APT report for 2018-10-11

TRANSNATIONAL / UNKNOWN

1. Magecart Card-Stealing Gang Hits 'Shopper Approved' Plug-In
2. Microsoft October Patch Tuesday fixed Win32k privilege vulnerability that used in targeted attacks
3. New Gallmaker APT group eschews malware in cyber espionage campaigns

CHINA

4. Cybersecurity Authorities Issue Alert About Publicly Available Hacking Tools
5. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
6. Threats in the Netherlands

INDIA

7. The Reality of Self-Driving Cars and the Regulatory Hurdles

NORTH KOREA

8. Reaper Group Uses New Malware to Deploy RAT
9. Threats in the Netherlands

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

10. Threats in the Netherlands

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

11. Exaramel Malware Links Industroyer ICS malware and NotPetya wiper
12. Researchers link tools used in NotPetya and Ukraine grid hacks
13. What would happen if an attack interrupted a country’s power supply?
14. Threats in the Netherlands

SERBIA

Nil

UKRAINE

15. Threats in the Netherlands

Platform report for 2018-10-11

WINDOWS

1. Exaramel Malware Links Industroyer ICS malware and NotPetya wiper
2. Cybersecurity Authorities Issue Alert About Publicly Available Hacking Tools
3. PoC Code Available for Microsoft Edge Remote Code Execution Bug
4. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
5. Researchers link tools used in NotPetya and Ukraine grid hacks
6. Fake Flash Updaters Push Cryptocurrency Miners
7. Adobe patches critical flaws in many of its software offerings
8. Qihoo 360’s precise analysis of ransomware for September
9. Microsoft October Patch Tuesday fixed Win32k privilege vulnerability that used in targeted attacks
10. New Gallmaker APT group eschews malware in cyber espionage campaigns
11. GPlayed Trojan - .Net playing with Google Market
12. Avast 2019: Extends Artificial Intelligence Technology to Block Advanced Phishing Attacks for Enhanced Consumer Security
13. JSRAT – Secret Command and Control Channel Backdoor to Control Victims Machine Using JavaScript

LINUX

14. Exaramel Malware Links Industroyer ICS malware and NotPetya wiper
15. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
16. Adobe patches critical flaws in many of its software offerings
17. JSRAT – Secret Command and Control Channel Backdoor to Control Victims Machine Using JavaScript

UNIX

Nil

ANDROID

18. GPlayed Android Trojan Can Wipe Your Device, Steal Data, Make Calls, Send SMS
19. Adaptable, All-in-One Android Trojan Shows the Future of Malware
20. Talos: Android trojan resembling Play Store installs sophisticated spyware
21. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
22. GPlayed trojan – .Net playing with Google Market
23. New Android Trojan Gplayed Adapts to Attacker's Needs
24. All WhatsApp Users Must Update: Zero Day Bug Found in WhatsApp
25. GPlayed Trojan - .Net playing with Google Market
26. A simple videocall could compromise your WhatsApp account

IOS

27. Talos: Android trojan resembling Play Store installs sophisticated spyware
28. All WhatsApp Users Must Update: Zero Day Bug Found in WhatsApp
29. A simple videocall could compromise your WhatsApp account

MACOS

30. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
31. Adobe patches critical flaws in many of its software offerings

Threat report for 2018-10-11

DATA BREACH & DATA LOSS

1. The BEC List: Helping Thwart Business Email Compromise through Collaboration
2. Personal data for coffee. What’s the risk? | Avast
3. The EU and the US have investigated on data breaches on the Google+
4. FitMetrix user data exposed via passwordless ElasticSearch server cluster
5. Apple has formed a partnership with lyrics database provider Genius
6. Defending Against Business Email Compromise Attacks
7. Heathrow Airport, the busiest airport in the United Kingdom, has been fined £120,000 (about $158,173) following a data breach caused
8. Palo Alto Networks Uncovers Flash Updater Cryptojacking Campaign
9. Gemalto reports that 4.6 billion record leaked in the first half of 2018
10. A new database with information on every shooting at a school in the last 50 years is now available publicly
11. New Gallmaker APT group eschews malware in cyber espionage campaigns
12. Ghostdns Attack Compromised Over 100K Routers
13. A simple videocall could compromise your WhatsApp account
14. Mingis on Tech: Data breaches and the rise of 'surveillance capitalism'
15. Mingis on Tech: Data breaches in a world of 'surveillance capitalism'

DENIAL-OF-SERVICE

Nil

MALVERTISING

Nil

PHISHING

16. California Bill Increases Default Password Security
17. Cofense Report Reveals 10 Percent of User-Reported Emails Across Key Industries are Malicious, Over Half Tied to Credential Phishing
18. Hackers launched #phishing attacks against @netflix users via malicious sites with TLS certificates. Learn how hackers mimic popular websites to
19. Avast 2019: Extends Artificial Intelligence Technology to Block Advanced Phishing Attacks for Enhanced Consumer Security
20. AVG 2019 now includes enhanced phishing threat detection

