APT report for 2018-10-29

TRANSNATIONAL / UNKNOWN

1. Here's how to defend your enterprise from Magecart
2. Breaking News: Securonix Threat Research: British Airways Breach
3. Magecart Exploits Zero Day Vulnerabilities
4. 'Narwhal Spider' group's spam campaign targets Japanese recipients with URLZone malware

CHINA

5. Understanding mass data fragmentation

INDIA

Nil

NORTH KOREA

Nil

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

Nil

SERBIA

Nil

UKRAINE

6. Cobalt Gang targets banks and financial service providers by sneaking PDFs past staff

Platform report for 2018-10-29

WINDOWS

1. SandboxEscaper expert is back and disclosed a new Windows Zero-Day
2. Remote Denial of Service Vulnerability Patched in Squid Proxy Cache Server
3. Downloading Google Chrome via Microsoft Edge Endangered by Malware
4. X.Org Flaw Exposes Unix-Like OSes to Attacks
5. Windows 10 UWP Bug Could Give Malicious Devs Access To All Your Files
6. If your company uses Windows 10, watch out: there are new vulnerabilities about
7. Advanced Malware Protection Affected by Bug That Can Inhibit Intrusion Detection
8. Windows 10 UWP bug could give malicious devs access to all your files
9. Windows 10 Bug Allowed UWP Apps Full Access to File System
10. sLoad and Ramnit Campaign Against UK and Italy
11. Malware That Accompanies Google Chrome Download Detected
12. Same Old yet Brand-new: New File Types Emerge in Malware Spam Attachments
13. Cisco patched a command injection vulnerability in Webex Meetings
14. Microsoft Bing Delivered Dangerous Malware When You Try to Download Google Chrome

LINUX

15. Remote Denial of Service Vulnerability Patched in Squid Proxy Cache Server
16. X.Org Flaw Allows Privilege Escalation in Linux Systems
17. X.Org Flaw Exposes Unix-Like OSes to Attacks
18. Serious Vulnerability Discovered In X.Org Server Affects Major Linux and BSD Variants
19. Systemd flaw could cause the crash or hijack of vulnerable Linux machines
20. Cisco patched a command injection vulnerability in Webex Meetings

UNIX

21. X.org Bug Bites OpenBSD And Other Big Operating Systems

ANDROID

22. Beware! Downloader Malware Disguised as Game Apps Found On Google Play with More Than 51,100 Installations

IOS

23. Leaked: iOS 12.1 will be released on October 30th

MACOS

24. Mac CryptoCurrency Price Tracker Caught Installing Backdoors
25. Mac cryptocurrency ticker app installs backdoors
26. Remote Denial of Service Vulnerability Patched in Squid Proxy Cache Server

Threat report for 2018-10-29

DATA BREACH & DATA LOSS

1. Girl Scouts Issues Data Breach Warning to 2,800 Members
2. Cathay Pacific Suffers World’s Largest Airline Data Breach
3. sLoad and Ramnit Campaign Against UK and Italy
4. Secret Service Confirms Focus on Email Compromise Cybercrimes Worth $12 Billion
5. Girl Scouts Alerted to Possible Data Breach
6. 'Narwhal Spider' group's spam campaign targets Japanese recipients with URLZone malware
7. DDoS and ransomware tools for starter and experienced cybercriminals exposed
8. Biggest Manufacturing Data Breaches of the 21st Century
9. The Worst Data Breach till Now 2018, and What It Means
10. Crooks continue to abuse exposed Docker APIs for Cryptojacking
11. IoT users uncertain if personal data is shared across multiple devices
12. Hackers Breach System of Healthcare.Gov Exposing Personal Data of 75,000 Users
13. Hackers steal personal data of up to 9.4 million Cathay Pacific passengers
14. Leaked: iOS 12.1 will be released on October 30th
15. 33,000 Accounting Inbox Credentials Exposed Online: BEC Made Easy | Read the details here:

DENIAL-OF-SERVICE

16. Remote Denial of Service Vulnerability Patched in Squid Proxy Cache Server
17. Man Ordered to Pay $8.6 Million for Launching DDoS Attacks against Rutgers University
18. Mirai Author Gets House Arrest for DDoS Attacks on University
19. DDoS and ransomware tools for starter and experienced cybercriminals exposed

MALVERTISING

Nil

PHISHING

20. Phishing spikes as private health continues to be most breached sector in Australia
21. Nation-State Phishing: A Country-Sized Catch
22. A new phishing report reveals Microsoft, Paypal, and Netflix are among the top brands impersonated by phishing attacks. Attackers tend to
23. This is getting worse and worse. And is going to normalize and lead to much more successful phishing through SMS
24. League of Legends Gamers Targeted by Phishing Scam | Avast
25. What can we do to tackle today’s phishing epidemic?
26. Das Geschäft mit gestohlenen Login-Daten von Privatnutzern und Unternehmensanwendern boomt. US-Journalist Brian Krebs beziffert die "Ausbeute" bei mehreren 100.000 US-Dollar
27. 19% still save their password on a piece of paper
28. Vulnerability In Microsoft Word Online Video Feature Allows for Phishing

WEB DEFACEMENT

29. Future Investment Initiative Conference Website, Defaced, Now Restored

BOTNET

30. Mirai Botnet Operator Ordered to Pay $8.6 Million
31. ‘DemonBot' Botnet Targets Hadoop Servers
32. Rise of the Bots

RANSOMWARE

33. The Ransomware Attack on a North Carolina Water Utility May Not Have Been What it Seemed
34. Ransomware and the enterprise: A new white paper
35. DDoS and ransomware tools for starter and experienced cybercriminals exposed
36. #Antivirus SW alone can't stop new #malware or #ransomware. by @MariaKorolov -
37. Have you ever wondered why #ransomware attacks happen on the Friday before a long weekend? We've teamed up with @SentinelOne

CRYPTOMINING & CRYPTOCURRENCIES

38. Mac CryptoCurrency Price Tracker Caught Installing Backdoors
39. Mac cryptocurrency ticker app installs backdoors
40. Call of Duty players caught up in cryptocurrency theft racket
41. Cyber-criminals exploit misconfigured container to deliver cryptominer
42. Crooks continue to abuse exposed Docker APIs for Cryptojacking
43. Revolutionary Blockchain 3.0 Under CSE Platform

MALWARE

44. Videos and MS Office documents - ingredients for a malware attack
45. Word documents seemingly carrying videos can deliver malicious code instead
46. Downloading Google Chrome via Microsoft Edge Endangered by Malware
47. Windows 10 UWP Bug Could Give Malicious Devs Access To All Your Files
48. Advanced Malware Protection Affected by Bug That Can Inhibit Intrusion Detection
49. Windows 10 UWP bug could give malicious devs access to all your files
50. Malware That Accompanies Google Chrome Download Detected
51. 'Narwhal Spider' group's spam campaign targets Japanese recipients with URLZone malware
52. Vulnerability found in Sophos anti-malware product
53. Privacy concerns cooling #InternetOfThings adoption in US & Europe, with consumers concerned about #DataLeaks, malware and product security (via @FSecure)
54. Same Old yet Brand-new: New File Types Emerge in Malware Spam Attachments
55. #Antivirus SW alone can't stop new #malware or #ransomware. by @MariaKorolov -
56. Beware! Downloader Malware Disguised as Game Apps Found On Google Play with More Than 51,100 Installations
57. Microsoft Bing Delivered Dangerous Malware When You Try to Download Google Chrome

EXPLOIT

58. Researchers exploit Microsoft Word through embedded video
59. Cyber-criminals exploit misconfigured container to deliver cryptominer
60. Our adventures at @thezdi Pwn2Own Desktop 2018 for Apple Safari exploit whitepaper (https://labs.mwrinfosecurity.com/assets/BlogFiles/apple-safari-pwn2own-vuln-write-up-2018-10-29-final.pdf …) and @t2.fi slides release (https://labs.mwrinfosecurity.com/assets/BlogFiles/mwri-t2-big-game-fuzzing-pwn2own-safari-final.pdf …)

