APT report for 2018-11-19

TRANSNATIONAL / UNKNOWN

1. VisionDirect Blindsided by Magecart in Data Breach
2. A week in security (November 12 – 18)
3. Collective Intelligence Podcast, Vitali Kremez on Magecart

CHINA

Nil

INDIA

Nil

NORTH KOREA

4. New ShadowTalk update looks at: New nation-state threat actor uses advanced TTPs to target Pakistan Lazarus Group’s FASTCash malware

PAKISTAN

Nil

VIETNAM

Nil

IRAN

5. Iran-Linked Hackers Use Just-in-Time Creation of Weaponized Attack Docs

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

6. Not So Cozy: An Uncomfortable Examination of a Suspected APT29 Phishing Campaign
7. Cybaze ZLab – Yoroi team analyzed malware used in recent attacks on US entities attributed to APT29
8. Russian Cozy Bear APT 29 hackers may be impersonating State Department

SERBIA

Nil

UKRAINE

9. Not So Cozy: An Uncomfortable Examination of a Suspected APT29 Phishing Campaign

Platform report for 2018-11-19

WINDOWS

1. Not So Cozy: An Uncomfortable Examination of a Suspected APT29 Phishing Campaign
2. DarkGate Malware Avoids Endpoint AV Detection
3. Cybaze ZLab – Yoroi team analyzed malware used in recent attacks on US entities attributed to APT29
4. Outlaw Group Distributes Botnet for Cryptocurrency-Mining, Scanning, and Brute-Force

LINUX

5. Finds vulnerabilities in wordpress websites using WPSCAN
6. Outlaw Group Distributes Botnet for Cryptocurrency-Mining, Scanning, and Brute-Force

UNIX

Nil

ANDROID

7. Outlaw Group Distributes Botnet for Cryptocurrency-Mining, Scanning, and Brute-Force

IOS

8. Tianfu Cup PWN hacking contest – White hat hackers earn $1 Million for Zero-Day exploits

MACOS

9. Tianfu Cup PWN hacking contest – White hat hackers earn $1 Million for Zero-Day exploits

Threat report for 2018-11-19

DATA BREACH & DATA LOSS

1. Not So Cozy: An Uncomfortable Examination of a Suspected APT29 Phishing Campaign
2. Data Leak Incident Reported by Fortune 500 Metropolitan Life Insurance Company
3. VisionDirect Blindsided by Magecart in Data Breach
4. OSIsoft Breached, All Domain Accounts, Emails, and Passwords Assumed Compromised
5. “Simplicity without Compromise” with Catalyst 9200 – Intent Based Networking Everywhere!
6. EOS.IO Smart Contract Database Walkthrough
7. Ford Eyes Use of Customers’ Personal Data to Boost Profits
8. Vision Direct Admits To Breach With CVVs Compromised
9. Instagram Bug, Now Fixed, Exposed User Passwords
10. Business email compromise scam costs Pathé $21.5 million
11. Database Misconfiguration Leaks 26 Million SMS Messages
12. The Most Damaging Election Disinformation Campaign Came From Donald Trump, Not Russia
13. SUNY Upstate Hospital announced a former employee inappropriately accessed more than 1,200 patient records.
14. Subject: Invoice. The cause of 6 out of 10 of the most effective phishing campaigns in 2018
15. Vision Direct reveals customer credit card leak, fake Google script may be to blame
16. Most Important Consideration of Confidentiality,Integrity, Availability (CIA Triad) to Avoid Organization Data Breach
17. New security feature to prevent Amazon S3 bucket misconfiguration and data leaks
18. Instagram Privacy Tool Exposed Passwords
19. Vision Direct Notifies Customers of Data Compromise
20. Proofpoint #ThreatInsight research: #sLoad and #Ramnit pairing in sustained personalized campaigns against UK and Italy:
21. Instagram Accidentally Exposed Some User Passwords
22. Email campaign spreading new tRAT malware
23. The promised integration with #HaveIBeenPwned is expanding in #FirefoxMonitor with new breach alerts when a user visits a recently compromised
24. Instagram Critical Bug Leaked User’s Password Via its Data Download Tool
25. After early speculation of #malicious intent, experts said an accidental misconfiguration caused the BGP route leak that sent traffic destined
26. Firefox automatically alerts users when you access sites that have data breaches
27. Instagram Accidentally Exposed Some Users' Passwords In Plaintext