WEB DEFACEMENT

21. Italian Police Finally Identified 25-Year-old Italian Hacker who have Defaced NASA Websites

BOTNET

Nil

RANSOMWARE

22. Qihoo 360’s precise analysis of ransomware for September
23. Costly cryptojacking overtakes ransomware in the enterprise threat stakes

CRYPTOMINING & CRYPTOCURRENCIES

24. XMRig Cryptocurrency Miner Camouflages Itself as a Flash Updater
25. Cops Arrest Infamous SIM Swapper Who Stole Crypto Currency
26. Cops Arrest Infamous SIM Swapper Who Allegedly Stole $14 Million in Cryptocurrency
27. Cryptomining malware discovered masquerading as Flash updates
28. Fake Flash Updaters Push Cryptocurrency Miners
29. Hackers Abusing Legitimate Googlebot Services to Inject Cryptomining Malware
30. Researchers from @alienvault found a new #cryptocurrency mining malware -- dubbed #MassMiner -- that infects systems across the web. Learn
31. Crypto-mining malware poses as Flash updates
32. Dublin Information Sec: Protect your firm from 'Gold Rush' #cryptocurrency scammers: https://www.independent.ie/business/dublin-information-sec/dublin-information-sec-protect-your-firm-from-gold-rush-cryptocurrency-scammers-37286913.html … ( via @jimmychappell )

MALWARE

33. Exaramel Malware Links Industroyer ICS malware and NotPetya wiper
34. GPlayed Android Trojan Can Wipe Your Device, Steal Data, Make Calls, Send SMS
35. Hackers Exploit Drupalgeddon2 to Install Backdoor
36. Adaptable, All-in-One Android Trojan Shows the Future of Malware
37. Talos: Android trojan resembling Play Store installs sophisticated spyware
38. Most Malware Arrives Via Email
39. Fake Adobe Flash Updates Hide Malicious Crypto Miners
40. .@TrendMicro researchers discovered a malicious #ChromeExtension spreading #malware. Learn more with expert @lewisnic.
41. GPlayed trojan – .Net playing with Google Market
42. Cryptomining malware discovered masquerading as Flash updates
43. This cryptojacking mining malware pretends to be a Flash update
44. Hackers Abusing Legitimate Googlebot Services to Inject Cryptomining Malware
45. Reaper Group Uses New Malware to Deploy RAT
46. Cofense Report Reveals 10 Percent of User-Reported Emails Across Key Industries are Malicious, Over Half Tied to Credential Phishing
47. Exaramel Malware Reinforces Link Between Industroyer and NotPetya
48. New TeleBots backdoor: First evidence linking Industroyer to NotPetya
49. New TeleBots backdoor: First evidence linking Industroyer to NotPetya
50. New Android Trojan Gplayed Adapts to Attacker's Needs
51. Researchers from @alienvault found a new #cryptocurrency mining malware -- dubbed #MassMiner -- that infects systems across the web. Learn
52. Hackers launched #phishing attacks against @netflix users via malicious sites with TLS certificates. Learn how hackers mimic popular websites to
53. Crypto-mining malware poses as Flash updates
54. Who needs custom malware? 'Govt-backed' Gallmaker spy crew uses off-the-shelf wares
55. Worker perks flinger Sodexo pulls Engage website after malware smackdown
56. New Backdoor Ties NotPetya and Industroyer to TeleBots Group
57. .@FarsightSecInc's @paulvixie says his company's new research into domain name lifespans and causes of death shows the need for new
58. "Help! I have a #computer worm..oh wait is it a computer #virus?" These terms are often used interchangeably, but have
59. The attached file promptly infects Peter’s laptop with the RAT, remote access trojan. It only takes about an hour from
60. New Gallmaker APT group eschews malware in cyber espionage campaigns
61. GPlayed Trojan - .Net playing with Google Market
62. Canada-Based Restaurant Chain Hit with Malware Attack
63. Hackers Use Hijacked Email Address To Send Malware as a Reply to Existing Email Thread
64. JSRAT – Secret Command and Control Channel Backdoor to Control Victims Machine Using JavaScript
65. How to Defeat Malicious Everything as-a-Service

EXPLOIT

66. Hackers Exploit Drupalgeddon2 to Install Backdoor
67. PoC Code Available for Microsoft Edge Remote Code Execution Bug

