APT report for 2018-09-29

TRANSNATIONAL / UNKNOWN

Nothing to report

CHINA

1. Long Term Security Attitudes and Practices Study
2. CLOUDFLARE announces a domain name registration service, Cloudflare Registrar

INDIA

Nothing to report

NORTH KOREA

Nothing to report

PAKISTAN

Nothing to report

VIETNAM

Nothing to report

IRAN

Nothing to report

LEBANON

Nothing to report

PALESTINE

Nothing to report

SAUDI ARABIA

Nothing to report

UNITED ARAB EMIRATES

Nothing to report

RUSSIA

3. Seven additional modules make Fancy Bear’s VPNFilter malware even more versatile

UKRAINE

Nothing to report

Platform report for 2018-09-29

WINDOWS

1. Trustwave expert found 2 credential leak issues in Windows PureVPN Client

LINUX

2. Linux Kernel Bug Surfaces, Allowing Root Access
3. Google Project Zero Disclosed PoC & Exploit for Serious Linux Kernel Vulnerability

UNIX

Nothing to report

ANDROID

4. Hide and seek Iot botnet updates include new Android ADB exploit
5. Android password managers not as secure as desktop counterparts
6. Beware!! New Android Malware That Can Read Your WhatsApp Messages & Take Screen Shots

IOS

Nothing to report

MACOS

Nothing to report

Threat report for 2018-09-29

DATA BREACH

1. Telegram fixes IP address leak in desktop client
2. UK Conservative Party conference app leaks MPs' personal details
3. Telegram Leaks IP Addresses by Default When Initiating Calls
4. Trustwave expert found 2 credential leak issues in Windows PureVPN Client
5. Facebook Discloses Data Breach, 50 Million Accounts Affected
6. Facebook data breach: 50 million users affected
7. The @UN accidentally exposed credentials on public @trello boards. Plus, #Uber is set to pay $148 million settlement following its
8. #Facebook Discloses Data Breach, 50 Million User Accounts Affected https://tripwire.me/2NQrPfW via@ritzsanti

DENIAL-OF-SERVICE

9. Torii botnet, probably the most sophisticated IoT botnet of ever
10. Torii malware could be gateway to more sophisticated IoT botnet attacks
11. Hide and seek Iot botnet updates include new Android ADB exploit

MALVERTISING

Nothing to report

PHISHING

12. Chegg Forces Password Reset On 40 Million Users
13. Can the @Microsoft Authenticator really replace passwords in the enterprise? Microsoft says the answer is yes and proclaimed the password
14. Android password managers not as secure as desktop counterparts

WEB DEFACEMENT

Nothing to report

MALWARE

15. Telegram fixes IP address leak in desktop client
16. Telegram Leaks IP Addresses by Default When Initiating Calls
17. Malicious Hackers Increasing the Exploitation of RDP Protocol to Hack the Targeted Victims
18. Defeating Polymorphic Malware with Cognitive Intelligence. Part 2: Command Line Argument Clustering
19. Pirated Game of Thrones episodes most popular TV bait for malware
20. Seven additional modules make Fancy Bear’s VPNFilter malware even more versatile
21. Can monitoring help defend against #Sanny #malware update?
22. Torii malware could be gateway to more sophisticated IoT botnet attacks
23. VirusTotal slips on biz suit, says Google's daddy will help the search for nasties
24. Ransomware Crypto-Locks Port of San Diego IT Systems
25. Port of San Diego Suffers Ransomware Attack
26. Beware!! New Android Malware That Can Read Your WhatsApp Messages & Take Screen Shots
27. Malware in the Cloud: What You Need to Know
28. Pirated episodes of Game of Thrones, the most popular malware bait
29. CLOUDFLARE announces a domain name registration service, Cloudflare Registrar
30. Port of San Diego Suffers Ransomware Attack
31. Alphabet's @chroniclesec unveiled #VirusTotal Enterprise, a new version of the file scanning service designed specifically for enterprise customers. By @RobWright22

EXPLOIT

32. Malicious Hackers Increasing the Exploitation of RDP Protocol to Hack the Targeted Victims
33. Hide and seek Iot botnet updates include new Android ADB exploit
34. Google Project Zero Disclosed PoC & Exploit for Serious Linux Kernel Vulnerability
35. Hackers Exploited Facebook Zero-Day Flaw & Stolen 50 Million Accounts Access Tokens
36. Tripwire Patch Priority Index for September 2018

VULNERABILITY

37. Linux Kernel Bug Surfaces, Allowing Root Access
38. Google Project Zero Disclosed PoC & Exploit for Serious Linux Kernel Vulnerability
39. How a vulnerability in #strongSwan caused a buffer underflow
40. Vulnerability discovered in WiFi routers
41. Hackers Exploited Facebook Zero-Day Flaw & Stolen 50 Million Accounts Access Tokens

