Daily brief for 2018-11-29

ASIA

1. Banking Trojan Made in Brazil? A Brief Look
2. Looking Ahead: RiskIQ’s 2019 Cybersecurity Predictions
3. Indian Police Break Up International Computer Virus Scam
4. Iranian duo charged with SamSam ransomware-slinging campaign
5. U.S. DoJ charges Iranian duo over SamSam Ransomware activity
6. US charges Iranian hackers for SamSam ransomware attacks
7. US charges Iranian hackers for SamSam ransomware attacks
8. The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia
9. US Indicts Two Iranians for SamSam Campaign Blitz
10. Analysis Report of the XorDDoS Malware Family
11. Lazarus Targeting Latin America
12. Pervasive Brazilian financial malware targets bank customers in Latin America and Europe

WORLD

13. GCHQ: this is how we decide to report a security bug or keep it a secret
14. Atrium Health’s Databreach: 2.65 Million Patient Records Publicly Revealed
15. Rotexy malware morphs into dangerous banking Trojan
16. Banking Trojan Made in Brazil? A Brief Look
17. First Annual Cyberwarcon
18. Brazilian Financial Malware Spreads Beyond National Boundaries
19. USPS API Security Vulnerabilities Caused by Functional Errors
20. Accenture: Russian hackers using Brexit talks to disguise phishing lures
21. Looking Ahead: RiskIQ’s 2019 Cybersecurity Predictions
22. SamSam ransomware actors charged, sanctioned by US government
23. U.S. DoJ charges Iranian duo over SamSam Ransomware activity
24. US charges Iranian hackers for SamSam ransomware attacks
25. Pterodo Found On State Authorities' Computers In Ukraine
26. US charges Iranian hackers for SamSam ransomware attacks
27. The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia
28. US indicts two over SamSam ransomware attacks
29. US Charges Hackers in Multimillion Dollar Ransomware Campaign
30. XSS Shell- Cross Site Scripting
31. Smashing Security #106: Google Maps, Fed phishing, and Grinch bots
32. GCHQ: We don't tell tech companies about every software flaw
33. Uber fined $1.1 million by UK and Dutch regulators over 2016 data breach
34. US Indicts Two Iranians for SamSam Campaign Blitz
35. Symantec comes out in swinging in bitter legal battle over security bug audit conspiracy claims
36. Brazilian-made bank trojan
37. READ: The threat actor SNAKEMACKEREL (#FancyBear) leveraged current geopolitical events and #Brexit themed lure documents to deliver first-stage malware
38. London-based Urban Massage app leaks data on 300K customers, including sexual misconduct claims
39. Records of 114 Million US Citizen and Companies Exposed Online
40. NEW: Russian hackers using Brexit talks to disguise its phishing lures
41. McAfee Labs 2019 Threats Predictions Report
42. Lazarus Targeting Latin America
43. AccuDoc Data Breach impacted 2.6 Million Atrium Health patients
44. Pervasive Brazilian financial malware targets bank customers in Latin America and Europe
45. UK and Dutch Regulators Fined Uber for $1.1 Million over 2016 Data Breach
46. Dell Hacked – Data Breach Exposed Names, Email addresses & Hashed Passwords

ATTACKS

47. Atrium Health’s Databreach: 2.65 Million Patient Records Publicly Revealed
48. Users Failing Phishing Simulations? That’s ok
49. Dell Forces Password Reset for Online Customers Following Data Breach
50. Dell remains quiet on attempted data breach
51. Accenture: Russian hackers using Brexit talks to disguise phishing lures
52. 2.6 Million Atrium Health Patient Records Compromised by Vendor AccuDoc
53. Iranian duo charged with SamSam ransomware-slinging campaign
54. Office workers beware: Holiday gift card spear phishing attacks on the rise
55. The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia
56. Blazy – Open Source Modern Login Brute-forcer
57. SKY Brasil Exposes 32 Million Customer Records
58. US Charges Hackers in Multimillion Dollar Ransomware Campaign
59. Dunkin' Donuts Serves Up Data Breach Alert
60. Smashing Security #106: Google Maps, Fed phishing, and Grinch bots
61. Uber fined $1.1 million by UK and Dutch regulators over 2016 data breach
62. US Indicts Two Iranians for SamSam Campaign Blitz
63. London-based Urban Massage app leaks data on 300K customers, including sexual misconduct claims
64. Database breach affects 2.6 million Atrium Health patients
65. Dell data breach – Dell forces password reset after the incident
66. Records of 114 Million US Citizen and Companies Exposed Online
67. NEW: Russian hackers using Brexit talks to disguise its phishing lures
68. Threat Spotlight: New spear phishing attack gift card scam
69. How have #phishing campaigns threatened your #EnterpriseSecurity system?
70. AccuDoc Data Breach impacted 2.6 Million Atrium Health patients
71. Dell Resets User Passwords Following Data Breach
72. Atrium Health Data Breach Affected More than 2 Million Patients
73. UK and Dutch Regulators Fined Uber for $1.1 Million over 2016 Data Breach
74. Dell Hacked – Data Breach Exposed Names, Email addresses & Hashed Passwords
75. A targeted attack attempting to steal #cryptocurrency took advantage of open source software with a compromised #NPM package and experts

