Daily brief for 2018-11-19

ASIA

1. U.S. warns countries not to 'manipulate the extradition process' for cybercriminals
2. Tianfu Cup PWN hacking contest – White hat hackers earn $1 Million for Zero-Day exploits
3. Business email compromise scam costs Pathé $21.5 million
4. The Most Damaging Election Disinformation Campaign Came From Donald Trump, Not Russia
5. Iran-Linked Hackers Use Just-in-Time Creation of Weaponized Attack Docs
6. New ShadowTalk update looks at: New nation-state threat actor uses advanced TTPs to target Pakistan Lazarus Group’s FASTCash malware
7. Hackers Earn $1 Million for Zero-Day Exploits at Chinese Competition
8. Turkish Police Arrested Cryptocurrency Hackers
9. After early speculation of #malicious intent, experts said an accidental misconfiguration caused the BGP route leak that sent traffic destined

WORLD

10. Not So Cozy: An Uncomfortable Examination of a Suspected APT29 Phishing Campaign
11. Finds vulnerabilities in wordpress websites using WPSCAN
12. Traps: Fighting Threats With Cloud-Based Malware Analysis
13. U.S. warns countries not to 'manipulate the extradition process' for cybercriminals
14. A week in security (November 12 – 18)
15. Business email compromise scam costs Pathé $21.5 million
16. The Most Damaging Election Disinformation Campaign Came From Donald Trump, Not Russia
17. 2FA Login Failure in Office 365 and Azure
18. DarkGate Malware Avoids Endpoint AV Detection
19. Subject: Invoice. The cause of 6 out of 10 of the most effective phishing campaigns in 2018
20. WebCobra Installs Cryptominer On Victim's System
21. New ShadowTalk update looks at: New nation-state threat actor uses advanced TTPs to target Pakistan Lazarus Group’s FASTCash malware
22. Cybaze ZLab – Yoroi team analyzed malware used in recent attacks on US entities attributed to APT29
23. Outlaw Group Distributes Botnet for Cryptocurrency-Mining, Scanning, and Brute-Force
24. Proofpoint #ThreatInsight research: #sLoad and #Ramnit pairing in sustained personalized campaigns against UK and Italy:
25. Russian Cozy Bear APT 29 hackers may be impersonating State Department
26. Email campaign spreading new tRAT malware
27. After early speculation of #malicious intent, experts said an accidental misconfiguration caused the BGP route leak that sent traffic destined
28. Fun fact: The Morris Worm of 1988 did never spread to Finland, as the outbreak happened two weeks before we

ATTACKS

29. Not So Cozy: An Uncomfortable Examination of a Suspected APT29 Phishing Campaign
30. Data Leak Incident Reported by Fortune 500 Metropolitan Life Insurance Company
31. Top 5 ways to pick a secure password
32. VisionDirect Blindsided by Magecart in Data Breach
33. Top 5 ways to pick a secure password
34. OSIsoft Breached, All Domain Accounts, Emails, and Passwords Assumed Compromised
35. “Simplicity without Compromise” with Catalyst 9200 – Intent Based Networking Everywhere!
36. EOS.IO Smart Contract Database Walkthrough
37. Ford Eyes Use of Customers’ Personal Data to Boost Profits
38. Vision Direct Admits To Breach With CVVs Compromised
39. Instagram Bug, Now Fixed, Exposed User Passwords
40. Business email compromise scam costs Pathé $21.5 million
41. Database Misconfiguration Leaks 26 Million SMS Messages
42. The Most Damaging Election Disinformation Campaign Came From Donald Trump, Not Russia
43. 2FA Login Failure in Office 365 and Azure
44. SUNY Upstate Hospital announced a former employee inappropriately accessed more than 1,200 patient records.
45. Subject: Invoice. The cause of 6 out of 10 of the most effective phishing campaigns in 2018
46. Vision Direct reveals customer credit card leak, fake Google script may be to blame
47. A little phishing knowledge may be a dangerous thing
48. Most Important Consideration of Confidentiality,Integrity, Availability (CIA Triad) to Avoid Organization Data Breach
49. New security feature to prevent Amazon S3 bucket misconfiguration and data leaks
50. The more you say you know about phishing, the more vulnerable you are … Until you’re hoodwinked
51. Instagram Privacy Tool Exposed Passwords
52. Vision Direct Notifies Customers of Data Compromise
53. Proofpoint #ThreatInsight research: #sLoad and #Ramnit pairing in sustained personalized campaigns against UK and Italy:
54. Instagram Accidentally Exposed Some User Passwords
55. More than 50% forgot their password once at least one in the last month
56. An espionage group used stolen #DigitalCertificates to sign Plead #malware and used a password stealer component that was used in
57. How #privacy intersects with #CyberSecurity. “Criminals can craft better phishing emails to scam you when they know what you’re interested in.”
58. Email campaign spreading new tRAT malware
59. The promised integration with #HaveIBeenPwned is expanding in #FirefoxMonitor with new breach alerts when a user visits a recently compromised
60. Review: Specops Password Policy
61. Instagram Critical Bug Leaked User’s Password Via its Data Download Tool
62. After early speculation of #malicious intent, experts said an accidental misconfiguration caused the BGP route leak that sent traffic destined
63. Firefox automatically alerts users when you access sites that have data breaches
64. Instagram Accidentally Exposed Some Users' Passwords In Plaintext
65. Sai quali sono i modelli più utilizzati dagli utenti per creare le proprie #password? Qui ti suggeriamo alcune 'best practice'

THREATS

66. New Modular tRat Remote Access Trojan Surfaced During September
67. OSIsoft Breached, All Domain Accounts, Emails, and Passwords Assumed Compromised
68. Finds vulnerabilities in wordpress websites using WPSCAN
69. Traps: Fighting Threats With Cloud-Based Malware Analysis
70. U.S. warns countries not to 'manipulate the extradition process' for cybercriminals
71. TP-Link Patches Remote Code Execution Flaws in SOHO Router
72. EOS.IO Smart Contract Database Walkthrough
73. Tianfu Cup PWN hacking contest – White hat hackers earn $1 Million for Zero-Day exploits
74. Bitcoin Falls Below $5,000
75. Instagram Flaw Exposes User Passwords
76. Multiple Remote TP-Link TL-R600VPN Router Vulnerabilities Patched
77. A bug in EA Origin client exposes gamers' data
78. Vulnerabilities Dip 7%, but Researchers Are Cautious
79. Cryptojacking Attack Targets Make-A-Wish Foundation Website
80. Instagram Bug, Now Fixed, Exposed User Passwords
81. DarkGate Malware Avoids Endpoint AV Detection
82. Vulnerability Spotlight: Multiple remote vulnerabilities in TP-Link TL-R600VPN
83. SUNY Upstate Hospital announced a former employee inappropriately accessed more than 1,200 patient records.
84. WebCobra Installs Cryptominer On Victim's System
85. New ShadowTalk update looks at: New nation-state threat actor uses advanced TTPs to target Pakistan Lazarus Group’s FASTCash malware
86. Cybaze ZLab – Yoroi team analyzed malware used in recent attacks on US entities attributed to APT29
87. Outlaw Group Distributes Botnet for Cryptocurrency-Mining, Scanning, and Brute-Force
88. Texas hospital becomes victim of Dharma ransomware
89. Instagram flaw exposes user passwords
90. Hackers Earn $1 Million for Zero-Day Exploits at Chinese Competition
91. How can a @Trezor #cryptocurrency wallet fall victim to attack? Learn more with expert @lewisnic
92. Privilege escalation bug patched in Accelerated Mobile Pages WordPress plug-in
93. A History of Ransomware Attacks: The Biggest and Worst Ransomware Attacks of All Time
94. How does a Bluetooth vulnerability enable validation attacks?
95. An espionage group used stolen #DigitalCertificates to sign Plead #malware and used a password stealer component that was used in
96. How does site isolation defend against #Spectre vulnerabilities? Expert Michael Cobb of @thehairyITdog explains
97. Helping researchers with IoT firmware vulnerability discovery
98. Wannacry Continues to be Dominant Ransomware
99. Email campaign spreading new tRAT malware
100. Turkish Police Arrested Cryptocurrency Hackers
101. Vulnerability Spotlight: Multiple remote vulnerabilities in TP-Link TL-R600VPN
102. Instagram Critical Bug Leaked User’s Password Via its Data Download Tool
103. After early speculation of #malicious intent, experts said an accidental misconfiguration caused the BGP route leak that sent traffic destined
104. Fun fact: The Morris Worm of 1988 did never spread to Finland, as the outbreak happened two weeks before we
105. October 2018’s Most Wanted Malware: For The First Time, Remote Access Trojan Reaches Global Threat Index’s Top 10

CRIME

106. OSIsoft Breached, All Domain Accounts, Emails, and Passwords Assumed Compromised
107. Finds vulnerabilities in wordpress websites using WPSCAN
108. U.S. warns countries not to 'manipulate the extradition process' for cybercriminals
109. EOS.IO Smart Contract Database Walkthrough
110. A week in security (November 12 – 18)
111. Collective Intelligence Podcast, Vitali Kremez on Magecart
112. Business email compromise scam costs Pathé $21.5 million
113. The Most Damaging Election Disinformation Campaign Came From Donald Trump, Not Russia
114. Vision Direct reveals customer credit card leak, fake Google script may be to blame
115. The more you say you know about phishing, the more vulnerable you are … Until you’re hoodwinked
116. Instagram Accidentally Exposed Some User Passwords
117. An espionage group used stolen #DigitalCertificates to sign Plead #malware and used a password stealer component that was used in
118. How #privacy intersects with #CyberSecurity. “Criminals can craft better phishing emails to scam you when they know what you’re interested in.”
119. Turkish Police Arrested Cryptocurrency Hackers
120. Review: Specops Password Policy

POLITICS

121. Not So Cozy: An Uncomfortable Examination of a Suspected APT29 Phishing Campaign
122. U.S. warns countries not to 'manipulate the extradition process' for cybercriminals
123. A week in security (November 12 – 18)
124. Business email compromise scam costs Pathé $21.5 million
125. The Most Damaging Election Disinformation Campaign Came From Donald Trump, Not Russia
126. Cybaze ZLab – Yoroi team analyzed malware used in recent attacks on US entities attributed to APT29
127. Outlaw Group Distributes Botnet for Cryptocurrency-Mining, Scanning, and Brute-Force
128. The more you say you know about phishing, the more vulnerable you are … Until you’re hoodwinked
129. An espionage group used stolen #DigitalCertificates to sign Plead #malware and used a password stealer component that was used in
130. How #privacy intersects with #CyberSecurity. “Criminals can craft better phishing emails to scam you when they know what you’re interested in.”
131. Russian Cozy Bear APT 29 hackers may be impersonating State Department