APT report for 2018-11-14

TRANSNATIONAL / UNKNOWN

1. Magecart Cybercrime Groups Harvest Payment Card Data
2. Cyber espionage group used CVE-2018-8589 Windows Zero-Day in Middle East Attacks
3. Magecart- The Card-Skimming Group and Its Many Faces
4. Infowars Store Affected by Magecart Credit Card Stealing Hack
5. Alex Jones’ Infowars store was infected with credit card skimming software
6. Latest Hacking News Podcast
7. Card skimming malware removed from Infowars online store

CHINA

Nil

INDIA

Nil

NORTH KOREA

8. Weekly Threat Briefing: Adobe ColdFusion Servers Under Attack from APT Group
9. Operation FastCash

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

10. Key takeaways from Datto’s State of the Channel Ransomware Report 2018

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-11-14

WINDOWS

1. FlawedAmmy, the Only RAT in CheckPoint’s Global Threat Index 2018 List
2. Microsoft Patches RCE Vulnerabilities in Word, Excel, and Windows Search
3. Weekly Threat Briefing: Adobe ColdFusion Servers Under Attack from APT Group
4. Cyber espionage group used CVE-2018-8589 Windows Zero-Day in Middle East Attacks
5. How Threat Intelligence Prioritizes Risk in Vulnerability Management
6. November 2018 Patch Tuesday: Microsoft fixes 63 flaws, one actively exploited zero-day
7. Adobe Patch Tuesday updates for November 2018 fix known Acrobat flaw
8. Zero-day Windows exploit fix stars in November Patch Tuesday
9. November Patch Tuesday Fixes Another Zero-Day Win32k Bug, Other Public Vulnerabilities
10. Microsoft Patches Windows Zero-Day Exploited in Cyber Attacks
11. APT Group Uses Windows Zero-Day in Middle East Attacks
12. Facebook flaw could have exposed private info of users and their friends
13. A new exploit for zero-day vulnerability CVE-2018-8589
14. Adobe November Security Update: fixes multiple vulnerabilities in its products
15. Microsoft Released Security Updates & Fixed More than 60 Vulnerabilities Along with Active Windows Zero day
16. 63 New Flaws (Including 0-Days) Windows Users Need to Patch Now
17. Big Game Hunting: The Evolution of INDRIK SPIDER From Dridex Wire Fraud to BitPaymer Targeted Ransomware

LINUX

18. Adobe Patch Tuesday updates for November 2018 fix known Acrobat flaw
19. Adobe November Security Update: fixes multiple vulnerabilities in its products

UNIX

20. Weekly Threat Briefing: Adobe ColdFusion Servers Under Attack from APT Group

ANDROID

21. Weekly Threat Briefing: Adobe ColdFusion Servers Under Attack from APT Group
22. Don’t fall for fake NEO, Tether and MetaMask cryptocurrency wallets on Google Play
23. Beers with Talos Ep. #41: Sex, money and malware
24. Key takeaways from Datto’s State of the Channel Ransomware Report 2018

IOS

25. Key takeaways from Datto’s State of the Channel Ransomware Report 2018

MACOS

26. Ad-Injecting Mac Malware Rediscovered
27. A bypass was found by @okta researchers that allows #macOS #malware to pose as @Apple files despite needing to be
28. Adobe Patch Tuesday updates for November 2018 fix known Acrobat flaw
29. Researchers recently discovered a new #MacOS #malware that targets #cryptocurrency investors through chat platforms. Discover how this is possible and
30. Adobe November Security Update: fixes multiple vulnerabilities in its products
31. Key takeaways from Datto’s State of the Channel Ransomware Report 2018

Threat report for 2018-11-14

DATA BREACH & DATA LOSS

1. 21K Donors Had Their Personal Info Leaked Following Kars4Kids Data Breach
2. Google services collapsed due to BGP leak
3. Google services collapsed due to BGP leak
4. Facebook vulnerability could have leaked your private information – again
5. Cathay Apologizes Over Data Breach but Denies Cover-up
6. Business Email Compromise - When You Don’t Need to Phish:
7. Australian Senate extends My Health Record opt-out period
8. The July edition of Beazley Breach Insights found that business email compromise attacks have been rising steadily. Is business email
9. Microsoft covertly collects personal data from enterprise Office ProPlus users
10. Facebook flaw could have exposed private info of users and their friends
11. Hunt finally submits to My Health Record arm-twists as opt-out window extended
12. This year’s success adds to @MWRLabs’ #Pwn2Own existing track record, which includes demo attacks against Chrome.
13. The @mwrlabs research team used zero-day vulnerabilities to compromise smart phones from Xiaomi and Samsung.
14. Healthcare.gov Health Data Breach Exposes Personal Data
15. Facebook Patches Another Vulnerability That Exposed User’s Private Information
16. Senate votes to extend My Health Record opt-out to January 31

DENIAL-OF-SERVICE

17. Just because you're paranoid doesn't mean hackers won't nuke your employer into the ground tomorrow
18. A Large Retailer Responds to #DDoS Extortion: To Pay or Not to Pay?

