Platform report for 2018-11-29

WINDOWS

1. Banking Trojan Made in Brazil? A Brief Look
2. Inside the Google Docs Malicious Network
3. The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia
4. XSS Shell- Cross Site Scripting
5. KingMiner malware hijacks the full power of Windows Server CPUs
6. Pervasive Brazilian financial malware targets bank customers in Latin America and Europe

LINUX

7. XSS Shell- Cross Site Scripting

UNIX

Nil

ANDROID

8. Inside the Google Docs Malicious Network
9. McAfee Labs 2019 Threats Predictions Report
10. Several Malicious Apps on Google Play Posing as Voice Messenger Steal User Personal Information
11. Threat Spotlight: New spear phishing attack gift card scam

IOS

Nil

MACOS

12. Inside the Google Docs Malicious Network

Platform report for 2018-11-26

WINDOWS

1. Half of all Phishing Sites Now Have the Padlock
2. Phishing Campaign targeting French Industry

LINUX

3. Linux Kernel is affected by two DoS vulnerabilities still unpatched
4. DoS Vulnerabilities Impact Linux Kernel
5. Experts found a new powerful modular Linux cryptominer

UNIX

Nil

ANDROID

6. 13 Newly Discovered Malicious Apps, Deleted By Google From the Play Store
7. Bypassing and Disabling SSL Pinning on Android to Perform Man-in-the-Middle Attack
8. Play Store Malware Infects Half a Billion

IOS

9. 13 Newly Discovered Malicious Apps, Deleted By Google From the Play Store

MACOS

10. OSX.Dummy #malware has been discovered to use chat platforms in order to target #cryptocurrency investors. Learn more with expert @lewisnic

Platform report for 2018-11-24

WINDOWS

1. TA505 Cybercrime Group Experimenting with a New RAT In The Wild

LINUX

2. CVE-2018-19406, CVE-2018-19407: Two DoS vulnerabilities on Linux Kernel
3. New Trojan mining on the Linux will steal user passwords & removes anti-viruses

UNIX

Nil

ANDROID

Nil

IOS

Nil

MACOS

4. MacOS Penetration Test Reveals Three Zero-Day Vulnerabilities

Platform report for 2018-11-23

WINDOWS

1. NUI Galway’s Problem: Misplaced USB Flash Drive Containing Unencrypted Student Records
2. New Emotet Thanksgiving campaign differs from previous ones

LINUX

3. New Crypto-Miner Attacks Linux Machines, Kills Other Miners and Anti-Malware
4. DoS Vulnerabilities Found in Linux Kernel, Unpatched
5. Malware scum want to build a Linux botnet using Mirai
6. New Linux crypto-miner steals your root password and disables your antivirus
7. New Crypto Malware Spreading that Infects Linux Machines & Removes Anti-Virus

UNIX

Nil

ANDROID

8. Over 500k Play Store users have installed 13 games that contain malware

IOS

Nil

MACOS

9. VMware fixed Workstation flaw disclosed at the Tianfu Cup PWN competition

Platform report for 2018-11-22

WINDOWS

1. Google’s Practical Action Against Malware and Its Authors
2. [SingCERT] Alert on Adobe Flash Player Vulnerability (CVE-2018-15981)
3. Update now! Adobe Flash has another critical security vulnerability

LINUX

4. Mirai DDoS baddies take enterprise Linux servers over consumer routers
5. [SingCERT] Alert on Adobe Flash Player Vulnerability (CVE-2018-15981)
6. SSL vulnerability scanner – MassBleed
7. Update now! Adobe Flash has another critical security vulnerability
8. Experts found first Mirai bot targeting Linux servers via Hadoop YARN flaw

UNIX

Nil

ANDROID

9. Google’s Practical Action Against Malware and Its Authors
10. #DidYouKnow A single subscription of AVG Internet Security covers every PC in your family? It also includes webcam and ransomware protection,
11. The Rotexy mobile Trojan – banker and ransomware

IOS

12. Google’s Practical Action Against Malware and Its Authors

MACOS

13. [SingCERT] Alert on Adobe Flash Player Vulnerability (CVE-2018-15981)
14. A bypass was found by @okta researchers that allows #macOS #malware to pose as @Apple files despite needing to be
15. Researchers recently discovered a new #MacOS #malware that targets #cryptocurrency investors through chat platforms. Discover how this is possible and

