APT report for 2018-11-01

TRANSNATIONAL / UNKNOWN

1. 0x20k of Ghost Squad Hackers Releases ODay Exploit Targeting Apache Hadoop
2. British Airways data breach bigger than originally thought
3. CBS News: A Look Behind the Magecart Assault on E-commerce

CHINA

4. DOJ indictment spotlights China’s civilian intel agency – and its hacker recruits
5. Comodo launches Dome Shield Platinum to secure and control Internet access

INDIA

Nil

NORTH KOREA

Nil

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

6. CSM-ACE 2018: FireEye Interview – ASEAN Countries Need to Place Greater Focus on Resourcing Their Cyber Defences

SERBIA

Nil

UKRAINE

7. New Techniques to Uncover and Attribute Cobalt Gang Commodity Builders and Infrastructure Revealed

Platform report for 2018-11-01

WINDOWS

1. Trickbot Malware Now Also Steals Passwords From Apps, Web Browsers
2. Emotet Malware, the Most Probable Malware of the Year
3. More Typo-Squatting Malware Found on PyPI
4. Windows Defender Bug Needs a Restart, Not Shutdown, To Enable Sandbox
5. Healthcare Industry Continues To Be the Favourite for Ransomware
6. Trickbot Shows Off New Trick: Password Grabber Module
7. SamSam Attackers Have Hit 67 Ransomware Targets
8. Talos Vulnerability Deep Dive - TALOS-2018-0636 / CVE-2018-3971 Sophos HitmanPro.Alert vulnerability
9. Perl-Based Shellbot Looks to Target Organizations via C&C

LINUX

10. Open Letter to Francisco Partners: Continued Misuse of NSO Group’s Pegasus Technology
11. DOJ indictment spotlights China’s civilian intel agency – and its hacker recruits
12. 0x20k of Ghost Squad Hackers Releases ODay Exploit Targeting Apache Hadoop
13. Perl-Based Shellbot Looks to Target Organizations via C&C

UNIX

Nil

ANDROID

14. Government employee who used to watch porn at work alleged guilty of infecting with malware a network
15. Perl-Based Shellbot Looks to Target Organizations via C&C

IOS

Nil

MACOS

Nil

Threat report for 2018-11-01

DATA BREACH & DATA LOSS

1. Australian defence contractor Austal hit by data breach
2. Radisson discloses data breach impacting rewards customers
3. 22,000 Records Exposed by JoomlArt in Jira Ticket
4. ‘Aaron Smith’ Sextortion scam campaigns hit tens of thousands of individuals
5. New Bluetooth Vulnerabilities Exposed in Aruba, Cisco, Meraki Access Points
6. Customer Information Stolen in Radisson Hotel Group Data Breach
7. British Airways data breach bigger than originally thought
8. Where Is the Consumer Outrage about Data Breaches?
9. Eurostar Resets Passwords of Customers After Data Breach
10. Radisson Hotel Group suffers data breach, customer info leaked
11. Radisson Rewards Program Targeted in Data Breach
12. "If the schemas prove not to be compatible, a backup of the previous version of a database must be used
13. Emotet Malware – Mass-Harvesting millions of Emails in secret Campaign
14. Last year the @USAgov required agencies to implement #DMARC records and policies by October 2018. Learn just how hard DMARC
15. New Ramnit Campaign Spreads Azorult Malware
16. #NetSpectre leaks data remotely via side-channel attacks. Learn from expert Michael Cobb of @thehairyITdog why data from #microprocessors is not
17. Phishing Attacks Breach 20,000 Patient Records of Catawba Valley Medical Center
18. Radisson Hotel Group Data Breach Exposed Customer’s Personal Data
19. Beware !! Square & PayPal Mobile Point of Sales (POS) Devices Are Extremely Vulnerable to Credit/Debit Card Data Theft