MALVERTISING

Nil

PHISHING

19. Did you by chance hack OPM back in 2015? Good news, your password probably still works!
20. Business Email Compromise - When You Don’t Need to Phish:
21. Is it time to change your password? Check out this list of the 25 worst passwords for 2018 and make
22. Support wouldn’t change his password, so he mailed them a bomb
23. Public get Warning from Scotts Bluff County Sheriff’s Office about a Phishing Email Scam
24. BDO Unibank Warned its Customers to Remain Beware from New Phishing Scheme

WEB DEFACEMENT

Nil

BOTNET

25. 'Mylobot' botnet now downloading second-stage malware meant to siphon data
26. Airlines Have a Big Problem with Bad Bots
27. A 100k routers around the world are on the botnet to conduct emails spam

RANSOMWARE

28. 1,000 Bitcoins Ransom Asked from Media Prima After Successful Ransomware Attack
29. Targeted ransomware attacks – SophosLabs 2019 Threat Report
30. Ransomware is the leading cyber threat experienced by SMBs
31. Key takeaways from Datto’s State of the Channel Ransomware Report 2018
32. Big Game Hunting: The Evolution of INDRIK SPIDER From Dridex Wire Fraud to BitPaymer Targeted Ransomware

CRYPTOMINING & CRYPTOCURRENCIES

33. Bitcoin Giveaway Scam Balloons, with Google the Latest Victim
34. French Data Protection Authority Issues Guidance on Interaction of Blockchain Technology with GDPR
35. Cryptojacking, Mobile Malware Growing Threats to the Enterprise
36. Why cryptojacking malware is a bigger threat to your PC than you realise
37. Don’t fall for fake NEO, Tether and MetaMask cryptocurrency wallets on Google Play
38. Researchers recently discovered a new #MacOS #malware that targets #cryptocurrency investors through chat platforms. Discover how this is possible and
39. Bitcoin fraud on the official Twitter account of Google GSuite

MALWARE

40. 'Mylobot' botnet now downloading second-stage malware meant to siphon data
41. FlawedAmmy, the Only RAT in CheckPoint’s Global Threat Index 2018 List
42. Ad-Injecting Mac Malware Rediscovered
43. Monitoring file output for malicious code 'could have stopped BA attack more quickly'
44. It's Amateur Hour In The World Of Spyware And Victims Will Pay The Price
45. Cryptojacking, Mobile Malware Growing Threats to the Enterprise
46. A bypass was found by @okta researchers that allows #macOS #malware to pose as @Apple files despite needing to be
47. Why cryptojacking malware is a bigger threat to your PC than you realise
48. Researchers recently discovered a new #MacOS #malware that targets #cryptocurrency investors through chat platforms. Discover how this is possible and
49. Holiday Shopping Tip 1: Inoculate Your Computer You need to protect against malware with regular updates to your anti-virus program and
50. Researchers demo how machine learning can be used to track Gh0st RAT variants
51. This remote access trojan just popped up on malware's most wanted list
52. Do you believe that the application #security vetting process would benefit from the addition of an entropy source?
53. How does signed software help mitigate malware?
54. Beers with Talos Ep. #41: Sex, money and malware
55. Cyber security is a process: Prevent, Detect, Respond, Predict. @5ean5ullivan @FSecure @ohjelmisto_ry
56. Are you safe on social? "Countering the Social Hack" a 5-step process from ZF CEO @FirstNameFoster in @BRINKNewsNow
57. FlawedAmmy: Dangerous RAT enteres most wanted malware list
58. Card skimming malware removed from Infowars online store

EXPLOIT

59. Chinese APT Group Exploit Fixed Critical Adobe ColdFusion Vulnerability On Unpatched Servers
60. Zero-day Windows exploit fix stars in November Patch Tuesday
61. A new exploit for zero-day vulnerability CVE-2018-8589
62. This year’s success adds to @MWRLabs’ #Pwn2Own existing track record, which includes demo attacks against Chrome.

