Daily brief for 2018-11-29

ASIA

1. Banking Trojan Made in Brazil? A Brief Look
2. Looking Ahead: RiskIQ’s 2019 Cybersecurity Predictions
3. Indian Police Break Up International Computer Virus Scam
4. Iranian duo charged with SamSam ransomware-slinging campaign
5. U.S. DoJ charges Iranian duo over SamSam Ransomware activity
6. US charges Iranian hackers for SamSam ransomware attacks
7. US charges Iranian hackers for SamSam ransomware attacks
8. The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia
9. US Indicts Two Iranians for SamSam Campaign Blitz
10. Analysis Report of the XorDDoS Malware Family
11. Lazarus Targeting Latin America
12. Pervasive Brazilian financial malware targets bank customers in Latin America and Europe

WORLD

13. GCHQ: this is how we decide to report a security bug or keep it a secret
14. Atrium Health’s Databreach: 2.65 Million Patient Records Publicly Revealed
15. Rotexy malware morphs into dangerous banking Trojan
16. Banking Trojan Made in Brazil? A Brief Look
17. First Annual Cyberwarcon
18. Brazilian Financial Malware Spreads Beyond National Boundaries
19. USPS API Security Vulnerabilities Caused by Functional Errors
20. Accenture: Russian hackers using Brexit talks to disguise phishing lures
21. Looking Ahead: RiskIQ’s 2019 Cybersecurity Predictions
22. SamSam ransomware actors charged, sanctioned by US government
23. U.S. DoJ charges Iranian duo over SamSam Ransomware activity
24. US charges Iranian hackers for SamSam ransomware attacks
25. Pterodo Found On State Authorities' Computers In Ukraine
26. US charges Iranian hackers for SamSam ransomware attacks
27. The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia
28. US indicts two over SamSam ransomware attacks
29. US Charges Hackers in Multimillion Dollar Ransomware Campaign
30. XSS Shell- Cross Site Scripting
31. Smashing Security #106: Google Maps, Fed phishing, and Grinch bots
32. GCHQ: We don't tell tech companies about every software flaw
33. Uber fined $1.1 million by UK and Dutch regulators over 2016 data breach
34. US Indicts Two Iranians for SamSam Campaign Blitz
35. Symantec comes out in swinging in bitter legal battle over security bug audit conspiracy claims
36. Brazilian-made bank trojan
37. READ: The threat actor SNAKEMACKEREL (#FancyBear) leveraged current geopolitical events and #Brexit themed lure documents to deliver first-stage malware
38. London-based Urban Massage app leaks data on 300K customers, including sexual misconduct claims
39. Records of 114 Million US Citizen and Companies Exposed Online
40. NEW: Russian hackers using Brexit talks to disguise its phishing lures
41. McAfee Labs 2019 Threats Predictions Report
42. Lazarus Targeting Latin America
43. AccuDoc Data Breach impacted 2.6 Million Atrium Health patients
44. Pervasive Brazilian financial malware targets bank customers in Latin America and Europe
45. UK and Dutch Regulators Fined Uber for $1.1 Million over 2016 Data Breach
46. Dell Hacked – Data Breach Exposed Names, Email addresses & Hashed Passwords

ATTACKS

47. Atrium Health’s Databreach: 2.65 Million Patient Records Publicly Revealed
48. Users Failing Phishing Simulations? That’s ok
49. Dell Forces Password Reset for Online Customers Following Data Breach
50. Dell remains quiet on attempted data breach
51. Accenture: Russian hackers using Brexit talks to disguise phishing lures
52. 2.6 Million Atrium Health Patient Records Compromised by Vendor AccuDoc
53. Iranian duo charged with SamSam ransomware-slinging campaign
54. Office workers beware: Holiday gift card spear phishing attacks on the rise
55. The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia
56. Blazy – Open Source Modern Login Brute-forcer
57. SKY Brasil Exposes 32 Million Customer Records
58. US Charges Hackers in Multimillion Dollar Ransomware Campaign
59. Dunkin' Donuts Serves Up Data Breach Alert
60. Smashing Security #106: Google Maps, Fed phishing, and Grinch bots
61. Uber fined $1.1 million by UK and Dutch regulators over 2016 data breach
62. US Indicts Two Iranians for SamSam Campaign Blitz
63. London-based Urban Massage app leaks data on 300K customers, including sexual misconduct claims
64. Database breach affects 2.6 million Atrium Health patients
65. Dell data breach – Dell forces password reset after the incident
66. Records of 114 Million US Citizen and Companies Exposed Online
67. NEW: Russian hackers using Brexit talks to disguise its phishing lures
68. Threat Spotlight: New spear phishing attack gift card scam
69. How have #phishing campaigns threatened your #EnterpriseSecurity system?
70. AccuDoc Data Breach impacted 2.6 Million Atrium Health patients
71. Dell Resets User Passwords Following Data Breach
72. Atrium Health Data Breach Affected More than 2 Million Patients
73. UK and Dutch Regulators Fined Uber for $1.1 Million over 2016 Data Breach
74. Dell Hacked – Data Breach Exposed Names, Email addresses & Hashed Passwords
75. A targeted attack attempting to steal #cryptocurrency took advantage of open source software with a compromised #NPM package and experts