VULNERABILITY

68. Multiple Vulnerabilities Dicovered In RouterOS That Affected MikroTik Routers
69. Senate seeks internal memo on Google+ vulnerability
70. Slow disclosure of Google+ flaw draws attention of senators
71. PoC Code Available for Microsoft Edge Remote Code Execution Bug
72. .@Google Firebase's lack of #DatabaseSecurity and inadequate #BackendDevelopment led to #DataLeaks and vulnerabilities, including HospitalGown. Learn more about this
73. Network Time Protocol Bugs Sting Juniper Operating System
74. Juniper Networks provides dozens of fix for vulnerabilities in Junos OS
75. Audit Finds No Critical Flaws in Firefox Update System
76. [SingCERT] Alert on 12 Critical Microsoft Vulnerabilities for October 2018 Patch Tuesday
77. A patched #MikroTik router vulnerability amps up severity rating as @TenableSecurity researchers find new potential exploits with more critical consequences.
78. Juniper fixes 30+ vulnerabilities in its routing, switching devices
79. Adobe patches critical flaws in many of its software offerings
80. Update now! Microsoft fixes 49 bugs, 12 are critical
81. All WhatsApp Users Must Update: Zero Day Bug Found in WhatsApp
82. VMware issues advisory for a DoS vulnerability
83. .@TenableSecurity found new exploits of an already patched #MikroTik router vulnerability that could enable hackers to launch #RemoteCode execution attacks.
84. Juniper Patches Serious Flaws in Junos OS
85. Microsoft October Patch Tuesday fixed Win32k privilege vulnerability that used in targeted attacks
86. Four Critical Flaws Patched In Adobe Digital Edition

Region brief for 2018-10-11

ASIA

1. Cybersecurity Authorities Issue Alert About Publicly Available Hacking Tools
2. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
3. What would happen if an attack interrupted a country’s power supply?
4. Reaper Group Uses New Malware to Deploy RAT
5. Threats in the Netherlands

OCEANIA

6. Cybersecurity Authorities Issue Alert About Publicly Available Hacking Tools
7. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide

NORTH AMERICA

8. Cybersecurity Authorities Issue Alert About Publicly Available Hacking Tools
9. The Reality of Self-Driving Cars and the Regulatory Hurdles
10. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
11. The EU and the US have investigated on data breaches on the Google+
12. Researchers link tools used in NotPetya and Ukraine grid hacks
13. What would happen if an attack interrupted a country’s power supply?
14. Cops Arrest Infamous SIM Swapper Who Allegedly Stole $14 Million in Cryptocurrency
15. Microsoft October Patch Tuesday fixed Win32k privilege vulnerability that used in targeted attacks
16. Threats in the Netherlands
17. Italian Police Finally Identified 25-Year-old Italian Hacker who have Defaced NASA Websites
18. Canada-Based Restaurant Chain Hit with Malware Attack

SOUTH AMERICA

19. Ghostdns Attack Compromised Over 100K Routers

EUROPE

20. Exaramel Malware Links Industroyer ICS malware and NotPetya wiper
21. Cybersecurity Authorities Issue Alert About Publicly Available Hacking Tools
22. Adaptable, All-in-One Android Trojan Shows the Future of Malware
23. Talos: Android trojan resembling Play Store installs sophisticated spyware
24. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
25. Researchers link tools used in NotPetya and Ukraine grid hacks
26. What would happen if an attack interrupted a country’s power supply?
27. Reaper Group Uses New Malware to Deploy RAT
28. Worker perks flinger Sodexo pulls Engage website after malware smackdown
29. Defending Against Business Email Compromise Attacks
30. Heathrow Airport, the busiest airport in the United Kingdom, has been fined £120,000 (about $158,173) following a data breach caused
31. Threats in the Netherlands
32. New Gallmaker APT group eschews malware in cyber espionage campaigns
33. Italian Police Finally Identified 25-Year-old Italian Hacker who have Defaced NASA Websites
34. GPlayed Trojan - .Net playing with Google Market

AFRICA

Nil

Sector brief for 2018-10-11

HEALTHCARE

1. What would happen if an attack interrupted a country’s power supply?

TRANSPORT

2. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
3. All WhatsApp Users Must Update: Zero Day Bug Found in WhatsApp
4. Heathrow Airport, the busiest airport in the United Kingdom, has been fined £120,000 (about $158,173) following a data breach caused
5. A simple videocall could compromise your WhatsApp account

BANKING & FINANCE

6. Exaramel Malware Links Industroyer ICS malware and NotPetya wiper
7. GPlayed Android Trojan Can Wipe Your Device, Steal Data, Make Calls, Send SMS
8. Cybersecurity Authorities Issue Alert About Publicly Available Hacking Tools
9. Talos: Android trojan resembling Play Store installs sophisticated spyware
10. Cops Arrest Infamous SIM Swapper Who Stole Crypto Currency
11. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
12. Hackers Abusing Legitimate Googlebot Services to Inject Cryptomining Malware
13. Magecart Card-Stealing Gang Hits 'Shopper Approved' Plug-In
14. Gemalto reports that 4.6 billion record leaked in the first half of 2018
15. Threats in the Netherlands
16. GPlayed Trojan - .Net playing with Google Market
17. Ghostdns Attack Compromised Over 100K Routers
18. Hackers Use Hijacked Email Address To Send Malware as a Reply to Existing Email Thread