VULNERABILITY

63. Microsoft Patches RCE Vulnerabilities in Word, Excel, and Windows Search
64. Siemens Patches Firewall Flaw That Put Operations at Risk
65. Chinese APT Group Exploit Fixed Critical Adobe ColdFusion Vulnerability On Unpatched Servers
66. Facebook vulnerability could have leaked your private information – again
67. Cyber espionage group used CVE-2018-8589 Windows Zero-Day in Middle East Attacks
68. CVE-2018-15961: Adobe ColdFusion Flaw exploited in attacks in the wild
69. How Threat Intelligence Prioritizes Risk in Vulnerability Management
70. Hackers Taking Over Websites Due to WordPress GDPR Plugin Flaw
71. November 2018 Patch Tuesday: Microsoft fixes 63 flaws, one actively exploited zero-day
72. Siemens Releases 7 Advisories for SIMATIC, SCALANCE Vulnerabilities
73. Adobe Patch Tuesday updates for November 2018 fix known Acrobat flaw
74. Zero-day Windows exploit fix stars in November Patch Tuesday
75. Microsoft's Patch Tuesday addresses Zero Day vulnerabilities
76. Facebook reportedly fixes search bug that could have threatened user privacy
77. CyberSecurity Asean security alert on A Vulnerability in Cisco Unity Express Could Allow for Arbitrary Code Execution
78. November Patch Tuesday Fixes Another Zero-Day Win32k Bug, Other Public Vulnerabilities
79. AVEVA InduSoft Web Studio and InTouch Edge HMI Critical Vulnerabilities Threat Alert
80. A #bug allowing websites to capture private data from Facebook users through Chrome has been discovered:
81. Microsoft Patches Windows Zero-Day Exploited in Cyber Attacks
82. 7 New Meltdown and Spectre-type CPU Flaws Affect Intel, AMD, ARM CPUs
83. APT Group Uses Windows Zero-Day in Middle East Attacks
84. Facebook flaw could have exposed private info of users and their friends
85. A new exploit for zero-day vulnerability CVE-2018-8589
86. Adobe November Security Update: fixes multiple vulnerabilities in its products
87. Microsoft Released Security Updates & Fixed More than 60 Vulnerabilities Along with Active Windows Zero day
88. The @mwrlabs research team used zero-day vulnerabilities to compromise smart phones from Xiaomi and Samsung.
89. Exploits confirmed! Congrats to F-Secure’s @MWRLabs team for another great #Pwn2Own performance. @thezdi
90. New Press Release: Team from @FSecure's @MWRLabs demos exploits for previously undisclosed vulnerabilities at Mobile #Pwn2Own competition -
91. Facebook Patches Another Vulnerability That Exposed User’s Private Information
92. 63 New Flaws (Including 0-Days) Windows Users Need to Patch Now
93. Confirmed! The @mwrlabs team used a download bug along with a silent app installation to load their custom app and

Region brief for 2018-11-14

ASIA

1. 1,000 Bitcoins Ransom Asked from Media Prima After Successful Ransomware Attack
2. Weekly Threat Briefing: Adobe ColdFusion Servers Under Attack from APT Group
3. Google services collapsed due to BGP leak
4. Google services collapsed due to BGP leak
5. Chinese APT Group Exploit Fixed Critical Adobe ColdFusion Vulnerability On Unpatched Servers
6. CVE-2018-15961: Adobe ColdFusion Flaw exploited in attacks in the wild
7. How Threat Intelligence Prioritizes Risk in Vulnerability Management
8. Cathay Apologizes Over Data Breach but Denies Cover-up
9. Operation FastCash
10. Magecart- The Card-Skimming Group and Its Many Faces
11. AVEVA InduSoft Web Studio and InTouch Edge HMI Critical Vulnerabilities Threat Alert
12. Facebook flaw could have exposed private info of users and their friends
13. BDO Unibank Warned its Customers to Remain Beware from New Phishing Scheme

OCEANIA

14. Weekly Threat Briefing: Adobe ColdFusion Servers Under Attack from APT Group
15. Australian Senate extends My Health Record opt-out period

NORTH AMERICA

16. Did you by chance hack OPM back in 2015? Good news, your password probably still works!
17. Weekly Threat Briefing: Adobe ColdFusion Servers Under Attack from APT Group
18. Google services collapsed due to BGP leak
19. Google services collapsed due to BGP leak
20. Magecart- The Card-Skimming Group and Its Many Faces
21. Beers with Talos Ep. #41: Sex, money and malware
22. AVEVA InduSoft Web Studio and InTouch Edge HMI Critical Vulnerabilities Threat Alert
23. Facebook flaw could have exposed private info of users and their friends
24. A 100k routers around the world are on the botnet to conduct emails spam

SOUTH AMERICA

25. Weekly Threat Briefing: Adobe ColdFusion Servers Under Attack from APT Group

EUROPE

26. Weekly Threat Briefing: Adobe ColdFusion Servers Under Attack from APT Group
27. French Data Protection Authority Issues Guidance on Interaction of Blockchain Technology with GDPR
28. Google services collapsed due to BGP leak
29. Google services collapsed due to BGP leak
30. How Threat Intelligence Prioritizes Risk in Vulnerability Management
31. Monitoring file output for malicious code 'could have stopped BA attack more quickly'
32. Magecart- The Card-Skimming Group and Its Many Faces
33. Infowars Store Affected by Magecart Credit Card Stealing Hack
34. Alex Jones’ Infowars store was infected with credit card skimming software
35. Facebook flaw could have exposed private info of users and their friends
36. Big Game Hunting: The Evolution of INDRIK SPIDER From Dridex Wire Fraud to BitPaymer Targeted Ransomware

AFRICA

37. Google services collapsed due to BGP leak
38. Google services collapsed due to BGP leak

Sector brief for 2018-11-14

HEALTHCARE

1. CVE-2018-15961: Adobe ColdFusion Flaw exploited in attacks in the wild
2. Australian Senate extends My Health Record opt-out period
3. Healthcare.gov Health Data Breach Exposes Personal Data
4. Big Game Hunting: The Evolution of INDRIK SPIDER From Dridex Wire Fraud to BitPaymer Targeted Ransomware

TRANSPORT

5. A 100k routers around the world are on the botnet to conduct emails spam

BANKING & FINANCE

6. FlawedAmmy, the Only RAT in CheckPoint’s Global Threat Index 2018 List
7. 1,000 Bitcoins Ransom Asked from Media Prima After Successful Ransomware Attack
8. Weekly Threat Briefing: Adobe ColdFusion Servers Under Attack from APT Group
9. Magecart Cybercrime Groups Harvest Payment Card Data
10. How Threat Intelligence Prioritizes Risk in Vulnerability Management
11. Monitoring file output for malicious code 'could have stopped BA attack more quickly'
12. Operation FastCash
13. Magecart- The Card-Skimming Group and Its Many Faces
14. Infowars Store Affected by Magecart Credit Card Stealing Hack
15. Alex Jones’ Infowars store was infected with credit card skimming software
16. BDO Unibank Warned its Customers to Remain Beware from New Phishing Scheme
17. Healthcare.gov Health Data Breach Exposes Personal Data
18. Big Game Hunting: The Evolution of INDRIK SPIDER From Dridex Wire Fraud to BitPaymer Targeted Ransomware

INFORMATION & TELECOMMUNICATION

19. Bitcoin Giveaway Scam Balloons, with Google the Latest Victim
20. 1,000 Bitcoins Ransom Asked from Media Prima After Successful Ransomware Attack
21. Weekly Threat Briefing: Adobe ColdFusion Servers Under Attack from APT Group
22. Google services collapsed due to BGP leak
23. Google services collapsed due to BGP leak
24. Facebook vulnerability could have leaked your private information – again
25. How Threat Intelligence Prioritizes Risk in Vulnerability Management
26. Business Email Compromise - When You Don’t Need to Phish:
27. Is it time to change your password? Check out this list of the 25 worst passwords for 2018 and make
28. A Large Retailer Responds to #DDoS Extortion: To Pay or Not to Pay?
29. Microsoft covertly collects personal data from enterprise Office ProPlus users
30. Facebook reportedly fixes search bug that could have threatened user privacy
31. Beers with Talos Ep. #41: Sex, money and malware
32. A #bug allowing websites to capture private data from Facebook users through Chrome has been discovered:
33. Cyber security is a process: Prevent, Detect, Respond, Predict. @5ean5ullivan @FSecure @ohjelmisto_ry
34. Are you safe on social? "Countering the Social Hack" a 5-step process from ZF CEO @FirstNameFoster in @BRINKNewsNow
35. Facebook flaw could have exposed private info of users and their friends
36. Bitcoin fraud on the official Twitter account of Google GSuite
37. Exploits confirmed! Congrats to F-Secure’s @MWRLabs team for another great #Pwn2Own performance. @thezdi
38. BDO Unibank Warned its Customers to Remain Beware from New Phishing Scheme
39. New Press Release: Team from @FSecure's @MWRLabs demos exploits for previously undisclosed vulnerabilities at Mobile #Pwn2Own competition -
40. Facebook Patches Another Vulnerability That Exposed User’s Private Information
41. A 100k routers around the world are on the botnet to conduct emails spam
42. Big Game Hunting: The Evolution of INDRIK SPIDER From Dridex Wire Fraud to BitPaymer Targeted Ransomware

FOOD

Nil

WATER

Nil

ENERGY

Nil

GOVERNMENT & PUBLIC SERVICE

43. Did you by chance hack OPM back in 2015? Good news, your password probably still works!
44. Weekly Threat Briefing: Adobe ColdFusion Servers Under Attack from APT Group
45. Cyber espionage group used CVE-2018-8589 Windows Zero-Day in Middle East Attacks
46. CVE-2018-15961: Adobe ColdFusion Flaw exploited in attacks in the wild
47. CyberSecurity Asean security alert on A Vulnerability in Cisco Unity Express Could Allow for Arbitrary Code Execution
48. Hunt finally submits to My Health Record arm-twists as opt-out window extended
49. Healthcare.gov Health Data Breach Exposes Personal Data
50. Senate votes to extend My Health Record opt-out to January 31

Daily brief for 2018-11-14

ASIA

1. 1,000 Bitcoins Ransom Asked from Media Prima After Successful Ransomware Attack
2. Weekly Threat Briefing: Adobe ColdFusion Servers Under Attack from APT Group
3. Google services collapsed due to BGP leak
4. Google services collapsed due to BGP leak
5. Chinese APT Group Exploit Fixed Critical Adobe ColdFusion Vulnerability On Unpatched Servers
6. CVE-2018-15961: Adobe ColdFusion Flaw exploited in attacks in the wild
7. How Threat Intelligence Prioritizes Risk in Vulnerability Management
8. Cathay Apologizes Over Data Breach but Denies Cover-up
9. Operation FastCash
10. Magecart- The Card-Skimming Group and Its Many Faces
11. AVEVA InduSoft Web Studio and InTouch Edge HMI Critical Vulnerabilities Threat Alert
12. Facebook flaw could have exposed private info of users and their friends
13. BDO Unibank Warned its Customers to Remain Beware from New Phishing Scheme