THREATS

76. GCHQ: this is how we decide to report a security bug or keep it a secret
77. A free decryption tool is available for Thanatos ransomware victims
78. Rotexy malware morphs into dangerous banking Trojan
79. Banking Trojan Made in Brazil? A Brief Look
80. Critical Zoom Flaw Lets Hackers Hijack Conference Meetings
81. Overall Volume of Thanksgiving Weekend Malware Attacks Lower This Year
82. Brazilian Financial Malware Spreads Beyond National Boundaries
83. USPS API Security Vulnerabilities Caused by Functional Errors
84. Colorado Agency Targeted in Nationwide Ransomware Scheme
85. Cisco Patches SQL Injection Flaw in Prime License Manager
86. SamSam ransomware actors charged, sanctioned by US government
87. Cisco Patches Critical Bug in License Management Tool
88. Indian Police Break Up International Computer Virus Scam
89. Hackers can exploit this bug in surveillance cameras to tamper with footage
90. Iranian duo charged with SamSam ransomware-slinging campaign
91. U.S. DoJ charges Iranian duo over SamSam Ransomware activity
92. A security hole in a mail preview program may have made the data of 60 million customers vulnerable.
93. US charges Iranian hackers for SamSam ransomware attacks
94. Inside the Google Docs Malicious Network
95. US charges Iranian hackers for SamSam ransomware attacks
96. The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia
97. A security researcher notified the @USPS of an #API vulnerability one year ago. But the #USPS website flaw was only
98. US indicts two over SamSam ransomware attacks
99. US Charges Hackers in Multimillion Dollar Ransomware Campaign
100. AriseBank CEO faces 120 years behind bars over alleged cryptocurrency scam
101. Beware the Malware-Laden Brexit News
102. KingMiner malware hijacks the full power of Windows Server CPUs
103. GCHQ: We don't tell tech companies about every software flaw
104. Malicious developer creates wormable, fileless variant of njRAT
105. Symantec comes out in swinging in bitter legal battle over security bug audit conspiracy claims
106. Brazilian-made bank trojan
107. READ: The threat actor SNAKEMACKEREL (#FancyBear) leveraged current geopolitical events and #Brexit themed lure documents to deliver first-stage malware
108. Proofpoint: Hackers testing new reconnaissance #malware on financial institutions.
109. Beware the Malware-Laden Brexit News https://ubm.io/2Ql2DyP by @ErickaChick
110. Analysis Report of the XorDDoS Malware Family
111. Hacker takes over JavaScript library, injects malware to steal Bitcoin
112. Widely Used Web Conference Service Zoom Patches Critical Flaw
113. A new vulnerability was discovered to affect #Bluetooth #firmware or operating system software drivers. Learn what this vulnerability is and
114. Several Malicious Apps on Google Play Posing as Voice Messenger Steal User Personal Information
115. Mobile Malware Attacks Increase as Holiday Season Nears
116. Facebook Increases Bug Bounty Payouts to Improve User Security
117. Pervasive Brazilian financial malware targets bank customers in Latin America and Europe
118. A targeted attack attempting to steal #cryptocurrency took advantage of open source software with a compromised #NPM package and experts

CRIME

119. Atrium Health’s Databreach: 2.65 Million Patient Records Publicly Revealed
120. Colorado Agency Targeted in Nationwide Ransomware Scheme
121. Looking Ahead: RiskIQ’s 2019 Cybersecurity Predictions
122. Indian Police Break Up International Computer Virus Scam
123. U.S. DoJ charges Iranian duo over SamSam Ransomware activity
124. US indicts two over SamSam ransomware attacks
125. SKY Brasil Exposes 32 Million Customer Records
126. US Charges Hackers in Multimillion Dollar Ransomware Campaign
127. AriseBank CEO faces 120 years behind bars over alleged cryptocurrency scam
128. Uber fined $1.1 million by UK and Dutch regulators over 2016 data breach
129. US Indicts Two Iranians for SamSam Campaign Blitz
130. Symantec comes out in swinging in bitter legal battle over security bug audit conspiracy claims
131. McAfee Labs 2019 Threats Predictions Report
132. Threat Spotlight: New spear phishing attack gift card scam
133. AccuDoc Data Breach impacted 2.6 Million Atrium Health patients
134. Pervasive Brazilian financial malware targets bank customers in Latin America and Europe
135. UK and Dutch Regulators Fined Uber for $1.1 Million over 2016 Data Breach
136. The Justice Department, FBI and several tech and cybersecurity companies have dismantled the #3ve #botnet, and eight individuals have been

POLITICS

137. GCHQ: this is how we decide to report a security bug or keep it a secret
138. First Annual Cyberwarcon
139. Looking Ahead: RiskIQ’s 2019 Cybersecurity Predictions
140. Pterodo Found On State Authorities' Computers In Ukraine
141. XSS Shell- Cross Site Scripting
142. Uber fined $1.1 million by UK and Dutch regulators over 2016 data breach
143. McAfee Labs 2019 Threats Predictions Report
144. Threat Spotlight: New spear phishing attack gift card scam
145. Pervasive Brazilian financial malware targets bank customers in Latin America and Europe
146. UK and Dutch Regulators Fined Uber for $1.1 Million over 2016 Data Breach

Daily brief for 2018-11-26

ASIA

1. Half of all Phishing Sites Now Have the Padlock
2. Cyberthreats to financial institutions 2019: overview and predictions
3. Ukrainian Police Nab Suspected RAT-Slinger
4. Crypto Mining Malware Infects Make-A-Wish-Foundation Website