INFORMATION & TELECOMMUNICATION

19. Personal data for coffee. What’s the risk? | Avast
20. Most Malware Arrives Via Email
21. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
22. All WhatsApp Users Must Update: Zero Day Bug Found in WhatsApp
23. Heathrow Airport, the busiest airport in the United Kingdom, has been fined £120,000 (about $158,173) following a data breach caused
24. A new database with information on every shooting at a school in the last 50 years is now available publicly
25. Dublin Information Sec: Protect your firm from 'Gold Rush' #cryptocurrency scammers: https://www.independent.ie/business/dublin-information-sec/dublin-information-sec-protect-your-firm-from-gold-rush-cryptocurrency-scammers-37286913.html … ( via @jimmychappell )
26. A simple videocall could compromise your WhatsApp account
27. Mingis on Tech: Data breaches and the rise of 'surveillance capitalism'
28. Mingis on Tech: Data breaches in a world of 'surveillance capitalism'

FOOD

Nil

WATER

Nil

ENERGY

29. Exaramel Malware Links Industroyer ICS malware and NotPetya wiper
30. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
31. Researchers link tools used in NotPetya and Ukraine grid hacks
32. What would happen if an attack interrupted a country’s power supply?
33. Hackers Use Hijacked Email Address To Send Malware as a Reply to Existing Email Thread

GOVERNMENT & PUBLIC SERVICE

Nil

Daily brief for 2018-10-11

ASIA

1. Cybersecurity Authorities Issue Alert About Publicly Available Hacking Tools
2. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
3. What would happen if an attack interrupted a country’s power supply?
4. Reaper Group Uses New Malware to Deploy RAT
5. Threats in the Netherlands

WORLD

6. Exaramel Malware Links Industroyer ICS malware and NotPetya wiper
7. Cybersecurity Authorities Issue Alert About Publicly Available Hacking Tools
8. The Reality of Self-Driving Cars and the Regulatory Hurdles
9. Adaptable, All-in-One Android Trojan Shows the Future of Malware
10. Talos: Android trojan resembling Play Store installs sophisticated spyware
11. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
12. The EU and the US have investigated on data breaches on the Google+
13. Researchers link tools used in NotPetya and Ukraine grid hacks
14. What would happen if an attack interrupted a country’s power supply?
15. Cops Arrest Infamous SIM Swapper Who Allegedly Stole $14 Million in Cryptocurrency
16. Reaper Group Uses New Malware to Deploy RAT
17. Worker perks flinger Sodexo pulls Engage website after malware smackdown
18. Defending Against Business Email Compromise Attacks
19. Heathrow Airport, the busiest airport in the United Kingdom, has been fined £120,000 (about $158,173) following a data breach caused
20. Microsoft October Patch Tuesday fixed Win32k privilege vulnerability that used in targeted attacks
21. Threats in the Netherlands
22. New Gallmaker APT group eschews malware in cyber espionage campaigns
23. Italian Police Finally Identified 25-Year-old Italian Hacker who have Defaced NASA Websites
24. GPlayed Trojan - .Net playing with Google Market
25. Ghostdns Attack Compromised Over 100K Routers
26. Canada-Based Restaurant Chain Hit with Malware Attack

ATTACKS

27. The BEC List: Helping Thwart Business Email Compromise through Collaboration
28. Personal data for coffee. What’s the risk? | Avast
29. California Bill Increases Default Password Security
30. The EU and the US have investigated on data breaches on the Google+
31. FitMetrix user data exposed via passwordless ElasticSearch server cluster
32. Apple has formed a partnership with lyrics database provider Genius
33. Cofense Report Reveals 10 Percent of User-Reported Emails Across Key Industries are Malicious, Over Half Tied to Credential Phishing
34. Hackers launched #phishing attacks against @netflix users via malicious sites with TLS certificates. Learn how hackers mimic popular websites to
35. Defending Against Business Email Compromise Attacks
36. Heathrow Airport, the busiest airport in the United Kingdom, has been fined £120,000 (about $158,173) following a data breach caused
37. Palo Alto Networks Uncovers Flash Updater Cryptojacking Campaign
38. Gemalto reports that 4.6 billion record leaked in the first half of 2018
39. A new database with information on every shooting at a school in the last 50 years is now available publicly
40. New Gallmaker APT group eschews malware in cyber espionage campaigns
41. Ghostdns Attack Compromised Over 100K Routers
42. A simple videocall could compromise your WhatsApp account
43. Mingis on Tech: Data breaches and the rise of 'surveillance capitalism'
44. Mingis on Tech: Data breaches in a world of 'surveillance capitalism'
45. Avast 2019: Extends Artificial Intelligence Technology to Block Advanced Phishing Attacks for Enhanced Consumer Security
46. AVG 2019 now includes enhanced phishing threat detection

