APT report for 2018-11-16

TRANSNATIONAL / UNKNOWN

1. InfoWars: Magecart Infection Points to 'Industrial Sabotage'
2. Reappearance of Magecart Malware to Infect Virtual Stores
3. Operation Shaheen – Pakistan Air Force members targeted by nation-state attackers
4. Cyber News Rundown: Infowars Hacked by Card Skimmers
5. INDRIK SPIDER and BitPaymer
6. Two hacker groups attacked Russian banks posing as the Central Bank of Russia
7. Magecart become close to a household name with hacks of massive sites like http://Ticketmaster.com , http://Newegg.com and British Airways.

CHINA

Nil

INDIA

Nil

NORTH KOREA

8. Group-IB presented latest cybercrime and nation-state hacking trends in Asia
9. Looking Back at LogRhythm Labs' 2018 Predictions for Security - How Did We Do?

PAKISTAN

Nil

VIETNAM

Nil

IRAN

10. Analyzing OilRig’s Ops Tempo from Testing to Weaponization to Delivery

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

11. Russian APT comes back to life with new US spear-phishing campaign
12. Group-IB presented latest cybercrime and nation-state hacking trends in Asia
13. VB2018 video: Shedding skin - Turla's fresh faces
14. Cybaze ZLab- Yoroi team spotted a new variant of the APT28 Lojax rootkit

SERBIA

Nil

UKRAINE

15. Group-IB presented latest cybercrime and nation-state hacking trends in Asia
16. Two hacker groups attacked Russian banks posing as the Central Bank of Russia

Platform report for 2018-11-16

WINDOWS

1. Stealthy DarkGate Cryptocurrency Mining and Ransomware Evades AV Detection
2. Using Microsoft Powerpoint as Malware Dropper
3. Analyzing OilRig’s Ops Tempo from Testing to Weaponization to Delivery
4. This Week in Security News: Holiday Cybercriminals & Cryptomining Malware
5. Amid calls for a Windows bug status dashboard, Microsoft belatedly agrees to build one
6. Kaspersky Announces the Details of Windows 7 Zero-Day Vulnerability

LINUX

7. This Week in Security News: Holiday Cybercriminals & Cryptomining Malware
8. Scanning Akamai's Edge Servers for Vulnerabilities, Correctly

UNIX

Nil

ANDROID

9. Simple Call Recorder Android Malware
10. Four More Malicious Cryptocurrency Apps on Google Play

IOS

Nil

MACOS

Nil

Threat report for 2018-11-16

DATA BREACH & DATA LOSS

1. Russian APT comes back to life with new US spear-phishing campaign
2. EgressBuster – Compromise Victim via Command & Control using Firewall
3. Voxox Database Containing Around 26 Million SMS Entries Exposed 2FA, Reset Codes
4. China's Hack Attacks: An Economic Espionage Campaign
5. New HealthEquity Data Breach Exposes PII/PHI of Almost 21,000 Customers
6. AWS Adds New Feature for Preventing Data Leaks
7. Details of 170,000 Pakistani debit cards leaked on dark web
8. AWS rolls out new security feature to prevent accidental S3 data leaks
9. Google BGP route leak was accidental, not hijacking
10. After early speculation of #malicious intent, experts said an accidental misconfiguration caused the BGP route leak that sent traffic destined
11. After 2015 OPM data breach, agency failed to update security
12. 26M Texts Exposed in Poorly Secured Vovox Database
13. Data Breaches on the Rise in Financial Services
14. SUNY Upstate Hospital announced a former employee inappropriately accessed more than 1,200 patient records.
15. 2FA codes are great for security, except when 26M of them are leaked
16. Business email compromise attacks cost over $676 million in 2017, according to the @FBI's Internet #CrimeReport. Learn how to recognize
17. #GroupIB #ThreatIntelligence detected large set of compromised payment cards details that was put on sale on underground card shop on
18. French Company Data Breach Causes Sensitive Information Stolen to the Hackers
19. Text message database reportedly leaked password resets
20. New variants of Meltdown and Spectre cause information leaks