WORLD

5. Microsoft launches review after a trio of Azure bugs locked users out of Office 365
6. Did UK city council over-react to a vulnerability report in its recycling app or not?
7. Knuddels Flirt App Slapped with Hefty Fine After Data Breach
8. When Do You Need to Report a Data Breach?
9. Democrats Introduce Bill for Stopping Automated Grinch Bots from Ruining Xmas
10. Siemens patches major firewall flaw, other vulnerabilities
11. How Pirated Versions of ‘Super Smash Bros. Ultimate’ Leaked Weeks Before Release
12. Microsoft PowerPoint as Malware Dropper
13. Recent Attacks on US Entities Attributed to APT29
14. U.S. Postal Service API Flaw Exposes Data of 60 Million Customers
15. Phishing Campaign targeting French Industry
16. Russia Plans To tighten Data Protection Owing To Intelligence Leaks
17. German Social Media Provider Fined €20K for Data Breach
18. Cyberthreats to financial institutions 2019: overview and predictions
19. Ukrainian Police Nab Suspected RAT-Slinger
20. Crypto Mining Malware Infects Make-A-Wish-Foundation Website
21. Experts found a new powerful modular Linux cryptominer
22. HR Software Firm PageUp Finds No Evidence of Data Theft
23. An ongoing phishing campaign is targeting French industry, @FSLabs finds.
24. Phishing Campaign targeting French Industry

ATTACKS

25. Knuddels Flirt App Slapped with Hefty Fine After Data Breach
26. When Do You Need to Report a Data Breach?
27. USPS, Amazon Data Leaks Showcase API Weaknesses
28. Holiday Season: Cybercriminals are Phishing All The Way
29. How Pirated Versions of ‘Super Smash Bros. Ultimate’ Leaked Weeks Before Release
30. Half of all Phishing Sites Now Have the Padlock
31. Easy as APT: Spear phishing highlighted as ongoing threat for 2019
32. Despite growing concerns about cybersecurity and the number of data breach incidents in the news, many employees still have bad
33. Trivial Spotify Phishing Campaign Targets Users To Steal Login Credentials
34. Phishing Campaign targeting French Industry
35. Russia Plans To tighten Data Protection Owing To Intelligence Leaks
36. German Social Media Provider Fined €20K for Data Breach
37. No need to compromise freedom for security - Europol audience told
38. 50% use password managers to store login details
39. HR Software Firm PageUp Finds No Evidence of Data Theft
40. Internal negligence to blame for most data breaches involving personal health information
41. Sextortion 2.0: We have continued to monitor the campaigns and have seen a recent change in tactics, with some unusual
42. An ongoing phishing campaign is targeting French industry, @FSLabs finds.
43. Phishing Campaign targeting French Industry
44. Beware!! Cyber Criminals Launching Serious Phishing Attack that Target Spotify Customers
45. My Health Record opt-out officially extended to January 31

THREATS

46. Microsoft launches review after a trio of Azure bugs locked users out of Office 365
47. Did UK city council over-react to a vulnerability report in its recycling app or not?
48. Ransomware attack disrupted emergency rooms at Ohio Hospital System
49. Lenovo to Pay $7.3 Million in Settlement for Installing Adware on 800K Notebooks
50. 13 Newly Discovered Malicious Apps, Deleted By Google From the Play Store
51. Hacker backdoors popular JavaScript library to steal Bitcoin funds
52. What is Data Classification? Guidelines and Process
53. Linux Kernel is affected by two DoS vulnerabilities still unpatched
54. Mobile Rotexy Malware Touts Ransomware, Banking Trojan Functions
55. Harberger Taxes on Ethereum
56. DoS Vulnerabilities Impact Linux Kernel
57. Subscribe to the relaunched Virus Bulletin eNews newsletter
58. Apache Hadoop Spins Cracking Code Injection Vulnerability YARN
59. Siemens patches major firewall flaw, other vulnerabilities
60. Play Store Malware Infects Half a Billion
61. Microsoft PowerPoint as Malware Dropper
62. #Bluetooth devices might be at risk after a new Bluetooth vulnerability was found targeting #firmware and #OperatingSystem software drivers. Learn
63. U.S. Postal Service API Flaw Exposes Data of 60 Million Customers
64. Ransomware Attack Forced Ohio Hospital System to Divert ER Patients
65. Positive Technologies researchers recently found two serious vulnerabilities that target NCR's #ATMs. Learn how a "black box attack" was involved
66. OSX.Dummy #malware has been discovered to use chat platforms in order to target #cryptocurrency investors. Learn more with expert @lewisnic
67. Cryptocurrency threat predictions for 2019
68. Ukrainian Police Nab Suspected RAT-Slinger
69. Crypto Mining Malware Infects Make-A-Wish-Foundation Website
70. Experts found a new powerful modular Linux cryptominer
71. A new ransomware -- dubbed #Thanatos #ransomware -- was found encrypting data but not decrypting it despite victims paying the
72. Discover how a @DLink #router vulnerability targeted a banking site to steal #UserCredentials with expert Judith Myerson.
73. For recent big data software vulnerabilities, botnets and coin mining are just the beginning
74. Frost & Sullivan Commends Rapid7 for Capturing Nearly a Quarter Share of the Global Vulnerability Management Market

CRIME

75. When Do You Need to Report a Data Breach?
76. Holiday Season: Cybercriminals are Phishing All The Way
77. Half of all Phishing Sites Now Have the Padlock
78. Russia Plans To tighten Data Protection Owing To Intelligence Leaks
79. Cryptocurrency threat predictions for 2019
80. Cyberthreats to financial institutions 2019: overview and predictions
81. Ukrainian Police Nab Suspected RAT-Slinger
82. Experts found a new powerful modular Linux cryptominer
83. HR Software Firm PageUp Finds No Evidence of Data Theft
84. Sextortion 2.0: We have continued to monitor the campaigns and have seen a recent change in tactics, with some unusual

POLITICS

85. Russia Plans To tighten Data Protection Owing To Intelligence Leaks
86. Cryptocurrency threat predictions for 2019
87. Ukrainian Police Nab Suspected RAT-Slinger