THREATS

47. Exaramel Malware Links Industroyer ICS malware and NotPetya wiper
48. Multiple Vulnerabilities Dicovered In RouterOS That Affected MikroTik Routers
49. GPlayed Android Trojan Can Wipe Your Device, Steal Data, Make Calls, Send SMS
50. Senate seeks internal memo on Google+ vulnerability
51. XMRig Cryptocurrency Miner Camouflages Itself as a Flash Updater
52. Slow disclosure of Google+ flaw draws attention of senators
53. Hackers Exploit Drupalgeddon2 to Install Backdoor
54. PoC Code Available for Microsoft Edge Remote Code Execution Bug
55. Adaptable, All-in-One Android Trojan Shows the Future of Malware
56. Talos: Android trojan resembling Play Store installs sophisticated spyware
57. Most Malware Arrives Via Email
58. .@Google Firebase's lack of #DatabaseSecurity and inadequate #BackendDevelopment led to #DataLeaks and vulnerabilities, including HospitalGown. Learn more about this
59. Cops Arrest Infamous SIM Swapper Who Stole Crypto Currency
60. Network Time Protocol Bugs Sting Juniper Operating System
61. Juniper Networks provides dozens of fix for vulnerabilities in Junos OS
62. Audit Finds No Critical Flaws in Firefox Update System
63. Fake Adobe Flash Updates Hide Malicious Crypto Miners
64. [SingCERT] Alert on 12 Critical Microsoft Vulnerabilities for October 2018 Patch Tuesday
65. Cops Arrest Infamous SIM Swapper Who Allegedly Stole $14 Million in Cryptocurrency
66. .@TrendMicro researchers discovered a malicious #ChromeExtension spreading #malware. Learn more with expert @lewisnic.
67. GPlayed trojan – .Net playing with Google Market
68. Cryptomining malware discovered masquerading as Flash updates
69. This cryptojacking mining malware pretends to be a Flash update
70. Fake Flash Updaters Push Cryptocurrency Miners
71. Hackers Abusing Legitimate Googlebot Services to Inject Cryptomining Malware
72. Reaper Group Uses New Malware to Deploy RAT
73. Cofense Report Reveals 10 Percent of User-Reported Emails Across Key Industries are Malicious, Over Half Tied to Credential Phishing
74. Exaramel Malware Reinforces Link Between Industroyer and NotPetya
75. A patched #MikroTik router vulnerability amps up severity rating as @TenableSecurity researchers find new potential exploits with more critical consequences.
76. New TeleBots backdoor: First evidence linking Industroyer to NotPetya
77. New TeleBots backdoor: First evidence linking Industroyer to NotPetya
78. New Android Trojan Gplayed Adapts to Attacker's Needs
79. Juniper fixes 30+ vulnerabilities in its routing, switching devices
80. Researchers from @alienvault found a new #cryptocurrency mining malware -- dubbed #MassMiner -- that infects systems across the web. Learn
81. Adobe patches critical flaws in many of its software offerings
82. Update now! Microsoft fixes 49 bugs, 12 are critical
83. Hackers launched #phishing attacks against @netflix users via malicious sites with TLS certificates. Learn how hackers mimic popular websites to
84. Qihoo 360’s precise analysis of ransomware for September
85. Costly cryptojacking overtakes ransomware in the enterprise threat stakes
86. Crypto-mining malware poses as Flash updates
87. All WhatsApp Users Must Update: Zero Day Bug Found in WhatsApp
88. Who needs custom malware? 'Govt-backed' Gallmaker spy crew uses off-the-shelf wares
89. Worker perks flinger Sodexo pulls Engage website after malware smackdown
90. VMware issues advisory for a DoS vulnerability
91. .@TenableSecurity found new exploits of an already patched #MikroTik router vulnerability that could enable hackers to launch #RemoteCode execution attacks.
92. New Backdoor Ties NotPetya and Industroyer to TeleBots Group
93. Juniper Patches Serious Flaws in Junos OS
94. Microsoft October Patch Tuesday fixed Win32k privilege vulnerability that used in targeted attacks
95. .@FarsightSecInc's @paulvixie says his company's new research into domain name lifespans and causes of death shows the need for new
96. "Help! I have a #computer worm..oh wait is it a computer #virus?" These terms are often used interchangeably, but have
97. The attached file promptly infects Peter’s laptop with the RAT, remote access trojan. It only takes about an hour from
98. New Gallmaker APT group eschews malware in cyber espionage campaigns
99. GPlayed Trojan - .Net playing with Google Market
100. Dublin Information Sec: Protect your firm from 'Gold Rush' #cryptocurrency scammers: https://www.independent.ie/business/dublin-information-sec/dublin-information-sec-protect-your-firm-from-gold-rush-cryptocurrency-scammers-37286913.html … ( via @jimmychappell )
101. Canada-Based Restaurant Chain Hit with Malware Attack
102. Hackers Use Hijacked Email Address To Send Malware as a Reply to Existing Email Thread
103. JSRAT – Secret Command and Control Channel Backdoor to Control Victims Machine Using JavaScript
104. Four Critical Flaws Patched In Adobe Digital Edition
105. How to Defeat Malicious Everything as-a-Service