DENIAL-OF-SERVICE

20. Cisco ups the ante for 400G Ethernet with big-bandwidth data-center switches

MALVERTISING

21. Bad ads: Publishers look to stop malvertising for good

PHISHING

22. How phishing is evolving to outpace awareness
23. Going with what works: The state of phishing
24. October may be over – but phishing attacks never stop. Here’s how to make security awareness successful all year round.
25. Trickbot Shows Off New Trick: Password Grabber Module
26. Expert Insights Names Barracuda’s AI powered Sentinel Top Phishing protection product
27. Phishing Attacks Breach 20,000 Patient Records of Catawba Valley Medical Center

WEB DEFACEMENT

Nil

BOTNET

28. Experts presented BOTCHAIN, the first fully functional Botnet built upon the Bitcoin Protocol
29. Defending your pumpkin from tracker zombies
30. Necurs Botnet Distributing Sextortion Email Scams
31. The Russian built #VPNFilter #botnet was taken down by the @FBI after over 500,000 routers were infected. However, VPNFilter is

RANSOMWARE

32. Ransomware and Back-Up Plans
33. Healthcare Industry Continues To Be the Favourite for Ransomware
34. SamSam Attackers Have Hit 67 Ransomware Targets
35. Nice work if you can get it: GandCrab ransomware nets millions even though it has been broken
36. Crypto-Locking Kraken Ransomware Looms Larger

CRYPTOMINING & CRYPTOCURRENCIES

37. Experts presented BOTCHAIN, the first fully functional Botnet built upon the Bitcoin Protocol
38. UK considers banning cryptocurrencies for their lack of “intrinsic value”
39. Crypto-Locking Kraken Ransomware Looms Larger
40. Crypto Micropayments: an Exciting Future for Blockchain Transactions

MALWARE

41. 2018’s worst malware revealed in report
42. Trickbot Malware Now Also Steals Passwords From Apps, Web Browsers
43. Emotet Malware, the Most Probable Malware of the Year
44. USB Drives Deliver Dangerous Malware to Industrial Facilities: Honeywell
45. More Typo-Squatting Malware Found on PyPI
46. Employee used US government network for adult websites, infected infrastructure with Russian malware
47. Government employee who used to watch porn at work alleged guilty of infecting with malware a network
48. Malware Analysis for Blue Teams
49. Emotet Malware – Mass-Harvesting millions of Emails in secret Campaign
50. Hackers Drops New Emotet Malware to Perform Mass Email Exfiltration From Victims Email Client
51. New Ramnit Campaign Spreads Azorult Malware
52. Perl-Based Shellbot Looks to Target Organizations via C&C
53. IKARUS Security Software partners with PolySwarm to advance early malware detection
54. Pdgmail – Forensic Tool to Analysis Process Memory Dump

EXPLOIT

55. PoC Exploit Compromises Microsoft Live Accounts via Subdomain Hijacking
56. 0x20k of Ghost Squad Hackers Releases ODay Exploit Targeting Apache Hadoop
57. Hackers Exploit Cisco Zero Day Vulnerability in Wild Resulting in DoS Condition

VULNERABILITY

58. Yi IoT Home Camera Riddled with Code-Execution Vulnerabilities
59. BLEEDINGBIT Bluetooth flaws in TI chips expose enterprises to remote attacks
60. New Bluetooth Vulnerabilities Exposed in Aruba, Cisco, Meraki Access Points
61. Windows Defender Bug Needs a Restart, Not Shutdown, To Enable Sandbox
62. Bluetooth Chip Flaws Expose Enterprises to Remote Attacks
63. Two Zero-Day Bugs Open Millions of Wireless Access Points to Attack
64. Cisco says a flaw in its Adaptive Security Appliance allows remote attacks
65. Talos Vulnerability Deep Dive – TALOS-2018-0636 / CVE-2018-3971 Sophos HitmanPro.Alert vulnerability
66. Security researchers find flaws in chips used in hospitals, factories and stores
67. Bleedingbit: Critical vulnerabilities in BLE chips expose millions of access points to attack
68. Bleedingbit zero-day chip flaws may expose majority of enterprises to remote code execution attacks
69. Cisco Zero-Day Exploited In The Wild To Crash And Reload Devices
70. Zero-Day RCE Vulnerabilities Expose Millions of BLE-Enabled Devices to Attacks
71. Hackers Exploit Cisco Zero Day Vulnerability in Wild Resulting in DoS Condition
72. New BLEEDINGBIT Vulnerabilities Affect Widely-Used Bluetooth Chips
73. Two New Bluetooth Chip Flaws Expose Millions of Devices to Remote Attacks
74. .@Siemens disclosed six SICLOCK flaws that were found within its central plant clocks. Discover why three flaws have been rated
75. Our fabulous @5ean5ullivan explains to @CyberSauna listeners how the multiple vulnerabilities in the US electoral system may be^H^H^H^H^H^Hare being exploited.
76. Bleedingbit Bluetooth Vulnerabilities Expose WiFi APs to Risk
77. Talos Vulnerability Deep Dive - TALOS-2018-0636 / CVE-2018-3971 Sophos HitmanPro.Alert vulnerability
78. Cisco Warns of Zero-Day Vulnerability in Security Appliances
79. Cisco zero-day exploited in the wild to crash and reload devices