Daily brief for 2018-11-24

ASIA

1. North Korea-linked group Lazarus targets Latin American banks

WORLD

2. Quebec Dubbed As An Embarrassment After Paying $30,000 To Ransomware Authors
3. Adobe Patched A Critical Flash Player Vulnerability Disclosed Publicly
4. News of the Week: November 24, 2018
5. North Korea-linked group Lazarus targets Latin American banks
6. 42-year-old man Arrested For Hacking More than 2,000 Computers From 50 countries With DarkComet RAT
7. New Trojan mining on the Linux will steal user passwords & removes anti-viruses

ATTACKS

8. This week's #RiskAndRepeatPodcast digs into the debate over #WeakPasswords and password reuse, and asks: how much are users responsible for

THREATS

9. Quebec Dubbed As An Embarrassment After Paying $30,000 To Ransomware Authors
10. Adobe Patched A Critical Flash Player Vulnerability Disclosed Publicly
11. MacOS Penetration Test Reveals Three Zero-Day Vulnerabilities
12. Powerful Mobile Malware Rotexy Launched over 70,000 Attacks with Banking Trojan & Ransomware Modules
13. .@TalosSecurity recently created a #decryptor that helps files affected by the #ransomware #Thanatos -- typically known to not decrypt files
14. TA505 Cybercrime Group Experimenting with a New RAT In The Wild
15. Researchers at @okta found a bypass that allows #ThreatActors to pose files as legitimate @Apple files despite being #malware and
16. 42-year-old man Arrested For Hacking More than 2,000 Computers From 50 countries With DarkComet RAT
17. SMBs suffered the brunt of ransomware attacks in 2018
18. CVE-2018-19406, CVE-2018-19407: Two DoS vulnerabilities on Linux Kernel
19. New Trojan mining on the Linux will steal user passwords & removes anti-viruses
20. How has the @DLink #router vulnerability affected your enterprise?
21. The Week in Ransomware - November 23rd 2018 - STOP, Dharma, and More

CRIME

22. TA505 Cybercrime Group Experimenting with a New RAT In The Wild
23. New Trojan mining on the Linux will steal user passwords & removes anti-viruses

POLITICS

24. Quebec Dubbed As An Embarrassment After Paying $30,000 To Ransomware Authors
25. North Korea-linked group Lazarus targets Latin American banks

Daily brief for 2018-11-23

ASIA

1. US Says China Increased Hacking over Trade Dispute
2. North Korean Hackers Hit Latin American Banks
3. VMware fixed Workstation flaw disclosed at the Tianfu Cup PWN competition
4. Adobe Flash Player Remote Code Execution Vulnerability Threat Alert
5. VMware Patches Workstation Flaw Disclosed at Hacking Contest

WORLD

6. NUI Galway’s Problem: Misplaced USB Flash Drive Containing Unencrypted Student Records
7. Data breach in OSIsoft
8. New Crypto-Miner Attacks Linux Machines, Kills Other Miners and Anti-Malware
9. Brazil's largest professional association suffers massive data leak
10. German e-government SDK patched against ID spoofing vulnerability
11. US Postal Service Plugs API Flaw - One Year Later
12. US Says China Increased Hacking over Trade Dispute
13. North Korean Hackers Hit Latin American Banks
14. VMware fixed Workstation flaw disclosed at the Tianfu Cup PWN competition
15. Phishing Used to Launch GreyEnergy's ICS Attacks
16. New Emotet Thanksgiving campaign differs from previous ones
17. Ukrainian police arrest hacker who infected over 2,000 users with DarkComet RAT
18. Ukrainian police arrest hacker who infected over 2,000 users with DarkComet RAT
19. US Postal Service Website Left Data Exposed for Over a Year
20. German eID vulnerability allows hackers to change identities
21. Hacker says USPS ignored serious security flaw for over a year
22. Synthetic identity fraud to drive $48 billion in annual losses by 2023 – Juniper Research
23. Exclusive Cybaze ZLab – Yoroi – Hunting Cozy Bear, new campaign, old habits
24. Southwest Washington Regional Surgery Center suffered a Phishing attack
25. 60 million users’ data were exposed by the US Postal Service
26. The team discuss continuing activity by the Magecart group, as well as the ways in which #cybercriminals are gearing up

ATTACKS

27. NUI Galway’s Problem: Misplaced USB Flash Drive Containing Unencrypted Student Records
28. Data breach in OSIsoft
29. 8 tips for avoiding phishing, malware, scams, and hacks while holiday shopping online
30. Brazil's largest professional association suffers massive data leak
31. Amazon Snafu Exposed Customers' Names and Email Addresses
32. New Linux crypto-miner steals your root password and disables your antivirus
33. Attackers Are Landing Email Inboxes Without the Need to Phish
34. Do you know the top myths and facts of #mobile #phishing? If not, don't worry, we've compiled a list of
35. “Back in Black” – Article 13 has YouTube threatening to pull the plug over upload filter
36. Phishing Used to Launch GreyEnergy's ICS Attacks
37. New Emotet Thanksgiving campaign differs from previous ones
38. US Postal Service Website Left Data Exposed for Over a Year
39. .@Amazon unveils new settings to help users avoid S3 data leaks, but UpGuard's Chris Vickery, who uncovered most #AWS exposures,
40. Exclusive Cybaze ZLab – Yoroi – Hunting Cozy Bear, new campaign, old habits
41. Southwest Washington Regional Surgery Center suffered a Phishing attack
42. A #phishing campaign was recently found to be hijacking the traffic of @Trezor user #cryptocurrency wallets. Learn how such an
43. Software company OSIsoft has suffered a data breach
44. SAVE 50% FOR BLACK FRIDAY! Get half off FREEDOME VPN and TOTAL with coupon code BLACKFRIDAY.
45. DNS Shell – Tool to Compromise and Maintain Control Over Victim Machine
46. @FSecure fait son #BlackFriday ! Profitez de 50% de remise sur une sélection de produits !
47. 60 million users’ data were exposed by the US Postal Service