CRIME

106. The BEC List: Helping Thwart Business Email Compromise through Collaboration
107. PoC Code Available for Microsoft Edge Remote Code Execution Bug
108. The EU and the US have investigated on data breaches on the Google+
109. Cops Arrest Infamous SIM Swapper Who Allegedly Stole $14 Million in Cryptocurrency
110. Cofense Report Reveals 10 Percent of User-Reported Emails Across Key Industries are Malicious, Over Half Tied to Credential Phishing
111. Defending Against Business Email Compromise Attacks
112. Gemalto reports that 4.6 billion record leaked in the first half of 2018
113. Threats in the Netherlands

POLITICS

114. What would happen if an attack interrupted a country’s power supply?
115. Cops Arrest Infamous SIM Swapper Who Allegedly Stole $14 Million in Cryptocurrency
116. Who needs custom malware? 'Govt-backed' Gallmaker spy crew uses off-the-shelf wares
117. Threats in the Netherlands
118. New Gallmaker APT group eschews malware in cyber espionage campaigns
119. Italian Police Finally Identified 25-Year-old Italian Hacker who have Defaced NASA Websites
120. A simple videocall could compromise your WhatsApp account
121. Avast 2019: Extends Artificial Intelligence Technology to Block Advanced Phishing Attacks for Enhanced Consumer Security
122. JSRAT – Secret Command and Control Channel Backdoor to Control Victims Machine Using JavaScript

APT report for 2018-10-11

TRANSNATIONAL / UNKNOWN

1. Magecart Card-Stealing Gang Hits 'Shopper Approved' Plug-In
2. Microsoft October Patch Tuesday fixed Win32k privilege vulnerability that used in targeted attacks
3. New Gallmaker APT group eschews malware in cyber espionage campaigns

CHINA

4. Cybersecurity Authorities Issue Alert About Publicly Available Hacking Tools
5. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
6. Threats in the Netherlands

INDIA

7. The Reality of Self-Driving Cars and the Regulatory Hurdles

NORTH KOREA

8. Reaper Group Uses New Malware to Deploy RAT
9. Threats in the Netherlands

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

10. Threats in the Netherlands

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

11. Exaramel Malware Links Industroyer ICS malware and NotPetya wiper
12. Researchers link tools used in NotPetya and Ukraine grid hacks
13. What would happen if an attack interrupted a country’s power supply?
14. Threats in the Netherlands

SERBIA

Nil

UKRAINE

15. Threats in the Netherlands

Platform report for 2018-10-11

WINDOWS

1. Exaramel Malware Links Industroyer ICS malware and NotPetya wiper
2. Cybersecurity Authorities Issue Alert About Publicly Available Hacking Tools
3. PoC Code Available for Microsoft Edge Remote Code Execution Bug
4. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
5. Researchers link tools used in NotPetya and Ukraine grid hacks
6. Fake Flash Updaters Push Cryptocurrency Miners
7. Adobe patches critical flaws in many of its software offerings
8. Qihoo 360’s precise analysis of ransomware for September
9. Microsoft October Patch Tuesday fixed Win32k privilege vulnerability that used in targeted attacks
10. New Gallmaker APT group eschews malware in cyber espionage campaigns
11. GPlayed Trojan - .Net playing with Google Market
12. Avast 2019: Extends Artificial Intelligence Technology to Block Advanced Phishing Attacks for Enhanced Consumer Security
13. JSRAT – Secret Command and Control Channel Backdoor to Control Victims Machine Using JavaScript

LINUX

14. Exaramel Malware Links Industroyer ICS malware and NotPetya wiper
15. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
16. Adobe patches critical flaws in many of its software offerings
17. JSRAT – Secret Command and Control Channel Backdoor to Control Victims Machine Using JavaScript

UNIX

Nil

ANDROID

18. GPlayed Android Trojan Can Wipe Your Device, Steal Data, Make Calls, Send SMS
19. Adaptable, All-in-One Android Trojan Shows the Future of Malware
20. Talos: Android trojan resembling Play Store installs sophisticated spyware
21. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
22. GPlayed trojan – .Net playing with Google Market
23. New Android Trojan Gplayed Adapts to Attacker's Needs
24. All WhatsApp Users Must Update: Zero Day Bug Found in WhatsApp
25. GPlayed Trojan - .Net playing with Google Market
26. A simple videocall could compromise your WhatsApp account

IOS

27. Talos: Android trojan resembling Play Store installs sophisticated spyware
28. All WhatsApp Users Must Update: Zero Day Bug Found in WhatsApp
29. A simple videocall could compromise your WhatsApp account

MACOS

30. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
31. Adobe patches critical flaws in many of its software offerings

