f8aa47b3ef220d0f4e712805f99d38a0804f3ea9506ece @ThreatFabric @virqdroid @LukasStefanko @
66. How to Be Protected from Malicious Message Crashing PS4 Console
67. Another #BianLian Android banking #Trojan in #GooglePlay showing his other face by dropping #RedAlert v2.1 CC @Bank_Security @
68. Widely Used Cryptocurrency App Launching 2 Different Powerful Backdoor on Mac Users
69. Attackers getting better at quickly generating countless versions of existing #malware #antivirus @MariaKorolov -
70. Malicious hackers and their interest in bypassing CAPTCHA
71. Feature to attach video to Word files could be used to send malicious code
72. Most Important Security Tools and Resources For Security Researcher and Malware Analyst
73. A good insight for Europeans on the process of the US mid-term elections and whether or it they are hackable

EXPLOIT

74. Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims
75. Thousands of critical energy and water systems exposed online for anyone to exploit

VULNERABILITY

76. Apple Fixes Creepy FaceTime Vulnerability, Crash Bug in macOS, and More
77. Talos Vulnerability Discovery Year in Review – 2018
78. CVE-2018-15688: systemd remote code execution vulnerability affects Linux machines
79. A #RemoteCodeExecution flaw in @Cisco Webex -- called WebExec -- could be an easy vector for insider attacks, and the
80. Zero-day Windows Deletebug: How to squash this ‘low-quality' pest
81. Microsoft Office Vulnerability Found, Check Point Research To The Rescue
82. An Update on the jQuery-File-Upload Vulnerability
83. Libssh Vulnerability Leaves Servers Open to Unauthorized Access
84. Windows Zero-Day Vulnerability Disclosed
85. .@Siemens SICLOCK central plant clocks were recently found to be affected by several vulnerabilities, some of which have been rated
86. Talos Vulnerability Discovery Year in Review - 2018
87. 92% of External Web Apps Have Exploitable Security Flaws or Weaknesses: Report
88. Windows 10 Bug Let UWP Apps Access All Files Without Users' Consent
89. Unpatched MS Word Flaw Could Allow Hackers to Infect Your Computer
90. Multiple Linux distributions affected by new vulnerability
91. Spring Framework 5.1.2 releases: bugs fix