Daily brief for 2018-11-16

ASIA

1. InfoWars: Magecart Infection Points to 'Industrial Sabotage'
2. China's Hack Attacks: An Economic Espionage Campaign
3. Operation Shaheen – Pakistan Air Force members targeted by nation-state attackers
4. Details of 170,000 Pakistani debit cards leaked on dark web
5. Cyber News Rundown: Infowars Hacked by Card Skimmers
6. This Week in Security News: Holiday Cybercriminals & Cryptomining Malware
7. How to Stay One Step Ahead of Phishing Websites — Literally
8. Group-IB presented latest cybercrime and nation-state hacking trends in Asia
9. After early speculation of #malicious intent, experts said an accidental misconfiguration caused the BGP route leak that sent traffic destined
10. Malaysia’s Largest Media Company Allegedly Suffers Ransomware Attack
11. Hackers infect Malaysia’s largest media company with ransomware, then demand $6.45 million
12. #GroupIB #ThreatIntelligence detected large set of compromised payment cards details that was put on sale on underground card shop on
13. Google, US and Israeli politician Twitter accounts hijacked to promote 'Elon Musk' Bitcoin scam
14. Two hacker groups attacked Russian banks posing as the Central Bank of Russia
15. Apache Struts2 Commons FileUpload Deserialization Remote Code Execution Vulnerability (CVE-2016-100031)Threat Alert
16. Mylobot Botnet Now Exfiltrates Data Using Second Stage Khalesi Trojan
17. Looking Back at LogRhythm Labs' 2018 Predictions for Security - How Did We Do?

WORLD

18. Russian APT comes back to life with new US spear-phishing campaign
19. Cryptocurrency Trader Gets 15 Months of Jail for Stealing Bitcoin, Litecoin
20. Stealthy DarkGate Cryptocurrency Mining and Ransomware Evades AV Detection
21. Using Microsoft Powerpoint as Malware Dropper
22. Operation Shaheen – Pakistan Air Force members targeted by nation-state attackers
23. Analyzing OilRig’s Ops Tempo from Testing to Weaponization to Delivery
24. Cyber News Rundown: Infowars Hacked by Card Skimmers
25. Russian Banks Hit By Major Phishing Attacks
26. This Week in Security News: Holiday Cybercriminals & Cryptomining Malware
27. Scanning Akamai's Edge Servers for Vulnerabilities, Correctly
28. Group-IB presented latest cybercrime and nation-state hacking trends in Asia
29. After early speculation of #malicious intent, experts said an accidental misconfiguration caused the BGP route leak that sent traffic destined
30. Russian banks hit by major phishing attacks from two hacker groups
31. Cybaze ZLab- Yoroi team spotted a new variant of the APT28 Lojax rootkit
32. Hackers infect Malaysia’s largest media company with ransomware, then demand $6.45 million
33. Google, US and Israeli politician Twitter accounts hijacked to promote 'Elon Musk' Bitcoin scam
34. Two hacker groups attacked Russian banks posing as the Central Bank of Russia
36. NTT Security Adds Botnet Infrastructure Detection to Managed Security Services
37. Apache Struts2 Commons FileUpload Deserialization Remote Code Execution Vulnerability (CVE-2016-100031)Threat Alert
38. 5 Top Techniques for Testing Blockchain Apps
39. French Company Data Breach Causes Sensitive Information Stolen to the Hackers
40. Magecart become close to a household name with hacks of massive sites like http://Ticketmaster.com , http://Newegg.com and British Airways.
41. New variants of Meltdown and Spectre cause information leaks
42. New WebCobra Cryptojacking Malware Uses Platform Specific Miners
43. AMD launches new mid-range graphics card RX 590 based on 12nm process
44. Mylobot Botnet Now Exfiltrates Data Using Second Stage Khalesi Trojan
45. Looking Back at LogRhythm Labs' 2018 Predictions for Security - How Did We Do?

ATTACKS

46. Russian APT comes back to life with new US spear-phishing campaign
47. EgressBuster – Compromise Victim via Command & Control using Firewall
48. Voxox Database Containing Around 26 Million SMS Entries Exposed 2FA, Reset Codes
49. China's Hack Attacks: An Economic Espionage Campaign
50. Gmail Glitch Offers Stealthy Trick for Phishing Attacks
51. New HealthEquity Data Breach Exposes PII/PHI of Almost 21,000 Customers
52. AWS Adds New Feature for Preventing Data Leaks
53. Details of 170,000 Pakistani debit cards leaked on dark web
54. AWS rolls out new security feature to prevent accidental S3 data leaks
55. Russian Banks Hit By Major Phishing Attacks
56. How to Stay One Step Ahead of Phishing Websites — Literally
57. Emotet has some customized phish for you
58. Google BGP route leak was accidental, not hijacking
59. After early speculation of #malicious intent, experts said an accidental misconfiguration caused the BGP route leak that sent traffic destined
60. Russian banks hit by major phishing attacks from two hacker groups
61. After 2015 OPM data breach, agency failed to update security
62. Word of the Day: social engineering
63. 26M Texts Exposed in Poorly Secured Vovox Database
64. Create and enforce a password policy across the enterprise
65. Data Breaches on the Rise in Financial Services
66. SUNY Upstate Hospital announced a former employee inappropriately accessed more than 1,200 patient records.
67. 2FA codes are great for security, except when 26M of them are leaked
68. Business email compromise attacks cost over $676 million in 2017, according to the @FBI's Internet #CrimeReport. Learn how to recognize
69. #GroupIB #ThreatIntelligence detected large set of compromised payment cards details that was put on sale on underground card shop on
71. Massive Rise is Seen in Phishing Attacks
72. Warning Issued by Emirates NBD over VAT Phishing Email Targeting its Customers
73. French Company Data Breach Causes Sensitive Information Stolen to the Hackers
74. Text message database reportedly leaked password resets
75. Consider a reputable password manager to store your information, and don’t forget to use a strong password to secure the
76. New variants of Meltdown and Spectre cause information leaks

