Threat report for 2018-09-22

DATA BREACH

1. Adams County clerk resigns over role in data breach
2. Twitter API Bug Might Have Exposed Your Direct Messages To The Wrong Developers
3. Pegasus spyware spotted in 45 countries, many with questionable human rights records
4. Hackers Compromised Japanese Zaif Exchange and Stole Cryptocurrencies worth $60 Million
5. It’s not enough to cast a wide cybersecurity net and hope you catch the adversaries trying to compromise your data. Learn how using the MITRE ATT&CK Matrix with CIS Controls and Tripwire mapping can secure your business, today!   #security #
6. Google publicly disclosed the Microsoft Jet database engine zero-day RCE vulnerability
7. MariaDB announces acquisition of distributed database Clustrix
8. Twitter: Don't panic, but we may have leaked your DMs to rando devs
9. Business Email Compromises Fuel Procurement Fraud
10. Twitter API Flaw Exposed Users Messages to Wrong Developers For Over a Year
11. Thousands of compromised websites on sale in black market
12. Data theft in US State Department email system
13. Thousands of Compromised WordPress Sites Redirect to Tech Support Scams

DENIAL-OF-SERVICE

14. The makers of the Mirai IoT-hijacking botnet are sentenced   #extortion
15. Researchers Discovered New Virobot Ransomware with Botnet Capabilities
16. Learn how Russian #BOTs weaponized Twitter to influence and disinform people in the @SafeGuard_Cyber #whitepaper.
17. Defending Against Next-Generation DDoS Attacks
18. Ngrok Mining Botnet
19. Hackers Spreading New Virobot Ransomware with Powerful Botnet & Keylogging Capabilities

MALVERTISING

Nothing to report

PHISHING

20. MagBO Black Market Hacking Site, Caught Selling 3,000 Website Login Credentials
21. The Common Factors in Phishing

WEB DEFACEMENT

Nothing to report

MALWARE

22. Report: Cryptomining malware detections up more than 459 percent since 2017
23. Pegasus spyware spotted in 45 countries, many with questionable human rights records
24. Romanian Citizen Admits Guilt in Police Department Ransomware Attack   #digitalattack
25. Operator of Scan4You Malware-Scanning sentenced to 14 Years in prison
26. Researchers Discovered New Virobot Ransomware with Botnet Capabilities
27. DanaBot banking Trojan evolves and now targets European countries
28. Scottish brewery recovers from ransomware attack
29. Scotland's Arran Brewery Slammed by Dharma Bip Ransomware
30. Hackers Spreading New Virobot Ransomware with Powerful Botnet & Keylogging Capabilities
31. Operator of VirusTotal Like Malware-Scanning Service Jailed for 14 Years
32. Romanian Citizen Admits Guilt in Police Department Ransomware Attack   #malware
33. New Ransomware Virus?

EXPLOIT

34. Learn how Russian #BOTs weaponized Twitter to influence and disinform people in the @SafeGuard_Cyber #whitepaper.

VULNERABILITY

35. Twitter API Bug Might Have Exposed Your Direct Messages To The Wrong Developers
36. Bitcoin Core Bug Could Crash The Entire Bitcoin Network
37. The makers of the Mirai IoT-hijacking botnet are sentenced   #extortion
38. Bug in Apple Store Allowed more than 500 iPhones For Just 0.03 USD
39. Researchers Publicly Disclosed a Unpatched Zero-Day Flaw Affecting All Version of Windows
40. Is Your Security Dashboard Ready for the Cloud?   #vulnerabilities
41. Google publicly disclosed the Microsoft Jet database engine zero-day RCE vulnerability
42. Google’s Vulnerability Scanning for Their Cloud Infrastructure in Beta
43. EE’s 4G WiFi Modem Privilege Escalation Vulnerability Allows Let Attacker Bypass & Gain Windows Access
44. Twitter API Flaw Exposed Users Messages to Wrong Developers For Over a Year
45. Is Your Security Dashboard Ready for the Cloud?   #DevOps

