APT report for 2018-11-29

TRANSNATIONAL / UNKNOWN

1. Looking Ahead: RiskIQ’s 2019 Cybersecurity Predictions

CHINA

2. The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia

INDIA

Nil

NORTH KOREA

3. McAfee Labs 2019 Threats Predictions Report
4. Lazarus Targeting Latin America

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

5. WannaCry: One year later, is the world ready for another major attack?
6. First Annual Cyberwarcon
7. Accenture: Russian hackers using Brexit talks to disguise phishing lures
8. Pterodo Found On State Authorities' Computers In Ukraine
9. Beware the Malware-Laden Brexit News
10. McAfee Labs 2019 Threats Predictions Report

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-11-29

WINDOWS

1. Banking Trojan Made in Brazil? A Brief Look
2. Inside the Google Docs Malicious Network
3. The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia
4. XSS Shell- Cross Site Scripting
5. KingMiner malware hijacks the full power of Windows Server CPUs
6. Pervasive Brazilian financial malware targets bank customers in Latin America and Europe

LINUX

7. XSS Shell- Cross Site Scripting

UNIX

Nil

ANDROID

8. Inside the Google Docs Malicious Network
9. McAfee Labs 2019 Threats Predictions Report
10. Several Malicious Apps on Google Play Posing as Voice Messenger Steal User Personal Information
11. Threat Spotlight: New spear phishing attack gift card scam

IOS

Nil

MACOS

12. Inside the Google Docs Malicious Network

Threat report for 2018-11-29

DATA BREACH & DATA LOSS

1. Atrium Health’s Databreach: 2.65 Million Patient Records Publicly Revealed
2. Dell Forces Password Reset for Online Customers Following Data Breach
3. Dell remains quiet on attempted data breach
4. 2.6 Million Atrium Health Patient Records Compromised by Vendor AccuDoc
5. Iranian duo charged with SamSam ransomware-slinging campaign
6. The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia
7. SKY Brasil Exposes 32 Million Customer Records
8. US Charges Hackers in Multimillion Dollar Ransomware Campaign
9. Dunkin' Donuts Serves Up Data Breach Alert
10. Uber fined $1.1 million by UK and Dutch regulators over 2016 data breach
11. US Indicts Two Iranians for SamSam Campaign Blitz
12. London-based Urban Massage app leaks data on 300K customers, including sexual misconduct claims
13. Database breach affects 2.6 million Atrium Health patients
14. Dell data breach – Dell forces password reset after the incident
15. Records of 114 Million US Citizen and Companies Exposed Online
16. How have #phishing campaigns threatened your #EnterpriseSecurity system?
17. AccuDoc Data Breach impacted 2.6 Million Atrium Health patients
18. Dell Resets User Passwords Following Data Breach
19. Atrium Health Data Breach Affected More than 2 Million Patients
20. UK and Dutch Regulators Fined Uber for $1.1 Million over 2016 Data Breach
21. Dell Hacked – Data Breach Exposed Names, Email addresses & Hashed Passwords
22. A targeted attack attempting to steal #cryptocurrency took advantage of open source software with a compromised #NPM package and experts

DENIAL-OF-SERVICE

Nil

MALVERTISING

Nil

PHISHING

23. Users Failing Phishing Simulations? That’s ok
24. Dell Forces Password Reset for Online Customers Following Data Breach
25. Accenture: Russian hackers using Brexit talks to disguise phishing lures
26. Office workers beware: Holiday gift card spear phishing attacks on the rise
27. Blazy – Open Source Modern Login Brute-forcer
28. Smashing Security #106: Google Maps, Fed phishing, and Grinch bots
29. Dell data breach – Dell forces password reset after the incident
30. NEW: Russian hackers using Brexit talks to disguise its phishing lures
31. Threat Spotlight: New spear phishing attack gift card scam
32. How have #phishing campaigns threatened your #EnterpriseSecurity system?

WEB DEFACEMENT

Nil

BOTNET

33. Anti-Botnet Guide Aims to Tackle Automated Threats
34. “And once a device is part of a botnet, it leaves them open for future attacks. So users should avoid
35. Smashing Security #106: Google Maps, Fed phishing, and Grinch bots
36. The Justice Department, FBI and several tech and cybersecurity companies have dismantled the #3ve #botnet, and eight individuals have been

RANSOMWARE

37. A free decryption tool is available for Thanatos ransomware victims
38. Colorado Agency Targeted in Nationwide Ransomware Scheme
39. SamSam ransomware actors charged, sanctioned by US government
40. Iranian duo charged with SamSam ransomware-slinging campaign
41. U.S. DoJ charges Iranian duo over SamSam Ransomware activity
42. US charges Iranian hackers for SamSam ransomware attacks
43. US charges Iranian hackers for SamSam ransomware attacks
44. US indicts two over SamSam ransomware attacks
45. US Charges Hackers in Multimillion Dollar Ransomware Campaign

CRYPTOMINING & CRYPTOCURRENCIES

46. AriseBank CEO faces 120 years behind bars over alleged cryptocurrency scam
47. Hacker takes over JavaScript library, injects malware to steal Bitcoin
48. A targeted attack attempting to steal #cryptocurrency took advantage of open source software with a compromised #NPM package and experts