THREATS

77. EgressBuster – Compromise Victim via Command & Control using Firewall
78. Cryptocurrency Trader Gets 15 Months of Jail for Stealing Bitcoin, Litecoin
79. Up to three million kids' GPS watches can be tracked by parents... and any miscreant: Flaws spill pick-and-choose catalog for perverts
80. Stealthy DarkGate Cryptocurrency Mining and Ransomware Evades AV Detection
81. Reappearance of Magecart Malware to Infect Virtual Stores
82. Using Microsoft Powerpoint as Malware Dropper
83. SamSam and GandCrab Illustrate Evolution of Ransomware
84. Critical WordPress Flaw Grants Admin Access to Any Registered Site User
85. Adobe Patch Tuesday November Fixed Multiple Information Disclosure Vulnerabilities
86. Lock-Screen Bypass Bug Quietly Patched in Handsets
87. Hacking group returns, switches attacks from ransomware to trojan malware
88. .@TalosSecurity recently created a #decryptor that helps files affected by the #ransomware #Thanatos -- typically known to not decrypt files
89. This Week in Security News: Holiday Cybercriminals & Cryptomining Malware
90. Scanning Akamai's Edge Servers for Vulnerabilities, Correctly
91. Simple Call Recorder Android Malware
92. After early speculation of #malicious intent, experts said an accidental misconfiguration caused the BGP route leak that sent traffic destined
93. ATM Tests Reveal Surprising Security Flaws
94. Cybaze ZLab- Yoroi team spotted a new variant of the APT28 Lojax rootkit
95. Researchers at @okta found a bypass that allows #ThreatActors to pose files as legitimate @Apple files despite being #malware and
96. Most antivirus programs fail to detect this cryptocurrency-stealing malware
97. APT group TA505 testing out new modular RAT
98. tRat is a new modular RAT used by the threat actor TA505
99. Malaysia’s Largest Media Company Allegedly Suffers Ransomware Attack
100. Hacking group returns, switches attacks from ransomware to trojan malware
101. Malicious code hidden in advert images cost ad networks $1.13bn this year
102. Hackers stole millions from ATMs across the world. @verge shares details here.
103. SUNY Upstate Hospital announced a former employee inappropriately accessed more than 1,200 patient records.
104. Four More Malicious Cryptocurrency Apps on Google Play
105. Hackers infect Malaysia’s largest media company with ransomware, then demand $6.45 million
106. D-Link router vulnerability detailed
107. Google, US and Israeli politician Twitter accounts hijacked to promote 'Elon Musk' Bitcoin scam
108. How does Thanatos ransomware decryptor tool restore data?
109. Vaporworms: New breed of self-propagating fileless malware to emerge in 2019
110. Apache Struts2 Commons FileUpload Deserialization Remote Code Execution Vulnerability (CVE-2016-100031)Threat Alert
111. 5 Top Techniques for Testing Blockchain Apps
112. Digital identity, the blockchain and the GDPR: A round peg in a square hole?
113. Amid calls for a Windows bug status dashboard, Microsoft belatedly agrees to build one
114. Dridex/Locky Operators Unleash New Malware in Recent Attack
115. New WebCobra Cryptojacking Malware Uses Platform Specific Miners
116. AMD launches new mid-range graphics card RX 590 based on 12nm process
117. Kaspersky Announces the Details of Windows 7 Zero-Day Vulnerability
118. Mylobot Botnet Now Exfiltrates Data Using Second Stage Khalesi Trojan
119. SentinelOne Detects KeyPass Ransomware! KeyPass is a new ransomware threat that has hit at least 20 countries and appears to be

CRIME

120. Cryptocurrency Trader Gets 15 Months of Jail for Stealing Bitcoin, Litecoin
121. Group-IB presented latest cybercrime and nation-state hacking trends in Asia
122. Cybaze ZLab- Yoroi team spotted a new variant of the APT28 Lojax rootkit
123. Hackers infect Malaysia’s largest media company with ransomware, then demand $6.45 million
124. Business email compromise attacks cost over $676 million in 2017, according to the @FBI's Internet #CrimeReport. Learn how to recognize
125. Google, US and Israeli politician Twitter accounts hijacked to promote 'Elon Musk' Bitcoin scam
126. Two hacker groups attacked Russian banks posing as the Central Bank of Russia
127. NTT Security Adds Botnet Infrastructure Detection to Managed Security Services
128. Warning Issued by Emirates NBD over VAT Phishing Email Targeting its Customers
129. French Company Data Breach Causes Sensitive Information Stolen to the Hackers
130. Looking Back at LogRhythm Labs' 2018 Predictions for Security - How Did We Do?

POLITICS

131. Up to three million kids' GPS watches can be tracked by parents... and any miscreant: Flaws spill pick-and-choose catalog for perverts
132. InfoWars: Magecart Infection Points to 'Industrial Sabotage'
133. China's Hack Attacks: An Economic Espionage Campaign
134. Operation Shaheen – Pakistan Air Force members targeted by nation-state attackers
135. This Week in Security News: Holiday Cybercriminals & Cryptomining Malware
136. Group-IB presented latest cybercrime and nation-state hacking trends in Asia