DENIAL-OF-SERVICE

Nil

MALVERTISING

Nil

PHISHING

21. Russian APT comes back to life with new US spear-phishing campaign
22. Gmail Glitch Offers Stealthy Trick for Phishing Attacks
23. Russian Banks Hit By Major Phishing Attacks
24. How to Stay One Step Ahead of Phishing Websites — Literally
25. Emotet has some customized phish for you
26. Russian banks hit by major phishing attacks from two hacker groups
27. Word of the Day: social engineering
28. Create and enforce a password policy across the enterprise
30. Massive Rise is Seen in Phishing Attacks
31. Warning Issued by Emirates NBD over VAT Phishing Email Targeting its Customers
32. Text message database reportedly leaked password resets
33. Consider a reputable password manager to store your information, and don’t forget to use a strong password to secure the

WEB DEFACEMENT

Nil

BOTNET

34. phpMyAdmin Servers Targeted By New Variant of Muhstik Botnet
35. NTT Security Adds Botnet Infrastructure Detection to Managed Security Services
36. Mylobot Botnet Now Exfiltrates Data Using Second Stage Khalesi Trojan

RANSOMWARE

37. Stealthy DarkGate Cryptocurrency Mining and Ransomware Evades AV Detection
38. SamSam and GandCrab Illustrate Evolution of Ransomware
39. Hacking group returns, switches attacks from ransomware to trojan malware
40. .@TalosSecurity recently created a #decryptor that helps files affected by the #ransomware #Thanatos -- typically known to not decrypt files
41. Malaysia’s Largest Media Company Allegedly Suffers Ransomware Attack
42. Hacking group returns, switches attacks from ransomware to trojan malware
43. Hackers infect Malaysia’s largest media company with ransomware, then demand $6.45 million
44. How does Thanatos ransomware decryptor tool restore data?
45. SentinelOne Detects KeyPass Ransomware! KeyPass is a new ransomware threat that has hit at least 20 countries and appears to be

CRYPTOMINING & CRYPTOCURRENCIES

46. Cryptocurrency Trader Gets 15 Months of Jail for Stealing Bitcoin, Litecoin
47. Stealthy DarkGate Cryptocurrency Mining and Ransomware Evades AV Detection
48. This Week in Security News: Holiday Cybercriminals & Cryptomining Malware
49. Most antivirus programs fail to detect this cryptocurrency-stealing malware
50. Hackers stole millions from ATMs across the world. @verge shares details here.
51. Four More Malicious Cryptocurrency Apps on Google Play
52. Google, US and Israeli politician Twitter accounts hijacked to promote 'Elon Musk' Bitcoin scam
53. 5 Top Techniques for Testing Blockchain Apps
54. Digital identity, the blockchain and the GDPR: A round peg in a square hole?
55. New WebCobra Cryptojacking Malware Uses Platform Specific Miners

MALWARE

56. EgressBuster – Compromise Victim via Command & Control using Firewall
57. Reappearance of Magecart Malware to Infect Virtual Stores
58. Using Microsoft Powerpoint as Malware Dropper
59. Hacking group returns, switches attacks from ransomware to trojan malware
60. This Week in Security News: Holiday Cybercriminals & Cryptomining Malware
61. Simple Call Recorder Android Malware
62. After early speculation of #malicious intent, experts said an accidental misconfiguration caused the BGP route leak that sent traffic destined
63. Cybaze ZLab- Yoroi team spotted a new variant of the APT28 Lojax rootkit
64. Researchers at @okta found a bypass that allows #ThreatActors to pose files as legitimate @Apple files despite being #malware and
65. Most antivirus programs fail to detect this cryptocurrency-stealing malware
66. APT group TA505 testing out new modular RAT
67. tRat is a new modular RAT used by the threat actor TA505
68. Hacking group returns, switches attacks from ransomware to trojan malware
69. Malicious code hidden in advert images cost ad networks $1.13bn this year
70. Four More Malicious Cryptocurrency Apps on Google Play
71. Vaporworms: New breed of self-propagating fileless malware to emerge in 2019
72. Dridex/Locky Operators Unleash New Malware in Recent Attack
73. New WebCobra Cryptojacking Malware Uses Platform Specific Miners
74. AMD launches new mid-range graphics card RX 590 based on 12nm process
75. Mylobot Botnet Now Exfiltrates Data Using Second Stage Khalesi Trojan

