Daily brief for 2018-11-02

ASIA

1. Shellbot Variant Used in New Botnet, Spreads Using IoT and Linux Vulnerabilities
2. Stuxnet Returns, Striking Iran with New Variant
3. This Week in Security News: Spam Campaigns and Vulnerable Infrastructures
4. Outlaw Hacking Group Using Command Injection Flow To Attack Organizations Network using Botnet via C&C Server
5. BCMUPnP_Hunter: 100,000-node botnet is abusing routers for spam
6. Iran has become victim of a cyberattack campaign
7. Another packed room for .@idefense analyst Mei Nelson discussing China and cryptocurrency. #codeblue_jp @AccentureSecure @AccentureJPNews

WORLD

8. Shellbot Variant Used in New Botnet, Spreads Using IoT and Linux Vulnerabilities
9. Joshua Adam Schulte, ex CIA employee, accused of continuing leaks from prison
10. Magecart cybergang targeting e-commerce credit card data
11. New Data Affirms Cyber Threat for Industrial Control Systems
12. 120 Million Facebook Accounts Compromised, Private Messages of 81,000 for Sale
13. #SamSam #ransomware continues to be a thorn in the side of organizations in the U.S. with targeted ransomware campaigns continuing,
14. 85 Millions of voter records available for sale ahead of the 2018 US Midterm Elections
15. SMS Phishing + Cardless ATM = Profit
16. Stuxnet Returns, Striking Iran with New Variant
17. Bluetooth Bugs Speak to Lack of Security in DevOps
18. Sauter Quickly Patches Flaw in Building Automation Software
19. This Week in Security News: Spam Campaigns and Vulnerable Infrastructures
20. Russian hackers compromise 120 million Facebook accounts; private messages on sale online
21. Beware this malware: it can even survive operating systems being reinstalled
22. Magecart claims fresh victim in electronics kit seller Kitronik
23. SamSam ransomware campaigns continue to target U.S. in 2018
24. BCMUPnP_Hunter: 100,000-node botnet is abusing routers for spam
25. Multiple #phishing pages on multiple domains targeting Canadian citizens posing as Canadian Revenue Agency, Interac, and others 192.99.86.132 (@OVH) cc: @cybercentre_ca
26. U.S. Geological Survey Network got Infected with Malware
27. 85 million voter records on sale
28. Iran has become victim of a cyberattack campaign
29. EY launches the world's first secure private transactions over the Ethereum public blockchain

ATTACKS

30. Two botnets are fighting over control of thousands of unsecured Android devices
31. Joshua Adam Schulte, ex CIA employee, accused of continuing leaks from prison
32. Spam campaign targets Exodus Mac Users
33. 120 Million Facebook Accounts Compromised, Private Messages of 81,000 for Sale
34. #SamSam #ransomware continues to be a thorn in the side of organizations in the U.S. with targeted ransomware campaigns continuing,
35. 85 Millions of voter records available for sale ahead of the 2018 US Midterm Elections
36. SMS Phishing + Cardless ATM = Profit
37. ePHI of 8,000 Patients Exposed in Health Plan Breach
38. Facebook has experienced a number of security-related issues lately, but it doesn't appear to be at fault for the leak
39. "While most phishing attacks on desktop and laptop computers come via email... a mobile device attack vector can be in
40. #Phishing targets data that lives outside your enterprise perimeter—putting your entire enterprise at risk. Learn how post-perimeter security enables you
41. This Week in Security News: Spam Campaigns and Vulnerable Infrastructures
42. How to password protect a folder or file in Windows | Avast
43. Russian hackers compromise 120 million Facebook accounts; private messages on sale online
44. SamSam ransomware campaigns continue to target U.S. in 2018
45. Feds Accuse Ex-CIA Employee of Continuing Leaks From Prison
46. Radisson Hotel Group Hit by Data Breach
47. Spam campaign targets Exodus Mac Users
48. Just half of Fortune 500 companies have installed DMARC, a tool that guards against email phishing scams, according to new
49. Shipbuilder, defense contractor Austal reveals data breach
50. Multiple #phishing pages on multiple domains targeting Canadian citizens posing as Canadian Revenue Agency, Interac, and others 192.99.86.132 (@OVH) cc: @cybercentre_ca
51. Data theft at Radisson Hotel Group
52. 85 million voter records on sale
53. Iran has become victim of a cyberattack campaign
54. YAPBS – Yet Another Password Breach Scam
55. Apache HBase 2.1.1 release, distributed database
56. FIFA admits hack and braces for new leaks