Platform report for 2018-11-21

WINDOWS

1. What Is Windows PowerShell (And Could It Be Malicious)?
2. Take a Look at L0rdix, The Super Malware Toolkit of 2018
3. New Wine in Old Bottle: New Azorult Variant Found in FindMyName Campaign using Fallout Exploit Kit
4. New Pterodo Backdoor Malware Detected By Ukraine
5. Exploit Windows Remote PC with EternalBlue & DoublePulsar Exploit through Metasploit
6. Weekly Threat Briefing: Russian APT Comes Back to Life with New US Spear-phishing Campaign
7. Adobe plugs critical RCE Flash Player flaw, update ASAP! Exploitation may be imminent
8. CVE-2018-15981: Adobe Flash Player Arbitrary Code Execution Vulnerability
9. How to find, is link malicious/URL or not

LINUX

10. What Is Windows PowerShell (And Could It Be Malicious)?
11. Mirai Used as Payload in Hadoop YARN Vulnerability
12. Hackers target Drupal servers chaining several flaws, including Drupalgeddon2 and DirtyCOW
13. Adobe plugs critical RCE Flash Player flaw, update ASAP! Exploitation may be imminent
14. CVE-2018-15981: Adobe Flash Player Arbitrary Code Execution Vulnerability
15. Uncover virtual hosts of domain with Fierce
16. How to find, is link malicious/URL or not

UNIX

Nil

ANDROID

17. Spoofed addresses and anonymous sending: new Gmail bugs make for easy pickings
18. 500K Android users hit with malware, and what to do if you're infected
19. 13 Malware-Laden Fake Apps on Google Play
20. Malicious programs disguised as racing games on Google Play
21. "Luiz O Pinto" pushed 500,000+ installs of malware via Google Play, in ~1 week.

IOS

22. Spoofed addresses and anonymous sending: new Gmail bugs make for easy pickings
23. 13 Malware-Laden Fake Apps on Google Play
24. New Wine in Old Bottle: New Azorult Variant Found in FindMyName Campaign using Fallout Exploit Kit

MACOS

25. Pen-test at Dropbox turns up three Apple 0-day bugs
26. What Is Windows PowerShell (And Could It Be Malicious)?
27. Adobe plugs critical RCE Flash Player flaw, update ASAP! Exploitation may be imminent
28. CVE-2018-15981: Adobe Flash Player Arbitrary Code Execution Vulnerability

Platform report for 2018-11-20

WINDOWS

1. Critical Adobe Flash Bug Impacts Windows, macOS, Linux and Chrome OS
2. 200K Outlaw Botnet Uses SSH Brute Forcing to Propagate, Monero Mining for Profit
3. Flash Player Type Confusion Critical Vulnerability, Another Reason Not to Use It
4. Down But Not Out, WannaCry Malware Continues to Infect Unpatched Windows PCs
5. APT29 Re-Emerges After 2 Years with Widespread Espionage Campaign
6. Malvertising in Apple Pay Targets iPhone Users
7. Hackers Linked to Russia Impersonate US Officials
8. Sofacy Continues Global Attacks and Wheels Out New ‘Cannon’ Trojan
9. Lazarus Continues Heists, Mounts Attacks on Financial Organizations in Latin America
10. Mac users using Exodus cryptocurrency wallet targeted by a small spam campaign
11. Kaspersky Security Bulletin: Threat Predictions for 2019
12. Experts analyzed how Iranian OilRIG hackers tested their weaponized documents
13. Apache OpenOffice 4.1.6 release: important bug fixes and security fixes

LINUX

14. Critical Adobe Flash Bug Impacts Windows, macOS, Linux and Chrome OS
15. 200K Outlaw Botnet Uses SSH Brute Forcing to Propagate, Monero Mining for Profit
16. Hackers target Drupal servers chaining several flaws, including Drupalgeddon2 and DirtyCOW
17. Flash Player Type Confusion Critical Vulnerability, Another Reason Not to Use It
18. Malvertising in Apple Pay Targets iPhone Users
19. Attackers Target Drupal Web Servers with Chained Vulnerabilities

