Daily brief for 2018-11-01

ASIA

1. ‘Aaron Smith’ Sextortion scam campaigns hit tens of thousands of individuals
2. Open Letter to Francisco Partners: Continued Misuse of NSO Group’s Pegasus Technology
3. DOJ indictment spotlights China’s civilian intel agency – and its hacker recruits
4. Trickbot Shows Off New Trick: Password Grabber Module
5. SamSam Attackers Have Hit 67 Ransomware Targets
6. Perl-Based Shellbot Looks to Target Organizations via C&C
7. CSM-ACE 2018: FireEye Interview – ASEAN Countries Need to Place Greater Focus on Resourcing Their Cyber Defences

WORLD

8. Australian defence contractor Austal hit by data breach
9. BLEEDINGBIT Bluetooth flaws in TI chips expose enterprises to remote attacks
10. Emotet Malware, the Most Probable Malware of the Year
11. ‘Aaron Smith’ Sextortion scam campaigns hit tens of thousands of individuals
12. Open Letter to Francisco Partners: Continued Misuse of NSO Group’s Pegasus Technology
13. New Bluetooth Vulnerabilities Exposed in Aruba, Cisco, Meraki Access Points
14. Experts presented BOTCHAIN, the first fully functional Botnet built upon the Bitcoin Protocol
15. DOJ indictment spotlights China’s civilian intel agency – and its hacker recruits
16. Bleedingbit: Critical vulnerabilities in BLE chips expose millions of access points to attack
17. British Airways data breach bigger than originally thought
18. Eurostar Resets Passwords of Customers After Data Breach
19. Healthcare Industry Continues To Be the Favourite for Ransomware
20. Employee used US government network for adult websites, infected infrastructure with Russian malware
21. CBS News: A Look Behind the Magecart Assault on E-commerce
22. UK considers banning cryptocurrencies for their lack of “intrinsic value”
23. Government employee who used to watch porn at work alleged guilty of infecting with malware a network
24. Trickbot Shows Off New Trick: Password Grabber Module
25. Radisson Rewards Program Targeted in Data Breach
26. SamSam Attackers Have Hit 67 Ransomware Targets
27. Our fabulous @5ean5ullivan explains to @CyberSauna listeners how the multiple vulnerabilities in the US electoral system may be^H^H^H^H^H^Hare being exploited.
28. Hackers Drops New Emotet Malware to Perform Mass Email Exfiltration From Victims Email Client
29. Talos Vulnerability Deep Dive - TALOS-2018-0636 / CVE-2018-3971 Sophos HitmanPro.Alert vulnerability
30. Perl-Based Shellbot Looks to Target Organizations via C&C
31. The Russian built #VPNFilter #botnet was taken down by the @FBI after over 500,000 routers were infected. However, VPNFilter is
32. Beware !! Square & PayPal Mobile Point of Sales (POS) Devices Are Extremely Vulnerable to Credit/Debit Card Data Theft
33. CSM-ACE 2018: FireEye Interview – ASEAN Countries Need to Place Greater Focus on Resourcing Their Cyber Defences

ATTACKS

34. Australian defence contractor Austal hit by data breach
35. Radisson discloses data breach impacting rewards customers
36. 22,000 Records Exposed by JoomlArt in Jira Ticket
37. ‘Aaron Smith’ Sextortion scam campaigns hit tens of thousands of individuals
38. New Bluetooth Vulnerabilities Exposed in Aruba, Cisco, Meraki Access Points
39. How phishing is evolving to outpace awareness
40. Customer Information Stolen in Radisson Hotel Group Data Breach
41. Going with what works: The state of phishing
42. British Airways data breach bigger than originally thought
43. Where Is the Consumer Outrage about Data Breaches?
44. Eurostar Resets Passwords of Customers After Data Breach
45. Radisson Hotel Group suffers data breach, customer info leaked
46. October may be over – but phishing attacks never stop. Here’s how to make security awareness successful all year round.
47. Trickbot Shows Off New Trick: Password Grabber Module
48. Radisson Rewards Program Targeted in Data Breach
49. "If the schemas prove not to be compatible, a backup of the previous version of a database must be used
50. Bad ads: Publishers look to stop malvertising for good
51. Emotet Malware – Mass-Harvesting millions of Emails in secret Campaign
52. Last year the @USAgov required agencies to implement #DMARC records and policies by October 2018. Learn just how hard DMARC
53. Expert Insights Names Barracuda’s AI powered Sentinel Top Phishing protection product
54. New Ramnit Campaign Spreads Azorult Malware
55. #NetSpectre leaks data remotely via side-channel attacks. Learn from expert Michael Cobb of @thehairyITdog why data from #microprocessors is not
56. Phishing Attacks Breach 20,000 Patient Records of Catawba Valley Medical Center
57. Radisson Hotel Group Data Breach Exposed Customer’s Personal Data
58. Beware !! Square & PayPal Mobile Point of Sales (POS) Devices Are Extremely Vulnerable to Credit/Debit Card Data Theft

