Threat report for 2018-11-09

DATA BREACH & DATA LOSS

1. Email Stealing Emotet Banking Trojan Resurrected in New Extensive Spam Campaign
2. Oops: Cisco accidentally leaked in-house Dirty COW exploit code with biz conf call software
3. Bug Bounty Hunter Ran ISP Doxing Service
4. DJI drone hack could have exposed sensitive data
5. Emotet launches major new spam campaign
6. .@ablaich: “Breaches that include personally identifiable information are always dangerous because they can lead to identity theft... they can also
7. Canada Post leaks sensitive information of thousands of cannabis buyers
8. D93 staff accounts compromised through a phishing scam
9. Drone vulnerability could compromise enterprise data
10. "If the schemas prove not to be compatible, a backup of the previous version of a database must be used
11. Exposed data of nearly 700k American Express India customers
12. Nearly 700,000 Plaintext Records of American Express India Customers Personal Info Exposed Online

DENIAL-OF-SERVICE

13. 'DerpTroll' derps into plea deal, admits DDoS attacks on EA, Steam, Sony game servers
14. DerpTrolling game server DDoS attacker pleads guilty
15. Sony DDoS-er 'DerpTrolling' Pleads Guilty
16. Notorious "DerpTrolling" Pleads Guilty to DDoS Attacks on EA & Sony

MALVERTISING

Nil

PHISHING

17. Trickbot Malware Added Password And Browser History Stealing
18. Man Sent Letter Bomb To Bitcoin Firm Over Password Reset
19. This banking malware just added password and browser history stealing to its playbook
20. This banking #malware just added #password and browser history stealing to its playbook https://zd.net/2Pl6v31 via @ZDNet & @dannyjpalmer
21. Phishing Attempts Soar to 137 Million in Q3
22. Phishing now possible by exploiting online video function vulnerability in Word
23. D93 staff accounts compromised through a phishing scam
24. 5 Ways #Cybercriminals Can Access Your Emails Without #Phishing | Check out the full infographic here:
25. Criminals are targeting cardless ATMs with the help of SMS text-based phishing (aka smishing) to drain bank accounts using stolen

WEB DEFACEMENT

Nil

BOTNET

26. Spammer scum hack 100,000 home routers via UPnP vulns to craft email-flinging botnet
27. This Week in Security News: Fake Apps & Malicious Bots
28. New spam botnet infects over 100,000 home routers
29. A new spam #botnet took advantage of a UPnP vulnerability to infect over 100,000 home routers in India, China and
30. IoT botnet BCMUPnP_Hunter targets routers with vulnerable UPnP feature
31. BCMPUPnP_Hunter Botnet infected 400k routers to turn them in email spammers

RANSOMWARE

32. Ransomware Still the Top Malware Threat During 2018 According to Europol
33. The Week in Ransomware - November 9th 2018 - Mostly Dharma Variants
34. Kraken Ransomware
35. Are you prepared for #ransomware? Download this how-to guide to learn how to prepare for and detect an attack before

CRYPTOMINING & CRYPTOCURRENCIES

36. StatCounter fingers cache-poisoning caper for Bitcoin-slurping JavaScript hijack
37. Cryptomining Malware Uses Rootkit to Hide on Infected Linux Systems
38. Stealthy Crypto-Mining Malware Evades Detection
39. Man Sent Letter Bomb To Bitcoin Firm Over Password Reset
40. Linux cryptocurrency miners are installing rootkits to hide themselves
41. Chinese headmaster fired after setting up his own secret cryptomining rig at school
42. Kraken Ransomware
43. Chinese headmaster fired after setting up his own secret cryptomining rig at school
44. No, You Don't Need a Blockchain
45. Canadian Uni Shutters Network After Cryptomining Attack
46. Hackers hide malware in the Windows installation files to mine cryptocurrency
47. Visiting Bitcoin City.
48. Seagate and IBM Work Together to Help Reduce Global Hard Drive Counterfeiting with Blockchain Technology

MALWARE

49. Hackers Target Bitcoins and USCYBERCOM Shares Malware | Avast
50. Koadic: Security Defense in the Age of LoL Malware, Part IV
51. Email Stealing Emotet Banking Trojan Resurrected in New Extensive Spam Campaign
52. Ransomware Still the Top Malware Threat During 2018 According to Europol
53. The Pentagon is Publishing Foreign Nation-State Malware
54. Cryptomining Malware Uses Rootkit to Hide on Infected Linux Systems
55. Stealthy Crypto-Mining Malware Evades Detection
56. Advanced tools: Process Hacker
57. Trickbot Malware Added Password And Browser History Stealing
58. This Week in Security News: Fake Apps & Malicious Bots
59. "Inception Attackers" Combine Old Exploit and New Backdoor
60. Playbook Fridays: Domain Spinning Workbench Spaces App
61. This banking malware just added password and browser history stealing to its playbook
62. South Korean Hackers Arrested for Infecting Cryto Mining Malware
63. #Cyberespionage hackers have used stolen #DigitalCertificates to steal data. Expert Michael Cobb of @thehairyITdog explains how hackers sign Plead
64. This banking #malware just added #password and browser history stealing to its playbook https://zd.net/2Pl6v31 via @ZDNet & @dannyjpalmer
65. The Morris Worm Turns 30
66. Idaho Falls School District Struck by a Computer Virus Attack
67. OSX/SurfBuyer: Real malware is in the eye of the device holder
68. How is Plead malware used for cyberespionage attacks?
69. VirusTotal and USCyberCom Join Forces To Identify Malware
70. Hackers hide malware in the Windows installation files to mine cryptocurrency
71. U.S. Cyber Command #malware samples will be shared to #VirusTotal by the Cyber National Mission Force and one expert said

EXPLOIT

72. Oops: Cisco accidentally leaked in-house Dirty COW exploit code with biz conf call software
73. "Inception Attackers" Combine Old Exploit and New Backdoor

VULNERABILITY

74. U.S. Air Force announced Hack the Air Force 3.0, the third Bug Bounty Program
75. Recently-Patched Adobe ColdFusion Flaw Exploited By APT
76. Zero-day in popular WordPress plugin exploited in the wild to take over sites
77. Bug Bounty Hunter Ran ISP Doxing Service
78. VMware releases security patches for a critical virtual machine escape flaw
79. Infosec Problems For 2019 and Beyond: Patching, Bug Bounties and Hype
80. VMware Patches VM Escape Flaw Disclosed at Chinese Hacking Contest
81. Inception Attackers Target Europe with Year-old Office Vulnerability
82. Flaws in Roche Medical Devices Can Put Patients at Risk
83. Inception hackers target European organisations with old Office flaw
84. A new spam #botnet took advantage of a UPnP vulnerability to infect over 100,000 home routers in India, China and
85. Serious XSS Vulnerability Patched in Evernote
86. Update now! WordPress sites vulnerable to WooCommerce plugin flaw
87. Phishing now possible by exploiting online video function vulnerability in Word
88. Vulnerabilities in Our Infrastructure: 5 Ways to Mitigate the Risk
89. Cisco fixes two critical bugs, recommends workaround for a third
90. Drone vulnerability could compromise enterprise data
91. US Air Force invites white hats to find hackable flaws, again
92. Prioritizing Flaws Based on Severity Increasingly Ineffective: Study
93. DJI Drone Can be Hacked using New Vulnerability To Steal Drone’s Flight logs, Photos & Videos
94. Adobe ColdFusion Vulnerability Exploited in the Wild
95. Combination of bugs in WordPress and WooCommerce allows website hijacking
96. Hack the Air Force 3.0 – New vulnerability bounty program