THREATS

48. 8 tips for avoiding phishing, malware, scams, and hacks while holiday shopping online
49. New Crypto-Miner Attacks Linux Machines, Kills Other Miners and Anti-Malware
50. DoS Vulnerabilities Found in Linux Kernel, Unpatched
51. Apache Hadoop spins cracking code injection vulnerability YARN
52. German e-government SDK patched against ID spoofing vulnerability
53. Malware scum want to build a Linux botnet using Mirai
54. US Postal Service Plugs API Flaw - One Year Later
55. VMware fixed Workstation flaw disclosed at the Tianfu Cup PWN competition
56. Adobe Flash Player Remote Code Execution Vulnerability Threat Alert
57. Old Printer Vulnerabilities Die Hard
58. VMware Patches Workstation Flaw Disclosed at Hacking Contest
59. Ukrainian police arrest hacker who infected over 2,000 users with DarkComet RAT
60. Black Friday special by Emotet: Filling inboxes with infected XML macros
61. Black Friday special by Emotet: Filling inboxes with infected XML macros
62. Cryptocurrency ‘minting’ flaw could have leached money from exchanges
63. Ukrainian police arrest hacker who infected over 2,000 users with DarkComet RAT
64. USPS Bug affects 60 Million Users, Finally Fixed.
65. German eID vulnerability allows hackers to change identities
66. VMware patches guest-to-host malware vulnerability
67. Internet connected devices might be the hot item for Christmas this year, but are they secure?
68. Hacker says USPS ignored serious security flaw for over a year
69. #WebCache poisoning poses a serious threat to #BrowserSecurity. Learn how #hackers can use unkeyed inputs for malicious intent from expert
70. SMBs suffered the brunt of ransomware attacks in 2018
71. Best way to Remove Malware on Mac, Including Other Unwanted Apps
72. A #phishing campaign was recently found to be hijacking the traffic of @Trezor user #cryptocurrency wallets. Learn how such an
73. CVE-2018-6983: integer overflow vulnerability in VMware Workstation and Fusion
74. The number of ransomware attacks on individuals has come down as it has become harder to get them to pay,
75. New Crypto Malware Spreading that Infects Linux Machines & Removes Anti-Virus
76. Over 500k Play Store users have installed 13 games that contain malware

CRIME

77. Data breach in OSIsoft
78. US Says China Increased Hacking over Trade Dispute
79. Synthetic identity fraud to drive $48 billion in annual losses by 2023 – Juniper Research
80. Software company OSIsoft has suffered a data breach
81. The team discuss continuing activity by the Magecart group, as well as the ways in which #cybercriminals are gearing up

POLITICS

82. NUI Galway’s Problem: Misplaced USB Flash Drive Containing Unencrypted Student Records
83. US Says China Increased Hacking over Trade Dispute
84. Synthetic identity fraud to drive $48 billion in annual losses by 2023 – Juniper Research
85. Exclusive Cybaze ZLab – Yoroi – Hunting Cozy Bear, new campaign, old habits

Daily brief for 2018-11-22

ASIA

1. China Boosted Technology and Intellectual Property Theft Operations Says USTR
2. The Rotexy mobile Trojan – banker and ransomware
3. North Korea To Host Cryptocurrency and Blockchain Conference

WORLD

4. China Boosted Technology and Intellectual Property Theft Operations Says USTR
5. Flaw allowing identity spoofing affects authentication based on German eID cards
6. USPS finally fixes website flaw that exposed 60 million users' data
7. The Rotexy mobile Trojan – banker and ransomware
8. Research reveals that 44% of industrial facilities have USB malware risks
9. North Korea To Host Cryptocurrency and Blockchain Conference
10. US Postal Service website vulnerability leaked 60 million user data
11. Amazon technical failure caused to leaks users’ email addresses
12. US Postal Service Left 60 Million Users Data Exposed For Over a Year
13. 500K Italian Public Administration Email Accounts Compromised By Targeted Attack

ATTACKS

14. Almost 9,5 Million PII Records Leaked by Data Aggregator Adapt
15. China Boosted Technology and Intellectual Property Theft Operations Says USTR
16. USPS reportedly fixes website bug that exposed data of 60M users
17. Facebook 'walking dangerous line' as it appeals record fine
18. USPS finally fixes website flaw that exposed 60 million users' data
19. LastPass login problems caused by cascading server failure
20. Furry erotica site 'High Tail Hall' exposed data of nearly 500K users
21. The July edition of Beazley Breach Insights found that business email compromise attacks have been rising steadily. Is business email
22. Come evitare che le tue #password diventino la chiave di accesso ai tuoi account
23. PSA: Phishing Levels Rise Ahead of Black Friday and Cyber Monday
24. Phishing Attack Compromises Health First Patients’ Data
25. US Postal Service website vulnerability leaked 60 million user data
26. Amazon technical failure caused to leaks users’ email addresses
27. US Postal Service Left 60 Million Users Data Exposed For Over a Year
28. Amazon Suffered Data Breach – Customers Name & Email Addresses Exposed
29. Data breaches in schools: How should an academic institution report a security incident to comply with the GDPR?
30. 500K Italian Public Administration Email Accounts Compromised By Targeted Attack
31. New @awscloud settings will allow users to batch change permissions with the aim of avoiding accidental S3 data leaks, but