Threat report for 2018-10-11

DATA BREACH & DATA LOSS

1. The BEC List: Helping Thwart Business Email Compromise through Collaboration
2. Personal data for coffee. What’s the risk? | Avast
3. The EU and the US have investigated on data breaches on the Google+
4. FitMetrix user data exposed via passwordless ElasticSearch server cluster
5. Apple has formed a partnership with lyrics database provider Genius
6. Defending Against Business Email Compromise Attacks
7. Heathrow Airport, the busiest airport in the United Kingdom, has been fined £120,000 (about $158,173) following a data breach caused
8. Palo Alto Networks Uncovers Flash Updater Cryptojacking Campaign
9. Gemalto reports that 4.6 billion record leaked in the first half of 2018
10. A new database with information on every shooting at a school in the last 50 years is now available publicly
11. New Gallmaker APT group eschews malware in cyber espionage campaigns
12. Ghostdns Attack Compromised Over 100K Routers
13. A simple videocall could compromise your WhatsApp account
14. Mingis on Tech: Data breaches and the rise of 'surveillance capitalism'
15. Mingis on Tech: Data breaches in a world of 'surveillance capitalism'

DENIAL-OF-SERVICE

Nil

MALVERTISING

Nil

PHISHING

16. California Bill Increases Default Password Security
17. Cofense Report Reveals 10 Percent of User-Reported Emails Across Key Industries are Malicious, Over Half Tied to Credential Phishing
18. Hackers launched #phishing attacks against @netflix users via malicious sites with TLS certificates. Learn how hackers mimic popular websites to
19. Avast 2019: Extends Artificial Intelligence Technology to Block Advanced Phishing Attacks for Enhanced Consumer Security
20. AVG 2019 now includes enhanced phishing threat detection

WEB DEFACEMENT

21. Italian Police Finally Identified 25-Year-old Italian Hacker who have Defaced NASA Websites

BOTNET

Nil

RANSOMWARE

22. Qihoo 360’s precise analysis of ransomware for September
23. Costly cryptojacking overtakes ransomware in the enterprise threat stakes

CRYPTOMINING & CRYPTOCURRENCIES

24. XMRig Cryptocurrency Miner Camouflages Itself as a Flash Updater
25. Cops Arrest Infamous SIM Swapper Who Stole Crypto Currency
26. Cops Arrest Infamous SIM Swapper Who Allegedly Stole $14 Million in Cryptocurrency
27. Cryptomining malware discovered masquerading as Flash updates
28. Fake Flash Updaters Push Cryptocurrency Miners
29. Hackers Abusing Legitimate Googlebot Services to Inject Cryptomining Malware
30. Researchers from @alienvault found a new #cryptocurrency mining malware -- dubbed #MassMiner -- that infects systems across the web. Learn
31. Crypto-mining malware poses as Flash updates
32. Dublin Information Sec: Protect your firm from 'Gold Rush' #cryptocurrency scammers: https://www.independent.ie/business/dublin-information-sec/dublin-information-sec-protect-your-firm-from-gold-rush-cryptocurrency-scammers-37286913.html … ( via @jimmychappell )

MALWARE

33. Exaramel Malware Links Industroyer ICS malware and NotPetya wiper
34. GPlayed Android Trojan Can Wipe Your Device, Steal Data, Make Calls, Send SMS
35. Hackers Exploit Drupalgeddon2 to Install Backdoor
36. Adaptable, All-in-One Android Trojan Shows the Future of Malware
37. Talos: Android trojan resembling Play Store installs sophisticated spyware
38. Most Malware Arrives Via Email
39. Fake Adobe Flash Updates Hide Malicious Crypto Miners
40. .@TrendMicro researchers discovered a malicious #ChromeExtension spreading #malware. Learn more with expert @lewisnic.
41. GPlayed trojan – .Net playing with Google Market
42. Cryptomining malware discovered masquerading as Flash updates
43. This cryptojacking mining malware pretends to be a Flash update
44. Hackers Abusing Legitimate Googlebot Services to Inject Cryptomining Malware
45. Reaper Group Uses New Malware to Deploy RAT
46. Cofense Report Reveals 10 Percent of User-Reported Emails Across Key Industries are Malicious, Over Half Tied to Credential Phishing
47. Exaramel Malware Reinforces Link Between Industroyer and NotPetya
48. New TeleBots backdoor: First evidence linking Industroyer to NotPetya
49. New TeleBots backdoor: First evidence linking Industroyer to NotPetya
50. New Android Trojan Gplayed Adapts to Attacker's Needs
51. Researchers from @alienvault found a new #cryptocurrency mining malware -- dubbed #MassMiner -- that infects systems across the web. Learn
52. Hackers launched #phishing attacks against @netflix users via malicious sites with TLS certificates. Learn how hackers mimic popular websites to
53. Crypto-mining malware poses as Flash updates
54. Who needs custom malware? 'Govt-backed' Gallmaker spy crew uses off-the-shelf wares
55. Worker perks flinger Sodexo pulls Engage website after malware smackdown
56. New Backdoor Ties NotPetya and Industroyer to TeleBots Group
57. .@FarsightSecInc's @paulvixie says his company's new research into domain name lifespans and causes of death shows the need for new
58. "Help! I have a #computer worm..oh wait is it a computer #virus?" These terms are often used interchangeably, but have
59. The attached file promptly infects Peter’s laptop with the RAT, remote access trojan. It only takes about an hour from
60. New Gallmaker APT group eschews malware in cyber espionage campaigns
61. GPlayed Trojan - .Net playing with Google Market
62. Canada-Based Restaurant Chain Hit with Malware Attack
63. Hackers Use Hijacked Email Address To Send Malware as a Reply to Existing Email Thread
64. JSRAT – Secret Command and Control Channel Backdoor to Control Victims Machine Using JavaScript
65. How to Defeat Malicious Everything as-a-Service