UNIX

Nil

ANDROID

20. 200K Outlaw Botnet Uses SSH Brute Forcing to Propagate, Monero Mining for Profit
21. 560,000 Duped Into Installing Android Malware in the Form of Fake Driving Games
22. Web skimmers compete in Umbro Brasil hack
23. Malvertising in Apple Pay Targets iPhone Users
24. Kaspersky Security Bulletin: Threat Predictions for 2019
25. 13 Malicious Apps in Google Play With More than 560,000+ Installs

IOS

26. Malvertising in Apple Pay Targets iPhone Users
27. Kaspersky Security Bulletin: Threat Predictions for 2019

MACOS

28. Critical Adobe Flash Bug Impacts Windows, macOS, Linux and Chrome OS
29. Flash Player Type Confusion Critical Vulnerability, Another Reason Not to Use It
30. Mac users using Exodus cryptocurrency wallet targeted by a small spam campaign

Platform report for 2018-11-19

WINDOWS

1. Not So Cozy: An Uncomfortable Examination of a Suspected APT29 Phishing Campaign
2. DarkGate Malware Avoids Endpoint AV Detection
3. Cybaze ZLab – Yoroi team analyzed malware used in recent attacks on US entities attributed to APT29
4. Outlaw Group Distributes Botnet for Cryptocurrency-Mining, Scanning, and Brute-Force

LINUX

5. Finds vulnerabilities in wordpress websites using WPSCAN
6. Outlaw Group Distributes Botnet for Cryptocurrency-Mining, Scanning, and Brute-Force

UNIX

Nil

ANDROID

7. Outlaw Group Distributes Botnet for Cryptocurrency-Mining, Scanning, and Brute-Force

IOS

8. Tianfu Cup PWN hacking contest – White hat hackers earn $1 Million for Zero-Day exploits

MACOS

9. Tianfu Cup PWN hacking contest – White hat hackers earn $1 Million for Zero-Day exploits

Platform report for 2018-11-18

WINDOWS

1. Security Affairs newsletter Round 189 – News of the week
2. WatchGuard Technologies 2019 Security Predictions

LINUX

3. Security Affairs newsletter Round 189 – News of the week

UNIX

Nil

ANDROID

4. Security Affairs newsletter Round 189 – News of the week
5. The machine learning technology used by Google to detect malware on APK files

IOS

6. An iPhone X Vulnerability Allows Hackers To Access Deleted Pictures
7. Security Affairs newsletter Round 189 – News of the week
8. WatchGuard Technologies 2019 Security Predictions

MACOS

9. OSX.Dummy #malware has been discovered to use chat platforms in order to target #cryptocurrency investors. Learn more with expert @lewisnic

Platform report for 2018-11-17

WINDOWS

1. 4 Effective Ways on How to Prevent Cryptocurrency Mining Infection
2. 8 Cybersecurity Prediction for 2019
3. Windows 10 October Update Brings Back Old Mapped Drives Bug

LINUX

4. 8 Cybersecurity Prediction for 2019

UNIX

Nil

ANDROID

5. 8 Cybersecurity Prediction for 2019

IOS

6. 8 Cybersecurity Prediction for 2019

MACOS

7. 8 Cybersecurity Prediction for 2019

Platform report for 2018-11-16

WINDOWS

1. Stealthy DarkGate Cryptocurrency Mining and Ransomware Evades AV Detection
2. Using Microsoft Powerpoint as Malware Dropper
3. Analyzing OilRig’s Ops Tempo from Testing to Weaponization to Delivery
4. This Week in Security News: Holiday Cybercriminals & Cryptomining Malware
5. Amid calls for a Windows bug status dashboard, Microsoft belatedly agrees to build one
6. Kaspersky Announces the Details of Windows 7 Zero-Day Vulnerability

LINUX

7. This Week in Security News: Holiday Cybercriminals & Cryptomining Malware
8. Scanning Akamai's Edge Servers for Vulnerabilities, Correctly

UNIX

Nil

ANDROID

9. Simple Call Recorder Android Malware
10. Four More Malicious Cryptocurrency Apps on Google Play

IOS

Nil

MACOS

Nil

Platform report for 2018-11-15

WINDOWS

1. Should Windows Users Worry About Ransomware in 2019?
2. 'DarkGate' miner, password-stealer could open up world of hurt for Windows users
3. WannaCry Still Impacts Thousands of Systems Every Month
4. 63 new vulnerabilities found in Windows