EXPLOIT

Nil

VULNERABILITY

76. Up to three million kids' GPS watches can be tracked by parents... and any miscreant: Flaws spill pick-and-choose catalog for perverts
77. Critical WordPress Flaw Grants Admin Access to Any Registered Site User
78. Adobe Patch Tuesday November Fixed Multiple Information Disclosure Vulnerabilities
79. Lock-Screen Bypass Bug Quietly Patched in Handsets
80. Scanning Akamai's Edge Servers for Vulnerabilities, Correctly
81. ATM Tests Reveal Surprising Security Flaws
82. SUNY Upstate Hospital announced a former employee inappropriately accessed more than 1,200 patient records.
83. D-Link router vulnerability detailed
84. Apache Struts2 Commons FileUpload Deserialization Remote Code Execution Vulnerability (CVE-2016-100031)Threat Alert
85. Amid calls for a Windows bug status dashboard, Microsoft belatedly agrees to build one
86. Kaspersky Announces the Details of Windows 7 Zero-Day Vulnerability

Region brief for 2018-11-16

ASIA

1. InfoWars: Magecart Infection Points to 'Industrial Sabotage'
2. China's Hack Attacks: An Economic Espionage Campaign
3. Operation Shaheen – Pakistan Air Force members targeted by nation-state attackers
4. Details of 170,000 Pakistani debit cards leaked on dark web
5. Cyber News Rundown: Infowars Hacked by Card Skimmers
6. This Week in Security News: Holiday Cybercriminals & Cryptomining Malware
7. How to Stay One Step Ahead of Phishing Websites — Literally
8. Group-IB presented latest cybercrime and nation-state hacking trends in Asia
9. After early speculation of #malicious intent, experts said an accidental misconfiguration caused the BGP route leak that sent traffic destined
10. Malaysia’s Largest Media Company Allegedly Suffers Ransomware Attack
11. Hackers infect Malaysia’s largest media company with ransomware, then demand $6.45 million
12. #GroupIB #ThreatIntelligence detected large set of compromised payment cards details that was put on sale on underground card shop on
13. Google, US and Israeli politician Twitter accounts hijacked to promote 'Elon Musk' Bitcoin scam
14. Two hacker groups attacked Russian banks posing as the Central Bank of Russia
15. Apache Struts2 Commons FileUpload Deserialization Remote Code Execution Vulnerability (CVE-2016-100031)Threat Alert
16. Mylobot Botnet Now Exfiltrates Data Using Second Stage Khalesi Trojan
17. Looking Back at LogRhythm Labs' 2018 Predictions for Security - How Did We Do?

OCEANIA

Nil

NORTH AMERICA

18. Russian APT comes back to life with new US spear-phishing campaign
19. Cryptocurrency Trader Gets 15 Months of Jail for Stealing Bitcoin, Litecoin
20. Using Microsoft Powerpoint as Malware Dropper
21. Analyzing OilRig’s Ops Tempo from Testing to Weaponization to Delivery
22. This Week in Security News: Holiday Cybercriminals & Cryptomining Malware
23. Scanning Akamai's Edge Servers for Vulnerabilities, Correctly
24. Group-IB presented latest cybercrime and nation-state hacking trends in Asia
25. Hackers infect Malaysia’s largest media company with ransomware, then demand $6.45 million
26. Google, US and Israeli politician Twitter accounts hijacked to promote 'Elon Musk' Bitcoin scam
27. Two hacker groups attacked Russian banks posing as the Central Bank of Russia
28. NTT Security Adds Botnet Infrastructure Detection to Managed Security Services
29. Apache Struts2 Commons FileUpload Deserialization Remote Code Execution Vulnerability (CVE-2016-100031)Threat Alert
30. 5 Top Techniques for Testing Blockchain Apps
31. New variants of Meltdown and Spectre cause information leaks
32. New WebCobra Cryptojacking Malware Uses Platform Specific Miners
33. AMD launches new mid-range graphics card RX 590 based on 12nm process
34. Looking Back at LogRhythm Labs' 2018 Predictions for Security - How Did We Do?

