Daily brief for 2018-11-08

ASIA

1. Triton Malware Spearheads Latest Generation of Attacks on Industrial Systems
2. 689,272 plaintext records of Amex India customers exposed online
3. Cambodia's ISPs Hit By Massive DDoS Attacks
4. Attack uses malicious InPage document and outdated VLC media player to give attackers backdoor access to targets
5. Active Exploitation of Newly Patched ColdFusion Vulnerability (CVE-2018-15961)
6. Symantec Uncovers North Korean Group's ATM Attack Malware
7. Lazarus Group Targets Bank Networks to Rob ATMs
8. 4 Cambodia’s ISPs Attacked by DDoS
9. Hackers from North Korea still breaking into PCs for mining crypto-currencies
10. DDoS attack on Cambodia’s top ISPs reached 150Gbps
11. Symantec researchers dissect North Korean malware used in ATM attacks
12. SIM Swapping Hacker Group Who Managed to Steal $80,000 Worth of Cryptocurrency Got Arrested
13. Spam Botnet of Over 100K Routers Abuses UPnP
14. Cambodia's ISPs hit by some of the biggest DDoS attacks in the country's history
15. HSBC confirms data theft in the United States
16. Commoditization of Computing Hardware and the Bugs It Contains

WORLD

17. Bleedingbit Vulnerabilities Could Affect Enterprises Worldwide
18. Triton Malware Spearheads Latest Generation of Attacks on Industrial Systems
19. Canada Post Leaked Personal Data of 4,500 Cannabis Customers
20. 689,272 plaintext records of Amex India customers exposed online
21. Canada Post Leaked Personal Data On Cannabis Smokers
22. Attack uses malicious InPage document and outdated VLC media player to give attackers backdoor access to targets
23. Active Exploitation of Newly Patched ColdFusion Vulnerability (CVE-2018-15961)
24. Metamorfo Banking Trojan Keeps Its Sights on Brazil
25. Lazarus Group Targets Bank Networks to Rob ATMs
26. Hackers Attack Crypto Exchange With Bitcoin-Stealing Malware
27. Flaws in several self-encrypting SSDs allows attackers to decrypt data they contain
28. Most IT Security Pros Underestimate Phishing Risks
29. Hackers from North Korea still breaking into PCs for mining crypto-currencies
30. Symantec researchers dissect North Korean malware used in ATM attacks
31. Banking Malware Takes Aim at Brazilians
32. Cryptocurrency Mining Malware uses Various Evasion Techniques, Including Windows Installer, as Part of its Routine
33. iOS 12.1 Vulnerability
34. Beware of scams! Elon Musk is not giving away bitcoin on Twitter
35. Spam Botnet of Over 100K Routers Abuses UPnP
36. The Cyber National Mission Force will share unclassified U.S. Cyber Command #malware samples to #VirusTotal and one expert hopes there
37. U.S. Cyber Command CNMF Shares unclassified malware samples via VirusTotal
38. Encryption flaws in solid state drives enable unauthorised data access
39. Canada Post leaked personal data, orders of thousands of cannabis smokers
40. HSBC Bank Alerts US Customers to Data Breach
41. US Cyber Command starts uploading foreign APT malware to VirusTotal
42. U.S. Cyber Command malware samples to be logged in VirusTotal
43. Metamorfo Banking Trojan Keeps Its Sights on Brazil
44. Spyware disguised as Spanish banking apps removed from Google Play
45. Unclassified #malware samples from U.S. Cyber Command will be shared with @virustotal by the Cyber National Mission Force. @MalwareJake @stephengillett
46. Canadian University Undergoes A Forced Shutdown After Cryptojacking Attack
47. U.S. Cyber Command Shares Malware via VirusTotal
48. HSBC confirms data theft in the United States
49. US Cyber Command starts uploading foreign APT malware to VirusTotal