DENIAL-OF-SERVICE

Nil

MALVERTISING

Nil

PHISHING

28. Not So Cozy: An Uncomfortable Examination of a Suspected APT29 Phishing Campaign
29. Top 5 ways to pick a secure password
30. Top 5 ways to pick a secure password
31. 2FA Login Failure in Office 365 and Azure
32. Subject: Invoice. The cause of 6 out of 10 of the most effective phishing campaigns in 2018
33. A little phishing knowledge may be a dangerous thing
34. The more you say you know about phishing, the more vulnerable you are … Until you’re hoodwinked
35. More than 50% forgot their password once at least one in the last month
36. An espionage group used stolen #DigitalCertificates to sign Plead #malware and used a password stealer component that was used in
37. How #privacy intersects with #CyberSecurity. “Criminals can craft better phishing emails to scam you when they know what you’re interested in.”
38. Review: Specops Password Policy
39. Instagram Critical Bug Leaked User’s Password Via its Data Download Tool
40. Sai quali sono i modelli più utilizzati dagli utenti per creare le proprie #password? Qui ti suggeriamo alcune 'best practice'

WEB DEFACEMENT

Nil

BOTNET

41. Outlaw Group Distributes Botnet for Cryptocurrency-Mining, Scanning, and Brute-Force
42. How do you think the #Mylobot #botnet attack will affect the future of botnets?

RANSOMWARE

43. Texas hospital becomes victim of Dharma ransomware
44. A History of Ransomware Attacks: The Biggest and Worst Ransomware Attacks of All Time
45. Wannacry Continues to be Dominant Ransomware

CRYPTOMINING & CRYPTOCURRENCIES

46. EOS.IO Smart Contract Database Walkthrough
47. Bitcoin Falls Below $5,000
48. Cryptojacking Attack Targets Make-A-Wish Foundation Website
49. WebCobra Installs Cryptominer On Victim's System
50. Outlaw Group Distributes Botnet for Cryptocurrency-Mining, Scanning, and Brute-Force
51. How can a @Trezor #cryptocurrency wallet fall victim to attack? Learn more with expert @lewisnic
52. Turkish Police Arrested Cryptocurrency Hackers

MALWARE

53. New Modular tRat Remote Access Trojan Surfaced During September
54. OSIsoft Breached, All Domain Accounts, Emails, and Passwords Assumed Compromised
55. Traps: Fighting Threats With Cloud-Based Malware Analysis
56. U.S. warns countries not to 'manipulate the extradition process' for cybercriminals
57. DarkGate Malware Avoids Endpoint AV Detection
58. New ShadowTalk update looks at: New nation-state threat actor uses advanced TTPs to target Pakistan Lazarus Group’s FASTCash malware
59. Cybaze ZLab – Yoroi team analyzed malware used in recent attacks on US entities attributed to APT29
60. An espionage group used stolen #DigitalCertificates to sign Plead #malware and used a password stealer component that was used in
61. Email campaign spreading new tRAT malware
62. After early speculation of #malicious intent, experts said an accidental misconfiguration caused the BGP route leak that sent traffic destined
63. Fun fact: The Morris Worm of 1988 did never spread to Finland, as the outbreak happened two weeks before we
64. October 2018’s Most Wanted Malware: For The First Time, Remote Access Trojan Reaches Global Threat Index’s Top 10

EXPLOIT

Nil

VULNERABILITY

65. Finds vulnerabilities in wordpress websites using WPSCAN
66. TP-Link Patches Remote Code Execution Flaws in SOHO Router
67. Tianfu Cup PWN hacking contest – White hat hackers earn $1 Million for Zero-Day exploits
68. Instagram Flaw Exposes User Passwords
69. Multiple Remote TP-Link TL-R600VPN Router Vulnerabilities Patched
70. A bug in EA Origin client exposes gamers' data
71. Vulnerabilities Dip 7%, but Researchers Are Cautious
72. Instagram Bug, Now Fixed, Exposed User Passwords
73. Vulnerability Spotlight: Multiple remote vulnerabilities in TP-Link TL-R600VPN
74. SUNY Upstate Hospital announced a former employee inappropriately accessed more than 1,200 patient records.
75. Instagram flaw exposes user passwords
76. Hackers Earn $1 Million for Zero-Day Exploits at Chinese Competition
77. Privilege escalation bug patched in Accelerated Mobile Pages WordPress plug-in
78. How does a Bluetooth vulnerability enable validation attacks?
79. How does site isolation defend against #Spectre vulnerabilities? Expert Michael Cobb of @thehairyITdog explains
80. Helping researchers with IoT firmware vulnerability discovery
81. Vulnerability Spotlight: Multiple remote vulnerabilities in TP-Link TL-R600VPN
82. Instagram Critical Bug Leaked User’s Password Via its Data Download Tool

