Sector brief for 2018-11-29

HEALTHCARE

1. Atrium Health’s Databreach: 2.65 Million Patient Records Publicly Revealed
2. 2.6 Million Atrium Health Patient Records Compromised by Vendor AccuDoc
3. U.S. DoJ charges Iranian duo over SamSam Ransomware activity
4. US Indicts Two Iranians for SamSam Campaign Blitz
5. Database breach affects 2.6 million Atrium Health patients
6. McAfee Labs 2019 Threats Predictions Report
7. AccuDoc Data Breach impacted 2.6 Million Atrium Health patients
8. Atrium Health Data Breach Affected More than 2 Million Patients

TRANSPORT

9. U.S. DoJ charges Iranian duo over SamSam Ransomware activity

BANKING & FINANCE

10. Atrium Health’s Databreach: 2.65 Million Patient Records Publicly Revealed
11. Rotexy malware morphs into dangerous banking Trojan
12. Banking Trojan Made in Brazil? A Brief Look
13. Brazilian Financial Malware Spreads Beyond National Boundaries
14. Accenture: Russian hackers using Brexit talks to disguise phishing lures
15. Looking Ahead: RiskIQ’s 2019 Cybersecurity Predictions
16. The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia
17. US Indicts Two Iranians for SamSam Campaign Blitz
18. Brazilian-made bank trojan
19. Proofpoint: Hackers testing new reconnaissance #malware on financial institutions.
20. Dell data breach – Dell forces password reset after the incident
21. McAfee Labs 2019 Threats Predictions Report
22. Threat Spotlight: New spear phishing attack gift card scam
23. Lazarus Targeting Latin America
24. AccuDoc Data Breach impacted 2.6 Million Atrium Health patients
25. Pervasive Brazilian financial malware targets bank customers in Latin America and Europe
26. UK and Dutch Regulators Fined Uber for $1.1 Million over 2016 Data Breach

INFORMATION & TELECOMMUNICATION

27. “And once a device is part of a botnet, it leaves them open for future attacks. So users should avoid
28. A security hole in a mail preview program may have made the data of 60 million customers vulnerable.
29. NEW: Russian hackers using Brexit talks to disguise its phishing lures
30. McAfee Labs 2019 Threats Predictions Report
31. Facebook Increases Bug Bounty Payouts to Improve User Security
32. Pervasive Brazilian financial malware targets bank customers in Latin America and Europe
33. UK and Dutch Regulators Fined Uber for $1.1 Million over 2016 Data Breach

FOOD

Nil

WATER

Nil

ENERGY

34. Banking Trojan Made in Brazil? A Brief Look

GOVERNMENT & PUBLIC SERVICE

35. Accenture: Russian hackers using Brexit talks to disguise phishing lures
36. SamSam ransomware actors charged, sanctioned by US government
37. Indian Police Break Up International Computer Virus Scam
38. The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia
39. McAfee Labs 2019 Threats Predictions Report
40. Lazarus Targeting Latin America

Sector brief for 2018-11-26

HEALTHCARE

1. Ransomware attack disrupted emergency rooms at Ohio Hospital System
2. Ransomware Attack Forced Ohio Hospital System to Divert ER Patients
3. Internal negligence to blame for most data breaches involving personal health information

TRANSPORT

4. Holiday Season: Cybercriminals are Phishing All The Way
5. Phishing Campaign targeting French Industry

BANKING & FINANCE

6. What is Data Classification? Guidelines and Process
7. When Do You Need to Report a Data Breach?
8. Mobile Rotexy Malware Touts Ransomware, Banking Trojan Functions
9. Holiday Season: Cybercriminals are Phishing All The Way
10. Phishing Campaign targeting French Industry
11. Cryptocurrency threat predictions for 2019
12. Cyberthreats to financial institutions 2019: overview and predictions
13. Discover how a @DLink #router vulnerability targeted a banking site to steal #UserCredentials with expert Judith Myerson.

INFORMATION & TELECOMMUNICATION

14. Microsoft launches review after a trio of Azure bugs locked users out of Office 365
15. 13 Newly Discovered Malicious Apps, Deleted By Google From the Play Store
16. How Pirated Versions of ‘Super Smash Bros. Ultimate’ Leaked Weeks Before Release
17. