Threat report for 2018-11-10
DATA BREACH & DATA LOSS
- FIFA Preps for Next Wave of Bad Press after New Data Breach
- According to the @FBI's Internet #CrimeReport, business email compromise attacks cost more than $676 million in 2017. Learn more from
- What is the average time it takes for an organization to identify a data breach?
- Botnet infects over 400krouters for spam campaign
- Pakistani banks suffer data breach
DENIAL-OF-SERVICE
Nil
MALVERTISING
Nil
PHISHING
- "Keep in mind that it's not just users who can find and exploit #SQLinjection, but business logic flaws, password policy
WEB DEFACEMENT
Nil
BOTNET
- Botnet infects over 400krouters for spam campaign
- New #spam #botnet infected over 100,000 home routers through a UPnP vulnerability, according to researchers at @360Netlab. By @MaddieBacon11
RANSOMWARE
- GandCrab Ransomware Virus Threat Alert
CRYPTOMINING & CRYPTOCURRENCIES
- Cryptocurrency Mining Malware Targets Linux Machines Uses Rootkit to Hide From Monitoring Tools
MALWARE
- GandCrab Ransomware Virus Threat Alert
- Symantec shared details of North Korean Lazarus’s FastCash Trojan used to hack banks
- The Cyber National Mission Force will share unclassified U.S. Cyber Command #malware samples to #VirusTotal and one expert hopes there
- In @usnistgo's draft on 'Vetting the #Security of #MobileApplications,' several key general requirements are discussed. However, the process could be
- Cryptocurrency Mining Malware Targets Linux Machines Uses Rootkit to Hide From Monitoring Tools
- Researchers reveal the malware used by North Korean hackers to attack ATMs
EXPLOIT
- "Keep in mind that it's not just users who can find and exploit #SQLinjection, but business logic flaws, password policy
VULNERABILITY
- Apache mod_jk Access Control Bypass Vulnerability (CVE-2018-11759) Threat Alert
- Nginx server security flaws expose more than a million of servers to DoS attacks
- "Keep in mind that it's not just users who can find and exploit #SQLinjection, but business logic flaws, password policy
- VMware Releases Security Updates To Fix Critical Vulnerability Discovered in GeekPwn2018 Event
- Vulnerabilities in DJI drone manufacturer
- New #spam #botnet infected over 100,000 home routers through a UPnP vulnerability, according to researchers at @360Netlab. By @MaddieBacon11