ATTACKS

50. California Girl Scouts branch suffers data breach
51. IT Security Culture Evolution of Businesses Exposed
52. Canada Post Leaked Personal Data of 4,500 Cannabis Customers
53. 689,272 plaintext records of Amex India customers exposed online
54. 3.6 Billion Records Exposed in Data Breaches Until the End September 2018
55. DJI Drone Flight Logs, Photos and Videos Exposed to Unauthorized Access
56. Canada Post Leaked Personal Data On Cannabis Smokers
57. Drone Vulnerability Could Compromise Enterprise Data
58. Oracle's VirtualBox Vulnerability Leaked By Disgruntled Researcher
59. Radisson Loyalty Program Compromised
60. Test Your Employees with Internal Phishing Campaigns
61. Most IT Security Pros Underestimate Phishing Risks
62. DJI Drone Vulnerability Exposed Customer Data, Flight Logs, Photos and Videos
63. Business email compromise attacks cost over $676 million in 2017, according to the @FBI's Internet #CrimeReport. Learn how to recognize
64. Most Enterprises Fail to Implement Proper Protection Against Phishing Attacks
65. According to the 2018 Cost of a Data Breach Study by @PonemonPrivacy & @IBM, the global average cost of a
66. Canada Post leaked personal data, orders of thousands of cannabis smokers
67. HSBC Bank Alerts US Customers to Data Breach
68. StatCounter platform compromised to infect gate.io exchange with bitcoin-stealing code
69. Users Stop Engaging With Brands After Data Breaches, Report Finds
70. Phishing extortion campaign using new, more effective methods
71. Gamasutra user privacy fragged following IP leak discovery
72. How many of these bad password habits do you have?
73. HSBC confirms data theft in the United States
74. Increasing value of personal data a 21st century challenge
75. Good article about the password problem and a statistic that shows just how bad a problem it has now become...

THREATS

76. Companies swamped by critical vulnerabilities – Tenable
77. Cisco hunts for Apache Struts 2 FileUpload bug and finds DIRTY CoW exploit
78. Bleedingbit Vulnerabilities Could Affect Enterprises Worldwide
79. Triton Malware Spearheads Latest Generation of Attacks on Industrial Systems
80. Pentagon Draws Back the Veil on APT Malware with Sudden Embrace of VirusTotal
81. Google: Newer Android versions are less affected by malware
82. Hackers Charged for Creating 6K Strong Cryptojacking Network
83. Dharma Ransomware Hits Altus Baytown Hospital's Systems
84. Steam bug could have given you access to all the CD keys of any game
85. Drone Vulnerability Could Compromise Enterprise Data
86. Oracle's VirtualBox Vulnerability Leaked By Disgruntled Researcher
87. [SingCERT] Alert on Nginx Vulnerabilities (CVE-2018-16843, CVE-2018-16844, and CVE-2018-16845)
88. Attack uses malicious InPage document and outdated VLC media player to give attackers backdoor access to targets
89. Can Blockchain Solve The Problem of Blood Diamonds?
90. Active Exploitation of Newly Patched ColdFusion Vulnerability (CVE-2018-15961)
91. Symantec Uncovers North Korean Group's ATM Attack Malware
92. Several Vulnerabilities Patched in nginx
93. Metamorfo Banking Trojan Keeps Its Sights on Brazil
94. Hackers Attack Crypto Exchange With Bitcoin-Stealing Malware
95. The Pentagon has suddenly started uploading #malware samples from APTs and other nation-state sources to the website VirusTotal.
96. Flaws in several self-encrypting SSDs allows attackers to decrypt data they contain
97. WooCommerce Plugin file deletion vulnerability exposes WordPress 'failing open' design flaw
98. Managing the Intersection of Cryptocurrency and Compliance
99. VirtualBox zero-day flaw released on Github; working exploit available but no patch
100. Hackers from North Korea still breaking into PCs for mining crypto-currencies
101. DJI Drone Vulnerability Exposed Customer Data, Flight Logs, Photos and Videos
102. DJI Patches Forum Bug That Allowed Drone Account Takeovers
103. Spam-spewing IoT botnet infects 100,000 routers using five-year-old flaw
104. Symantec researchers dissect North Korean malware used in ATM attacks
105. SIM Swapping Hacker Group Who Managed to Steal $80,000 Worth of Cryptocurrency Got Arrested
106. Ranting researcher publishes VM-busting zero-day without warning
107. Spam-spewing IoT botnet infects 100,000 routers using five-year-old flaw
108. Banking Malware Takes Aim at Brazilians
109. DJI Drone Vulnerability
110. Cryptocurrency Mining Malware uses Various Evasion Techniques, Including Windows Installer, as Part of its Routine
111. iOS 12.1 Vulnerability
112. Beware of scams! Elon Musk is not giving away bitcoin on Twitter
113. The Cyber National Mission Force will share unclassified U.S. Cyber Command #malware samples to #VirusTotal and one expert hopes there
114. U.S. Cyber Command CNMF Shares unclassified malware samples via VirusTotal
115. Encryption flaws in solid state drives enable unauthorised data access
116. Microsoft Bug is Deactivating Windows 10 Pro Licenses and Downgrading to Home
117. Ranting researcher publishes #VM-busting zero-day without warning
118. We don' need no stinkin' bounties: VirtualBox guest-to-host escape zero-day lands at GitHub
119. StatCounter platform compromised to infect gate.io exchange with bitcoin-stealing code
120. Vulnerabilities In Major Self-Encrypting SSDs Allow Encryption Bypass and Affect Bitlocker
121. [SingCERT] Alert on Critical Apache Struts 2 Remote Code Execution Vulnerability (CVE-2016-1000031)
122. US Cyber Command starts uploading foreign APT malware to VirusTotal
123. U.S. Cyber Command malware samples to be logged in VirusTotal
124. Metamorfo Banking Trojan Keeps Its Sights on Brazil
125. Spyware disguised as Spanish banking apps removed from Google Play
126. XSS flaw in Evernote allows attackers to execute commands and steal files
127. Unclassified #malware samples from U.S. Cyber Command will be shared with @virustotal by the Cyber National Mission Force. @MalwareJake @stephengillett
128. Canadian University Undergoes A Forced Shutdown After Cryptojacking Attack
129. Did you miss yesterday's #blog? Catch up on how fileless #malware is changing the way we as organizations are treating
130. "The presence of the insecure remote access software on systems used for election management raised concerns that malicious #ThreatActors --
131. U.S. Cyber Command Shares Malware via VirusTotal
132. Critical authentication flaw in DJI drone web app fixed
133. Commoditization of Computing Hardware and the Bugs It Contains
134. 4 Million Shops Installed WooCommerce Plugin RCE Flaw Allows Attacker to Gain WordPress Sites Admin Access
135. A year later, @amarekano's Android overlay bug has been included in the AOSP November 2018 patched notes as CVE-2018-9524
136. StatCounter Analytics Code Hijacked to Steal Bitcoins from Cryptocurrency Users
137. Unpatched VirtualBox Zero-Day Vulnerability and Exploit Released Online
138. US Cyber Command starts uploading foreign APT malware to VirusTotal