WORLD

14. Did you by chance hack OPM back in 2015? Good news, your password probably still works!
15. Weekly Threat Briefing: Adobe ColdFusion Servers Under Attack from APT Group
16. French Data Protection Authority Issues Guidance on Interaction of Blockchain Technology with GDPR
17. Google services collapsed due to BGP leak
18. Google services collapsed due to BGP leak
19. How Threat Intelligence Prioritizes Risk in Vulnerability Management
20. Monitoring file output for malicious code 'could have stopped BA attack more quickly'
21. Magecart- The Card-Skimming Group and Its Many Faces
22. Infowars Store Affected by Magecart Credit Card Stealing Hack
23. Australian Senate extends My Health Record opt-out period
24. Alex Jones’ Infowars store was infected with credit card skimming software
25. Beers with Talos Ep. #41: Sex, money and malware
26. AVEVA InduSoft Web Studio and InTouch Edge HMI Critical Vulnerabilities Threat Alert
27. Facebook flaw could have exposed private info of users and their friends
28. A 100k routers around the world are on the botnet to conduct emails spam
29. Big Game Hunting: The Evolution of INDRIK SPIDER From Dridex Wire Fraud to BitPaymer Targeted Ransomware

ATTACKS

30. 21K Donors Had Their Personal Info Leaked Following Kars4Kids Data Breach
31. Did you by chance hack OPM back in 2015? Good news, your password probably still works!
32. Google services collapsed due to BGP leak
33. Google services collapsed due to BGP leak
34. Facebook vulnerability could have leaked your private information – again
35. Cathay Apologizes Over Data Breach but Denies Cover-up
36. Business Email Compromise - When You Don’t Need to Phish:
37. Is it time to change your password? Check out this list of the 25 worst passwords for 2018 and make
38. Australian Senate extends My Health Record opt-out period
39. Support wouldn’t change his password, so he mailed them a bomb
40. The July edition of Beazley Breach Insights found that business email compromise attacks have been rising steadily. Is business email
41. Microsoft covertly collects personal data from enterprise Office ProPlus users
42. Facebook flaw could have exposed private info of users and their friends
43. Hunt finally submits to My Health Record arm-twists as opt-out window extended
44. This year’s success adds to @MWRLabs’ #Pwn2Own existing track record, which includes demo attacks against Chrome.
45. The @mwrlabs research team used zero-day vulnerabilities to compromise smart phones from Xiaomi and Samsung.
46. Public get Warning from Scotts Bluff County Sheriff’s Office about a Phishing Email Scam
47. BDO Unibank Warned its Customers to Remain Beware from New Phishing Scheme
48. Healthcare.gov Health Data Breach Exposes Personal Data
49. Facebook Patches Another Vulnerability That Exposed User’s Private Information
50. Senate votes to extend My Health Record opt-out to January 31