SOUTH AMERICA

35. Group-IB presented latest cybercrime and nation-state hacking trends in Asia
36. New WebCobra Cryptojacking Malware Uses Platform Specific Miners
37. Mylobot Botnet Now Exfiltrates Data Using Second Stage Khalesi Trojan

EUROPE

38. Russian APT comes back to life with new US spear-phishing campaign
39. Stealthy DarkGate Cryptocurrency Mining and Ransomware Evades AV Detection
40. Using Microsoft Powerpoint as Malware Dropper
41. Operation Shaheen – Pakistan Air Force members targeted by nation-state attackers
42. Cyber News Rundown: Infowars Hacked by Card Skimmers
43. Russian Banks Hit By Major Phishing Attacks
44. This Week in Security News: Holiday Cybercriminals & Cryptomining Malware
45. Group-IB presented latest cybercrime and nation-state hacking trends in Asia
46. After early speculation of #malicious intent, experts said an accidental misconfiguration caused the BGP route leak that sent traffic destined
47. Russian banks hit by major phishing attacks from two hacker groups
48. Cybaze ZLab- Yoroi team spotted a new variant of the APT28 Lojax rootkit
49. Two hacker groups attacked Russian banks posing as the Central Bank of Russia
51. French Company Data Breach Causes Sensitive Information Stolen to the Hackers
52. Magecart become close to a household name with hacks of massive sites like http://Ticketmaster.com , http://Newegg.com and British Airways.
53. New WebCobra Cryptojacking Malware Uses Platform Specific Miners
54. Mylobot Botnet Now Exfiltrates Data Using Second Stage Khalesi Trojan
55. Looking Back at LogRhythm Labs' 2018 Predictions for Security - How Did We Do?

AFRICA

56. New WebCobra Cryptojacking Malware Uses Platform Specific Miners

Sector brief for 2018-11-16

HEALTHCARE

1. New HealthEquity Data Breach Exposes PII/PHI of Almost 21,000 Customers
2. SUNY Upstate Hospital announced a former employee inappropriately accessed more than 1,200 patient records.
3. Apache Struts2 Commons FileUpload Deserialization Remote Code Execution Vulnerability (CVE-2016-100031)Threat Alert

TRANSPORT

4. Group-IB presented latest cybercrime and nation-state hacking trends in Asia

BANKING & FINANCE

5. InfoWars: Magecart Infection Points to 'Industrial Sabotage'
6. Reappearance of Magecart Malware to Infect Virtual Stores
7. New HealthEquity Data Breach Exposes PII/PHI of Almost 21,000 Customers
8. Hacking group returns, switches attacks from ransomware to trojan malware
9. Details of 170,000 Pakistani debit cards leaked on dark web
10. Cyber News Rundown: Infowars Hacked by Card Skimmers
11. .@TalosSecurity recently created a #decryptor that helps files affected by the #ransomware #Thanatos -- typically known to not decrypt files
12. Russian Banks Hit By Major Phishing Attacks
13. How to Stay One Step Ahead of Phishing Websites — Literally
14. Group-IB presented latest cybercrime and nation-state hacking trends in Asia
15. Russian banks hit by major phishing attacks from two hacker groups
16. ATM Tests Reveal Surprising Security Flaws
17. tRat is a new modular RAT used by the threat actor TA505
18. Malaysia’s Largest Media Company Allegedly Suffers Ransomware Attack
19. Data Breaches on the Rise in Financial Services
20. Four More Malicious Cryptocurrency Apps on Google Play
21. Hackers infect Malaysia’s largest media company with ransomware, then demand $6.45 million
22. #GroupIB #ThreatIntelligence detected large set of compromised payment cards details that was put on sale on underground card shop on
23. Two hacker groups attacked Russian banks posing as the Central Bank of Russia
25. Apache Struts2 Commons FileUpload Deserialization Remote Code Execution Vulnerability (CVE-2016-100031)Threat Alert
26. 5 Top Techniques for Testing Blockchain Apps
27. Warning Issued by Emirates NBD over VAT Phishing Email Targeting its Customers
28. Looking Back at LogRhythm Labs' 2018 Predictions for Security - How Did We Do?