MALWARE

49. Rotexy malware morphs into dangerous banking Trojan
50. Banking Trojan Made in Brazil? A Brief Look
51. Overall Volume of Thanksgiving Weekend Malware Attacks Lower This Year
52. Brazilian Financial Malware Spreads Beyond National Boundaries
53. Indian Police Break Up International Computer Virus Scam
54. Inside the Google Docs Malicious Network
55. The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia
56. Beware the Malware-Laden Brexit News
57. KingMiner malware hijacks the full power of Windows Server CPUs
58. Malicious developer creates wormable, fileless variant of njRAT
59. Brazilian-made bank trojan
60. READ: The threat actor SNAKEMACKEREL (#FancyBear) leveraged current geopolitical events and #Brexit themed lure documents to deliver first-stage malware
61. Proofpoint: Hackers testing new reconnaissance #malware on financial institutions.
62. Beware the Malware-Laden Brexit News https://ubm.io/2Ql2DyP by @ErickaChick
63. Analysis Report of the XorDDoS Malware Family
64. Hacker takes over JavaScript library, injects malware to steal Bitcoin
65. Several Malicious Apps on Google Play Posing as Voice Messenger Steal User Personal Information
66. Mobile Malware Attacks Increase as Holiday Season Nears
67. Pervasive Brazilian financial malware targets bank customers in Latin America and Europe

EXPLOIT

68. Cisco Patches SQL Injection Flaw in Prime License Manager
69. Hackers can exploit this bug in surveillance cameras to tamper with footage

VULNERABILITY

70. GCHQ: this is how we decide to report a security bug or keep it a secret
71. Critical Zoom Flaw Lets Hackers Hijack Conference Meetings
72. USPS API Security Vulnerabilities Caused by Functional Errors
73. Cisco Patches SQL Injection Flaw in Prime License Manager
74. Cisco Patches Critical Bug in License Management Tool
75. Hackers can exploit this bug in surveillance cameras to tamper with footage
76. A security hole in a mail preview program may have made the data of 60 million customers vulnerable.
77. A security researcher notified the @USPS of an #API vulnerability one year ago. But the #USPS website flaw was only
78. GCHQ: We don't tell tech companies about every software flaw
79. Symantec comes out in swinging in bitter legal battle over security bug audit conspiracy claims
80. Widely Used Web Conference Service Zoom Patches Critical Flaw
81. A new vulnerability was discovered to affect #Bluetooth #firmware or operating system software drivers. Learn what this vulnerability is and
82. Facebook Increases Bug Bounty Payouts to Improve User Security

Region brief for 2018-11-29

ASIA

1. Banking Trojan Made in Brazil? A Brief Look
2. Looking Ahead: RiskIQ’s 2019 Cybersecurity Predictions
3. Indian Police Break Up International Computer Virus Scam
4. Iranian duo charged with SamSam ransomware-slinging campaign
5. U.S. DoJ charges Iranian duo over SamSam Ransomware activity
6. US charges Iranian hackers for SamSam ransomware attacks
7. US charges Iranian hackers for SamSam ransomware attacks
8. The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia
9. US Indicts Two Iranians for SamSam Campaign Blitz
10. Analysis Report of the XorDDoS Malware Family
11. Lazarus Targeting Latin America
12. Pervasive Brazilian financial malware targets bank customers in Latin America and Europe

OCEANIA

Nil

NORTH AMERICA

13. Banking Trojan Made in Brazil? A Brief Look
14. First Annual Cyberwarcon
15. Brazilian Financial Malware Spreads Beyond National Boundaries
16. USPS API Security Vulnerabilities Caused by Functional Errors
17. Accenture: Russian hackers using Brexit talks to disguise phishing lures
18. SamSam ransomware actors charged, sanctioned by US government
19. U.S. DoJ charges Iranian duo over SamSam Ransomware activity
20. US charges Iranian hackers for SamSam ransomware attacks
21. US charges Iranian hackers for SamSam ransomware attacks
22. The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia
23. US indicts two over SamSam ransomware attacks
24. US Charges Hackers in Multimillion Dollar Ransomware Campaign
25. XSS Shell- Cross Site Scripting
26. Smashing Security #106: Google Maps, Fed phishing, and Grinch bots
27. US Indicts Two Iranians for SamSam Campaign Blitz
28. Symantec comes out in swinging in bitter legal battle over security bug audit conspiracy claims
29. READ: The threat actor SNAKEMACKEREL (#FancyBear) leveraged current geopolitical events and #Brexit themed lure documents to deliver first-stage malware
30. Records of 114 Million US Citizen and Companies Exposed Online
31. McAfee Labs 2019 Threats Predictions Report
32. Lazarus Targeting Latin America
33. AccuDoc Data Breach impacted 2.6 Million Atrium Health patients
34. Pervasive Brazilian financial malware targets bank customers in Latin America and Europe
35. UK and Dutch Regulators Fined Uber for $1.1 Million over 2016 Data Breach
36. Dell Hacked – Data Breach Exposed Names, Email addresses & Hashed Passwords

SOUTH AMERICA

37. Banking Trojan Made in Brazil? A Brief Look
38. Brazilian Financial Malware Spreads Beyond National Boundaries
39. Brazilian-made bank trojan
40. Pervasive Brazilian financial malware targets bank customers in Latin America and Europe

