Threat report for 2018-11-12

DATA BREACH & DATA LOSS

1. Cylance: Spy campaign targeting Pakistani officials installs malware, then surrenders
2. StatCounter Compromise
3. Emotet Campaign Ramps Up with Mass Email Harvesting Module
4. 2018 On Track to Be One of the Worst Ever for Data Breaches
5. U.S. Chip Cards Are Being Compromised in the Millions
6. Third-party data breach exposes info of Alabama hospital job applicants
7. Small number of HSBC customer accounts compromised in data breach. Often hackers will make use of user names and passwords compromised
8. Popular Data Storage Devices Compromised Due to Flawed Security
9. U.S. Chip Cards Are Being Compromised in the Millions:
10. What is behind the growing trend of business email compromise attacks? Learn more from expert Michael Cobb of @thehairyITdog.
11. The History of Data Breaches
12. Cisco Inadvertently Leaked In-House Dirty COW Exploit Code In Its Software
13. Emotet Campaign Ramps Up with Mass Email Harvesting Module
14. Reported breaches in the first 9 months of 2018 exposed 3.6 billion records
15. ADHA privacy boss reportedly quits as My Health Record faces first big test

DENIAL-OF-SERVICE

Nil

MALVERTISING

Nil

PHISHING

16. Unable to remember his password, man sent letter bomb to Bitcoin exchange
17. Avast Improves Phishing Detection | Avast
18. Phishing Training is a Tool, Not a Solution

WEB DEFACEMENT

Nil

BOTNET

19. Hacking the hackers – IOT botnet author adds his own backdoor on top of a ZTE router backdoor
20. Botnet pwns 100,000 routers using ancient security flaw

RANSOMWARE

21. #SamSam #ransomware targeted 67 organizations in 2018, according to @symantec research. By @MaddieBacon11
22. Ransomware Assault Strikes Toronto Company, which Sells Data Belonging to Ontario Residents
23. Unearthing Ransomware Characteristics Using Classification Taxonomy

CRYPTOMINING & CRYPTOCURRENCIES

24. How CIOs can manage blockchain security: 4 tips
25. Unable to remember his password, man sent letter bomb to Bitcoin exchange
26. A new malware that targets #cryptocurrency investors through #MacOS and chat platforms was recently discovered. Learn how this #malware works
27. Cryptomining malware using Windows Installer to remain hidden
28. Chinese Head Fired After Cryptomining at School
29. Elon Musk BITCOIN Twitter scam, a simple and profitable fraud for crooks

MALWARE

30. Cylance: Spy campaign targeting Pakistani officials installs malware, then surrenders
31. Hackers Abuse Critical Bug in Microsoft Office Online Video Feature To Deliver Malware
32. Hacking the hackers – IOT botnet author adds his own backdoor on top of a ZTE router backdoor
33. Malware-Laced App Lurked on Google Play For a Year
34. Malware of the 90s: Remembering the Michelangelo and Melissa viruses
35. A new malware that targets #cryptocurrency investors through #MacOS and chat platforms was recently discovered. Learn how this #malware works
36. Hide and Script: Inserted Malicious URLs within Office Documents’ Embedded Videos
37. Google’s data charts path to avoiding malware on Android
38. U.S. Cyber Command #malware samples will be shared to #VirusTotal by the Cyber National Mission Force and one expert said
39. Cryptomining malware using Windows Installer to remain hidden
40. An #Android app booby-trapped with #malware was recently taken down from Google Play — after being available for download for
41. How does new MacOS malware target users through chat?
42. How does your enterprise ensure a secure #ApplicationSecurityTesting process?
43. Happy #Monday, #CyberSecurity folks! Catch up on the #blog, and discover how fileless #malware is changing how organizations treat
44. Overt Command and Control is now live! Check out @william_knows & @nmonkee's talk at this year's #BlueHatv18 exploring the reality

EXPLOIT

45. How to Perform Manual SQL Injection With Error Based String Method
46. Cisco Inadvertently Leaked In-House Dirty COW Exploit Code In Its Software
47. Hackers Exploit Flaw in GDPR Compliance Plugin for WordPress

VULNERABILITY

48. Hackers Abuse Critical Bug in Microsoft Office Online Video Feature To Deliver Malware
49. DJI Drone Web App Security Flaw Could Let Attackers Take Over Drones
50. CVE-2018-6981, CVE-2018-6982: uninitialized stack memory usage vulnerabilities on VMware ESXi, Workstation, and Fusion
51. Flaw in WordPress plugin allowed unauthorized admin access, backdoors
52. Steam Bug Allowed Unlimited Free Downloads
53. Steam bug exposes license keys for every game available on platform
54. Botnet pwns 100,000 routers using ancient security flaw
55. Used Data Storage Devices Have Security Flaws
56. Patched-up Adobe ColdFusion vulnerability exploited by hackers
57. A critical flaw in GDPR compliance plugin for WordPress exploited in the wild
58. New Acunetix Build Adds Detection for CSP, SRI, Node.js, and Ghostscript RCE Vulnerabilities
59. Cisco ASA Security Product Denial-of-Service Vulnerability (CVE-2018-15454) Threat Alert
60. Norway’s IT industry must tackle security vulnerabilities
61. In this week’s ShadowTalk, the team debates the benefits/drawbacks of bug bounty programs, how you should consider operational value when
62. Hackers Exploit Flaw in GDPR Compliance Plugin for WordPress
63. Multiple Vulnerabilities Discovered In Roche Handheld Medical Devices
64. DOD file sharing tool disabled due to vulnerability