Sector brief for 2018-11-16

HEALTHCARE

1. New HealthEquity Data Breach Exposes PII/PHI of Almost 21,000 Customers
2. SUNY Upstate Hospital announced a former employee inappropriately accessed more than 1,200 patient records.
3. Apache Struts2 Commons FileUpload Deserialization Remote Code Execution Vulnerability (CVE-2016-100031)Threat Alert

TRANSPORT

4. Group-IB presented latest cybercrime and nation-state hacking trends in Asia

BANKING & FINANCE

5. InfoWars: Magecart Infection Points to 'Industrial Sabotage'
6. Reappearance of Magecart Malware to Infect Virtual Stores
7. New HealthEquity Data Breach Exposes PII/PHI of Almost 21,000 Customers
8. Hacking group returns, switches attacks from ransomware to trojan malware
9. Details of 170,000 Pakistani debit cards leaked on dark web
10. Cyber News Rundown: Infowars Hacked by Card Skimmers
11. .@TalosSecurity recently created a #decryptor that helps files affected by the #ransomware #Thanatos -- typically known to not decrypt files
12. Russian Banks Hit By Major Phishing Attacks
13. How to Stay One Step Ahead of Phishing Websites — Literally
14. Group-IB presented latest cybercrime and nation-state hacking trends in Asia
15. Russian banks hit by major phishing attacks from two hacker groups
16. ATM Tests Reveal Surprising Security Flaws
17. tRat is a new modular RAT used by the threat actor TA505
18. Malaysia’s Largest Media Company Allegedly Suffers Ransomware Attack
19. Data Breaches on the Rise in Financial Services
20. Four More Malicious Cryptocurrency Apps on Google Play
21. Hackers infect Malaysia’s largest media company with ransomware, then demand $6.45 million
22. #GroupIB #ThreatIntelligence detected large set of compromised payment cards details that was put on sale on underground card shop on
23. Two hacker groups attacked Russian banks posing as the Central Bank of Russia
25. Apache Struts2 Commons FileUpload Deserialization Remote Code Execution Vulnerability (CVE-2016-100031)Threat Alert
26. 5 Top Techniques for Testing Blockchain Apps
27. Warning Issued by Emirates NBD over VAT Phishing Email Targeting its Customers
28. Looking Back at LogRhythm Labs' 2018 Predictions for Security - How Did We Do?

INFORMATION & TELECOMMUNICATION

29. InfoWars: Magecart Infection Points to 'Industrial Sabotage'
30. Gmail Glitch Offers Stealthy Trick for Phishing Attacks
31. Analyzing OilRig’s Ops Tempo from Testing to Weaponization to Delivery
32. This Week in Security News: Holiday Cybercriminals & Cryptomining Malware
33. Cybaze ZLab- Yoroi team spotted a new variant of the APT28 Lojax rootkit
34. Word of the Day: social engineering
35. SUNY Upstate Hospital announced a former employee inappropriately accessed more than 1,200 patient records.
36. 2FA codes are great for security, except when 26M of them are leaked
37. #GroupIB #ThreatIntelligence detected large set of compromised payment cards details that was put on sale on underground card shop on
38. Google, US and Israeli politician Twitter accounts hijacked to promote 'Elon Musk' Bitcoin scam
39. Two hacker groups attacked Russian banks posing as the Central Bank of Russia
40. Apache Struts2 Commons FileUpload Deserialization Remote Code Execution Vulnerability (CVE-2016-100031)Threat Alert
41. French Company Data Breach Causes Sensitive Information Stolen to the Hackers
42. Magecart become close to a household name with hacks of massive sites like http://Ticketmaster.com , http://Newegg.com and British Airways.
43. Amid calls for a Windows bug status dashboard, Microsoft belatedly agrees to build one
44. Looking Back at LogRhythm Labs' 2018 Predictions for Security - How Did We Do?
45. SentinelOne Detects KeyPass Ransomware! KeyPass is a new ransomware threat that has hit at least 20 countries and appears to be

FOOD

Nil

WATER

Nil

ENERGY

46. Group-IB presented latest cybercrime and nation-state hacking trends in Asia
47. Apache Struts2 Commons FileUpload Deserialization Remote Code Execution Vulnerability (CVE-2016-100031)Threat Alert
48. French Company Data Breach Causes Sensitive Information Stolen to the Hackers

GOVERNMENT & PUBLIC SERVICE

49. Using Microsoft Powerpoint as Malware Dropper
50. Operation Shaheen – Pakistan Air Force members targeted by nation-state attackers
51. Analyzing OilRig’s Ops Tempo from Testing to Weaponization to Delivery
52. This Week in Security News: Holiday Cybercriminals & Cryptomining Malware
53. Group-IB presented latest cybercrime and nation-state hacking trends in Asia
54. Kaspersky Announces the Details of Windows 7 Zero-Day Vulnerability
55. Looking Back at LogRhythm Labs' 2018 Predictions for Security - How Did We Do?