EUROPE

41. GCHQ: this is how we decide to report a security bug or keep it a secret
42. Atrium Health’s Databreach: 2.65 Million Patient Records Publicly Revealed
43. Rotexy malware morphs into dangerous banking Trojan
44. Banking Trojan Made in Brazil? A Brief Look
45. First Annual Cyberwarcon
46. Brazilian Financial Malware Spreads Beyond National Boundaries
47. Accenture: Russian hackers using Brexit talks to disguise phishing lures
48. Looking Ahead: RiskIQ’s 2019 Cybersecurity Predictions
49. U.S. DoJ charges Iranian duo over SamSam Ransomware activity
50. Pterodo Found On State Authorities' Computers In Ukraine
51. The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia
52. XSS Shell- Cross Site Scripting
53. GCHQ: We don't tell tech companies about every software flaw
54. Uber fined $1.1 million by UK and Dutch regulators over 2016 data breach
55. London-based Urban Massage app leaks data on 300K customers, including sexual misconduct claims
56. NEW: Russian hackers using Brexit talks to disguise its phishing lures
57. McAfee Labs 2019 Threats Predictions Report
58. AccuDoc Data Breach impacted 2.6 Million Atrium Health patients
59. Pervasive Brazilian financial malware targets bank customers in Latin America and Europe
60. UK and Dutch Regulators Fined Uber for $1.1 Million over 2016 Data Breach

AFRICA

Nil

Sector brief for 2018-11-29

HEALTHCARE

1. Atrium Health’s Databreach: 2.65 Million Patient Records Publicly Revealed
2. 2.6 Million Atrium Health Patient Records Compromised by Vendor AccuDoc
3. U.S. DoJ charges Iranian duo over SamSam Ransomware activity
4. US Indicts Two Iranians for SamSam Campaign Blitz
5. Database breach affects 2.6 million Atrium Health patients
6. McAfee Labs 2019 Threats Predictions Report
7. AccuDoc Data Breach impacted 2.6 Million Atrium Health patients
8. Atrium Health Data Breach Affected More than 2 Million Patients

TRANSPORT

9. U.S. DoJ charges Iranian duo over SamSam Ransomware activity

BANKING & FINANCE

10. Atrium Health’s Databreach: 2.65 Million Patient Records Publicly Revealed
11. Rotexy malware morphs into dangerous banking Trojan
12. Banking Trojan Made in Brazil? A Brief Look
13. Brazilian Financial Malware Spreads Beyond National Boundaries
14. Accenture: Russian hackers using Brexit talks to disguise phishing lures
15. Looking Ahead: RiskIQ’s 2019 Cybersecurity Predictions
16. The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia
17. US Indicts Two Iranians for SamSam Campaign Blitz
18. Brazilian-made bank trojan
19. Proofpoint: Hackers testing new reconnaissance #malware on financial institutions.
20. Dell data breach – Dell forces password reset after the incident
21. McAfee Labs 2019 Threats Predictions Report
22. Threat Spotlight: New spear phishing attack gift card scam
23. Lazarus Targeting Latin America
24. AccuDoc Data Breach impacted 2.6 Million Atrium Health patients
25. Pervasive Brazilian financial malware targets bank customers in Latin America and Europe
26. UK and Dutch Regulators Fined Uber for $1.1 Million over 2016 Data Breach

INFORMATION & TELECOMMUNICATION

27. “And once a device is part of a botnet, it leaves them open for future attacks. So users should avoid
28. A security hole in a mail preview program may have made the data of 60 million customers vulnerable.
29. NEW: Russian hackers using Brexit talks to disguise its phishing lures
30. McAfee Labs 2019 Threats Predictions Report
31. Facebook Increases Bug Bounty Payouts to Improve User Security
32. Pervasive Brazilian financial malware targets bank customers in Latin America and Europe
33. UK and Dutch Regulators Fined Uber for $1.1 Million over 2016 Data Breach

FOOD

Nil

WATER

Nil

ENERGY

34. Banking Trojan Made in Brazil? A Brief Look

GOVERNMENT & PUBLIC SERVICE

35. Accenture: Russian hackers using Brexit talks to disguise phishing lures
36. SamSam ransomware actors charged, sanctioned by US government
37. Indian Police Break Up International Computer Virus Scam
38. The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia
39. McAfee Labs 2019 Threats Predictions Report
40. Lazarus Targeting Latin America

Daily brief for 2018-11-29

ASIA

1. Banking Trojan Made in Brazil? A Brief Look
2. Looking Ahead: RiskIQ’s 2019 Cybersecurity Predictions
3. Indian Police Break Up International Computer Virus Scam
4. Iranian duo charged with SamSam ransomware-slinging campaign
5. U.S. DoJ charges Iranian duo over SamSam Ransomware activity
6. US charges Iranian hackers for SamSam ransomware attacks
7. US charges Iranian hackers for SamSam ransomware attacks
8. The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia
9. US Indicts Two Iranians for SamSam Campaign Blitz
10. Analysis Report of the XorDDoS Malware Family
11. Lazarus Targeting Latin America
12. Pervasive Brazilian financial malware targets bank customers in Latin America and Europe