THREATS

32. Silicon Valley Hacker Swipes Millions Worth of Cryptocurrency Using SIM Swapping
33. Google’s Practical Action Against Malware and Its Authors
34. USPS reportedly fixes website bug that exposed data of 60M users
35. [SingCERT] Alert on Adobe Flash Player Vulnerability (CVE-2018-15981)
36. #Irisscon: Stop Siloing Vulnerability Management to Deal with Old Bugs
37. Rotexy Mobile Trojan Launches 70k+ Attacks in Three Months
38. .@radware #cybersecurity researchers found hackers to be targeting bank users via a #router vulnerability. Learn how a fake banking site
39. Cross-site search attack applied to snoop on Google’s bug tracker
40. Facebook And Instagram Went Down Due To A Server Bug
41. SIM swap! Man charged after million dollar cryptocurrency theft
42. SIM swap! Man charged after million dollar cryptocurrency theft
43. #DidYouKnow A single subscription of AVG Internet Security covers every PC in your family? It also includes webcam and ransomware protection,
44. SSL vulnerability scanner – MassBleed
45. Aurora / Zorro Ransomware Actively Being Distributed
46. How does @TalosSecurity's discovery change the way you or your enterprise views #ransomware?
47. Flaw allowing identity spoofing affects authentication based on German eID cards
48. USPS finally fixes website flaw that exposed 60 million users' data
49. Update now! Adobe Flash has another critical security vulnerability
50. How Dropbox's red team discovered an Apple zero-day exploit chain by accident
51. Found this picture of myself doing an internal briefing on the Nimda worm in 2001. Note the size of the
52. A bypass was found by @okta researchers that allows #macOS #malware to pose as @Apple files despite needing to be
53. The Rotexy mobile Trojan – banker and ransomware
54. Researchers recently discovered a new #MacOS #malware that targets #cryptocurrency investors through chat platforms. Discover how this is possible and
55. How was a black box attack used to exploit ATM vulnerabilities?
56. Research reveals that 44% of industrial facilities have USB malware risks
57. CyberSecurity Asean security alert on Multiple Vulnerabilities in VMware vSphere Data Protection Could Allow for Remote Code Execution
58. Do you believe that the application #security vetting process would benefit from the addition of an entropy source?
59. Experts found first Mirai bot targeting Linux servers via Hadoop YARN flaw
60. VMware Releases Critical Security Updates for Multiple Vulnerabilities
61. Emotet malware runs on a dual infrastructure to avoid downtime and takedowns
62. North Korea To Host Cryptocurrency and Blockchain Conference
63. Hacking Syndicate TA505 Back with Focus on Info-Stealing Trojan
64. US Postal Service website vulnerability leaked 60 million user data
65. Facebook Increases Average Bounty rewards for High Impact Vulnerabilities
66. Facebook raises rewards for a security vulnerabilities to $40,000

CRIME

67. Silicon Valley Hacker Swipes Millions Worth of Cryptocurrency Using SIM Swapping
68. China Boosted Technology and Intellectual Property Theft Operations Says USTR
69. SIM swap! Man charged after million dollar cryptocurrency theft
70. SIM swap! Man charged after million dollar cryptocurrency theft
71. The Rotexy mobile Trojan – banker and ransomware
72. The July edition of Beazley Breach Insights found that business email compromise attacks have been rising steadily. Is business email
73. Hacking Syndicate TA505 Back with Focus on Info-Stealing Trojan
74. Data breaches in schools: How should an academic institution report a security incident to comply with the GDPR?

POLITICS

75. The Rotexy mobile Trojan – banker and ransomware
76. North Korea To Host Cryptocurrency and Blockchain Conference
77. Data breaches in schools: How should an academic institution report a security incident to comply with the GDPR?
78. 500K Italian Public Administration Email Accounts Compromised By Targeted Attack

Daily brief for 2018-11-21

ASIA

1. City of Valdez, Alaska admits to paying off ransomware infection
2. Lazarus APT Uses Modular Backdoor to Target Financial Institutions
3. Adobe issues fix for Flash bug allowing remote code execution
4. Despite early speculation, experts concluded the BGP route leak that sent Google traffic through China and Russia was due to
5. Amazon UK is notifying a data breach to its customers days before Black Friday
6. New Pterodo Backdoor Malware Detected By Ukraine
7. Is Magecart Checking Out Your Secure Online Transactions?
8. Weekly Threat Briefing: Russian APT Comes Back to Life with New US Spear-phishing Campaign
9. Phishing Scams Serious Problem for Canada’s Global Affairs
10. Millions Stolen by North Korea-Linked Hacking Group from Atms in Africa and Asia
11. Malaysia’s largest media company becomes victim of a ransomware attack

WORLD

12. Email Addresses and Phone Numbers of More than 60 Million Users Exposed by USPS
13. A flaw in US Postal Service website exposed data on 60 Million Users
14. Emotet Banking Trojan Uses Stolen Templates to Boost Phishing Campaign Numbers
15. Lazarus APT Uses Modular Backdoor to Target Financial Institutions
16. Facebook increases rewards for its bug bounty program and facilitate bug submission
17. Inspiring the Next Generation of Tech Talent
18. Google Taking Over Health Records Raises Patient Privacy Fears
19. What Is Windows PowerShell (And Could It Be Malicious)?
20. Spoofed addresses and anonymous sending: new Gmail bugs make for easy pickings
21. Amazon tech error leaks customers’ email addresses
22. USPS Site Exposed Data on 60 Million Users
23. Vision Direct Deals With Customer Data Leak
24. Amazon suffers data breach days before Black Friday
25. Major Flaws Found in IT Pentagon Processes After First Ever Financial Audit
26. Black Friday Phishing Dos and Don’ts
27. Amazon warns customers it leaked their names and email addresses
28. Russian Cozy Bear cyberspies awake from hibernation to sling spyware
29. German eID Authentication Flaw Lets You Change Identity
30. Despite early speculation, experts concluded the BGP route leak that sent Google traffic through China and Russia was due to
31. Amazon UK is notifying a data breach to its customers days before Black Friday
32. Italian Naval Industry Attacked By MartyMcFly Malware
33. Sofacy APT unleashes new 'Cannon' trojan
34. New Pterodo Backdoor Malware Detected By Ukraine
35. Black Friday & Cyber Monday Deals: Phishing and Site Skimmers
36. New Campaign by APT Group Sofacy Discovered using new Malware Named Cannon
37. White House admits Ivanka Trump used private email for government business
38. Magecart Black Hats Battle it Out On Infected Site
39. Fancy Bear hacker crew Putin dirty RATs in Word documents emailed to govt orgs – report
40. Is Magecart Checking Out Your Secure Online Transactions?
41. Weekly Threat Briefing: Russian APT Comes Back to Life with New US Spear-phishing Campaign
42. Infowars Online Store Got Infected with Card Skimming Malware
43. Sofacy APT group used a new tool in latest attacks, the Cannon
44. Phishing Scams Serious Problem for Canada’s Global Affairs
45. Malaysia’s largest media company becomes victim of a ransomware attack
46. Russian hackers are conducting more covert attacks on US and European computers
47. US Department of Justice is investigating Tether for manipulation of market prices
48. Sofacy APT Takes Aim with Novel ‘Cannon’ Trojan
49. Major Flaws Found in IT Pentagon Processes After First Ever Financial Audit
50. Russia Linked Group Resurfaces With Large-Scale Phishing Campaign