Region brief for 2018-11-01

ASIA

1. ‘Aaron Smith’ Sextortion scam campaigns hit tens of thousands of individuals
2. Open Letter to Francisco Partners: Continued Misuse of NSO Group’s Pegasus Technology
3. DOJ indictment spotlights China’s civilian intel agency – and its hacker recruits
4. Trickbot Shows Off New Trick: Password Grabber Module
5. SamSam Attackers Have Hit 67 Ransomware Targets
6. Perl-Based Shellbot Looks to Target Organizations via C&C
7. CSM-ACE 2018: FireEye Interview – ASEAN Countries Need to Place Greater Focus on Resourcing Their Cyber Defences

OCEANIA

8. Australian defence contractor Austal hit by data breach
9. Trickbot Shows Off New Trick: Password Grabber Module
10. SamSam Attackers Have Hit 67 Ransomware Targets

NORTH AMERICA

11. Australian defence contractor Austal hit by data breach
12. BLEEDINGBIT Bluetooth flaws in TI chips expose enterprises to remote attacks
13. Emotet Malware, the Most Probable Malware of the Year
14. Open Letter to Francisco Partners: Continued Misuse of NSO Group’s Pegasus Technology
15. New Bluetooth Vulnerabilities Exposed in Aruba, Cisco, Meraki Access Points
16. DOJ indictment spotlights China’s civilian intel agency – and its hacker recruits
17. Bleedingbit: Critical vulnerabilities in BLE chips expose millions of access points to attack
18. Healthcare Industry Continues To Be the Favourite for Ransomware
19. Employee used US government network for adult websites, infected infrastructure with Russian malware
20. CBS News: A Look Behind the Magecart Assault on E-commerce
21. UK considers banning cryptocurrencies for their lack of “intrinsic value”
22. Government employee who used to watch porn at work alleged guilty of infecting with malware a network
23. Trickbot Shows Off New Trick: Password Grabber Module
24. SamSam Attackers Have Hit 67 Ransomware Targets
25. Our fabulous @5ean5ullivan explains to @CyberSauna listeners how the multiple vulnerabilities in the US electoral system may be^H^H^H^H^H^Hare being exploited.
26. Hackers Drops New Emotet Malware to Perform Mass Email Exfiltration From Victims Email Client
27. Talos Vulnerability Deep Dive - TALOS-2018-0636 / CVE-2018-3971 Sophos HitmanPro.Alert vulnerability
28. Perl-Based Shellbot Looks to Target Organizations via C&C
29. Beware !! Square & PayPal Mobile Point of Sales (POS) Devices Are Extremely Vulnerable to Credit/Debit Card Data Theft