Region brief for 2018-11-19

ASIA

1. U.S. warns countries not to 'manipulate the extradition process' for cybercriminals
2. Tianfu Cup PWN hacking contest – White hat hackers earn $1 Million for Zero-Day exploits
3. Business email compromise scam costs Pathé $21.5 million
4. The Most Damaging Election Disinformation Campaign Came From Donald Trump, Not Russia
5. Iran-Linked Hackers Use Just-in-Time Creation of Weaponized Attack Docs
6. New ShadowTalk update looks at: New nation-state threat actor uses advanced TTPs to target Pakistan Lazarus Group’s FASTCash malware
7. Hackers Earn $1 Million for Zero-Day Exploits at Chinese Competition
8. Turkish Police Arrested Cryptocurrency Hackers
9. After early speculation of #malicious intent, experts said an accidental misconfiguration caused the BGP route leak that sent traffic destined

OCEANIA

10. 2FA Login Failure in Office 365 and Azure

NORTH AMERICA

11. Not So Cozy: An Uncomfortable Examination of a Suspected APT29 Phishing Campaign
12. Finds vulnerabilities in wordpress websites using WPSCAN
13. Traps: Fighting Threats With Cloud-Based Malware Analysis
14. U.S. warns countries not to 'manipulate the extradition process' for cybercriminals
15. A week in security (November 12 – 18)
16. Business email compromise scam costs Pathé $21.5 million
17. The Most Damaging Election Disinformation Campaign Came From Donald Trump, Not Russia
18. 2FA Login Failure in Office 365 and Azure
19. Subject: Invoice. The cause of 6 out of 10 of the most effective phishing campaigns in 2018
20. New ShadowTalk update looks at: New nation-state threat actor uses advanced TTPs to target Pakistan Lazarus Group’s FASTCash malware
21. Cybaze ZLab – Yoroi team analyzed malware used in recent attacks on US entities attributed to APT29
22. Outlaw Group Distributes Botnet for Cryptocurrency-Mining, Scanning, and Brute-Force
23. Russian Cozy Bear APT 29 hackers may be impersonating State Department

SOUTH AMERICA

Nil

EUROPE

24. Not So Cozy: An Uncomfortable Examination of a Suspected APT29 Phishing Campaign
25. U.S. warns countries not to 'manipulate the extradition process' for cybercriminals
26. Business email compromise scam costs Pathé $21.5 million
27. The Most Damaging Election Disinformation Campaign Came From Donald Trump, Not Russia
28. 2FA Login Failure in Office 365 and Azure
29. DarkGate Malware Avoids Endpoint AV Detection
30. WebCobra Installs Cryptominer On Victim's System
31. Cybaze ZLab – Yoroi team analyzed malware used in recent attacks on US entities attributed to APT29
32. Proofpoint #ThreatInsight research: #sLoad and #Ramnit pairing in sustained personalized campaigns against UK and Italy:
33. Russian Cozy Bear APT 29 hackers may be impersonating State Department
34. Email campaign spreading new tRAT malware
35. After early speculation of #malicious intent, experts said an accidental misconfiguration caused the BGP route leak that sent traffic destined
36. Fun fact: The Morris Worm of 1988 did never spread to Finland, as the outbreak happened two weeks before we

AFRICA

37. The Most Damaging Election Disinformation Campaign Came From Donald Trump, Not Russia

Sector brief for 2018-11-19

HEALTHCARE

1. Not So Cozy: An Uncomfortable Examination of a Suspected APT29 Phishing Campaign
2. SUNY Upstate Hospital announced a former employee inappropriately accessed more than 1,200 patient records.
3. Texas hospital becomes victim of Dharma ransomware

TRANSPORT

Nil

BANKING & FINANCE

4. New Modular tRat Remote Access Trojan Surfaced During September
5. Tianfu Cup PWN hacking contest – White hat hackers earn $1 Million for Zero-Day exploits
6. Collective Intelligence Podcast, Vitali Kremez on Magecart
7. Business email compromise scam costs Pathé $21.5 million
8. Subject: Invoice. The cause of 6 out of 10 of the most effective phishing campaigns in 2018
9. Vision Direct reveals customer credit card leak, fake Google script may be to blame
10. Vision Direct Notifies Customers of Data Compromise
11. Email campaign spreading new tRAT malware
12. October 2018’s Most Wanted Malware: For The First Time, Remote Access Trojan Reaches Global Threat Index’s Top 10