LINUX

5. Linux Based Crypto-Mining Malware
6. Find vulnerabilities using nikto

UNIX

Nil

ANDROID

7. RiskIQ’s 2018 Black Friday E-commerce Blacklist: Key Intel for This Year’s Mega Shopping Weekend
8. Fake cryptocurrency Wallets Apps on Google Play Steal User Credentials and Mimic as Legitimate Wallets

IOS

9. 500 Percent Increase in macOS/iOS Ransomware Attacks During 1H 2018
10. Two whitehats receive $60,000 in rewards for successfully finding iOS 12.1 vulnerabilities

MACOS

11. 500 Percent Increase in macOS/iOS Ransomware Attacks During 1H 2018
12. VMware Virtual Machine Escape Vulnerabilities (CVE-2018-6981 and CVE-2018-6982) Threat Alert
13. Creating and Analyzing a Malicious PDF File with PDF-Parser Tool

Platform report for 2018-11-14

WINDOWS

1. FlawedAmmy, the Only RAT in CheckPoint’s Global Threat Index 2018 List
2. Microsoft Patches RCE Vulnerabilities in Word, Excel, and Windows Search
3. Weekly Threat Briefing: Adobe ColdFusion Servers Under Attack from APT Group
4. Cyber espionage group used CVE-2018-8589 Windows Zero-Day in Middle East Attacks
5. How Threat Intelligence Prioritizes Risk in Vulnerability Management
6. November 2018 Patch Tuesday: Microsoft fixes 63 flaws, one actively exploited zero-day
7. Adobe Patch Tuesday updates for November 2018 fix known Acrobat flaw
8. Zero-day Windows exploit fix stars in November Patch Tuesday
9. November Patch Tuesday Fixes Another Zero-Day Win32k Bug, Other Public Vulnerabilities
10. Microsoft Patches Windows Zero-Day Exploited in Cyber Attacks
11. APT Group Uses Windows Zero-Day in Middle East Attacks
12. Facebook flaw could have exposed private info of users and their friends
13. A new exploit for zero-day vulnerability CVE-2018-8589
14. Adobe November Security Update: fixes multiple vulnerabilities in its products
15. Microsoft Released Security Updates & Fixed More than 60 Vulnerabilities Along with Active Windows Zero day
16. 63 New Flaws (Including 0-Days) Windows Users Need to Patch Now
17. Big Game Hunting: The Evolution of INDRIK SPIDER From Dridex Wire Fraud to BitPaymer Targeted Ransomware

LINUX

18. Adobe Patch Tuesday updates for November 2018 fix known Acrobat flaw
19. Adobe November Security Update: fixes multiple vulnerabilities in its products

UNIX

20. Weekly Threat Briefing: Adobe ColdFusion Servers Under Attack from APT Group

ANDROID

21. Weekly Threat Briefing: Adobe ColdFusion Servers Under Attack from APT Group
22. Don’t fall for fake NEO, Tether and MetaMask cryptocurrency wallets on Google Play
23. Beers with Talos Ep. #41: Sex, money and malware
24. Key takeaways from Datto’s State of the Channel Ransomware Report 2018

IOS

25. Key takeaways from Datto’s State of the Channel Ransomware Report 2018

MACOS

26. Ad-Injecting Mac Malware Rediscovered
27. A bypass was found by @okta researchers that allows #macOS #malware to pose as @Apple files despite needing to be
28. Adobe Patch Tuesday updates for November 2018 fix known Acrobat flaw
29. Researchers recently discovered a new #MacOS #malware that targets #cryptocurrency investors through chat platforms. Discover how this is possible and
30. Adobe November Security Update: fixes multiple vulnerabilities in its products
31. Key takeaways from Datto’s State of the Channel Ransomware Report 2018