VULNERABILITY

61. SandboxEscaper expert is back and disclosed a new Windows Zero-Day
62. IoT Flaw Allows Hijacking of Connected Construction Cranes
63. Remote Denial of Service Vulnerability Patched in Squid Proxy Cache Server
64. X.Org Flaw Allows Privilege Escalation in Linux Systems
65. X.Org Flaw Exposes Unix-Like OSes to Attacks
66. Windows 10 UWP Bug Could Give Malicious Devs Access To All Your Files
67. X.org Bug Bites OpenBSD And Other Big Operating Systems
68. If your company uses Windows 10, watch out: there are new vulnerabilities about
69. Advanced Malware Protection Affected by Bug That Can Inhibit Intrusion Detection
70. Logical Bug in Microsoft Word's 'Online Video' Allows Code Execution
71. Windows 10 UWP bug could give malicious devs access to all your files
72. Windows 10 Bug Allowed UWP Apps Full Access to File System
73. Magecart Exploits Zero Day Vulnerabilities
74. Serious Vulnerability Discovered In X.Org Server Affects Major Linux and BSD Variants
75. Security Vulnerability in Internet-Connected Construction Cranes
76. Systemd flaw could cause the crash or hijack of vulnerable Linux machines
77. Pentagon’s big audit will inspect for cybersecurity flaws, comptroller says
78. Vulnerability found in Sophos anti-malware product
79. Flaws in brain stimulation tech could let hackers erase or hold memories for ransom
80. Cisco patched a command injection vulnerability in Webex Meetings
81. Vulnerability In Microsoft Word Online Video Feature Allows for Phishing

Region brief for 2018-10-29

ASIA

1. Future Investment Initiative Conference Website, Defaced, Now Restored
2. Cathay Pacific Suffers World’s Largest Airline Data Breach
3. Serious Vulnerability Discovered In X.Org Server Affects Major Linux and BSD Variants
4. 'Narwhal Spider' group's spam campaign targets Japanese recipients with URLZone malware
5. Same Old yet Brand-new: New File Types Emerge in Malware Spam Attachments
6. Revolutionary Blockchain 3.0 Under CSE Platform
7. Leaked: iOS 12.1 will be released on October 30th

OCEANIA

8. Phishing spikes as private health continues to be most breached sector in Australia

NORTH AMERICA

9. Future Investment Initiative Conference Website, Defaced, Now Restored
10. Cathay Pacific Suffers World’s Largest Airline Data Breach
11. Understanding mass data fragmentation
12. Secret Service Confirms Focus on Email Compromise Cybercrimes Worth $12 Billion
13. Man Ordered to Pay $8.6 Million for Launching DDoS Attacks against Rutgers University
14. Security Vulnerability in Internet-Connected Construction Cranes
15. Girl Scouts Alerted to Possible Data Breach
16. What can we do to tackle today’s phishing epidemic?
17. Privacy concerns cooling #InternetOfThings adoption in US & Europe, with consumers concerned about #DataLeaks, malware and product security (via @FSecure)
18. Das Geschäft mit gestohlenen Login-Daten von Privatnutzern und Unternehmensanwendern boomt. US-Journalist Brian Krebs beziffert die "Ausbeute" bei mehreren 100.000 US-Dollar
19. The Worst Data Breach till Now 2018, and What It Means
20. Same Old yet Brand-new: New File Types Emerge in Malware Spam Attachments
21. Cisco patched a command injection vulnerability in Webex Meetings
22. Leaked: iOS 12.1 will be released on October 30th

SOUTH AMERICA

Nil

EUROPE

23. Here's how to defend your enterprise from Magecart
24. Breaking News: Securonix Threat Research: British Airways Breach
25. Cathay Pacific Suffers World’s Largest Airline Data Breach
26. sLoad and Ramnit Campaign Against UK and Italy
27. Magecart Exploits Zero Day Vulnerabilities
28. What can we do to tackle today’s phishing epidemic?
29. The Worst Data Breach till Now 2018, and What It Means
30. Same Old yet Brand-new: New File Types Emerge in Malware Spam Attachments

AFRICA

Nil

Sector brief for 2018-10-29

HEALTHCARE

1. Hackers Breach System of Healthcare.Gov Exposing Personal Data of 75,000 Users
2. Beware! Downloader Malware Disguised as Game Apps Found On Google Play with More Than 51,100 Installations

TRANSPORT

3. What can we do to tackle today’s phishing epidemic?

BANKING & FINANCE

4. Future Investment Initiative Conference Website, Defaced, Now Restored
5. Here's how to defend your enterprise from Magecart
6. Breaking News: Securonix Threat Research: British Airways Breach
7. Cathay Pacific Suffers World’s Largest Airline Data Breach
8. sLoad and Ramnit Campaign Against UK and Italy
9. Cobalt Gang targets banks and financial service providers by sneaking PDFs past staff
10. Girl Scouts Alerted to Possible Data Breach
11. 'Narwhal Spider' group's spam campaign targets Japanese recipients with URLZone malware
12. What can we do to tackle today’s phishing epidemic?
13. The Worst Data Breach till Now 2018, and What It Means
14. Same Old yet Brand-new: New File Types Emerge in Malware Spam Attachments
15. Revolutionary Blockchain 3.0 Under CSE Platform

INFORMATION & TELECOMMUNICATION

16. SandboxEscaper expert is back and disclosed a new Windows Zero-Day
17. Word documents seemingly carrying videos can deliver malicious code instead
18. Remote Denial of Service Vulnerability Patched in Squid Proxy Cache Server
19. This is getting worse and worse. And is going to normalize and lead to much more successful phishing through SMS
20. Malware That Accompanies Google Chrome Download Detected
21. Systemd flaw could cause the crash or hijack of vulnerable Linux machines
22. What can we do to tackle today’s phishing epidemic?
23. Rise of the Bots
24. The Worst Data Breach till Now 2018, and What It Means
25. Same Old yet Brand-new: New File Types Emerge in Malware Spam Attachments
26. Crooks continue to abuse exposed Docker APIs for Cryptojacking
27. Have you ever wondered why #ransomware attacks happen on the Friday before a long weekend? We've teamed up with @SentinelOne
28. 33,000 Accounting Inbox Credentials Exposed Online: BEC Made Easy | Read the details here:

FOOD

Nil

WATER

29. Same Old yet Brand-new: New File Types Emerge in Malware Spam Attachments

ENERGY

30. Revolutionary Blockchain 3.0 Under CSE Platform

GOVERNMENT & PUBLIC SERVICE

31. Pentagon’s big audit will inspect for cybersecurity flaws, comptroller says
32. Hackers Breach System of Healthcare.Gov Exposing Personal Data of 75,000 Users

Daily brief for 2018-10-29

ASIA

1. Future Investment Initiative Conference Website, Defaced, Now Restored
2. Cathay Pacific Suffers World’s Largest Airline Data Breach
3. Serious Vulnerability Discovered In X.Org Server Affects Major Linux and BSD Variants
4. 'Narwhal Spider' group's spam campaign targets Japanese recipients with URLZone malware
5. Same Old yet Brand-new: New File Types Emerge in Malware Spam Attachments
6. Revolutionary Blockchain 3.0 Under CSE Platform
7. Leaked: iOS 12.1 will be released on October 30th