Region brief for 2018-09-22

ASIA

1. Bug in Apple Store Allowed more than 500 iPhones For Just 0.03 USD
2. Hackers Compromised Japanese Zaif Exchange and Stole Cryptocurrencies worth $60 Million

OCEANIA

Nothing to report

NORTH AMERICA

3. Researchers Discovered New Virobot Ransomware with Botnet Capabilities
4. Hackers Spreading New Virobot Ransomware with Powerful Botnet & Keylogging Capabilities
5. Data theft in US State Department email system

SOUTH AMERICA

Nothing to report

EUROPE

6. MagBO Black Market Hacking Site, Caught Selling 3,000 Website Login Credentials
7. Romanian Citizen Admits Guilt in Police Department Ransomware Attack   #digitalattack
8. Operator of Scan4You Malware-Scanning sentenced to 14 Years in prison
9. DanaBot banking Trojan evolves and now targets European countries
10. Learn how Russian #BOTs weaponized Twitter to influence and disinform people in the @SafeGuard_Cyber #whitepaper.
11. EE’s 4G WiFi Modem Privilege Escalation Vulnerability Allows Let Attacker Bypass & Gain Windows Access
12. Operator of VirusTotal Like Malware-Scanning Service Jailed for 14 Years
13. Thousands of compromised websites on sale in black market
14. Romanian Citizen Admits Guilt in Police Department Ransomware Attack   #malware

AFRICA

15. DanaBot banking Trojan evolves and now targets European countries

Sector brief for 2018-09-22

HEALTHCARE

Nothing to report

TRANSPORT

Nothing to report

BANKING & FINANCE

1. MagBO Black Market Hacking Site, Caught Selling 3,000 Website Login Credentials
2. Bitcoin Core Bug Could Crash The Entire Bitcoin Network
3. Bug in Apple Store Allowed more than 500 iPhones For Just 0.03 USD
4. DanaBot banking Trojan evolves and now targets European countries

INFORMATION & TELECOMMUNICATION

5. EE’s 4G WiFi Modem Privilege Escalation Vulnerability Allows Let Attacker Bypass & Gain Windows Access

FOOD

Nothing to report

WATER

Nothing to report

ENERGY

Nothing to report

GOVERNMENT & PUBLIC SERVICE

Nothing to report

Daily brief for 2018-09-22

ASIA

1. Bug in Apple Store Allowed more than 500 iPhones For Just 0.03 USD
2. Hackers Compromised Japanese Zaif Exchange and Stole Cryptocurrencies worth $60 Million

WORLD

3. MagBO Black Market Hacking Site, Caught Selling 3,000 Website Login Credentials
4. Romanian Citizen Admits Guilt in Police Department Ransomware Attack   #digitalattack
5. Operator of Scan4You Malware-Scanning sentenced to 14 Years in prison
6. Researchers Discovered New Virobot Ransomware with Botnet Capabilities
7. DanaBot banking Trojan evolves and now targets European countries
8. Learn how Russian #BOTs weaponized Twitter to influence and disinform people in the @SafeGuard_Cyber #whitepaper.
9. Hackers Spreading New Virobot Ransomware with Powerful Botnet & Keylogging Capabilities
10. EE’s 4G WiFi Modem Privilege Escalation Vulnerability Allows Let Attacker Bypass & Gain Windows Access
11. Operator of VirusTotal Like Malware-Scanning Service Jailed for 14 Years
12. Thousands of compromised websites on sale in black market
13. Data theft in US State Department email system
14. Romanian Citizen Admits Guilt in Police Department Ransomware Attack   #malware