INFORMATION & TELECOMMUNICATION

29. InfoWars: Magecart Infection Points to 'Industrial Sabotage'
30. Gmail Glitch Offers Stealthy Trick for Phishing Attacks
31. Analyzing OilRig’s Ops Tempo from Testing to Weaponization to Delivery
32. This Week in Security News: Holiday Cybercriminals & Cryptomining Malware
33. Cybaze ZLab- Yoroi team spotted a new variant of the APT28 Lojax rootkit
34. Word of the Day: social engineering
35. SUNY Upstate Hospital announced a former employee inappropriately accessed more than 1,200 patient records.
36. 2FA codes are great for security, except when 26M of them are leaked
37. #GroupIB #ThreatIntelligence detected large set of compromised payment cards details that was put on sale on underground card shop on
38. Google, US and Israeli politician Twitter accounts hijacked to promote 'Elon Musk' Bitcoin scam
39. Two hacker groups attacked Russian banks posing as the Central Bank of Russia
40. Apache Struts2 Commons FileUpload Deserialization Remote Code Execution Vulnerability (CVE-2016-100031)Threat Alert
41. French Company Data Breach Causes Sensitive Information Stolen to the Hackers
42. Magecart become close to a household name with hacks of massive sites like http://Ticketmaster.com , http://Newegg.com and British Airways.
43. Amid calls for a Windows bug status dashboard, Microsoft belatedly agrees to build one
44. Looking Back at LogRhythm Labs' 2018 Predictions for Security - How Did We Do?
45. SentinelOne Detects KeyPass Ransomware! KeyPass is a new ransomware threat that has hit at least 20 countries and appears to be

FOOD

Nil

WATER

Nil

ENERGY

46. Group-IB presented latest cybercrime and nation-state hacking trends in Asia
47. Apache Struts2 Commons FileUpload Deserialization Remote Code Execution Vulnerability (CVE-2016-100031)Threat Alert
48. French Company Data Breach Causes Sensitive Information Stolen to the Hackers

GOVERNMENT & PUBLIC SERVICE

49. Using Microsoft Powerpoint as Malware Dropper
50. Operation Shaheen – Pakistan Air Force members targeted by nation-state attackers
51. Analyzing OilRig’s Ops Tempo from Testing to Weaponization to Delivery
52. This Week in Security News: Holiday Cybercriminals & Cryptomining Malware
53. Group-IB presented latest cybercrime and nation-state hacking trends in Asia
54. Kaspersky Announces the Details of Windows 7 Zero-Day Vulnerability
55. Looking Back at LogRhythm Labs' 2018 Predictions for Security - How Did We Do?

Daily brief for 2018-11-16

ASIA

1. InfoWars: Magecart Infection Points to 'Industrial Sabotage'
2. China's Hack Attacks: An Economic Espionage Campaign
3. Operation Shaheen – Pakistan Air Force members targeted by nation-state attackers
4. Details of 170,000 Pakistani debit cards leaked on dark web
5. Cyber News Rundown: Infowars Hacked by Card Skimmers
6. This Week in Security News: Holiday Cybercriminals & Cryptomining Malware
7. How to Stay One Step Ahead of Phishing Websites — Literally
8. Group-IB presented latest cybercrime and nation-state hacking trends in Asia
9. After early speculation of #malicious intent, experts said an accidental misconfiguration caused the BGP route leak that sent traffic destined
10. Malaysia’s Largest Media Company Allegedly Suffers Ransomware Attack
11. Hackers infect Malaysia’s largest media company with ransomware, then demand $6.45 million
12. #GroupIB #ThreatIntelligence detected large set of compromised payment cards details that was put on sale on underground card shop on
13. Google, US and Israeli politician Twitter accounts hijacked to promote 'Elon Musk' Bitcoin scam
14. Two hacker groups attacked Russian banks posing as the Central Bank of Russia
15. Apache Struts2 Commons FileUpload Deserialization Remote Code Execution Vulnerability (CVE-2016-100031)Threat Alert
16. Mylobot Botnet Now Exfiltrates Data Using Second Stage Khalesi Trojan
17. Looking Back at LogRhythm Labs' 2018 Predictions for Security - How Did We Do?