WORLD

13. GCHQ: this is how we decide to report a security bug or keep it a secret
14. Atrium Health’s Databreach: 2.65 Million Patient Records Publicly Revealed
15. Rotexy malware morphs into dangerous banking Trojan
16. Banking Trojan Made in Brazil? A Brief Look
17. First Annual Cyberwarcon
18. Brazilian Financial Malware Spreads Beyond National Boundaries
19. USPS API Security Vulnerabilities Caused by Functional Errors
20. Accenture: Russian hackers using Brexit talks to disguise phishing lures
21. Looking Ahead: RiskIQ’s 2019 Cybersecurity Predictions
22. SamSam ransomware actors charged, sanctioned by US government
23. U.S. DoJ charges Iranian duo over SamSam Ransomware activity
24. US charges Iranian hackers for SamSam ransomware attacks
25. Pterodo Found On State Authorities' Computers In Ukraine
26. US charges Iranian hackers for SamSam ransomware attacks
27. The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia
28. US indicts two over SamSam ransomware attacks
29. US Charges Hackers in Multimillion Dollar Ransomware Campaign
30. XSS Shell- Cross Site Scripting
31. Smashing Security #106: Google Maps, Fed phishing, and Grinch bots
32. GCHQ: We don't tell tech companies about every software flaw
33. Uber fined $1.1 million by UK and Dutch regulators over 2016 data breach
34. US Indicts Two Iranians for SamSam Campaign Blitz
35. Symantec comes out in swinging in bitter legal battle over security bug audit conspiracy claims
36. Brazilian-made bank trojan
37. READ: The threat actor SNAKEMACKEREL (#FancyBear) leveraged current geopolitical events and #Brexit themed lure documents to deliver first-stage malware
38. London-based Urban Massage app leaks data on 300K customers, including sexual misconduct claims
39. Records of 114 Million US Citizen and Companies Exposed Online
40. NEW: Russian hackers using Brexit talks to disguise its phishing lures
41. McAfee Labs 2019 Threats Predictions Report
42. Lazarus Targeting Latin America
43. AccuDoc Data Breach impacted 2.6 Million Atrium Health patients
44. Pervasive Brazilian financial malware targets bank customers in Latin America and Europe
45. UK and Dutch Regulators Fined Uber for $1.1 Million over 2016 Data Breach
46. Dell Hacked – Data Breach Exposed Names, Email addresses & Hashed Passwords

ATTACKS

47. Atrium Health’s Databreach: 2.65 Million Patient Records Publicly Revealed
48. Users Failing Phishing Simulations? That’s ok
49. Dell Forces Password Reset for Online Customers Following Data Breach
50. Dell remains quiet on attempted data breach
51. Accenture: Russian hackers using Brexit talks to disguise phishing lures
52. 2.6 Million Atrium Health Patient Records Compromised by Vendor AccuDoc
53. Iranian duo charged with SamSam ransomware-slinging campaign
54. Office workers beware: Holiday gift card spear phishing attacks on the rise
55. The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia
56. Blazy – Open Source Modern Login Brute-forcer
57. SKY Brasil Exposes 32 Million Customer Records
58. US Charges Hackers in Multimillion Dollar Ransomware Campaign
59. Dunkin' Donuts Serves Up Data Breach Alert
60. Smashing Security #106: Google Maps, Fed phishing, and Grinch bots
61. Uber fined $1.1 million by UK and Dutch regulators over 2016 data breach
62. US Indicts Two Iranians for SamSam Campaign Blitz
63. London-based Urban Massage app leaks data on 300K customers, including sexual misconduct claims
64. Database breach affects 2.6 million Atrium Health patients
65. Dell data breach – Dell forces password reset after the incident
66. Records of 114 Million US Citizen and Companies Exposed Online
67. NEW: Russian hackers using Brexit talks to disguise its phishing lures
68. Threat Spotlight: New spear phishing attack gift card scam
69. How have #phishing campaigns threatened your #EnterpriseSecurity system?
70. AccuDoc Data Breach impacted 2.6 Million Atrium Health patients
71. Dell Resets User Passwords Following Data Breach
72. Atrium Health Data Breach Affected More than 2 Million Patients
73. UK and Dutch Regulators Fined Uber for $1.1 Million over 2016 Data Breach
74. Dell Hacked – Data Breach Exposed Names, Email addresses & Hashed Passwords
75. A targeted attack attempting to steal #cryptocurrency took advantage of open source software with a compromised #NPM package and experts

