Threat report for 2018-11-13

DATA BREACH & DATA LOSS

1. Cathay Pacific In Hot Water: Data Breach Started March 2018, Not October 2018
2. Cathay Says 'Most Intense' Period of Data Breach Lasted Months
3. Nordstrom Reveals Data Breach, Sensitive Employee Information Exposed
4. Nordstrom Data Breach Exposes Employee Information
5. Nordstrom Quick to Tell Employees of a Data Breach
6. Former Employee Accessed Medical Records For Nearly a Year
7. Sophisticated cyber-espionage campaign targeting Pakistani government and air force
8. Dropbox Account Phishing Campaign
9. The Ontario Cannabis Store has reported a data breach that took place Nov. 1 through the Canada Post and affected
10. Another Facebook Bug Could Have Exposed Your Private Information
11. Google Services down due to BGP leak, traffic hijacked through Russia, China, and Nigeria
12. Sophisticated Campaign Targets Pakistan's Air Force
13. Google Services Inaccessible Due to BGP Leak
14. Beware !! Worlds Most Active Malware Emotet Launching New Campaign With Malicious Word and PDF Attachments
15. Compromised security in millions of cards in the US
16. Leak: Windows 10 October Update will be re-launched tomorrow

DENIAL-OF-SERVICE

Nil

MALVERTISING

17. Malvertising is what happens when attackers buy ad space in popular, legit websites and load them with ads infected by

PHISHING

18. Why Gen Z has the most dangerous password practices
19. Dropbox Account Phishing Campaign
20. Password manager: 85% want their password to be protected against hackers
21. How did @Google eliminate successful #PhishingAttacks? Learn how employees used U2F authentication and physical #SecurityKeys to defend against phishing from
22. To help you rule out the worst password ideas, FrontNet has put together a list of the 25 words passwords

WEB DEFACEMENT

Nil

BOTNET

23. Security cameras – a latent botnet network?
24. A new #botnet -- #Mylobot -- has shown new, complex levels of tools and techniques that are subsequently altering botnet
25. New #spam #botnet infected over 100,000 home routers through a UPnP vulnerability, according to researchers at @360Netlab. By @MaddieBacon11
26. How does the Mylobot botnet differ from a typical botnet?

RANSOMWARE

27. What MSPs can learn from Datto’s Channel Ransomware Report
28. Premier Media Conglomerate of Malaysia, Falls for Ransomware Infection
29. Why WannaCry ransomware is still a threat to your PC
30. Ransomware no. 1 cyberthreat to SMBs, and the average attack costs $47K
31. Ransomware Attack on City of Muscatine Shutdown Several Servers

CRYPTOMINING & CRYPTOCURRENCIES

32. Fake Crypto Wallet Apps Discovered in Google Play, Built Using Drag-n-Drop
33. Target and other high profile Twitter accounts exploited for cryptocurrency scams
34. Cryptocurrency Mining Malware uses Various Evasion Techniques.
35. The Tactic Cybercriminals Use to Steal Bitcoin
36. Attacker hijacks Elon Musk Twitter account to implement fake bitcoin fraud
37. Data61 and CBA demonstrate blockchain welfare payments
38. WebCobra Malware Uses Victims’ Computers to Mine Cryptocurrency
39. WebCobra Malware Uses Victims’ Computers to Mine Cryptocurrency
40. Illegal cryptocurrency mining
41. Twitter grapples with fake Elon Musk accounts promoting bitcoin scams

MALWARE

42. Triton ICS Malware
43. Scare Force: Pakistan military hit by Operation Shaheen malware
44. Pakistan Military Hit By Operation Shaheen Malware
45. That Domain You Forgot to Renew? Yeah, it’s Now Stealing Credit Cards
46. What’s on Our Minds for 2019? Key Themes from the RSA Speaker Selection Process
47. It’s Amateur Hour in the World of Spyware and Victims Will Pay the Price
48. Cryptocurrency Mining Malware uses Various Evasion Techniques.
49. Call Recorder App on Google Play with Over 5,000 Installs Contains Hidden Malware Dropper
50. #Gallmaker eschews custom malware, uses living off the land and publicly available #hack tools. Find out more:
51. Using Machine Learning to Cluster Malicious Network Flows From Gh0st RAT Variants
52. How is Plead #malware used for #cyberespionage attacks? Learn more with Michael Cobb of @thehairyITdog.
53. U.S. Cyber Command #malware samples will be shared to #VirusTotal by the Cyber National Mission Force and one expert said
54. Beware !! Worlds Most Active Malware Emotet Launching New Campaign With Malicious Word and PDF Attachments
55. WebCobra Malware Uses Victims’ Computers to Mine Cryptocurrency
56. WebCobra Malware Uses Victims’ Computers to Mine Cryptocurrency
57. 12 Warning Signs That Help Identify Malware Infection

EXPLOIT

58. Attackers exploit flaw in GDPR-themed WordPress plugin to hijack websites
59. Ruby taken off the rails by deserialization exploit
60. Attackers exploit GDPR compliance plug-in for WordPress

VULNERABILITY

61. Microsoft’s Patch Tuesday updates for November 2018 fix actively exploited Windows flaw
62. Microsoft Patches Zero-Day Bug in Win7, Server 2008 and 2008 R2
63. Microsoft Patches Actively Exploited Windows Vulnerability
64. Fixed Facebook Privacy Bug Could Have Allowed Bad Actors to Steal Personal Info
65. Microsoft patches Windows zero-day used by multiple cyber-espionage groups
66. Adobe Patches Disclosed Acrobat Vulnerability
67. SAP Patches Critical Vulnerability in HANA Streaming Analytics
68. Facebook flaw opened your profile to data thieves
69. Adobe Releases Security Update for Acrobat Vulnerability with Public PoC
70. Unpatched Android OS Flaw Allows Adversaries to Track User Location
71. Microsoft Patch Tuesday Recap: 12 Critical Bugs Fixed
72. Adobe Fixes Acrobat and Reader Flaw With Publicly-Available PoC
73. Facebook Patches Another User Data Harvesting Bug
74. XSS Vulnerability in Evernote Allows Local File Execution
75. Vulnerabilities in Solid-State Drives Can Be Exploited to Decrypt Data
76. Side-Channel Vulnerability Could Be Exploited to Steal Data
77. Zero-Day Vulnerability in Cisco Products Could Cause DoS Condition
78. Attackers exploit flaw in GDPR-themed WordPress plugin to hijack websites
79. Facebook Bug Let Websites Access Private User Data
80. Microsoft November 2018 Patch Tuesday Fixes 12 Critical Vulnerabilities
81. Facebook patches another bug that could have allowed mass-harvesting of user data
82. Microsoft Patch Tuesday — November 2018: Vulnerability disclosures and Snort coverage
83. Another Facebook Bug Could Have Exposed Your Private Information
84. New #spam #botnet infected over 100,000 home routers through a UPnP vulnerability, according to researchers at @360Netlab. By @MaddieBacon11
85. Microsoft Word Doc bug using online video feature found in wild
86. Check Point Researchers Reported Vulnerabilities in Market-Leading Drone Platform, Enabling Manufacturer to Bolster Security
87. Zero Day vulnerability in VirtualBox is disclosed