CRIME

139. California Girl Scouts branch suffers data breach
140. 3.6 Billion Records Exposed in Data Breaches Until the End September 2018
141. Can Blockchain Solve The Problem of Blood Diamonds?
142. Radisson Loyalty Program Compromised
143. Test Your Employees with Internal Phishing Campaigns
144. Lazarus Group Targets Bank Networks to Rob ATMs
145. Hackers Attack Crypto Exchange With Bitcoin-Stealing Malware
146. Hackers from North Korea still breaking into PCs for mining crypto-currencies
147. Business email compromise attacks cost over $676 million in 2017, according to the @FBI's Internet #CrimeReport. Learn how to recognize
148. Symantec researchers dissect North Korean malware used in ATM attacks
149. Top 5 Threats Healthcare Organizations Face and How to Combat Them
150. Man Behind DDoS Attacks on Gaming Companies Pleads Guilty
151. DerpTrolling game server DoS attacker pleads guilty
152. HSBC Bank Alerts US Customers to Data Breach
153. Phishing extortion campaign using new, more effective methods
154. To Pay or Not to Pay: A Large Retailer Responds to #DDoS Extortion Find out what happened here:
155. Spyware disguised as Spanish banking apps removed from Google Play
156. Hacker Behind Series of DoS Attack Targeting Gaming Companies Pleaded Guilty
157. HSBC confirms data theft in the United States

POLITICS

158. Triton Malware Spearheads Latest Generation of Attacks on Industrial Systems
159. Active Exploitation of Newly Patched ColdFusion Vulnerability (CVE-2018-15961)
160. Lazarus Group Targets Bank Networks to Rob ATMs
161. 4 Cambodia’s ISPs Attacked by DDoS
162. Flaws in several self-encrypting SSDs allows attackers to decrypt data they contain
163. Hackers from North Korea still breaking into PCs for mining crypto-currencies
164. "The presence of the insecure remote access software on systems used for election management raised concerns that malicious #ThreatActors --