THREATS

76. GCHQ: this is how we decide to report a security bug or keep it a secret
77. A free decryption tool is available for Thanatos ransomware victims
78. Rotexy malware morphs into dangerous banking Trojan
79. Banking Trojan Made in Brazil? A Brief Look
80. Critical Zoom Flaw Lets Hackers Hijack Conference Meetings
81. Overall Volume of Thanksgiving Weekend Malware Attacks Lower This Year
82. Brazilian Financial Malware Spreads Beyond National Boundaries
83. USPS API Security Vulnerabilities Caused by Functional Errors
84. Colorado Agency Targeted in Nationwide Ransomware Scheme
85. Cisco Patches SQL Injection Flaw in Prime License Manager
86. SamSam ransomware actors charged, sanctioned by US government
87. Cisco Patches Critical Bug in License Management Tool
88. Indian Police Break Up International Computer Virus Scam
89. Hackers can exploit this bug in surveillance cameras to tamper with footage
90. Iranian duo charged with SamSam ransomware-slinging campaign
91. U.S. DoJ charges Iranian duo over SamSam Ransomware activity
92. A security hole in a mail preview program may have made the data of 60 million customers vulnerable.
93. US charges Iranian hackers for SamSam ransomware attacks
94. Inside the Google Docs Malicious Network
95. US charges Iranian hackers for SamSam ransomware attacks
96. The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia
97. A security researcher notified the @USPS of an #API vulnerability one year ago. But the #USPS website flaw was only
98. US indicts two over SamSam ransomware attacks
99. US Charges Hackers in Multimillion Dollar Ransomware Campaign
100. AriseBank CEO faces 120 years behind bars over alleged cryptocurrency scam
101. Beware the Malware-Laden Brexit News
102. KingMiner malware hijacks the full power of Windows Server CPUs
103. GCHQ: We don't tell tech companies about every software flaw
104. Malicious developer creates wormable, fileless variant of njRAT
105. Symantec comes out in swinging in bitter legal battle over security bug audit conspiracy claims
106. Brazilian-made bank trojan
107. READ: The threat actor SNAKEMACKEREL (#FancyBear) leveraged current geopolitical events and #Brexit themed lure documents to deliver first-stage malware
108. Proofpoint: Hackers testing new reconnaissance #malware on financial institutions.
109. Beware the Malware-Laden Brexit News https://ubm.io/2Ql2DyP by @ErickaChick
110. Analysis Report of the XorDDoS Malware Family
111. Hacker takes over JavaScript library, injects malware to steal Bitcoin
112. Widely Used Web Conference Service Zoom Patches Critical Flaw
113. A new vulnerability was discovered to affect #Bluetooth #firmware or operating system software drivers. Learn what this vulnerability is and
114. Several Malicious Apps on Google Play Posing as Voice Messenger Steal User Personal Information
115. Mobile Malware Attacks Increase as Holiday Season Nears
116. Facebook Increases Bug Bounty Payouts to Improve User Security
117. Pervasive Brazilian financial malware targets bank customers in Latin America and Europe
118. A targeted attack attempting to steal #cryptocurrency took advantage of open source software with a compromised #NPM package and experts

CRIME

119. Atrium Health’s Databreach: 2.65 Million Patient Records Publicly Revealed
120. Colorado Agency Targeted in Nationwide Ransomware Scheme
121. Looking Ahead: RiskIQ’s 2019 Cybersecurity Predictions
122. Indian Police Break Up International Computer Virus Scam
123. U.S. DoJ charges Iranian duo over SamSam Ransomware activity
124. US indicts two over SamSam ransomware attacks
125. SKY Brasil Exposes 32 Million Customer Records
126. US Charges Hackers in Multimillion Dollar Ransomware Campaign
127. AriseBank CEO faces 120 years behind bars over alleged cryptocurrency scam
128. Uber fined $1.1 million by UK and Dutch regulators over 2016 data breach
129. US Indicts Two Iranians for SamSam Campaign Blitz
130. Symantec comes out in swinging in bitter legal battle over security bug audit conspiracy claims
131. McAfee Labs 2019 Threats Predictions Report
132. Threat Spotlight: New spear phishing attack gift card scam
133. AccuDoc Data Breach impacted 2.6 Million Atrium Health patients
134. Pervasive Brazilian financial malware targets bank customers in Latin America and Europe
135. UK and Dutch Regulators Fined Uber for $1.1 Million over 2016 Data Breach
136. The Justice Department, FBI and several tech and cybersecurity companies have dismantled the #3ve #botnet, and eight individuals have been

POLITICS

137. GCHQ: this is how we decide to report a security bug or keep it a secret
138. First Annual Cyberwarcon
139. Looking Ahead: RiskIQ’s 2019 Cybersecurity Predictions
140. Pterodo Found On State Authorities' Computers In Ukraine
141. XSS Shell- Cross Site Scripting
142. Uber fined $1.1 million by UK and Dutch regulators over 2016 data breach
143. McAfee Labs 2019 Threats Predictions Report
144. Threat Spotlight: New spear phishing attack gift card scam
145. Pervasive Brazilian financial malware targets bank customers in Latin America and Europe
146. UK and Dutch Regulators Fined Uber for $1.1 Million over 2016 Data Breach

APT report for 2018-11-26

TRANSNATIONAL / UNKNOWN

1. Cyberthreats to financial institutions 2019: overview and predictions

CHINA

Nil

INDIA

Nil

NORTH KOREA

2. Cyberthreats to financial institutions 2019: overview and predictions

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

3. APT28 Is Using New Variant of Lojax
4. Recent Attacks on US Entities Attributed to APT29

SERBIA

Nil

UKRAINE

5. Cyberthreats to financial institutions 2019: overview and predictions

Platform report for 2018-11-26

WINDOWS

1. Half of all Phishing Sites Now Have the Padlock
2. Phishing Campaign targeting French Industry

LINUX

3. Linux Kernel is affected by two DoS vulnerabilities still unpatched
4. DoS Vulnerabilities Impact Linux Kernel
5. Experts found a new powerful modular Linux cryptominer

UNIX

Nil

ANDROID

6. 13 Newly Discovered Malicious Apps, Deleted By Google From the Play Store
7. Bypassing and Disabling SSL Pinning on Android to Perform Man-in-the-Middle Attack
8. Play Store Malware Infects Half a Billion