INFORMATION & TELECOMMUNICATION

13. U.S. warns countries not to 'manipulate the extradition process' for cybercriminals
14. Tianfu Cup PWN hacking contest – White hat hackers earn $1 Million for Zero-Day exploits
15. Instagram Flaw Exposes User Passwords
16. Multiple Remote TP-Link TL-R600VPN Router Vulnerabilities Patched
17. A week in security (November 12 – 18)
18. Instagram Bug, Now Fixed, Exposed User Passwords
19. The Most Damaging Election Disinformation Campaign Came From Donald Trump, Not Russia
20. 2FA Login Failure in Office 365 and Azure
21. SUNY Upstate Hospital announced a former employee inappropriately accessed more than 1,200 patient records.
22. New ShadowTalk update looks at: New nation-state threat actor uses advanced TTPs to target Pakistan Lazarus Group’s FASTCash malware
23. Cybaze ZLab – Yoroi team analyzed malware used in recent attacks on US entities attributed to APT29
24. Outlaw Group Distributes Botnet for Cryptocurrency-Mining, Scanning, and Brute-Force
25. Instagram flaw exposes user passwords
26. Instagram Privacy Tool Exposed Passwords
27. Proofpoint #ThreatInsight research: #sLoad and #Ramnit pairing in sustained personalized campaigns against UK and Italy:
28. Instagram Accidentally Exposed Some User Passwords
29. How #privacy intersects with #CyberSecurity. “Criminals can craft better phishing emails to scam you when they know what you’re interested in.”
30. Instagram Critical Bug Leaked User’s Password Via its Data Download Tool
31. Fun fact: The Morris Worm of 1988 did never spread to Finland, as the outbreak happened two weeks before we
32. Instagram Accidentally Exposed Some Users' Passwords In Plaintext

FOOD

Nil

WATER

Nil

ENERGY

Nil

GOVERNMENT & PUBLIC SERVICE

33. Not So Cozy: An Uncomfortable Examination of a Suspected APT29 Phishing Campaign
34. U.S. warns countries not to 'manipulate the extradition process' for cybercriminals
35. The Most Damaging Election Disinformation Campaign Came From Donald Trump, Not Russia
36. Cybaze ZLab – Yoroi team analyzed malware used in recent attacks on US entities attributed to APT29
37. Russian Cozy Bear APT 29 hackers may be impersonating State Department
38. Turkish Police Arrested Cryptocurrency Hackers

Daily brief for 2018-11-19

ASIA

1. U.S. warns countries not to 'manipulate the extradition process' for cybercriminals
2. Tianfu Cup PWN hacking contest – White hat hackers earn $1 Million for Zero-Day exploits
3. Business email compromise scam costs Pathé $21.5 million
4. The Most Damaging Election Disinformation Campaign Came From Donald Trump, Not Russia
5. Iran-Linked Hackers Use Just-in-Time Creation of Weaponized Attack Docs
6. New ShadowTalk update looks at: New nation-state threat actor uses advanced TTPs to target Pakistan Lazarus Group’s FASTCash malware
7. Hackers Earn $1 Million for Zero-Day Exploits at Chinese Competition
8. Turkish Police Arrested Cryptocurrency Hackers
9. After early speculation of #malicious intent, experts said an accidental misconfiguration caused the BGP route leak that sent traffic destined

WORLD

10. Not So Cozy: An Uncomfortable Examination of a Suspected APT29 Phishing Campaign
11. Finds vulnerabilities in wordpress websites using WPSCAN
12. Traps: Fighting Threats With Cloud-Based Malware Analysis
13. U.S. warns countries not to 'manipulate the extradition process' for cybercriminals
14. A week in security (November 12 – 18)
15. Business email compromise scam costs Pathé $21.5 million
16. The Most Damaging Election Disinformation Campaign Came From Donald Trump, Not Russia
17. 2FA Login Failure in Office 365 and Azure
18. DarkGate Malware Avoids Endpoint AV Detection
19. Subject: Invoice. The cause of 6 out of 10 of the most effective phishing campaigns in 2018
20. WebCobra Installs Cryptominer On Victim's System
21. New ShadowTalk update looks at: New nation-state threat actor uses advanced TTPs to target Pakistan Lazarus Group’s FASTCash malware
22. Cybaze ZLab – Yoroi team analyzed malware used in recent attacks on US entities attributed to APT29
23. Outlaw Group Distributes Botnet for Cryptocurrency-Mining, Scanning, and Brute-Force
24. Proofpoint #ThreatInsight research: #sLoad and #Ramnit pairing in sustained personalized campaigns against UK and Italy:
25. Russian Cozy Bear APT 29 hackers may be impersonating State Department
26. Email campaign spreading new tRAT malware
27. After early speculation of #malicious intent, experts said an accidental misconfiguration caused the BGP route leak that sent traffic destined
28. Fun fact: The Morris Worm of 1988 did never spread to Finland, as the outbreak happened two weeks before we