THREATS

76. GCHQ: this is how we decide to report a security bug or keep it a secret
77. A free decryption tool is available for Thanatos ransomware victims
78. Rotexy malware morphs into dangerous banking Trojan
79. Banking Trojan Made in Brazil? A Brief Look
80. Critical Zoom Flaw Lets Hackers Hijack Conference Meetings
81. Overall Volume of Thanksgiving Weekend Malware Attacks Lower This Year
82. Brazilian Financial Malware Spreads Beyond National Boundaries
83. USPS API Security Vulnerabilities Caused by Functional Errors
84. Colorado Agency Targeted in Nationwide Ransomware Scheme
85. Cisco Patches SQL Injection Flaw in Prime License Manager
86. SamSam ransomware actors charged, sanctioned by US government
87. Cisco Patches Critical Bug in License Management Tool
88. Indian Police Break Up International Computer Virus Scam
89. Hackers can exploit this bug in surveillance cameras to tamper with footage
90. Iranian duo charged with SamSam ransomware-slinging campaign
91. U.S. DoJ charges Iranian duo over SamSam Ransomware activity
92. A security hole in a mail preview program may have made the data of 60 million customers vulnerable.
93. US charges Iranian hackers for SamSam ransomware attacks
94. Inside the Google Docs Malicious Network
95. US charges Iranian hackers for SamSam ransomware attacks
96. The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia
97. A security researcher notified the @USPS of an #API vulnerability one year ago. But the #USPS website flaw was only
98. US indicts two over SamSam ransomware attacks
99. US Charges Hackers in Multimillion Dollar Ransomware Campaign
100. AriseBank CEO faces 120 years behind bars over alleged cryptocurrency scam
101. Beware the Malware-Laden Brexit News
102. KingMiner malware hijacks the full power of Windows Server CPUs
103. GCHQ: We don't tell tech companies about every software flaw
104. Malicious developer creates wormable, fileless variant of njRAT
105. Symantec comes out in swinging in bitter legal battle over security bug audit conspiracy claims
106. Brazilian-made bank trojan
107. READ: The threat actor SNAKEMACKEREL (#FancyBear) leveraged current geopolitical events and #Brexit themed lure documents to deliver first-stage malware
108. Proofpoint: Hackers testing new reconnaissance #malware on financial institutions.
109. Beware the Malware-Laden Brexit News https://ubm.io/2Ql2DyP by @ErickaChick
110. Analysis Report of the XorDDoS Malware Family
111. Hacker takes over JavaScript library, injects malware to steal Bitcoin
112. Widely Used Web Conference Service Zoom Patches Critical Flaw
113. A new vulnerability was discovered to affect #Bluetooth #firmware or operating system software drivers. Learn what this vulnerability is and
114. Several Malicious Apps on Google Play Posing as Voice Messenger Steal User Personal Information
115. Mobile Malware Attacks Increase as Holiday Season Nears
116. Facebook Increases Bug Bounty Payouts to Improve User Security
117. Pervasive Brazilian financial malware targets bank customers in Latin America and Europe
118. A targeted attack attempting to steal #cryptocurrency took advantage of open source software with a compromised #NPM package and experts

CRIME

119. Atrium Health’s Databreach: 2.65 Million Patient Records Publicly Revealed
120. Colorado Agency Targeted in Nationwide Ransomware Scheme
121. Looking Ahead: RiskIQ’s 2019 Cybersecurity Predictions
122. Indian Police Break Up International Computer Virus Scam
123. U.S. DoJ charges Iranian duo over SamSam Ransomware activity
124. US indicts two over SamSam ransomware attacks
125. SKY Brasil Exposes 32 Million Customer Records
126. US Charges Hackers in Multimillion Dollar Ransomware Campaign
127. AriseBank CEO faces 120 years behind bars over alleged cryptocurrency scam
128. Uber fined $1.1 million by UK and Dutch regulators over 2016 data breach
129. US Indicts Two Iranians for SamSam Campaign Blitz
130. Symantec comes out in swinging in bitter legal battle over security bug audit conspiracy claims
131. McAfee Labs 2019 Threats Predictions Report
132. Threat Spotlight: New spear phishing attack gift card scam
133. AccuDoc Data Breach impacted 2.6 Million Atrium Health patients
134. Pervasive Brazilian financial malware targets bank customers in Latin America and Europe
135. UK and Dutch Regulators Fined Uber for $1.1 Million over 2016 Data Breach
136. The Justice Department, FBI and several tech and cybersecurity companies have dismantled the #3ve #botnet, and eight individuals have been

POLITICS

137. GCHQ: this is how we decide to report a security bug or keep it a secret
138. First Annual Cyberwarcon
139. Looking Ahead: RiskIQ’s 2019 Cybersecurity Predictions
140. Pterodo Found On State Authorities' Computers In Ukraine
141. XSS Shell- Cross Site Scripting
142. Uber fined $1.1 million by UK and Dutch regulators over 2016 data breach
143. McAfee Labs 2019 Threats Predictions Report
144. Threat Spotlight: New spear phishing attack gift card scam
145. Pervasive Brazilian financial malware targets bank customers in Latin America and Europe
146. UK and Dutch Regulators Fined Uber for $1.1 Million over 2016 Data Breach