APT report for 2018-11-19

TRANSNATIONAL / UNKNOWN

1. VisionDirect Blindsided by Magecart in Data Breach
2. A week in security (November 12 – 18)
3. Collective Intelligence Podcast, Vitali Kremez on Magecart

CHINA

Nil

INDIA

Nil

NORTH KOREA

4. New ShadowTalk update looks at: New nation-state threat actor uses advanced TTPs to target Pakistan Lazarus Group’s FASTCash malware

PAKISTAN

Nil

VIETNAM

Nil

IRAN

5. Iran-Linked Hackers Use Just-in-Time Creation of Weaponized Attack Docs

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

6. Not So Cozy: An Uncomfortable Examination of a Suspected APT29 Phishing Campaign
7. Cybaze ZLab – Yoroi team analyzed malware used in recent attacks on US entities attributed to APT29
8. Russian Cozy Bear APT 29 hackers may be impersonating State Department

SERBIA

Nil

UKRAINE

9. Not So Cozy: An Uncomfortable Examination of a Suspected APT29 Phishing Campaign