ATTACKS

51. Phishing: It's all too easy on mobile devices
52. Email Addresses and Phone Numbers of More than 60 Million Users Exposed by USPS
53. A flaw in US Postal Service website exposed data on 60 Million Users
54. Emotet Banking Trojan Uses Stolen Templates to Boost Phishing Campaign Numbers
55. Amazon Customer Email Addresses Leaked Because of 'Technical Error'
56. Google Taking Over Health Records Raises Patient Privacy Fears
57. Amazon tech error leaks customers’ email addresses
58. USPS Site Exposed Data on 60 Million Users
59. Vision Direct Deals With Customer Data Leak
60. Amazon suffers data breach days before Black Friday
61. Emotet’s Thanksgiving Campaign Delivers New Recipes for Compromise
62. Researchers Reveal Identity of Hacker Behind Massive Data Breaches
63. Record Retention
64. A hacker known as #Tessa88 offered several compromise databases obtained from LinkedIn, MySpace and other companies. Now Recorded Future believes
65. Black Friday Phishing Dos and Don’ts
66. The promised integration with #HaveIBeenPwned is expanding in #FirefoxMonitor with new breach alerts when a user visits a recently compromised
67. Amazon warns customers it leaked their names and email addresses
68. Amazon leaks users' email addresses due to 'technical error'
69. High Tail Hall data breach exposes over 400,000 furry fans
70. Facebook Ads Urge Its Staff To Leak Secrets
71. Amazon Suffers Data Breach Days Before Black Friday
72. Bah HumBUG: 5 Recent Holiday Phishing Samples You Need to Watch Out For
73. New Wine in Old Bottle: New Azorult Variant Found in FindMyName Campaign using Fallout Exploit Kit
74. Phishing Emails with .COM Extensions Are Hitting Finance Departments
75. Despite early speculation, experts concluded the BGP route leak that sent Google traffic through China and Russia was due to
76. Amazon UK is notifying a data breach to its customers days before Black Friday
77. Black Friday & Cyber Monday Deals: Phishing and Site Skimmers
78. New Campaign by APT Group Sofacy Discovered using new Malware Named Cannon
79. White House admits Ivanka Trump used private email for government business
80. New OceanLotus watering hole attacks target southeast Asia
81. #CyberMonday Tip 1: Be careful of phishing scams claiming to be from a package-delivery company with links to tracking information. AVG
82. .@Amazon unveils new settings to help users avoid S3 data leaks, but UpGuard's Chris Vickery, who uncovered most #AWS exposures,
83. How have #phishing campaigns threatened your #EnterpriseSecurity system?
84. Weekly Threat Briefing: Russian APT Comes Back to Life with New US Spear-phishing Campaign
85. Amazon Data Leak Exposes Email Addresses Right Before Black Friday
86. Yikes...#Instagram Accidentally Exposed Some Users' #Passwords In Plaintext
87. #Gmail Glitch Enables Anonymous Messages in #Phishing Attacks:
88. APAC consumers want IoT devices, but fear data leaks
89. Phishing Scams Serious Problem for Canada’s Global Affairs
90. OUR BLACK FRIDAY DEALS ARE LIVE! Get 50% off from FREEDOME VPN and TOTAL subscriptions with coupon code BLACKFRIDAY. Buy now:
91. Microsoft now lets you log into Outlook, Skype, Xbox Live without a password
92. Russia Linked Group Resurfaces With Large-Scale Phishing Campaign