ATTACKS

29. Not So Cozy: An Uncomfortable Examination of a Suspected APT29 Phishing Campaign
30. Data Leak Incident Reported by Fortune 500 Metropolitan Life Insurance Company
31. Top 5 ways to pick a secure password
32. VisionDirect Blindsided by Magecart in Data Breach
33. Top 5 ways to pick a secure password
34. OSIsoft Breached, All Domain Accounts, Emails, and Passwords Assumed Compromised
35. “Simplicity without Compromise” with Catalyst 9200 – Intent Based Networking Everywhere!
36. EOS.IO Smart Contract Database Walkthrough
37. Ford Eyes Use of Customers’ Personal Data to Boost Profits
38. Vision Direct Admits To Breach With CVVs Compromised
39. Instagram Bug, Now Fixed, Exposed User Passwords
40. Business email compromise scam costs Pathé $21.5 million
41. Database Misconfiguration Leaks 26 Million SMS Messages
42. The Most Damaging Election Disinformation Campaign Came From Donald Trump, Not Russia
43. 2FA Login Failure in Office 365 and Azure
44. SUNY Upstate Hospital announced a former employee inappropriately accessed more than 1,200 patient records.
45. Subject: Invoice. The cause of 6 out of 10 of the most effective phishing campaigns in 2018
46. Vision Direct reveals customer credit card leak, fake Google script may be to blame
47. A little phishing knowledge may be a dangerous thing
48. Most Important Consideration of Confidentiality,Integrity, Availability (CIA Triad) to Avoid Organization Data Breach
49. New security feature to prevent Amazon S3 bucket misconfiguration and data leaks
50. The more you say you know about phishing, the more vulnerable you are … Until you’re hoodwinked
51. Instagram Privacy Tool Exposed Passwords
52. Vision Direct Notifies Customers of Data Compromise
53. Proofpoint #ThreatInsight research: #sLoad and #Ramnit pairing in sustained personalized campaigns against UK and Italy:
54. Instagram Accidentally Exposed Some User Passwords
55. More than 50% forgot their password once at least one in the last month
56. An espionage group used stolen #DigitalCertificates to sign Plead #malware and used a password stealer component that was used in
57. How #privacy intersects with #CyberSecurity. “Criminals can craft better phishing emails to scam you when they know what you’re interested in.”
58. Email campaign spreading new tRAT malware
59. The promised integration with #HaveIBeenPwned is expanding in #FirefoxMonitor with new breach alerts when a user visits a recently compromised
60. Review: Specops Password Policy
61. Instagram Critical Bug Leaked User’s Password Via its Data Download Tool
62. After early speculation of #malicious intent, experts said an accidental misconfiguration caused the BGP route leak that sent traffic destined
63. Firefox automatically alerts users when you access sites that have data breaches
64. Instagram Accidentally Exposed Some Users' Passwords In Plaintext
65. Sai quali sono i modelli più utilizzati dagli utenti per creare le proprie #password? Qui ti suggeriamo alcune 'best practice'

THREATS

66. New Modular tRat Remote Access Trojan Surfaced During September
67. OSIsoft Breached, All Domain Accounts, Emails, and Passwords Assumed Compromised
68. Finds vulnerabilities in wordpress websites using WPSCAN
69. Traps: Fighting Threats With Cloud-Based Malware Analysis
70. U.S. warns countries not to 'manipulate the extradition process' for cybercriminals
71. TP-Link Patches Remote Code Execution Flaws in SOHO Router
72. EOS.IO Smart Contract Database Walkthrough
73. Tianfu Cup PWN hacking contest – White hat hackers earn $1 Million for Zero-Day exploits
74. Bitcoin Falls Below $5,000
75. Instagram Flaw Exposes User Passwords
76. Multiple Remote TP-Link TL-R600VPN Router Vulnerabilities Patched
77. A bug in EA Origin client exposes gamers' data
78. Vulnerabilities Dip 7%, but Researchers Are Cautious
79. Cryptojacking Attack Targets Make-A-Wish Foundation Website
80. Instagram Bug, Now Fixed, Exposed User Passwords
81. DarkGate Malware Avoids Endpoint AV Detection
82. Vulnerability Spotlight: Multiple remote vulnerabilities in TP-Link TL-R600VPN
83. SUNY Upstate Hospital announced a former employee inappropriately accessed more than 1,200 patient records.
84. WebCobra Installs Cryptominer On Victim's System
85. New ShadowTalk update looks at: New nation-state threat actor uses advanced TTPs to target Pakistan Lazarus Group’s FASTCash malware
86. Cybaze ZLab – Yoroi team analyzed malware used in recent attacks on US entities attributed to APT29
87. Outlaw Group Distributes Botnet for Cryptocurrency-Mining, Scanning, and Brute-Force
88. Texas hospital becomes victim of Dharma ransomware
89. Instagram flaw exposes user passwords
90. Hackers Earn $1 Million for Zero-Day Exploits at Chinese Competition
91. How can a @Trezor #cryptocurrency wallet fall victim to attack? Learn more with expert @lewisnic
92. Privilege escalation bug patched in Accelerated Mobile Pages WordPress plug-in
93. A History of Ransomware Attacks: The Biggest and Worst Ransomware Attacks of All Time
94. How does a Bluetooth vulnerability enable validation attacks?
95. An espionage group used stolen #DigitalCertificates to sign Plead #malware and used a password stealer component that was used in
96. How does site isolation defend against #Spectre vulnerabilities? Expert Michael Cobb of @thehairyITdog explains
97. Helping researchers with IoT firmware vulnerability discovery
98. Wannacry Continues to be Dominant Ransomware
99. Email campaign spreading new tRAT malware
100. Turkish Police Arrested Cryptocurrency Hackers
101. Vulnerability Spotlight: Multiple remote vulnerabilities in TP-Link TL-R600VPN
102. Instagram Critical Bug Leaked User’s Password Via its Data Download Tool
103. After early speculation of #malicious intent, experts said an accidental misconfiguration caused the BGP route leak that sent traffic destined
104. Fun fact: The Morris Worm of 1988 did never spread to Finland, as the outbreak happened two weeks before we
105. October 2018’s Most Wanted Malware: For The First Time, Remote Access Trojan Reaches Global Threat Index’s Top 10

CRIME

106. OSIsoft Breached, All Domain Accounts, Emails, and Passwords Assumed Compromised
107. Finds vulnerabilities in wordpress websites using WPSCAN
108. U.S. warns countries not to 'manipulate the extradition process' for cybercriminals
109. EOS.IO Smart Contract Database Walkthrough
110. A week in security (November 12 – 18)
111. Collective Intelligence Podcast, Vitali Kremez on Magecart
112. Business email compromise scam costs Pathé $21.5 million
113. The Most Damaging Election Disinformation Campaign Came From Donald Trump, Not Russia
114. Vision Direct reveals customer credit card leak, fake Google script may be to blame
115. The more you say you know about phishing, the more vulnerable you are … Until you’re hoodwinked
116. Instagram Accidentally Exposed Some User Passwords
117. An espionage group used stolen #DigitalCertificates to sign Plead #malware and used a password stealer component that was used in
118. How #privacy intersects with #CyberSecurity. “Criminals can craft better phishing emails to scam you when they know what you’re interested in.”
119. Turkish Police Arrested Cryptocurrency Hackers
120. Review: Specops Password Policy

POLITICS

121. Not So Cozy: An Uncomfortable Examination of a Suspected APT29 Phishing Campaign
122. U.S. warns countries not to 'manipulate the extradition process' for cybercriminals
123. A week in security (November 12 – 18)
124. Business email compromise scam costs Pathé $21.5 million
125. The Most Damaging Election Disinformation Campaign Came From Donald Trump, Not Russia
126. Cybaze ZLab – Yoroi team analyzed malware used in recent attacks on US entities attributed to APT29
127. Outlaw Group Distributes Botnet for Cryptocurrency-Mining, Scanning, and Brute-Force
128. The more you say you know about phishing, the more vulnerable you are … Until you’re hoodwinked
129. An espionage group used stolen #DigitalCertificates to sign Plead #malware and used a password stealer component that was used in
130. How #privacy intersects with #CyberSecurity. “Criminals can craft better phishing emails to scam you when they know what you’re interested in.”
131. Russian Cozy Bear APT 29 hackers may be impersonating State Department