THREATS

51. 'Mylobot' botnet now downloading second-stage malware meant to siphon data
52. FlawedAmmy, the Only RAT in CheckPoint’s Global Threat Index 2018 List
53. Bitcoin Giveaway Scam Balloons, with Google the Latest Victim
54. Microsoft Patches RCE Vulnerabilities in Word, Excel, and Windows Search
55. 1,000 Bitcoins Ransom Asked from Media Prima After Successful Ransomware Attack
56. Ad-Injecting Mac Malware Rediscovered
57. French Data Protection Authority Issues Guidance on Interaction of Blockchain Technology with GDPR
58. Siemens Patches Firewall Flaw That Put Operations at Risk
59. Chinese APT Group Exploit Fixed Critical Adobe ColdFusion Vulnerability On Unpatched Servers
60. Facebook vulnerability could have leaked your private information – again
61. Cyber espionage group used CVE-2018-8589 Windows Zero-Day in Middle East Attacks
62. CVE-2018-15961: Adobe ColdFusion Flaw exploited in attacks in the wild
63. How Threat Intelligence Prioritizes Risk in Vulnerability Management
64. Monitoring file output for malicious code 'could have stopped BA attack more quickly'
65. Hackers Taking Over Websites Due to WordPress GDPR Plugin Flaw
66. November 2018 Patch Tuesday: Microsoft fixes 63 flaws, one actively exploited zero-day
67. It's Amateur Hour In The World Of Spyware And Victims Will Pay The Price
68. Cryptojacking, Mobile Malware Growing Threats to the Enterprise
69. A bypass was found by @okta researchers that allows #macOS #malware to pose as @Apple files despite needing to be
70. Siemens Releases 7 Advisories for SIMATIC, SCALANCE Vulnerabilities
71. Targeted ransomware attacks – SophosLabs 2019 Threat Report
72. Why cryptojacking malware is a bigger threat to your PC than you realise
73. Adobe Patch Tuesday updates for November 2018 fix known Acrobat flaw
74. Don’t fall for fake NEO, Tether and MetaMask cryptocurrency wallets on Google Play
75. Researchers recently discovered a new #MacOS #malware that targets #cryptocurrency investors through chat platforms. Discover how this is possible and
76. Zero-day Windows exploit fix stars in November Patch Tuesday
77. Holiday Shopping Tip 1: Inoculate Your Computer You need to protect against malware with regular updates to your anti-virus program and
78. Researchers demo how machine learning can be used to track Gh0st RAT variants
79. This remote access trojan just popped up on malware's most wanted list
80. Microsoft's Patch Tuesday addresses Zero Day vulnerabilities
81. Do you believe that the application #security vetting process would benefit from the addition of an entropy source?
82. Facebook reportedly fixes search bug that could have threatened user privacy
83. How does signed software help mitigate malware?
84. CyberSecurity Asean security alert on A Vulnerability in Cisco Unity Express Could Allow for Arbitrary Code Execution
85. November Patch Tuesday Fixes Another Zero-Day Win32k Bug, Other Public Vulnerabilities
86. Beers with Talos Ep. #41: Sex, money and malware
87. AVEVA InduSoft Web Studio and InTouch Edge HMI Critical Vulnerabilities Threat Alert
88. A #bug allowing websites to capture private data from Facebook users through Chrome has been discovered:
89. Microsoft Patches Windows Zero-Day Exploited in Cyber Attacks
90. Cyber security is a process: Prevent, Detect, Respond, Predict. @5ean5ullivan @FSecure @ohjelmisto_ry
91. Are you safe on social? "Countering the Social Hack" a 5-step process from ZF CEO @FirstNameFoster in @BRINKNewsNow
92. 7 New Meltdown and Spectre-type CPU Flaws Affect Intel, AMD, ARM CPUs
93. APT Group Uses Windows Zero-Day in Middle East Attacks
94. Facebook flaw could have exposed private info of users and their friends
95. A new exploit for zero-day vulnerability CVE-2018-8589
96. Bitcoin fraud on the official Twitter account of Google GSuite
97. Adobe November Security Update: fixes multiple vulnerabilities in its products
98. Microsoft Released Security Updates & Fixed More than 60 Vulnerabilities Along with Active Windows Zero day
99. Ransomware is the leading cyber threat experienced by SMBs
100. FlawedAmmy: Dangerous RAT enteres most wanted malware list
101. The @mwrlabs research team used zero-day vulnerabilities to compromise smart phones from Xiaomi and Samsung.
102. Exploits confirmed! Congrats to F-Secure’s @MWRLabs team for another great #Pwn2Own performance. @thezdi
103. New Press Release: Team from @FSecure's @MWRLabs demos exploits for previously undisclosed vulnerabilities at Mobile #Pwn2Own competition -
104. Facebook Patches Another Vulnerability That Exposed User’s Private Information
105. Key takeaways from Datto’s State of the Channel Ransomware Report 2018
106. 63 New Flaws (Including 0-Days) Windows Users Need to Patch Now
107. Card skimming malware removed from Infowars online store
108. Big Game Hunting: The Evolution of INDRIK SPIDER From Dridex Wire Fraud to BitPaymer Targeted Ransomware
109. Confirmed! The @mwrlabs team used a download bug along with a silent app installation to load their custom app and

CRIME

110. Bitcoin Giveaway Scam Balloons, with Google the Latest Victim
111. Weekly Threat Briefing: Adobe ColdFusion Servers Under Attack from APT Group
112. Magecart Cybercrime Groups Harvest Payment Card Data
113. French Data Protection Authority Issues Guidance on Interaction of Blockchain Technology with GDPR
114. Operation FastCash
115. Business Email Compromise - When You Don’t Need to Phish:
116. Magecart- The Card-Skimming Group and Its Many Faces
117. A Large Retailer Responds to #DDoS Extortion: To Pay or Not to Pay?
118. Australian Senate extends My Health Record opt-out period
119. The July edition of Beazley Breach Insights found that business email compromise attacks have been rising steadily. Is business email
120. Beers with Talos Ep. #41: Sex, money and malware
121. Bitcoin fraud on the official Twitter account of Google GSuite
122. Adobe November Security Update: fixes multiple vulnerabilities in its products
123. Public get Warning from Scotts Bluff County Sheriff’s Office about a Phishing Email Scam
124. BDO Unibank Warned its Customers to Remain Beware from New Phishing Scheme
125. Healthcare.gov Health Data Breach Exposes Personal Data
126. Big Game Hunting: The Evolution of INDRIK SPIDER From Dridex Wire Fraud to BitPaymer Targeted Ransomware

POLITICS

127. FlawedAmmy, the Only RAT in CheckPoint’s Global Threat Index 2018 List
128. Weekly Threat Briefing: Adobe ColdFusion Servers Under Attack from APT Group
129. Cyber espionage group used CVE-2018-8589 Windows Zero-Day in Middle East Attacks
130. CVE-2018-15961: Adobe ColdFusion Flaw exploited in attacks in the wild
131. Alex Jones’ Infowars store was infected with credit card skimming software