THREATS

93. Pen-test at Dropbox turns up three Apple 0-day bugs
94. City of Valdez, Alaska admits to paying off ransomware infection
95. A flaw in US Postal Service website exposed data on 60 Million Users
96. Emotet Banking Trojan Uses Stolen Templates to Boost Phishing Campaign Numbers
97. Lazarus APT Uses Modular Backdoor to Target Financial Institutions
98. Facebook increases rewards for its bug bounty program and facilitate bug submission
99. What Is Windows PowerShell (And Could It Be Malicious)?
100. Spoofed addresses and anonymous sending: new Gmail bugs make for easy pickings
101. Take a Look at L0rdix, The Super Malware Toolkit of 2018
102. Mirai Used as Payload in Hadoop YARN Vulnerability
103. Facebook entices researchers with $40,000 reward for account takeover vulnerabilities
104. 500K Android users hit with malware, and what to do if you're infected
105. Major Flaws Found in IT Pentagon Processes After First Ever Financial Audit
106. Russian Cozy Bear cyberspies awake from hibernation to sling spyware
107. How a Security Test for DropBox Revealed 3 Apple Zero Day Vulnerabilities
108. Adobe issues fix for Flash bug allowing remote code execution
109. 13 Malware-Laden Fake Apps on Google Play
110. A new vulnerability was discovered to affect #Bluetooth #firmware or operating system software drivers. Learn what this vulnerability is and
111. German eID Authentication Flaw Lets You Change Identity
112. Hackers target Drupal servers chaining several flaws, including Drupalgeddon2 and DirtyCOW
113. New vulnerabilities are coming faster than you can fix them
114. Red Hawk – Open Source Information Gathering and Vulnerability Scanning Tool
115. Hackers target critical WordPress plugin flaw to install backdoors and create admin accounts
116. Hackers target critical WordPress plugin flaw to install backdoors and create admin accounts
117. Italian Naval Industry Attacked By MartyMcFly Malware
118. Sofacy APT unleashes new 'Cannon' trojan
119. New Pterodo Backdoor Malware Detected By Ukraine
120. New Campaign by APT Group Sofacy Discovered using new Malware Named Cannon
121. Experts found flaws in Dell EMC and VMware Products. Patch them now!
122. From directory traversal to direct travesty: Crash, hijack, siphon off this TP-Link VPN box via classic exploitable bugs
123. A @DLink #router vulnerability was used to send banking users to a fake site in order to steal #UserCredentials. Learn
124. Malicious programs disguised as racing games on Google Play
125. Adobe plugs critical RCE Flash Player flaw, update ASAP! Exploitation may be imminent
126. Patches Released for Flaws Affecting Dell EMC, VMware Products
127. Adobe Fixes Critical Flash Vulnerability with
128. How is Plead #malware used for #cyberespionage attacks? Learn more with Michael Cobb of @thehairyITdog.
129. Conficker: A 10-year retrospective on a legendary worm
130. Malware Moves: Attackers Retool for Cryptocurrency Theft
131. Infowars Online Store Got Infected with Card Skimming Malware
132. Facebook Increases Rewards for Account Hacking Vulnerabilities
133. Adobe Flash Player Update Released for Remote Code Execution Vulnerability
134. New Hacking Group Outlaw Distributing Botnet to Scan The Network & Perform Cryptocurrency-Mining & Brute-Force Attack
135. Facebook Boosts Bug Bounty Payouts for Account Takeover Flaws
136. Signing and Verifying Ethereum Signatures
137. Hacker got Rewarded for Discovering a Critical Steam Bug
138. CVE-2018-15981: Adobe Flash Player Arbitrary Code Execution Vulnerability
139. Malaysia’s largest media company becomes victim of a ransomware attack
140. US Department of Justice is investigating Tether for manipulation of market prices
141. Awake Security uncovers malicious intent across on-premise, IoT and cloud infrastructure
142. Centreon releases Remote Server functionality for cross-domain monitoring of multi-site IT operations
143. Fancy Bear APT Uses New Cannon Trojan to Target Government Entities
144. "Luiz O Pinto" pushed 500,000+ installs of malware via Google Play, in ~1 week.
145. Uncover virtual hosts of domain with Fierce
146. Sofacy APT Takes Aim with Novel ‘Cannon’ Trojan
147. Major Flaws Found in IT Pentagon Processes After First Ever Financial Audit
148. How to find, is link malicious/URL or not
149. Worried about cryptojacking? Check out how SentinelOne Detects and Protects from GhostMiner CryptoMiner

CRIME

150. Emotet Banking Trojan Uses Stolen Templates to Boost Phishing Campaign Numbers
151. Facebook increases rewards for its bug bounty program and facilitate bug submission
152. What Is Windows PowerShell (And Could It Be Malicious)?
153. Spoofed addresses and anonymous sending: new Gmail bugs make for easy pickings
154. Take a Look at L0rdix, The Super Malware Toolkit of 2018
155. USPS Site Exposed Data on 60 Million Users
156. Researchers Reveal Identity of Hacker Behind Massive Data Breaches
157. Bah HumBUG: 5 Recent Holiday Phishing Samples You Need to Watch Out For
158. How Retailers Can Protect Against Magecart This Black Friday and Holiday Season
159. New Wine in Old Bottle: New Azorult Variant Found in FindMyName Campaign using Fallout Exploit Kit
160. Black Friday & Cyber Monday Deals: Phishing and Site Skimmers
161. Is Magecart Checking Out Your Secure Online Transactions?
162. Weekly Threat Briefing: Russian APT Comes Back to Life with New US Spear-phishing Campaign
163. How is Plead #malware used for #cyberespionage attacks? Learn more with Michael Cobb of @thehairyITdog.
164. Signing and Verifying Ethereum Signatures
165. Phishing Scams Serious Problem for Canada’s Global Affairs
166. Millions Stolen by North Korea-Linked Hacking Group from Atms in Africa and Asia
167. Malaysia’s largest media company becomes victim of a ransomware attack

POLITICS

168. What Is Windows PowerShell (And Could It Be Malicious)?
169. USPS Site Exposed Data on 60 Million Users
170. New Pterodo Backdoor Malware Detected By Ukraine
171. Weekly Threat Briefing: Russian APT Comes Back to Life with New US Spear-phishing Campaign
172. How is Plead #malware used for #cyberespionage attacks? Learn more with Michael Cobb of @thehairyITdog.
173. Phishing Scams Serious Problem for Canada’s Global Affairs
174. Russian hackers are conducting more covert attacks on US and European computers
175. US Department of Justice is investigating Tether for manipulation of market prices
176. MageCart Group Sabotages Rival to Ruin Data and Reputation