THREATS

57. Facebook Blames Malicious Extensions in Breach of 81K Private Messages
58. Shellbot Variant Used in New Botnet, Spreads Using IoT and Linux Vulnerabilities
59. ​The day computer security turned real: The Morris Worm turns 30
60. Worst Malware and Threat Actors of 2018
61. Cisco Security Appliance Zero-Day Found Actively Exploited in the Wild
62. New Ransomware using DiskCryptor With Custom Ransom Message
63. BLEEDINGBIT – Two Zero Day Vulnerabilities Affecting Wireless Access Point Bluetooth Chips
64. #SamSam #ransomware continues to be a thorn in the side of organizations in the U.S. with targeted ransomware campaigns continuing,
65. Hackers actively exploiting vulnerabilities in Cisco security appliances
66. Cisco fixed the high-risk security vulnerabilities in variant products
67. Researchers found #Kraken #ransomware has become more popular after being packaged in the Fallout #ExploitKit and becoming part of an
68. Bluetooth Bugs Speak to Lack of Security in DevOps
69. Sauter Quickly Patches Flaw in Building Automation Software
70. Bleedingbit vulnerabilities put Wi-Fi access points at risk
71. Adversaries Distribute Malware Via Rarely Used Extensions
72. Test IO introduces Bug Fix Confirmation, leveraging network of software testers to verify bug fixes
73. Can you spot a malicious email? Take the quiz at
74. Antimalware Day: The evolution of malicious code
75. Flaw in Sophos HitmanPro.Alert could enable hackers to gain privileges over systems
76. Outlaw Hacking Group Using Command Injection Flow To Attack Organizations Network using Botnet via C&C Server
77. Intel CPUs impacted by new PortSmash side-channel vulnerability
78. Beware this malware: it can even survive operating systems being reinstalled
79. SamSam ransomware campaigns continue to target U.S. in 2018
80. CISCO warn of a zero-day DoS flaw that is being actively exploited in attacks
81. Systemd Vulnerability In Linux Could Trigger Remote Attacks And System Crashes
82. .@ArmisSecurity researchers discovered two chip-level #Bluetooth vulnerabilities -- dubbed #Bleedingbit -- that could allow pseudo #RemoteCodeExecution on wireless access points.
83. Cisco Reports SIP Inspection Vulnerability
84. Kraken ransomware gets packaged into Fallout EK
85. Emotet Trojan Changes Tactics…Again
86. Mozilla exorcises five bugs on Halloween
87. Giant ransomware bundle threatens to make malware attacks easier for crooks
88. Blockwatch: The aeternity Blockchain
89. Researchers recently found vulnerabilities in #robot controllers from @Universal_Robot. Learn what these robot controllers do and how #ThreatActors exploit these
90. If you think you have been hacked or got #malware installed, disconnect the internet, leave your device running and connected
91. U.S. Geological Survey Network got Infected with Malware
92. Trading with cryptocurrencies without losing self control
93. EY launches the world's first secure private transactions over the Ethereum public blockchain
94. Search for “Installing Chrome” on Bing can lead to malicious content
95. BLEEDINGBIT – Two Bluetooth Chip-level Vulnerabilities Affected Millions of Enterprise Wi-Fi Access Point Devices
96. Previous malware attacks: When more than 7,5000 of the #Mikrotik routes were reportedly being spied on by attackers
97. GNOME 3.30.2 released: bugs fix
98. Attackers Use Zero-Day That Can Restart Cisco Security Appliances
99. Another packed room for .@idefense analyst Mei Nelson discussing China and cryptocurrency. #codeblue_jp @AccentureSecure @AccentureJPNews

CRIME

100. Joshua Adam Schulte, ex CIA employee, accused of continuing leaks from prison
101. Magecart cybergang targeting e-commerce credit card data
102. 120 Million Facebook Accounts Compromised, Private Messages of 81,000 for Sale
103. 85 Millions of voter records available for sale ahead of the 2018 US Midterm Elections
104. SMS Phishing + Cardless ATM = Profit
105. Stuxnet Returns, Striking Iran with New Variant
106. This Week in Security News: Spam Campaigns and Vulnerable Infrastructures
107. How to password protect a folder or file in Windows | Avast
108. Beware this malware: it can even survive operating systems being reinstalled
109. Feds Accuse Ex-CIA Employee of Continuing Leaks From Prison
110. Radisson Hotel Group Hit by Data Breach
111. BCMUPnP_Hunter: 100,000-node botnet is abusing routers for spam
112. Emotet Trojan Changes Tactics…Again
113. Shipbuilder, defense contractor Austal reveals data breach
114. Data theft at Radisson Hotel Group
115. 85 million voter records on sale
116. Iran has become victim of a cyberattack campaign
117. Trading with cryptocurrencies without losing self control
118. EY launches the world's first secure private transactions over the Ethereum public blockchain
119. YAPBS – Yet Another Password Breach Scam
120. FIFA admits hack and braces for new leaks

POLITICS

121. Joshua Adam Schulte, ex CIA employee, accused of continuing leaks from prison
122. Spam campaign targets Exodus Mac Users
123. 85 Millions of voter records available for sale ahead of the 2018 US Midterm Elections
124. This Week in Security News: Spam Campaigns and Vulnerable Infrastructures
125. Beware this malware: it can even survive operating systems being reinstalled
126. Emotet Trojan Changes Tactics…Again
127. 85 million voter records on sale
128. Iran has become victim of a cyberattack campaign