Region brief for 2018-09-29

ASIA

1. India’s Banking Cybersecurity Woes

OCEANIA

Nothing to report

NORTH AMERICA

2. Long Term Security Attitudes and Practices Study
3. CLOUDFLARE announces a domain name registration service, Cloudflare Registrar

SOUTH AMERICA

Nothing to report

EUROPE

4. Torii botnet, probably the most sophisticated IoT botnet of ever
5. UK Conservative Party conference app leaks MPs' personal details

AFRICA

Nothing to report

Sector brief for 2018-09-29

HEALTHCARE

Nothing to report

TRANSPORT

1. India’s Banking Cybersecurity Woes
2. Ransomware Crypto-Locks Port of San Diego IT Systems
3. Port of San Diego Suffers Ransomware Attack
4. Port of San Diego Suffers Ransomware Attack

BANKING & FINANCE

5. India’s Banking Cybersecurity Woes
6. Vulnerability discovered in WiFi routers

INFORMATION & TELECOMMUNICATION

Nothing to report

FOOD

Nothing to report

WATER

Nothing to report

ENERGY

Nothing to report

GOVERNMENT & PUBLIC SERVICE

Nothing to report

Daily brief for 2018-09-29

ASIA

1. India’s Banking Cybersecurity Woes

WORLD

2. Long Term Security Attitudes and Practices Study
3. Torii botnet, probably the most sophisticated IoT botnet of ever
4. UK Conservative Party conference app leaks MPs' personal details
5. CLOUDFLARE announces a domain name registration service, Cloudflare Registrar

ATTACKS

6. Telegram fixes IP address leak in desktop client
7. Torii botnet, probably the most sophisticated IoT botnet of ever
8. UK Conservative Party conference app leaks MPs' personal details
9. Chegg Forces Password Reset On 40 Million Users
10. Telegram Leaks IP Addresses by Default When Initiating Calls
11. Can the @Microsoft Authenticator really replace passwords in the enterprise? Microsoft says the answer is yes and proclaimed the password
12. Trustwave expert found 2 credential leak issues in Windows PureVPN Client
13. Torii malware could be gateway to more sophisticated IoT botnet attacks
14. Hide and seek Iot botnet updates include new Android ADB exploit
15. Android password managers not as secure as desktop counterparts
16. Facebook Discloses Data Breach, 50 Million Accounts Affected
17. Facebook data breach: 50 million users affected
18. The @UN accidentally exposed credentials on public @trello boards. Plus, #Uber is set to pay $148 million settlement following its
19. #Facebook Discloses Data Breach, 50 Million User Accounts Affected https://tripwire.me/2NQrPfW via@ritzsanti

THREATS

20. Telegram fixes IP address leak in desktop client
21. Linux Kernel Bug Surfaces, Allowing Root Access
22. Telegram Leaks IP Addresses by Default When Initiating Calls
23. Malicious Hackers Increasing the Exploitation of RDP Protocol to Hack the Targeted Victims
24. Defeating Polymorphic Malware with Cognitive Intelligence. Part 2: Command Line Argument Clustering
25. Pirated Game of Thrones episodes most popular TV bait for malware
26. Seven additional modules make Fancy Bear’s VPNFilter malware even more versatile
27. Can monitoring help defend against #Sanny #malware update?
28. Torii malware could be gateway to more sophisticated IoT botnet attacks
29. VirusTotal slips on biz suit, says Google's daddy will help the search for nasties
30. Ransomware Crypto-Locks Port of San Diego IT Systems
31. Hide and seek Iot botnet updates include new Android ADB exploit
32. Google Project Zero Disclosed PoC & Exploit for Serious Linux Kernel Vulnerability
33. Port of San Diego Suffers Ransomware Attack
34. How a vulnerability in #strongSwan caused a buffer underflow
35. Beware!! New Android Malware That Can Read Your WhatsApp Messages & Take Screen Shots
36. Malware in the Cloud: What You Need to Know
37. Vulnerability discovered in WiFi routers
38. Pirated episodes of Game of Thrones, the most popular malware bait
39. CLOUDFLARE announces a domain name registration service, Cloudflare Registrar
40. Hackers Exploited Facebook Zero-Day Flaw & Stolen 50 Million Accounts Access Tokens
41. Tripwire Patch Priority Index for September 2018
42. Port of San Diego Suffers Ransomware Attack
43. Alphabet's @chroniclesec unveiled #VirusTotal Enterprise, a new version of the file scanning service designed specifically for enterprise customers. By @RobWright22

CRIME

44. India’s Banking Cybersecurity Woes
45. Ransomware Crypto-Locks Port of San Diego IT Systems
46. Vulnerability discovered in WiFi routers

POLITICS

Nothing to report