SOUTH AMERICA

30. Perl-Based Shellbot Looks to Target Organizations via C&C

EUROPE

31. ‘Aaron Smith’ Sextortion scam campaigns hit tens of thousands of individuals
32. Experts presented BOTCHAIN, the first fully functional Botnet built upon the Bitcoin Protocol
33. DOJ indictment spotlights China’s civilian intel agency – and its hacker recruits
34. British Airways data breach bigger than originally thought
35. Eurostar Resets Passwords of Customers After Data Breach
36. Employee used US government network for adult websites, infected infrastructure with Russian malware
37. CBS News: A Look Behind the Magecart Assault on E-commerce
38. UK considers banning cryptocurrencies for their lack of “intrinsic value”
39. Trickbot Shows Off New Trick: Password Grabber Module
40. Radisson Rewards Program Targeted in Data Breach
41. SamSam Attackers Have Hit 67 Ransomware Targets
42. Perl-Based Shellbot Looks to Target Organizations via C&C
43. The Russian built #VPNFilter #botnet was taken down by the @FBI after over 500,000 routers were infected. However, VPNFilter is
44. CSM-ACE 2018: FireEye Interview – ASEAN Countries Need to Place Greater Focus on Resourcing Their Cyber Defences

AFRICA

Nil

Sector brief for 2018-11-01

HEALTHCARE

1. BLEEDINGBIT Bluetooth flaws in TI chips expose enterprises to remote attacks
2. Experts presented BOTCHAIN, the first fully functional Botnet built upon the Bitcoin Protocol
3. Security researchers find flaws in chips used in hospitals, factories and stores
4. Healthcare Industry Continues To Be the Favourite for Ransomware
5. SamSam Attackers Have Hit 67 Ransomware Targets
6. Phishing Attacks Breach 20,000 Patient Records of Catawba Valley Medical Center

TRANSPORT

7. DOJ indictment spotlights China’s civilian intel agency – and its hacker recruits
8. SamSam Attackers Have Hit 67 Ransomware Targets

BANKING & FINANCE

9. Radisson discloses data breach impacting rewards customers
10. Trickbot Malware Now Also Steals Passwords From Apps, Web Browsers
11. Emotet Malware, the Most Probable Malware of the Year
12. ‘Aaron Smith’ Sextortion scam campaigns hit tens of thousands of individuals
13. Customer Information Stolen in Radisson Hotel Group Data Breach
14. British Airways data breach bigger than originally thought
15. Healthcare Industry Continues To Be the Favourite for Ransomware
16. CBS News: A Look Behind the Magecart Assault on E-commerce
17. UK considers banning cryptocurrencies for their lack of “intrinsic value”
18. Trickbot Shows Off New Trick: Password Grabber Module
19. Nice work if you can get it: GandCrab ransomware nets millions even though it has been broken
20. Crypto Micropayments: an Exciting Future for Blockchain Transactions
21. Beware !! Square & PayPal Mobile Point of Sales (POS) Devices Are Extremely Vulnerable to Credit/Debit Card Data Theft

INFORMATION & TELECOMMUNICATION

22. Open Letter to Francisco Partners: Continued Misuse of NSO Group’s Pegasus Technology
23. 0x20k of Ghost Squad Hackers Releases ODay Exploit Targeting Apache Hadoop
24. Where Is the Consumer Outrage about Data Breaches?
25. Our fabulous @5ean5ullivan explains to @CyberSauna listeners how the multiple vulnerabilities in the US electoral system may be^H^H^H^H^H^Hare being exploited.
26. Talos Vulnerability Deep Dive - TALOS-2018-0636 / CVE-2018-3971 Sophos HitmanPro.Alert vulnerability
27. Perl-Based Shellbot Looks to Target Organizations via C&C
28. Comodo launches Dome Shield Platinum to secure and control Internet access
29. Pdgmail – Forensic Tool to Analysis Process Memory Dump

FOOD

Nil

WATER

30. Malware Analysis for Blue Teams

ENERGY

31. BLEEDINGBIT Bluetooth flaws in TI chips expose enterprises to remote attacks
32. Bluetooth Chip Flaws Expose Enterprises to Remote Attacks
33. Bleedingbit: Critical vulnerabilities in BLE chips expose millions of access points to attack
34. Zero-Day RCE Vulnerabilities Expose Millions of BLE-Enabled Devices to Attacks
35. Two New Bluetooth Chip Flaws Expose Millions of Devices to Remote Attacks
36. CSM-ACE 2018: FireEye Interview – ASEAN Countries Need to Place Greater Focus on Resourcing Their Cyber Defences