IOS

9. 13 Newly Discovered Malicious Apps, Deleted By Google From the Play Store

MACOS

10. OSX.Dummy #malware has been discovered to use chat platforms in order to target #cryptocurrency investors. Learn more with expert @lewisnic

Threat report for 2018-11-26

DATA BREACH & DATA LOSS

1. Knuddels Flirt App Slapped with Hefty Fine After Data Breach
2. When Do You Need to Report a Data Breach?
3. USPS, Amazon Data Leaks Showcase API Weaknesses
4. How Pirated Versions of ‘Super Smash Bros. Ultimate’ Leaked Weeks Before Release
5. Despite growing concerns about cybersecurity and the number of data breach incidents in the news, many employees still have bad
6. Trivial Spotify Phishing Campaign Targets Users To Steal Login Credentials
7. Phishing Campaign targeting French Industry
8. Russia Plans To tighten Data Protection Owing To Intelligence Leaks
9. German Social Media Provider Fined €20K for Data Breach
10. No need to compromise freedom for security - Europol audience told
11. HR Software Firm PageUp Finds No Evidence of Data Theft
12. Internal negligence to blame for most data breaches involving personal health information
13. Sextortion 2.0: We have continued to monitor the campaigns and have seen a recent change in tactics, with some unusual
14. An ongoing phishing campaign is targeting French industry, @FSLabs finds.
15. Phishing Campaign targeting French Industry
16. My Health Record opt-out officially extended to January 31

DENIAL-OF-SERVICE

Nil

MALVERTISING

Nil

PHISHING

17. Holiday Season: Cybercriminals are Phishing All The Way
18. Half of all Phishing Sites Now Have the Padlock
19. Easy as APT: Spear phishing highlighted as ongoing threat for 2019
20. Trivial Spotify Phishing Campaign Targets Users To Steal Login Credentials
21. Phishing Campaign targeting French Industry
22. 50% use password managers to store login details
23. An ongoing phishing campaign is targeting French industry, @FSLabs finds.
24. Phishing Campaign targeting French Industry
25. Beware!! Cyber Criminals Launching Serious Phishing Attack that Target Spotify Customers

WEB DEFACEMENT

Nil

BOTNET

26. Democrats Introduce Bill for Stopping Automated Grinch Bots from Ruining Xmas

RANSOMWARE

27. Ransomware attack disrupted emergency rooms at Ohio Hospital System
28. Mobile Rotexy Malware Touts Ransomware, Banking Trojan Functions
29. Ransomware Attack Forced Ohio Hospital System to Divert ER Patients
30. A new ransomware -- dubbed #Thanatos #ransomware -- was found encrypting data but not decrypting it despite victims paying the

CRYPTOMINING & CRYPTOCURRENCIES

31. Hacker backdoors popular JavaScript library to steal Bitcoin funds
32. Harberger Taxes on Ethereum
33. OSX.Dummy #malware has been discovered to use chat platforms in order to target #cryptocurrency investors. Learn more with expert @lewisnic
34. Cryptocurrency threat predictions for 2019
35. Crypto Mining Malware Infects Make-A-Wish-Foundation Website
36. Experts found a new powerful modular Linux cryptominer

MALWARE

37. Lenovo to Pay $7.3 Million in Settlement for Installing Adware on 800K Notebooks
38. 13 Newly Discovered Malicious Apps, Deleted By Google From the Play Store
39. What is Data Classification? Guidelines and Process
40. Mobile Rotexy Malware Touts Ransomware, Banking Trojan Functions
41. Subscribe to the relaunched Virus Bulletin eNews newsletter
42. Play Store Malware Infects Half a Billion
43. Microsoft PowerPoint as Malware Dropper
44. OSX.Dummy #malware has been discovered to use chat platforms in order to target #cryptocurrency investors. Learn more with expert @lewisnic
45. Ukrainian Police Nab Suspected RAT-Slinger
46. Crypto Mining Malware Infects Make-A-Wish-Foundation Website

EXPLOIT

Nil

VULNERABILITY

47. Microsoft launches review after a trio of Azure bugs locked users out of Office 365
48. Did UK city council over-react to a vulnerability report in its recycling app or not?
49. Linux Kernel is affected by two DoS vulnerabilities still unpatched
50. DoS Vulnerabilities Impact Linux Kernel
51. Apache Hadoop Spins Cracking Code Injection Vulnerability YARN
52. Siemens patches major firewall flaw, other vulnerabilities
53. #Bluetooth devices might be at risk after a new Bluetooth vulnerability was found targeting #firmware and #OperatingSystem software drivers. Learn
54. U.S. Postal Service API Flaw Exposes Data of 60 Million Customers
55. Positive Technologies researchers recently found two serious vulnerabilities that target NCR's #ATMs. Learn how a "black box attack" was involved
56. Discover how a @DLink #router vulnerability targeted a banking site to steal #UserCredentials with expert Judith Myerson.
57. For recent big data software vulnerabilities, botnets and coin mining are just the beginning
58. Frost & Sullivan Commends Rapid7 for Capturing Nearly a Quarter Share of the Global Vulnerability Management Market

Region brief for 2018-11-26

ASIA

1. Half of all Phishing Sites Now Have the Padlock
2. Cyberthreats to financial institutions 2019: overview and predictions
3. Ukrainian Police Nab Suspected RAT-Slinger
4. Crypto Mining Malware Infects Make-A-Wish-Foundation Website