Platform report for 2018-11-13

WINDOWS

1. Microsoft’s Patch Tuesday updates for November 2018 fix actively exploited Windows flaw
2. Microsoft Patches Zero-Day Bug in Win7, Server 2008 and 2008 R2
3. Microsoft Patches Actively Exploited Windows Vulnerability
4. Microsoft patches Windows zero-day used by multiple cyber-espionage groups
5. XSS Vulnerability in Evernote Allows Local File Execution
6. Microsoft November 2018 Patch Tuesday Fixes 12 Critical Vulnerabilities
7. Chinese Threat Actor TEMP.Periscope Targets UK-Based Engineering Company Using Russian APT Techniques
8. Cryptocurrency Mining Malware uses Various Evasion Techniques.
9. Microsoft Patch Tuesday — November 2018: Vulnerability disclosures and Snort coverage
10. The Tactic Cybercriminals Use to Steal Bitcoin
11. WebCobra Malware Uses Victims’ Computers to Mine Cryptocurrency
12. WebCobra Malware Uses Victims’ Computers to Mine Cryptocurrency
13. Leak: Windows 10 October Update will be re-launched tomorrow

LINUX

14. The Tactic Cybercriminals Use to Steal Bitcoin

UNIX

Nil

ANDROID

15. Fake Crypto Wallet Apps Discovered in Google Play, Built Using Drag-n-Drop
16. Unpatched Android OS Flaw Allows Adversaries to Track User Location
17. Call Recorder App on Google Play with Over 5,000 Installs Contains Hidden Malware Dropper

IOS

Nil

MACOS

18. The Tactic Cybercriminals Use to Steal Bitcoin

Platform report for 2018-11-12

WINDOWS

1. Hide and Script: Inserted Malicious URLs within Office Documents’ Embedded Videos
2. Used Data Storage Devices Have Security Flaws
3. Cryptomining malware using Windows Installer to remain hidden
4. IT threat evolution Q3 2018. Statistics
5. IT threat evolution Q3 2018

LINUX

6. Used Data Storage Devices Have Security Flaws
7. IT threat evolution Q3 2018. Statistics
8. IT threat evolution Q3 2018

UNIX

Nil

ANDROID

9. Malware-Laced App Lurked on Google Play For a Year
10. Google’s data charts path to avoiding malware on Android
11. Used Data Storage Devices Have Security Flaws
12. An #Android app booby-trapped with #malware was recently taken down from Google Play — after being available for download for
13. IT threat evolution Q3 2018

IOS

14. Used Data Storage Devices Have Security Flaws

MACOS

15. CVE-2018-6981, CVE-2018-6982: uninitialized stack memory usage vulnerabilities on VMware ESXi, Workstation, and Fusion
16. A new malware that targets #cryptocurrency investors through #MacOS and chat platforms was recently discovered. Learn how this #malware works
17. Used Data Storage Devices Have Security Flaws
18. IT threat evolution Q3 2018
19. How does new MacOS malware target users through chat?

Platform report for 2018-11-11

WINDOWS

Nil

LINUX

1. Security Affairs newsletter Round 188 – News of the week
2. Linux Cryptocurrency miner leverages rootkit to avoid detection
3. Debian 9.6 release, fix more bugs and security vulnerabilities

UNIX

Nil

ANDROID

Nil

IOS

Nil

MACOS

4. Security Affairs newsletter Round 188 – News of the week

Platform report for 2018-11-10

WINDOWS

1. GandCrab Ransomware Virus Threat Alert
2. A Careful Look on FastCash, the New Cash Cow of Lazarus Hacking Group

LINUX

3. Cryptocurrency Mining Malware Targets Linux Machines Uses Rootkit to Hide From Monitoring Tools

UNIX

4. Symantec shared details of North Korean Lazarus’s FastCash Trojan used to hack banks
5. A Careful Look on FastCash, the New Cash Cow of Lazarus Hacking Group
6. Researchers reveal the malware used by North Korean hackers to attack ATMs

ANDROID

Nil

IOS

Nil

MACOS

Nil

Platform report for 2018-11-09

WINDOWS

1. Koadic: Security Defense in the Age of LoL Malware, Part IV
2. Stealthy Crypto-Mining Malware Evades Detection
3. This Week in Security News: Fake Apps & Malicious Bots
4. Inception Attackers Target Europe with Year-old Office Vulnerability
5. Serious XSS Vulnerability Patched in Evernote
6. Phishing now possible by exploiting online video function vulnerability in Word
7. Hackers hide malware in the Windows installation files to mine cryptocurrency