GOVERNMENT & PUBLIC SERVICE

37. Emotet Malware, the Most Probable Malware of the Year
38. Open Letter to Francisco Partners: Continued Misuse of NSO Group’s Pegasus Technology
39. DOJ indictment spotlights China’s civilian intel agency – and its hacker recruits
40. Employee used US government network for adult websites, infected infrastructure with Russian malware
41. UK considers banning cryptocurrencies for their lack of “intrinsic value”
42. Government employee who used to watch porn at work alleged guilty of infecting with malware a network
43. SamSam Attackers Have Hit 67 Ransomware Targets
44. Our fabulous @5ean5ullivan explains to @CyberSauna listeners how the multiple vulnerabilities in the US electoral system may be^H^H^H^H^H^Hare being exploited.
45. Perl-Based Shellbot Looks to Target Organizations via C&C
46. CSM-ACE 2018: FireEye Interview – ASEAN Countries Need to Place Greater Focus on Resourcing Their Cyber Defences

Daily brief for 2018-11-01

ASIA

1. ‘Aaron Smith’ Sextortion scam campaigns hit tens of thousands of individuals
2. Open Letter to Francisco Partners: Continued Misuse of NSO Group’s Pegasus Technology
3. DOJ indictment spotlights China’s civilian intel agency – and its hacker recruits
4. Trickbot Shows Off New Trick: Password Grabber Module
5. SamSam Attackers Have Hit 67 Ransomware Targets
6. Perl-Based Shellbot Looks to Target Organizations via C&C
7. CSM-ACE 2018: FireEye Interview – ASEAN Countries Need to Place Greater Focus on Resourcing Their Cyber Defences

WORLD

8. Australian defence contractor Austal hit by data breach
9. BLEEDINGBIT Bluetooth flaws in TI chips expose enterprises to remote attacks
10. Emotet Malware, the Most Probable Malware of the Year
11. ‘Aaron Smith’ Sextortion scam campaigns hit tens of thousands of individuals
12. Open Letter to Francisco Partners: Continued Misuse of NSO Group’s Pegasus Technology
13. New Bluetooth Vulnerabilities Exposed in Aruba, Cisco, Meraki Access Points
14. Experts presented BOTCHAIN, the first fully functional Botnet built upon the Bitcoin Protocol
15. DOJ indictment spotlights China’s civilian intel agency – and its hacker recruits
16. Bleedingbit: Critical vulnerabilities in BLE chips expose millions of access points to attack
17. British Airways data breach bigger than originally thought
18. Eurostar Resets Passwords of Customers After Data Breach
19. Healthcare Industry Continues To Be the Favourite for Ransomware
20. Employee used US government network for adult websites, infected infrastructure with Russian malware
21. CBS News: A Look Behind the Magecart Assault on E-commerce
22. UK considers banning cryptocurrencies for their lack of “intrinsic value”
23. Government employee who used to watch porn at work alleged guilty of infecting with malware a network
24. Trickbot Shows Off New Trick: Password Grabber Module
25. Radisson Rewards Program Targeted in Data Breach
26. SamSam Attackers Have Hit 67 Ransomware Targets
27. Our fabulous @5ean5ullivan explains to @CyberSauna listeners how the multiple vulnerabilities in the US electoral system may be^H^H^H^H^H^Hare being exploited.
28. Hackers Drops New Emotet Malware to Perform Mass Email Exfiltration From Victims Email Client
29. Talos Vulnerability Deep Dive - TALOS-2018-0636 / CVE-2018-3971 Sophos HitmanPro.Alert vulnerability
30. Perl-Based Shellbot Looks to Target Organizations via C&C
31. The Russian built #VPNFilter #botnet was taken down by the @FBI after over 500,000 routers were infected. However, VPNFilter is
32. Beware !! Square & PayPal Mobile Point of Sales (POS) Devices Are Extremely Vulnerable to Credit/Debit Card Data Theft
33. CSM-ACE 2018: FireEye Interview – ASEAN Countries Need to Place Greater Focus on Resourcing Their Cyber Defences