OCEANIA

5. When Do You Need to Report a Data Breach?
6. HR Software Firm PageUp Finds No Evidence of Data Theft

NORTH AMERICA

7. Microsoft launches review after a trio of Azure bugs locked users out of Office 365
8. When Do You Need to Report a Data Breach?
9. Democrats Introduce Bill for Stopping Automated Grinch Bots from Ruining Xmas
10. How Pirated Versions of ‘Super Smash Bros. Ultimate’ Leaked Weeks Before Release
11. Microsoft PowerPoint as Malware Dropper
12. Recent Attacks on US Entities Attributed to APT29
13. U.S. Postal Service API Flaw Exposes Data of 60 Million Customers
14. Russia Plans To tighten Data Protection Owing To Intelligence Leaks
15. Cyberthreats to financial institutions 2019: overview and predictions

SOUTH AMERICA

16. Crypto Mining Malware Infects Make-A-Wish-Foundation Website

EUROPE

17. Did UK city council over-react to a vulnerability report in its recycling app or not?
18. Knuddels Flirt App Slapped with Hefty Fine After Data Breach
19. Siemens patches major firewall flaw, other vulnerabilities
20. Recent Attacks on US Entities Attributed to APT29
21. Phishing Campaign targeting French Industry
22. Russia Plans To tighten Data Protection Owing To Intelligence Leaks
23. German Social Media Provider Fined €20K for Data Breach
24. Cyberthreats to financial institutions 2019: overview and predictions
25. Ukrainian Police Nab Suspected RAT-Slinger
26. Crypto Mining Malware Infects Make-A-Wish-Foundation Website
27. Experts found a new powerful modular Linux cryptominer
28. An ongoing phishing campaign is targeting French industry, @FSLabs finds.
29. Phishing Campaign targeting French Industry

AFRICA

Nil

Sector brief for 2018-11-26

HEALTHCARE

1. Ransomware attack disrupted emergency rooms at Ohio Hospital System
2. Ransomware Attack Forced Ohio Hospital System to Divert ER Patients
3. Internal negligence to blame for most data breaches involving personal health information

TRANSPORT

4. Holiday Season: Cybercriminals are Phishing All The Way
5. Phishing Campaign targeting French Industry

BANKING & FINANCE

6. What is Data Classification? Guidelines and Process
7. When Do You Need to Report a Data Breach?
8. Mobile Rotexy Malware Touts Ransomware, Banking Trojan Functions
9. Holiday Season: Cybercriminals are Phishing All The Way
10. Phishing Campaign targeting French Industry
11. Cryptocurrency threat predictions for 2019
12. Cyberthreats to financial institutions 2019: overview and predictions
13. Discover how a @DLink #router vulnerability targeted a banking site to steal #UserCredentials with expert Judith Myerson.

INFORMATION & TELECOMMUNICATION

14. Microsoft launches review after a trio of Azure bugs locked users out of Office 365
15. 13 Newly Discovered Malicious Apps, Deleted By Google From the Play Store
16. How Pirated Versions of ‘Super Smash Bros. Ultimate’ Leaked Weeks Before Release
17. Half of all Phishing Sites Now Have the Padlock
18. Despite growing concerns about cybersecurity and the number of data breach incidents in the news, many employees still have bad
19. Phishing Campaign targeting French Industry
20. Cyberthreats to financial institutions 2019: overview and predictions
21. Sextortion 2.0: We have continued to monitor the campaigns and have seen a recent change in tactics, with some unusual
22. An ongoing phishing campaign is targeting French industry, @FSLabs finds.

FOOD

Nil

WATER

Nil

ENERGY

23. Siemens patches major firewall flaw, other vulnerabilities

GOVERNMENT & PUBLIC SERVICE

24. Did UK city council over-react to a vulnerability report in its recycling app or not?
25. When Do You Need to Report a Data Breach?
26. Recent Attacks on US Entities Attributed to APT29
27. Russia Plans To tighten Data Protection Owing To Intelligence Leaks
28. Cyberthreats to financial institutions 2019: overview and predictions
29. Ukrainian Police Nab Suspected RAT-Slinger
30. Crypto Mining Malware Infects Make-A-Wish-Foundation Website

Daily brief for 2018-11-26

ASIA

1. Half of all Phishing Sites Now Have the Padlock
2. Cyberthreats to financial institutions 2019: overview and predictions
3. Ukrainian Police Nab Suspected RAT-Slinger
4. Crypto Mining Malware Infects Make-A-Wish-Foundation Website

WORLD

5. Microsoft launches review after a trio of Azure bugs locked users out of Office 365
6. Did UK city council over-react to a vulnerability report in its recycling app or not?
7. Knuddels Flirt App Slapped with Hefty Fine After Data Breach
8. When Do You Need to Report a Data Breach?
9. Democrats Introduce Bill for Stopping Automated Grinch Bots from Ruining Xmas
10. Siemens patches major firewall flaw, other vulnerabilities
11. How Pirated Versions of ‘Super Smash Bros. Ultimate’ Leaked Weeks Before Release
12. Microsoft PowerPoint as Malware Dropper
13. Recent Attacks on US Entities Attributed to APT29
14. U.S. Postal Service API Flaw Exposes Data of 60 Million Customers
15. Phishing Campaign targeting French Industry
16. Russia Plans To tighten Data Protection Owing To Intelligence Leaks
17. German Social Media Provider Fined €20K for Data Breach
18. Cyberthreats to financial institutions 2019: overview and predictions
19. Ukrainian Police Nab Suspected RAT-Slinger
20. Crypto Mining Malware Infects Make-A-Wish-Foundation Website
21. Experts found a new powerful modular Linux cryptominer
22. HR Software Firm PageUp Finds No Evidence of Data Theft
23. An ongoing phishing campaign is targeting French industry, @FSLabs finds.
24. Phishing Campaign targeting French Industry