WORLD

18. Russian APT comes back to life with new US spear-phishing campaign
19. Cryptocurrency Trader Gets 15 Months of Jail for Stealing Bitcoin, Litecoin
20. Stealthy DarkGate Cryptocurrency Mining and Ransomware Evades AV Detection
21. Using Microsoft Powerpoint as Malware Dropper
22. Operation Shaheen – Pakistan Air Force members targeted by nation-state attackers
23. Analyzing OilRig’s Ops Tempo from Testing to Weaponization to Delivery
24. Cyber News Rundown: Infowars Hacked by Card Skimmers
25. Russian Banks Hit By Major Phishing Attacks
26. This Week in Security News: Holiday Cybercriminals & Cryptomining Malware
27. Scanning Akamai's Edge Servers for Vulnerabilities, Correctly
28. Group-IB presented latest cybercrime and nation-state hacking trends in Asia
29. After early speculation of #malicious intent, experts said an accidental misconfiguration caused the BGP route leak that sent traffic destined
30. Russian banks hit by major phishing attacks from two hacker groups
31. Cybaze ZLab- Yoroi team spotted a new variant of the APT28 Lojax rootkit
32. Hackers infect Malaysia’s largest media company with ransomware, then demand $6.45 million
33. Google, US and Israeli politician Twitter accounts hijacked to promote 'Elon Musk' Bitcoin scam
34. Two hacker groups attacked Russian banks posing as the Central Bank of Russia
36. NTT Security Adds Botnet Infrastructure Detection to Managed Security Services
37. Apache Struts2 Commons FileUpload Deserialization Remote Code Execution Vulnerability (CVE-2016-100031)Threat Alert
38. 5 Top Techniques for Testing Blockchain Apps
39. French Company Data Breach Causes Sensitive Information Stolen to the Hackers
40. Magecart become close to a household name with hacks of massive sites like http://Ticketmaster.com , http://Newegg.com and British Airways.
41. New variants of Meltdown and Spectre cause information leaks
42. New WebCobra Cryptojacking Malware Uses Platform Specific Miners
43. AMD launches new mid-range graphics card RX 590 based on 12nm process
44. Mylobot Botnet Now Exfiltrates Data Using Second Stage Khalesi Trojan
45. Looking Back at LogRhythm Labs' 2018 Predictions for Security - How Did We Do?

ATTACKS

46. Russian APT comes back to life with new US spear-phishing campaign
47. EgressBuster – Compromise Victim via Command & Control using Firewall
48. Voxox Database Containing Around 26 Million SMS Entries Exposed 2FA, Reset Codes
49. China's Hack Attacks: An Economic Espionage Campaign
50. Gmail Glitch Offers Stealthy Trick for Phishing Attacks
51. New HealthEquity Data Breach Exposes PII/PHI of Almost 21,000 Customers
52. AWS Adds New Feature for Preventing Data Leaks
53. Details of 170,000 Pakistani debit cards leaked on dark web
54. AWS rolls out new security feature to prevent accidental S3 data leaks
55. Russian Banks Hit By Major Phishing Attacks
56. How to Stay One Step Ahead of Phishing Websites — Literally
57. Emotet has some customized phish for you
58. Google BGP route leak was accidental, not hijacking
59. After early speculation of #malicious intent, experts said an accidental misconfiguration caused the BGP route leak that sent traffic destined
60. Russian banks hit by major phishing attacks from two hacker groups
61. After 2015 OPM data breach, agency failed to update security
62. Word of the Day: social engineering
63. 26M Texts Exposed in Poorly Secured Vovox Database
64. Create and enforce a password policy across the enterprise
65. Data Breaches on the Rise in Financial Services
66. SUNY Upstate Hospital announced a former employee inappropriately accessed more than 1,200 patient records.
67. 2FA codes are great for security, except when 26M of them are leaked
68. Business email compromise attacks cost over $676 million in 2017, according to the @FBI's Internet #CrimeReport. Learn how to recognize
69. #GroupIB #ThreatIntelligence detected large set of compromised payment cards details that was put on sale on underground card shop on
71. Massive Rise is Seen in Phishing Attacks
72. Warning Issued by Emirates NBD over VAT Phishing Email Targeting its Customers
73. French Company Data Breach Causes Sensitive Information Stolen to the Hackers
74. Text message database reportedly leaked password resets
75. Consider a reputable password manager to store your information, and don’t forget to use a strong password to secure the
76. New variants of Meltdown and Spectre cause information leaks