ATTACKS

34. Australian defence contractor Austal hit by data breach
35. Radisson discloses data breach impacting rewards customers
36. 22,000 Records Exposed by JoomlArt in Jira Ticket
37. ‘Aaron Smith’ Sextortion scam campaigns hit tens of thousands of individuals
38. New Bluetooth Vulnerabilities Exposed in Aruba, Cisco, Meraki Access Points
39. How phishing is evolving to outpace awareness
40. Customer Information Stolen in Radisson Hotel Group Data Breach
41. Going with what works: The state of phishing
42. British Airways data breach bigger than originally thought
43. Where Is the Consumer Outrage about Data Breaches?
44. Eurostar Resets Passwords of Customers After Data Breach
45. Radisson Hotel Group suffers data breach, customer info leaked
46. October may be over – but phishing attacks never stop. Here’s how to make security awareness successful all year round.
47. Trickbot Shows Off New Trick: Password Grabber Module
48. Radisson Rewards Program Targeted in Data Breach
49. "If the schemas prove not to be compatible, a backup of the previous version of a database must be used
50. Bad ads: Publishers look to stop malvertising for good
51. Emotet Malware – Mass-Harvesting millions of Emails in secret Campaign
52. Last year the @USAgov required agencies to implement #DMARC records and policies by October 2018. Learn just how hard DMARC
53. Expert Insights Names Barracuda’s AI powered Sentinel Top Phishing protection product
54. New Ramnit Campaign Spreads Azorult Malware
55. #NetSpectre leaks data remotely via side-channel attacks. Learn from expert Michael Cobb of @thehairyITdog why data from #microprocessors is not
56. Phishing Attacks Breach 20,000 Patient Records of Catawba Valley Medical Center
57. Radisson Hotel Group Data Breach Exposed Customer’s Personal Data
58. Beware !! Square & PayPal Mobile Point of Sales (POS) Devices Are Extremely Vulnerable to Credit/Debit Card Data Theft

THREATS

59. 2018’s worst malware revealed in report
60. Yi IoT Home Camera Riddled with Code-Execution Vulnerabilities
61. BLEEDINGBIT Bluetooth flaws in TI chips expose enterprises to remote attacks
62. Trickbot Malware Now Also Steals Passwords From Apps, Web Browsers
63. Emotet Malware, the Most Probable Malware of the Year
64. USB Drives Deliver Dangerous Malware to Industrial Facilities: Honeywell
65. New Bluetooth Vulnerabilities Exposed in Aruba, Cisco, Meraki Access Points
66. More Typo-Squatting Malware Found on PyPI
67. Experts presented BOTCHAIN, the first fully functional Botnet built upon the Bitcoin Protocol
68. Ransomware and Back-Up Plans
69. Windows Defender Bug Needs a Restart, Not Shutdown, To Enable Sandbox
70. Bluetooth Chip Flaws Expose Enterprises to Remote Attacks
71. Two Zero-Day Bugs Open Millions of Wireless Access Points to Attack
72. Cisco says a flaw in its Adaptive Security Appliance allows remote attacks
73. Talos Vulnerability Deep Dive – TALOS-2018-0636 / CVE-2018-3971 Sophos HitmanPro.Alert vulnerability
74. Security researchers find flaws in chips used in hospitals, factories and stores
75. Bleedingbit: Critical vulnerabilities in BLE chips expose millions of access points to attack
76. Bleedingbit zero-day chip flaws may expose majority of enterprises to remote code execution attacks
77. Cisco Zero-Day Exploited In The Wild To Crash And Reload Devices
78. Healthcare Industry Continues To Be the Favourite for Ransomware
79. Employee used US government network for adult websites, infected infrastructure with Russian malware
80. UK considers banning cryptocurrencies for their lack of “intrinsic value”
81. Government employee who used to watch porn at work alleged guilty of infecting with malware a network
82. Zero-Day RCE Vulnerabilities Expose Millions of BLE-Enabled Devices to Attacks
83. Hackers Exploit Cisco Zero Day Vulnerability in Wild Resulting in DoS Condition
84. New BLEEDINGBIT Vulnerabilities Affect Widely-Used Bluetooth Chips
85. Two New Bluetooth Chip Flaws Expose Millions of Devices to Remote Attacks
86. SamSam Attackers Have Hit 67 Ransomware Targets
87. .@Siemens disclosed six SICLOCK flaws that were found within its central plant clocks. Discover why three flaws have been rated
88. Nice work if you can get it: GandCrab ransomware nets millions even though it has been broken
89. Crypto-Locking Kraken Ransomware Looms Larger
90. Malware Analysis for Blue Teams
91. Our fabulous @5ean5ullivan explains to @CyberSauna listeners how the multiple vulnerabilities in the US electoral system may be^H^H^H^H^H^Hare being exploited.
92. Emotet Malware – Mass-Harvesting millions of Emails in secret Campaign
93. Crypto Micropayments: an Exciting Future for Blockchain Transactions
94. Bleedingbit Bluetooth Vulnerabilities Expose WiFi APs to Risk
95. Hackers Drops New Emotet Malware to Perform Mass Email Exfiltration From Victims Email Client
96. Talos Vulnerability Deep Dive - TALOS-2018-0636 / CVE-2018-3971 Sophos HitmanPro.Alert vulnerability
97. New Ramnit Campaign Spreads Azorult Malware
98. Perl-Based Shellbot Looks to Target Organizations via C&C
99. Cisco Warns of Zero-Day Vulnerability in Security Appliances
100. Cisco zero-day exploited in the wild to crash and reload devices
101. IKARUS Security Software partners with PolySwarm to advance early malware detection
102. Pdgmail – Forensic Tool to Analysis Process Memory Dump