APT report for 2018-11-13

TRANSNATIONAL / UNKNOWN

1. Magecart Cybercrime Groups Mass Harvest Payment Card Data
2. Seven Hacking Groups Operate Under “Magecart” Umbrella, Analysis Shows
3. That Domain You Forgot to Renew? Yeah, it’s Now Stealing Credit Cards
4. Getting to Know Magecart: An Inside Look at 7 Groups
5. How Magecart groups are stealing your card details from online stores
6. Inside Magecart: RiskIQ and Flashpoint Release Comprehensive Report on the Assault on E-Commerce
7. ‘Inside Magecart’ Exposes the Operation Behind the Web’s Biggest E-Commerce Scourge
8. #Gallmaker eschews custom malware, uses living off the land and publicly available #hack tools. Find out more:
9. Compromised security in millions of cards in the US

CHINA

10. Chinese Threat Actor TEMP.Periscope Targets UK-Based Engineering Company Using Russian APT Techniques

INDIA

Nil

NORTH KOREA

11. The Tactic Cybercriminals Use to Steal Bitcoin

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

12. The Cybersecurity Tech Accord endorses the Paris Call
13. Chinese Threat Actor TEMP.Periscope Targets UK-Based Engineering Company Using Russian APT Techniques

SERBIA

Nil

UKRAINE

14. Chinese Threat Actor TEMP.Periscope Targets UK-Based Engineering Company Using Russian APT Techniques

Platform report for 2018-11-13

WINDOWS

1. Microsoft’s Patch Tuesday updates for November 2018 fix actively exploited Windows flaw
2. Microsoft Patches Zero-Day Bug in Win7, Server 2008 and 2008 R2
3. Microsoft Patches Actively Exploited Windows Vulnerability
4. Microsoft patches Windows zero-day used by multiple cyber-espionage groups
5. XSS Vulnerability in Evernote Allows Local File Execution
6. Microsoft November 2018 Patch Tuesday Fixes 12 Critical Vulnerabilities
7. Chinese Threat Actor TEMP.Periscope Targets UK-Based Engineering Company Using Russian APT Techniques
8. Cryptocurrency Mining Malware uses Various Evasion Techniques.
9. Microsoft Patch Tuesday — November 2018: Vulnerability disclosures and Snort coverage
10. The Tactic Cybercriminals Use to Steal Bitcoin
11. WebCobra Malware Uses Victims’ Computers to Mine Cryptocurrency
12. WebCobra Malware Uses Victims’ Computers to Mine Cryptocurrency
13. Leak: Windows 10 October Update will be re-launched tomorrow

LINUX

14. The Tactic Cybercriminals Use to Steal Bitcoin

UNIX

Nil

ANDROID

15. Fake Crypto Wallet Apps Discovered in Google Play, Built Using Drag-n-Drop
16. Unpatched Android OS Flaw Allows Adversaries to Track User Location
17. Call Recorder App on Google Play with Over 5,000 Installs Contains Hidden Malware Dropper

IOS

Nil

MACOS

18. The Tactic Cybercriminals Use to Steal Bitcoin

Threat report for 2018-11-13

DATA BREACH & DATA LOSS

1. Cathay Pacific In Hot Water: Data Breach Started March 2018, Not October 2018
2. Cathay Says 'Most Intense' Period of Data Breach Lasted Months
3. Nordstrom Reveals Data Breach, Sensitive Employee Information Exposed
4. Nordstrom Data Breach Exposes Employee Information
5. Nordstrom Quick to Tell Employees of a Data Breach
6. Former Employee Accessed Medical Records For Nearly a Year
7. Sophisticated cyber-espionage campaign targeting Pakistani government and air force
8. Dropbox Account Phishing Campaign
9. The Ontario Cannabis Store has reported a data breach that took place Nov. 1 through the Canada Post and affected
10. Another Facebook Bug Could Have Exposed Your Private Information
11. Google Services down due to BGP leak, traffic hijacked through Russia, China, and Nigeria
12. Sophisticated Campaign Targets Pakistan's Air Force
13. Google Services Inaccessible Due to BGP Leak
14. Beware !! Worlds Most Active Malware Emotet Launching New Campaign With Malicious Word and PDF Attachments
15. Compromised security in millions of cards in the US
16. Leak: Windows 10 October Update will be re-launched tomorrow

DENIAL-OF-SERVICE

Nil

MALVERTISING

17. Malvertising is what happens when attackers buy ad space in popular, legit websites and load them with ads infected by

PHISHING

18. Why Gen Z has the most dangerous password practices
19. Dropbox Account Phishing Campaign
20. Password manager: 85% want their password to be protected against hackers
21. How did @Google eliminate successful #PhishingAttacks? Learn how employees used U2F authentication and physical #SecurityKeys to defend against phishing from
22. To help you rule out the worst password ideas, FrontNet has put together a list of the 25 words passwords

WEB DEFACEMENT

Nil

BOTNET

23. Security cameras – a latent botnet network?
24. A new #botnet -- #Mylobot -- has shown new, complex levels of tools and techniques that are subsequently altering botnet
25. New #spam #botnet infected over 100,000 home routers through a UPnP vulnerability, according to researchers at @360Netlab. By @MaddieBacon11
26. How does the Mylobot botnet differ from a typical botnet?