THREATS

77. EgressBuster – Compromise Victim via Command & Control using Firewall
78. Cryptocurrency Trader Gets 15 Months of Jail for Stealing Bitcoin, Litecoin
79. Up to three million kids' GPS watches can be tracked by parents... and any miscreant: Flaws spill pick-and-choose catalog for perverts
80. Stealthy DarkGate Cryptocurrency Mining and Ransomware Evades AV Detection
81. Reappearance of Magecart Malware to Infect Virtual Stores
82. Using Microsoft Powerpoint as Malware Dropper
83. SamSam and GandCrab Illustrate Evolution of Ransomware
84. Critical WordPress Flaw Grants Admin Access to Any Registered Site User
85. Adobe Patch Tuesday November Fixed Multiple Information Disclosure Vulnerabilities
86. Lock-Screen Bypass Bug Quietly Patched in Handsets
87. Hacking group returns, switches attacks from ransomware to trojan malware
88. .@TalosSecurity recently created a #decryptor that helps files affected by the #ransomware #Thanatos -- typically known to not decrypt files
89. This Week in Security News: Holiday Cybercriminals & Cryptomining Malware
90. Scanning Akamai's Edge Servers for Vulnerabilities, Correctly
91. Simple Call Recorder Android Malware
92. After early speculation of #malicious intent, experts said an accidental misconfiguration caused the BGP route leak that sent traffic destined
93. ATM Tests Reveal Surprising Security Flaws
94. Cybaze ZLab- Yoroi team spotted a new variant of the APT28 Lojax rootkit
95. Researchers at @okta found a bypass that allows #ThreatActors to pose files as legitimate @Apple files despite being #malware and
96. Most antivirus programs fail to detect this cryptocurrency-stealing malware
97. APT group TA505 testing out new modular RAT
98. tRat is a new modular RAT used by the threat actor TA505
99. Malaysia’s Largest Media Company Allegedly Suffers Ransomware Attack
100. Hacking group returns, switches attacks from ransomware to trojan malware
101. Malicious code hidden in advert images cost ad networks $1.13bn this year
102. Hackers stole millions from ATMs across the world. @verge shares details here.
103. SUNY Upstate Hospital announced a former employee inappropriately accessed more than 1,200 patient records.
104. Four More Malicious Cryptocurrency Apps on Google Play
105. Hackers infect Malaysia’s largest media company with ransomware, then demand $6.45 million
106. D-Link router vulnerability detailed
107. Google, US and Israeli politician Twitter accounts hijacked to promote 'Elon Musk' Bitcoin scam
108. How does Thanatos ransomware decryptor tool restore data?
109. Vaporworms: New breed of self-propagating fileless malware to emerge in 2019
110. Apache Struts2 Commons FileUpload Deserialization Remote Code Execution Vulnerability (CVE-2016-100031)Threat Alert
111. 5 Top Techniques for Testing Blockchain Apps
112. Digital identity, the blockchain and the GDPR: A round peg in a square hole?
113. Amid calls for a Windows bug status dashboard, Microsoft belatedly agrees to build one
114. Dridex/Locky Operators Unleash New Malware in Recent Attack
115. New WebCobra Cryptojacking Malware Uses Platform Specific Miners
116. AMD launches new mid-range graphics card RX 590 based on 12nm process
117. Kaspersky Announces the Details of Windows 7 Zero-Day Vulnerability
118. Mylobot Botnet Now Exfiltrates Data Using Second Stage Khalesi Trojan
119. SentinelOne Detects KeyPass Ransomware! KeyPass is a new ransomware threat that has hit at least 20 countries and appears to be

CRIME

120. Cryptocurrency Trader Gets 15 Months of Jail for Stealing Bitcoin, Litecoin
121. Group-IB presented latest cybercrime and nation-state hacking trends in Asia
122. Cybaze ZLab- Yoroi team spotted a new variant of the APT28 Lojax rootkit
123. Hackers infect Malaysia’s largest media company with ransomware, then demand $6.45 million
124. Business email compromise attacks cost over $676 million in 2017, according to the @FBI's Internet #CrimeReport. Learn how to recognize
125. Google, US and Israeli politician Twitter accounts hijacked to promote 'Elon Musk' Bitcoin scam
126. Two hacker groups attacked Russian banks posing as the Central Bank of Russia
127. NTT Security Adds Botnet Infrastructure Detection to Managed Security Services
128. Warning Issued by Emirates NBD over VAT Phishing Email Targeting its Customers
129. French Company Data Breach Causes Sensitive Information Stolen to the Hackers
130. Looking Back at LogRhythm Labs' 2018 Predictions for Security - How Did We Do?

POLITICS

131. Up to three million kids' GPS watches can be tracked by parents... and any miscreant: Flaws spill pick-and-choose catalog for perverts
132. InfoWars: Magecart Infection Points to 'Industrial Sabotage'
133. China's Hack Attacks: An Economic Espionage Campaign
134. Operation Shaheen – Pakistan Air Force members targeted by nation-state attackers
135. This Week in Security News: Holiday Cybercriminals & Cryptomining Malware
136. Group-IB presented latest cybercrime and nation-state hacking trends in Asia