ATTACKS

15. Adams County clerk resigns over role in data breach
16. Twitter API Bug Might Have Exposed Your Direct Messages To The Wrong Developers
17. Pegasus spyware spotted in 45 countries, many with questionable human rights records
18. MagBO Black Market Hacking Site, Caught Selling 3,000 Website Login Credentials
19. The Common Factors in Phishing
20. The makers of the Mirai IoT-hijacking botnet are sentenced   #extortion
21. Researchers Discovered New Virobot Ransomware with Botnet Capabilities
22. Hackers Compromised Japanese Zaif Exchange and Stole Cryptocurrencies worth $60 Million
23. It’s not enough to cast a wide cybersecurity net and hope you catch the adversaries trying to compromise your data. Learn how using the MITRE ATT&CK Matrix with CIS Controls and Tripwire mapping can secure your business, today!   #security #
24. Learn how Russian #BOTs weaponized Twitter to influence and disinform people in the @SafeGuard_Cyber #whitepaper.
25. Google publicly disclosed the Microsoft Jet database engine zero-day RCE vulnerability
26. MariaDB announces acquisition of distributed database Clustrix
27. Twitter: Don't panic, but we may have leaked your DMs to rando devs
28. Business Email Compromises Fuel Procurement Fraud
29. Defending Against Next-Generation DDoS Attacks
30. Ngrok Mining Botnet
31. Hackers Spreading New Virobot Ransomware with Powerful Botnet & Keylogging Capabilities
32. Twitter API Flaw Exposed Users Messages to Wrong Developers For Over a Year
33. Thousands of compromised websites on sale in black market
34. Data theft in US State Department email system
35. Thousands of Compromised WordPress Sites Redirect to Tech Support Scams

THREATS

36. Report: Cryptomining malware detections up more than 459 percent since 2017
37. Twitter API Bug Might Have Exposed Your Direct Messages To The Wrong Developers
38. Pegasus spyware spotted in 45 countries, many with questionable human rights records
39. Bitcoin Core Bug Could Crash The Entire Bitcoin Network
40. Romanian Citizen Admits Guilt in Police Department Ransomware Attack   #digitalattack
41. Operator of Scan4You Malware-Scanning sentenced to 14 Years in prison
42. The makers of the Mirai IoT-hijacking botnet are sentenced   #extortion
43. Researchers Discovered New Virobot Ransomware with Botnet Capabilities
44. Bug in Apple Store Allowed more than 500 iPhones For Just 0.03 USD
45. Researchers Publicly Disclosed a Unpatched Zero-Day Flaw Affecting All Version of Windows
46. DanaBot banking Trojan evolves and now targets European countries
47. Learn how Russian #BOTs weaponized Twitter to influence and disinform people in the @SafeGuard_Cyber #whitepaper.
48. Is Your Security Dashboard Ready for the Cloud?   #vulnerabilities
49. Google publicly disclosed the Microsoft Jet database engine zero-day RCE vulnerability
50. Scottish brewery recovers from ransomware attack
51. Scotland's Arran Brewery Slammed by Dharma Bip Ransomware
52. Google’s Vulnerability Scanning for Their Cloud Infrastructure in Beta
53. Hackers Spreading New Virobot Ransomware with Powerful Botnet & Keylogging Capabilities
54. EE’s 4G WiFi Modem Privilege Escalation Vulnerability Allows Let Attacker Bypass & Gain Windows Access
55. Operator of VirusTotal Like Malware-Scanning Service Jailed for 14 Years
56. Twitter API Flaw Exposed Users Messages to Wrong Developers For Over a Year
57. Romanian Citizen Admits Guilt in Police Department Ransomware Attack   #malware
58. New Ransomware Virus?
59. Is Your Security Dashboard Ready for the Cloud?   #DevOps

CRIME

60. Report: Cryptomining malware detections up more than 459 percent since 2017
61. MagBO Black Market Hacking Site, Caught Selling 3,000 Website Login Credentials
62. Bitcoin Core Bug Could Crash The Entire Bitcoin Network
63. Operator of Scan4You Malware-Scanning sentenced to 14 Years in prison
64. The makers of the Mirai IoT-hijacking botnet are sentenced   #extortion
65. Bug in Apple Store Allowed more than 500 iPhones For Just 0.03 USD
66. DanaBot banking Trojan evolves and now targets European countries
67. Hackers Compromised Japanese Zaif Exchange and Stole Cryptocurrencies worth $60 Million
68. Scotland's Arran Brewery Slammed by Dharma Bip Ransomware
69. Operator of VirusTotal Like Malware-Scanning Service Jailed for 14 Years
70. Data theft in US State Department email system

POLITICS

Nothing to report