THREATS

59. 2018’s worst malware revealed in report
60. Yi IoT Home Camera Riddled with Code-Execution Vulnerabilities
61. BLEEDINGBIT Bluetooth flaws in TI chips expose enterprises to remote attacks
62. Trickbot Malware Now Also Steals Passwords From Apps, Web Browsers
63. Emotet Malware, the Most Probable Malware of the Year
64. USB Drives Deliver Dangerous Malware to Industrial Facilities: Honeywell
65. New Bluetooth Vulnerabilities Exposed in Aruba, Cisco, Meraki Access Points
66. More Typo-Squatting Malware Found on PyPI
67. Experts presented BOTCHAIN, the first fully functional Botnet built upon the Bitcoin Protocol
68. Ransomware and Back-Up Plans
69. Windows Defender Bug Needs a Restart, Not Shutdown, To Enable Sandbox
70. Bluetooth Chip Flaws Expose Enterprises to Remote Attacks
71. Two Zero-Day Bugs Open Millions of Wireless Access Points to Attack
72. Cisco says a flaw in its Adaptive Security Appliance allows remote attacks
73. Talos Vulnerability Deep Dive – TALOS-2018-0636 / CVE-2018-3971 Sophos HitmanPro.Alert vulnerability
74. Security researchers find flaws in chips used in hospitals, factories and stores
75. Bleedingbit: Critical vulnerabilities in BLE chips expose millions of access points to attack
76. Bleedingbit zero-day chip flaws may expose majority of enterprises to remote code execution attacks
77. Cisco Zero-Day Exploited In The Wild To Crash And Reload Devices
78. Healthcare Industry Continues To Be the Favourite for Ransomware
79. Employee used US government network for adult websites, infected infrastructure with Russian malware
80. UK considers banning cryptocurrencies for their lack of “intrinsic value”
81. Government employee who used to watch porn at work alleged guilty of infecting with malware a network
82. Zero-Day RCE Vulnerabilities Expose Millions of BLE-Enabled Devices to Attacks
83. Hackers Exploit Cisco Zero Day Vulnerability in Wild Resulting in DoS Condition
84. New BLEEDINGBIT Vulnerabilities Affect Widely-Used Bluetooth Chips
85. Two New Bluetooth Chip Flaws Expose Millions of Devices to Remote Attacks
86. SamSam Attackers Have Hit 67 Ransomware Targets
87. .@Siemens disclosed six SICLOCK flaws that were found within its central plant clocks. Discover why three flaws have been rated
88. Nice work if you can get it: GandCrab ransomware nets millions even though it has been broken
89. Crypto-Locking Kraken Ransomware Looms Larger
90. Malware Analysis for Blue Teams
91. Our fabulous @5ean5ullivan explains to @CyberSauna listeners how the multiple vulnerabilities in the US electoral system may be^H^H^H^H^H^Hare being exploited.
92. Emotet Malware – Mass-Harvesting millions of Emails in secret Campaign
93. Crypto Micropayments: an Exciting Future for Blockchain Transactions
94. Bleedingbit Bluetooth Vulnerabilities Expose WiFi APs to Risk
95. Hackers Drops New Emotet Malware to Perform Mass Email Exfiltration From Victims Email Client
96. Talos Vulnerability Deep Dive - TALOS-2018-0636 / CVE-2018-3971 Sophos HitmanPro.Alert vulnerability
97. New Ramnit Campaign Spreads Azorult Malware
98. Perl-Based Shellbot Looks to Target Organizations via C&C
99. Cisco Warns of Zero-Day Vulnerability in Security Appliances
100. Cisco zero-day exploited in the wild to crash and reload devices
101. IKARUS Security Software partners with PolySwarm to advance early malware detection
102. Pdgmail – Forensic Tool to Analysis Process Memory Dump

CRIME

103. Emotet Malware, the Most Probable Malware of the Year
104. ‘Aaron Smith’ Sextortion scam campaigns hit tens of thousands of individuals
105. Experts presented BOTCHAIN, the first fully functional Botnet built upon the Bitcoin Protocol
106. DOJ indictment spotlights China’s civilian intel agency – and its hacker recruits
107. Customer Information Stolen in Radisson Hotel Group Data Breach
108. British Airways data breach bigger than originally thought
109. Where Is the Consumer Outrage about Data Breaches?
110. Radisson Hotel Group suffers data breach, customer info leaked
111. Healthcare Industry Continues To Be the Favourite for Ransomware
112. October may be over – but phishing attacks never stop. Here’s how to make security awareness successful all year round.
113. Government employee who used to watch porn at work alleged guilty of infecting with malware a network
114. Crypto Micropayments: an Exciting Future for Blockchain Transactions
115. Expert Insights Names Barracuda’s AI powered Sentinel Top Phishing protection product
116. Necurs Botnet Distributing Sextortion Email Scams
117. Beware !! Square & PayPal Mobile Point of Sales (POS) Devices Are Extremely Vulnerable to Credit/Debit Card Data Theft
118. CSM-ACE 2018: FireEye Interview – ASEAN Countries Need to Place Greater Focus on Resourcing Their Cyber Defences

POLITICS

119. Emotet Malware, the Most Probable Malware of the Year
120. Open Letter to Francisco Partners: Continued Misuse of NSO Group’s Pegasus Technology
121. Experts presented BOTCHAIN, the first fully functional Botnet built upon the Bitcoin Protocol
122. DOJ indictment spotlights China’s civilian intel agency – and its hacker recruits
123. SamSam Attackers Have Hit 67 Ransomware Targets
124. Our fabulous @5ean5ullivan explains to @CyberSauna listeners how the multiple vulnerabilities in the US electoral system may be^H^H^H^H^H^Hare being exploited.
125. Emotet Malware – Mass-Harvesting millions of Emails in secret Campaign
126. CSM-ACE 2018: FireEye Interview – ASEAN Countries Need to Place Greater Focus on Resourcing Their Cyber Defences