RANSOMWARE

27. What MSPs can learn from Datto’s Channel Ransomware Report
28. Premier Media Conglomerate of Malaysia, Falls for Ransomware Infection
29. Why WannaCry ransomware is still a threat to your PC
30. Ransomware no. 1 cyberthreat to SMBs, and the average attack costs $47K
31. Ransomware Attack on City of Muscatine Shutdown Several Servers

CRYPTOMINING & CRYPTOCURRENCIES

32. Fake Crypto Wallet Apps Discovered in Google Play, Built Using Drag-n-Drop
33. Target and other high profile Twitter accounts exploited for cryptocurrency scams
34. Cryptocurrency Mining Malware uses Various Evasion Techniques.
35. The Tactic Cybercriminals Use to Steal Bitcoin
36. Attacker hijacks Elon Musk Twitter account to implement fake bitcoin fraud
37. Data61 and CBA demonstrate blockchain welfare payments
38. WebCobra Malware Uses Victims’ Computers to Mine Cryptocurrency
39. WebCobra Malware Uses Victims’ Computers to Mine Cryptocurrency
40. Illegal cryptocurrency mining
41. Twitter grapples with fake Elon Musk accounts promoting bitcoin scams

MALWARE

42. Triton ICS Malware
43. Scare Force: Pakistan military hit by Operation Shaheen malware
44. Pakistan Military Hit By Operation Shaheen Malware
45. That Domain You Forgot to Renew? Yeah, it’s Now Stealing Credit Cards
46. What’s on Our Minds for 2019? Key Themes from the RSA Speaker Selection Process
47. It’s Amateur Hour in the World of Spyware and Victims Will Pay the Price
48. Cryptocurrency Mining Malware uses Various Evasion Techniques.
49. Call Recorder App on Google Play with Over 5,000 Installs Contains Hidden Malware Dropper
50. #Gallmaker eschews custom malware, uses living off the land and publicly available #hack tools. Find out more:
51. Using Machine Learning to Cluster Malicious Network Flows From Gh0st RAT Variants
52. How is Plead #malware used for #cyberespionage attacks? Learn more with Michael Cobb of @thehairyITdog.
53. U.S. Cyber Command #malware samples will be shared to #VirusTotal by the Cyber National Mission Force and one expert said
54. Beware !! Worlds Most Active Malware Emotet Launching New Campaign With Malicious Word and PDF Attachments
55. WebCobra Malware Uses Victims’ Computers to Mine Cryptocurrency
56. WebCobra Malware Uses Victims’ Computers to Mine Cryptocurrency
57. 12 Warning Signs That Help Identify Malware Infection

EXPLOIT

58. Attackers exploit flaw in GDPR-themed WordPress plugin to hijack websites
59. Ruby taken off the rails by deserialization exploit
60. Attackers exploit GDPR compliance plug-in for WordPress

VULNERABILITY

61. Microsoft’s Patch Tuesday updates for November 2018 fix actively exploited Windows flaw
62. Microsoft Patches Zero-Day Bug in Win7, Server 2008 and 2008 R2
63. Microsoft Patches Actively Exploited Windows Vulnerability
64. Fixed Facebook Privacy Bug Could Have Allowed Bad Actors to Steal Personal Info
65. Microsoft patches Windows zero-day used by multiple cyber-espionage groups
66. Adobe Patches Disclosed Acrobat Vulnerability
67. SAP Patches Critical Vulnerability in HANA Streaming Analytics
68. Facebook flaw opened your profile to data thieves
69. Adobe Releases Security Update for Acrobat Vulnerability with Public PoC
70. Unpatched Android OS Flaw Allows Adversaries to Track User Location
71. Microsoft Patch Tuesday Recap: 12 Critical Bugs Fixed
72. Adobe Fixes Acrobat and Reader Flaw With Publicly-Available PoC
73. Facebook Patches Another User Data Harvesting Bug
74. XSS Vulnerability in Evernote Allows Local File Execution
75. Vulnerabilities in Solid-State Drives Can Be Exploited to Decrypt Data
76. Side-Channel Vulnerability Could Be Exploited to Steal Data
77. Zero-Day Vulnerability in Cisco Products Could Cause DoS Condition
78. Attackers exploit flaw in GDPR-themed WordPress plugin to hijack websites
79. Facebook Bug Let Websites Access Private User Data
80. Microsoft November 2018 Patch Tuesday Fixes 12 Critical Vulnerabilities
81. Facebook patches another bug that could have allowed mass-harvesting of user data
82. Microsoft Patch Tuesday — November 2018: Vulnerability disclosures and Snort coverage
83. Another Facebook Bug Could Have Exposed Your Private Information
84. New #spam #botnet infected over 100,000 home routers through a UPnP vulnerability, according to researchers at @360Netlab. By @MaddieBacon11
85. Microsoft Word Doc bug using online video feature found in wild
86. Check Point Researchers Reported Vulnerabilities in Market-Leading Drone Platform, Enabling Manufacturer to Bolster Security
87. Zero Day vulnerability in VirtualBox is disclosed