ATTACKS

25. Knuddels Flirt App Slapped with Hefty Fine After Data Breach
26. When Do You Need to Report a Data Breach?
27. USPS, Amazon Data Leaks Showcase API Weaknesses
28. Holiday Season: Cybercriminals are Phishing All The Way
29. How Pirated Versions of ‘Super Smash Bros. Ultimate’ Leaked Weeks Before Release
30. Half of all Phishing Sites Now Have the Padlock
31. Easy as APT: Spear phishing highlighted as ongoing threat for 2019
32. Despite growing concerns about cybersecurity and the number of data breach incidents in the news, many employees still have bad
33. Trivial Spotify Phishing Campaign Targets Users To Steal Login Credentials
34. Phishing Campaign targeting French Industry
35. Russia Plans To tighten Data Protection Owing To Intelligence Leaks
36. German Social Media Provider Fined €20K for Data Breach
37. No need to compromise freedom for security - Europol audience told
38. 50% use password managers to store login details
39. HR Software Firm PageUp Finds No Evidence of Data Theft
40. Internal negligence to blame for most data breaches involving personal health information
41. Sextortion 2.0: We have continued to monitor the campaigns and have seen a recent change in tactics, with some unusual
42. An ongoing phishing campaign is targeting French industry, @FSLabs finds.
43. Phishing Campaign targeting French Industry
44. Beware!! Cyber Criminals Launching Serious Phishing Attack that Target Spotify Customers
45. My Health Record opt-out officially extended to January 31

THREATS

46. Microsoft launches review after a trio of Azure bugs locked users out of Office 365
47. Did UK city council over-react to a vulnerability report in its recycling app or not?
48. Ransomware attack disrupted emergency rooms at Ohio Hospital System
49. Lenovo to Pay $7.3 Million in Settlement for Installing Adware on 800K Notebooks
50. 13 Newly Discovered Malicious Apps, Deleted By Google From the Play Store
51. Hacker backdoors popular JavaScript library to steal Bitcoin funds
52. What is Data Classification? Guidelines and Process
53. Linux Kernel is affected by two DoS vulnerabilities still unpatched
54. Mobile Rotexy Malware Touts Ransomware, Banking Trojan Functions
55. Harberger Taxes on Ethereum
56. DoS Vulnerabilities Impact Linux Kernel
57. Subscribe to the relaunched Virus Bulletin eNews newsletter
58. Apache Hadoop Spins Cracking Code Injection Vulnerability YARN
59. Siemens patches major firewall flaw, other vulnerabilities
60. Play Store Malware Infects Half a Billion
61. Microsoft PowerPoint as Malware Dropper
62. #Bluetooth devices might be at risk after a new Bluetooth vulnerability was found targeting #firmware and #OperatingSystem software drivers. Learn
63. U.S. Postal Service API Flaw Exposes Data of 60 Million Customers
64. Ransomware Attack Forced Ohio Hospital System to Divert ER Patients
65. Positive Technologies researchers recently found two serious vulnerabilities that target NCR's #ATMs. Learn how a "black box attack" was involved
66. OSX.Dummy #malware has been discovered to use chat platforms in order to target #cryptocurrency investors. Learn more with expert @lewisnic
67. Cryptocurrency threat predictions for 2019
68. Ukrainian Police Nab Suspected RAT-Slinger
69. Crypto Mining Malware Infects Make-A-Wish-Foundation Website
70. Experts found a new powerful modular Linux cryptominer
71. A new ransomware -- dubbed #Thanatos #ransomware -- was found encrypting data but not decrypting it despite victims paying the
72. Discover how a @DLink #router vulnerability targeted a banking site to steal #UserCredentials with expert Judith Myerson.
73. For recent big data software vulnerabilities, botnets and coin mining are just the beginning
74. Frost & Sullivan Commends Rapid7 for Capturing Nearly a Quarter Share of the Global Vulnerability Management Market

CRIME

75. When Do You Need to Report a Data Breach?
76. Holiday Season: Cybercriminals are Phishing All The Way
77. Half of all Phishing Sites Now Have the Padlock
78. Russia Plans To tighten Data Protection Owing To Intelligence Leaks
79. Cryptocurrency threat predictions for 2019
80. Cyberthreats to financial institutions 2019: overview and predictions
81. Ukrainian Police Nab Suspected RAT-Slinger
82. Experts found a new powerful modular Linux cryptominer
83. HR Software Firm PageUp Finds No Evidence of Data Theft
84. Sextortion 2.0: We have continued to monitor the campaigns and have seen a recent change in tactics, with some unusual

POLITICS

85. Russia Plans To tighten Data Protection Owing To Intelligence Leaks
86. Cryptocurrency threat predictions for 2019
87. Ukrainian Police Nab Suspected RAT-Slinger