Region brief for 2018-11-19

ASIA

1. U.S. warns countries not to 'manipulate the extradition process' for cybercriminals
2. Tianfu Cup PWN hacking contest – White hat hackers earn $1 Million for Zero-Day exploits
3. Business email compromise scam costs Pathé $21.5 million
4. The Most Damaging Election Disinformation Campaign Came From Donald Trump, Not Russia
5. Iran-Linked Hackers Use Just-in-Time Creation of Weaponized Attack Docs
6. New ShadowTalk update looks at: New nation-state threat actor uses advanced TTPs to target Pakistan Lazarus Group’s FASTCash malware
7. Hackers Earn $1 Million for Zero-Day Exploits at Chinese Competition
8. Turkish Police Arrested Cryptocurrency Hackers
9. After early speculation of #malicious intent, experts said an accidental misconfiguration caused the BGP route leak that sent traffic destined

OCEANIA

10. 2FA Login Failure in Office 365 and Azure

NORTH AMERICA

11. Not So Cozy: An Uncomfortable Examination of a Suspected APT29 Phishing Campaign
12. Finds vulnerabilities in wordpress websites using WPSCAN
13. Traps: Fighting Threats With Cloud-Based Malware Analysis
14. U.S. warns countries not to 'manipulate the extradition process' for cybercriminals
15. A week in security (November 12 – 18)
16. Business email compromise scam costs Pathé $21.5 million
17. The Most Damaging Election Disinformation Campaign Came From Donald Trump, Not Russia
18. 2FA Login Failure in Office 365 and Azure
19. Subject: Invoice. The cause of 6 out of 10 of the most effective phishing campaigns in 2018
20. New ShadowTalk update looks at: New nation-state threat actor uses advanced TTPs to target Pakistan Lazarus Group’s FASTCash malware
21. Cybaze ZLab – Yoroi team analyzed malware used in recent attacks on US entities attributed to APT29
22. Outlaw Group Distributes Botnet for Cryptocurrency-Mining, Scanning, and Brute-Force
23. Russian Cozy Bear APT 29 hackers may be impersonating State Department

SOUTH AMERICA

Nil

EUROPE

24. Not So Cozy: An Uncomfortable Examination of a Suspected APT29 Phishing Campaign
25. U.S. warns countries not to 'manipulate the extradition process' for cybercriminals
26. Business email compromise scam costs Pathé $21.5 million
27. The Most Damaging Election Disinformation Campaign Came From Donald Trump, Not Russia
28. 2FA Login Failure in Office 365 and Azure
29. DarkGate Malware Avoids Endpoint AV Detection
30. WebCobra Installs Cryptominer On Victim's System
31. Cybaze ZLab – Yoroi team analyzed malware used in recent attacks on US entities attributed to APT29
32. Proofpoint #ThreatInsight research: #sLoad and #Ramnit pairing in sustained personalized campaigns against UK and Italy:
33. Russian Cozy Bear APT 29 hackers may be impersonating State Department
34. Email campaign spreading new tRAT malware
35. After early speculation of #malicious intent, experts said an accidental misconfiguration caused the BGP route leak that sent traffic destined
36. Fun fact: The Morris Worm of 1988 did never spread to Finland, as the outbreak happened two weeks before we

AFRICA

37. The Most Damaging Election Disinformation Campaign Came From Donald Trump, Not Russia