EXPLOIT

66. Hackers Exploit Drupalgeddon2 to Install Backdoor
67. PoC Code Available for Microsoft Edge Remote Code Execution Bug

VULNERABILITY

68. Multiple Vulnerabilities Dicovered In RouterOS That Affected MikroTik Routers
69. Senate seeks internal memo on Google+ vulnerability
70. Slow disclosure of Google+ flaw draws attention of senators
71. PoC Code Available for Microsoft Edge Remote Code Execution Bug
72. .@Google Firebase's lack of #DatabaseSecurity and inadequate #BackendDevelopment led to #DataLeaks and vulnerabilities, including HospitalGown. Learn more about this
73. Network Time Protocol Bugs Sting Juniper Operating System
74. Juniper Networks provides dozens of fix for vulnerabilities in Junos OS
75. Audit Finds No Critical Flaws in Firefox Update System
76. [SingCERT] Alert on 12 Critical Microsoft Vulnerabilities for October 2018 Patch Tuesday
77. A patched #MikroTik router vulnerability amps up severity rating as @TenableSecurity researchers find new potential exploits with more critical consequences.
78. Juniper fixes 30+ vulnerabilities in its routing, switching devices
79. Adobe patches critical flaws in many of its software offerings
80. Update now! Microsoft fixes 49 bugs, 12 are critical
81. All WhatsApp Users Must Update: Zero Day Bug Found in WhatsApp
82. VMware issues advisory for a DoS vulnerability
83. .@TenableSecurity found new exploits of an already patched #MikroTik router vulnerability that could enable hackers to launch #RemoteCode execution attacks.
84. Juniper Patches Serious Flaws in Junos OS
85. Microsoft October Patch Tuesday fixed Win32k privilege vulnerability that used in targeted attacks
86. Four Critical Flaws Patched In Adobe Digital Edition

Region brief for 2018-10-11

ASIA

1. Cybersecurity Authorities Issue Alert About Publicly Available Hacking Tools
2. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
3. What would happen if an attack interrupted a country’s power supply?
4. Reaper Group Uses New Malware to Deploy RAT
5. Threats in the Netherlands

OCEANIA

6. Cybersecurity Authorities Issue Alert About Publicly Available Hacking Tools
7. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide

NORTH AMERICA

8. Cybersecurity Authorities Issue Alert About Publicly Available Hacking Tools
9. The Reality of Self-Driving Cars and the Regulatory Hurdles
10. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
11. The EU and the US have investigated on data breaches on the Google+
12. Researchers link tools used in NotPetya and Ukraine grid hacks
13. What would happen if an attack interrupted a country’s power supply?
14. Cops Arrest Infamous SIM Swapper Who Allegedly Stole $14 Million in Cryptocurrency
15. Microsoft October Patch Tuesday fixed Win32k privilege vulnerability that used in targeted attacks
16. Threats in the Netherlands
17. Italian Police Finally Identified 25-Year-old Italian Hacker who have Defaced NASA Websites
18. Canada-Based Restaurant Chain Hit with Malware Attack

SOUTH AMERICA

19. Ghostdns Attack Compromised Over 100K Routers

EUROPE

20. Exaramel Malware Links Industroyer ICS malware and NotPetya wiper
21. Cybersecurity Authorities Issue Alert About Publicly Available Hacking Tools
22. Adaptable, All-in-One Android Trojan Shows the Future of Malware
23. Talos: Android trojan resembling Play Store installs sophisticated spyware
24. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
25. Researchers link tools used in NotPetya and Ukraine grid hacks
26. What would happen if an attack interrupted a country’s power supply?
27. Reaper Group Uses New Malware to Deploy RAT
28. Worker perks flinger Sodexo pulls Engage website after malware smackdown
29. Defending Against Business Email Compromise Attacks
30. Heathrow Airport, the busiest airport in the United Kingdom, has been fined £120,000 (about $158,173) following a data breach caused
31. Threats in the Netherlands
32. New Gallmaker APT group eschews malware in cyber espionage campaigns
33. Italian Police Finally Identified 25-Year-old Italian Hacker who have Defaced NASA Websites
34. GPlayed Trojan - .Net playing with Google Market

AFRICA

Nil