WORLD

8. Phishing spikes as private health continues to be most breached sector in Australia
9. Future Investment Initiative Conference Website, Defaced, Now Restored
10. Here's how to defend your enterprise from Magecart
11. Breaking News: Securonix Threat Research: British Airways Breach
12. Cathay Pacific Suffers World’s Largest Airline Data Breach
13. sLoad and Ramnit Campaign Against UK and Italy
14. Magecart Exploits Zero Day Vulnerabilities
15. Understanding mass data fragmentation
16. Secret Service Confirms Focus on Email Compromise Cybercrimes Worth $12 Billion
17. Man Ordered to Pay $8.6 Million for Launching DDoS Attacks against Rutgers University
18. Security Vulnerability in Internet-Connected Construction Cranes
19. Girl Scouts Alerted to Possible Data Breach
20. What can we do to tackle today’s phishing epidemic?
21. Privacy concerns cooling #InternetOfThings adoption in US & Europe, with consumers concerned about #DataLeaks, malware and product security (via @FSecure)
22. Das Geschäft mit gestohlenen Login-Daten von Privatnutzern und Unternehmensanwendern boomt. US-Journalist Brian Krebs beziffert die "Ausbeute" bei mehreren 100.000 US-Dollar
23. The Worst Data Breach till Now 2018, and What It Means
24. Same Old yet Brand-new: New File Types Emerge in Malware Spam Attachments
25. Cisco patched a command injection vulnerability in Webex Meetings
26. Leaked: iOS 12.1 will be released on October 30th

ATTACKS

27. Phishing spikes as private health continues to be most breached sector in Australia
28. Girl Scouts Issues Data Breach Warning to 2,800 Members
29. Nation-State Phishing: A Country-Sized Catch
30. A new phishing report reveals Microsoft, Paypal, and Netflix are among the top brands impersonated by phishing attacks. Attackers tend to
31. This is getting worse and worse. And is going to normalize and lead to much more successful phishing through SMS
32. Cathay Pacific Suffers World’s Largest Airline Data Breach
33. League of Legends Gamers Targeted by Phishing Scam | Avast
34. sLoad and Ramnit Campaign Against UK and Italy
35. Secret Service Confirms Focus on Email Compromise Cybercrimes Worth $12 Billion
36. Girl Scouts Alerted to Possible Data Breach
37. 'Narwhal Spider' group's spam campaign targets Japanese recipients with URLZone malware
38. DDoS and ransomware tools for starter and experienced cybercriminals exposed
39. Biggest Manufacturing Data Breaches of the 21st Century
40. What can we do to tackle today’s phishing epidemic?
41. Das Geschäft mit gestohlenen Login-Daten von Privatnutzern und Unternehmensanwendern boomt. US-Journalist Brian Krebs beziffert die "Ausbeute" bei mehreren 100.000 US-Dollar
42. The Worst Data Breach till Now 2018, and What It Means
43. Crooks continue to abuse exposed Docker APIs for Cryptojacking
44. IoT users uncertain if personal data is shared across multiple devices
45. 19% still save their password on a piece of paper
46. Hackers Breach System of Healthcare.Gov Exposing Personal Data of 75,000 Users
47. Hackers steal personal data of up to 9.4 million Cathay Pacific passengers
48. Leaked: iOS 12.1 will be released on October 30th
49. Vulnerability In Microsoft Word Online Video Feature Allows for Phishing
50. 33,000 Accounting Inbox Credentials Exposed Online: BEC Made Easy | Read the details here:

THREATS

51. Videos and MS Office documents - ingredients for a malware attack
52. SandboxEscaper expert is back and disclosed a new Windows Zero-Day
53. IoT Flaw Allows Hijacking of Connected Construction Cranes
54. Mac CryptoCurrency Price Tracker Caught Installing Backdoors
55. Mac cryptocurrency ticker app installs backdoors
56. Word documents seemingly carrying videos can deliver malicious code instead
57. Remote Denial of Service Vulnerability Patched in Squid Proxy Cache Server
58. X.Org Flaw Allows Privilege Escalation in Linux Systems
59. Downloading Google Chrome via Microsoft Edge Endangered by Malware
60. The Ransomware Attack on a North Carolina Water Utility May Not Have Been What it Seemed
61. X.Org Flaw Exposes Unix-Like OSes to Attacks
62. Windows 10 UWP Bug Could Give Malicious Devs Access To All Your Files
63. X.org Bug Bites OpenBSD And Other Big Operating Systems
64. If your company uses Windows 10, watch out: there are new vulnerabilities about
65. Advanced Malware Protection Affected by Bug That Can Inhibit Intrusion Detection
66. Logical Bug in Microsoft Word's 'Online Video' Allows Code Execution
67. Call of Duty players caught up in cryptocurrency theft racket
68. Ransomware and the enterprise: A new white paper
69. Windows 10 UWP bug could give malicious devs access to all your files
70. Windows 10 Bug Allowed UWP Apps Full Access to File System
71. Magecart Exploits Zero Day Vulnerabilities
72. Serious Vulnerability Discovered In X.Org Server Affects Major Linux and BSD Variants
73. Malware That Accompanies Google Chrome Download Detected
74. Security Vulnerability in Internet-Connected Construction Cranes
75. 'Narwhal Spider' group's spam campaign targets Japanese recipients with URLZone malware
76. Cyber-criminals exploit misconfigured container to deliver cryptominer
77. DDoS and ransomware tools for starter and experienced cybercriminals exposed
78. Systemd flaw could cause the crash or hijack of vulnerable Linux machines
79. Pentagon’s big audit will inspect for cybersecurity flaws, comptroller says
80. Vulnerability found in Sophos anti-malware product
81. Flaws in brain stimulation tech could let hackers erase or hold memories for ransom
82. Privacy concerns cooling #InternetOfThings adoption in US & Europe, with consumers concerned about #DataLeaks, malware and product security (via @FSecure)
83. Same Old yet Brand-new: New File Types Emerge in Malware Spam Attachments
84. Crooks continue to abuse exposed Docker APIs for Cryptojacking
85. Revolutionary Blockchain 3.0 Under CSE Platform
86. #Antivirus SW alone can't stop new #malware or #ransomware. by @MariaKorolov -
87. Beware! Downloader Malware Disguised as Game Apps Found On Google Play with More Than 51,100 Installations
88. Cisco patched a command injection vulnerability in Webex Meetings
89. Have you ever wondered why #ransomware attacks happen on the Friday before a long weekend? We've teamed up with @SentinelOne
90. Microsoft Bing Delivered Dangerous Malware When You Try to Download Google Chrome
91. Vulnerability In Microsoft Word Online Video Feature Allows for Phishing

CRIME

92. Future Investment Initiative Conference Website, Defaced, Now Restored
93. Here's how to defend your enterprise from Magecart
94. Breaking News: Securonix Threat Research: British Airways Breach
95. Mirai Botnet Operator Ordered to Pay $8.6 Million
96. Cathay Pacific Suffers World’s Largest Airline Data Breach
97. Call of Duty players caught up in cryptocurrency theft racket
98. League of Legends Gamers Targeted by Phishing Scam | Avast
99. Malware That Accompanies Google Chrome Download Detected
100. Secret Service Confirms Focus on Email Compromise Cybercrimes Worth $12 Billion
101. Man Ordered to Pay $8.6 Million for Launching DDoS Attacks against Rutgers University
102. Girl Scouts Alerted to Possible Data Breach
103. Mirai Author Gets House Arrest for DDoS Attacks on University
104. DDoS and ransomware tools for starter and experienced cybercriminals exposed
105. What can we do to tackle today’s phishing epidemic?
106. Revolutionary Blockchain 3.0 Under CSE Platform
107. 33,000 Accounting Inbox Credentials Exposed Online: BEC Made Easy | Read the details here:

POLITICS

108. Future Investment Initiative Conference Website, Defaced, Now Restored
109. Secret Service Confirms Focus on Email Compromise Cybercrimes Worth $12 Billion
110. What can we do to tackle today’s phishing epidemic?