CRIME

103. Emotet Malware, the Most Probable Malware of the Year
104. ‘Aaron Smith’ Sextortion scam campaigns hit tens of thousands of individuals
105. Experts presented BOTCHAIN, the first fully functional Botnet built upon the Bitcoin Protocol
106. DOJ indictment spotlights China’s civilian intel agency – and its hacker recruits
107. Customer Information Stolen in Radisson Hotel Group Data Breach
108. British Airways data breach bigger than originally thought
109. Where Is the Consumer Outrage about Data Breaches?
110. Radisson Hotel Group suffers data breach, customer info leaked
111. Healthcare Industry Continues To Be the Favourite for Ransomware
112. October may be over – but phishing attacks never stop. Here’s how to make security awareness successful all year round.
113. Government employee who used to watch porn at work alleged guilty of infecting with malware a network
114. Crypto Micropayments: an Exciting Future for Blockchain Transactions
115. Expert Insights Names Barracuda’s AI powered Sentinel Top Phishing protection product
116. Necurs Botnet Distributing Sextortion Email Scams
117. Beware !! Square & PayPal Mobile Point of Sales (POS) Devices Are Extremely Vulnerable to Credit/Debit Card Data Theft
118. CSM-ACE 2018: FireEye Interview – ASEAN Countries Need to Place Greater Focus on Resourcing Their Cyber Defences

POLITICS

119. Emotet Malware, the Most Probable Malware of the Year
120. Open Letter to Francisco Partners: Continued Misuse of NSO Group’s Pegasus Technology
121. Experts presented BOTCHAIN, the first fully functional Botnet built upon the Bitcoin Protocol
122. DOJ indictment spotlights China’s civilian intel agency – and its hacker recruits
123. SamSam Attackers Have Hit 67 Ransomware Targets
124. Our fabulous @5ean5ullivan explains to @CyberSauna listeners how the multiple vulnerabilities in the US electoral system may be^H^H^H^H^H^Hare being exploited.
125. Emotet Malware – Mass-Harvesting millions of Emails in secret Campaign
126. CSM-ACE 2018: FireEye Interview – ASEAN Countries Need to Place Greater Focus on Resourcing Their Cyber Defences