Daily brief for 2018-09-12

Asia

1. WTB: Apple Removes Top Security Tool for Secretly Stealing Data

World

1. Multi-Stage Malware Heavily Used in Recent Cobalt Attacks
2. Latvian hacker sentenced to 33 months in prison for scareware scheme
3. Russian hacker pleads guilty for role in massive botnet schemes
4. Modular Malware Brings Stealthy Attacks to Former Soviet States
5. Data breach — 380,000 British Airways transactions compromised | Avast
6. Researchers implicate online card-skimming group in British Airways hack
7. British Airways reveals details about data breach

Attacks

1. OilRig Uses Updated BONDUPDATER to Target Middle Eastern Government
2. Russian hacker pleads guilty for role in massive botnet schemes
3. Jaxx Cryptocurrency wallet phishing campaign shut down
4. Modular Malware Brings Stealthy Attacks to Former Soviet States
5. Data breach — 380,000 British Airways transactions compromised | Avast
6. Veeam Leaks 200 GB Customer Database, Goldmine for Phishers
7. Park by Phone data breach affects 5000 customers
8. Feeling the Pulse of Cyber Security in Healthcare
9. Phishing warning: One in every one hundred emails is now a hacking attempt
10. Cybercriminals Go Phishing For Jaxx Wallet Users
11. Dramatic Increase of DDoS Attack Sizes Attributed to IoT Devices
12. Data management firm Veeam mismanages own data, leaks 445m records
13. Crooks Combine Phishing and Impersonation For Higher Success Rate
14. Beware! Unpatched Safari Browser Hack Lets Attackers Spoof URLs
15. British Airways reveals details about data breach

Threats

1. Multi-Stage Malware Heavily Used in Recent Cobalt Attacks
2. OilRig Uses Updated BONDUPDATER to Target Middle Eastern Government
3. Latvian hacker sentenced to 33 months in prison for scareware scheme
4. Canadian town bows to ransomware attack, will pay attackers
5. Russian hacker pleads guilty for role in massive botnet schemes
6. PowerShell Obfuscation Ups the Ante on Antivirus
7. New Python-based Ransomware Poses as Locky
8. Modular Malware Brings Stealthy Attacks to Former Soviet States
9. Uproar after Adobe winds down Magento rewards-based bug bounty program
10. Malware Campaign Targeting Jaxx Wallet Holders Shut Down
11. Osiris Banking Trojan Displays Modern Malware Innovation
12. September Patch Tuesday: Adobe patches seven critical vulnerabilities
13. Office VBA + AMSI: Parting the veil on malicious macros
14. A question of security: What is obfuscation and how does it work?
15. Feedify becomes latest victim of the Magecart malware campaign
16. Flaws Found in Fuji Electric Tool That Links Corporate PCs to ICS
17. Researchers implicate online card-skimming group in British Airways hack
18. Veeam Leaks 200 GB Customer Database, Goldmine for Phishers
19. September 2018 Security Notes address a total of 14 flaws in SAP products
20. Domestic Kitten spyware targets ISIS supporters
21. Six Critical Vulnerabilities in Adobe ColdFusion Get Patches
22. Microsoft purges 3,000 tech support scams hiding on TechNet
23. Faster Prod at the Expense of Security? 2018 ‘Under the Hoodie’ Reveals Gaps in Applications
24. Feedify Hacked with Magecart Information Stealing Script
25. Cybercriminals Go Phishing For Jaxx Wallet Users
26. Adobe patch update tackles six critical vulnerabilities in ColdFusion
27. Crooks Combine Phishing and Impersonation For Higher Success Rate
28. Microsoft Patch Tuesday updates for September 2018 also address recently disclosed Windows zero-day
29. September Patch Tuesday: Windows Fixes ALPC Elevation of Privilege, Remote Code Execution Vulnerabilities
30. Address Bar Spoofing Flaw Found in Edge, Safari
31. Beware! Unpatched Safari Browser Hack Lets Attackers Spoof URLs
32. Microsoft Released Security Updates with the Patch for Recent Windows Zero-day Flow

Crime

1. Russian hacker pleads guilty for role in massive botnet schemes
2. Osiris Banking Trojan Displays Modern Malware Innovation
3. Data breach — 380,000 British Airways transactions compromised | Avast
4. Researchers implicate online card-skimming group in British Airways hack
5. Veeam Leaks 200 GB Customer Database, Goldmine for Phishers
6. Feedify Hacked with Magecart Information Stealing Script
7. WTB: Apple Removes Top Security Tool for Secretly Stealing Data
8. British Airways reveals details about data breach

Politics

1. Nothing to report