LINUX

8. Cryptomining Malware Uses Rootkit to Hide on Infected Linux Systems
9. This Week in Security News: Fake Apps & Malicious Bots
10. Linux cryptocurrency miners are installing rootkits to hide themselves
11. Seagate and IBM Work Together to Help Reduce Global Hard Drive Counterfeiting with Blockchain Technology

UNIX

Nil

ANDROID

12. This Week in Security News: Fake Apps & Malicious Bots

IOS

13. Bug Bounty Hunter Ran ISP Doxing Service
14. Phishing Attempts Soar to 137 Million in Q3
15. Snowden speaks about the role of surveillance firm NSO Group in Khashoggi murder

MACOS

16. Bug Bounty Hunter Ran ISP Doxing Service
17. OSX/SurfBuyer: Real malware is in the eye of the device holder

Platform report for 2018-11-08

WINDOWS

1. Attack uses malicious InPage document and outdated VLC media player to give attackers backdoor access to targets
2. Active Exploitation of Newly Patched ColdFusion Vulnerability (CVE-2018-15961)
3. Flaws in several self-encrypting SSDs allows attackers to decrypt data they contain
4. VirtualBox zero-day flaw released on Github; working exploit available but no patch
5. Cryptocurrency Mining Malware uses Various Evasion Techniques, Including Windows Installer, as Part of its Routine
6. Microsoft Bug is Deactivating Windows 10 Pro Licenses and Downgrading to Home
7. Metamorfo Banking Trojan Keeps Its Sights on Brazil
8. XSS flaw in Evernote allows attackers to execute commands and steal files

LINUX

Nil

UNIX

9. Symantec Uncovers North Korean Group's ATM Attack Malware
10. Lazarus Group Targets Bank Networks to Rob ATMs

ANDROID

11. Google: Newer Android versions are less affected by malware
12. Spyware disguised as Spanish banking apps removed from Google Play
13. A year later, @amarekano's Android overlay bug has been included in the AOSP November 2018 patched notes as CVE-2018-9524

IOS

14. iOS 12.1 Vulnerability

MACOS

Nil

Platform report for 2018-11-07

WINDOWS

1. Evernote Flaw Allows Hackers to Steal Files, Execute Commands
2. Security Alert: New Dharma Ransomware Strains Alarmingly Go Undetected By Antivirus Engines
3. Erratic Windows 10 Bug Breaks Changing of Default File Associations
4. Researcher discloses VirtualBox Zero-Day without reporting it to Oracle
5. Serious XSS flaw discovered in Evernote for Windows, update now!
6. Weekly Threat Briefing: Scammers Ride on Popular Vote411 Voter Info Site to Push Scareware Alerts
7. Linux servers and IoT devices, main targets of Shellbot botnet
8. Vulnerabilities in self encrypted SSD allow attackers to bypass disk encryption

LINUX

9. Researcher discloses VirtualBox Zero-Day without reporting it to Oracle
10. Weekly Threat Briefing: Scammers Ride on Popular Vote411 Voter Info Site to Push Scareware Alerts
11. Linux servers and IoT devices, main targets of Shellbot botnet

UNIX

Nil

ANDROID

12. 3,2 Million New Android Malicious Apps Detected Until the End of Q3 2018
13. Security Alert: New Dharma Ransomware Strains Alarmingly Go Undetected By Antivirus Engines
14. Not sure how to tell if your Android phone has a virus? Android malware comes in many forms, ranging from spyware
15. Weekly Threat Briefing: Scammers Ride on Popular Vote411 Voter Info Site to Push Scareware Alerts
16. November Android Security Update Fixes Critical Bugs, Drops Media Library
17. We recently detected an Android banking malware campaign (Anubis) actively targeting the Dutch market by #abusing the @PostNL brand. After
18. Linux servers and IoT devices, main targets of Shellbot botnet

IOS

19. Weekly Threat Briefing: Scammers Ride on Popular Vote411 Voter Info Site to Push Scareware Alerts

MACOS

20. Weekly Threat Briefing: Scammers Ride on Popular Vote411 Voter Info Site to Push Scareware Alerts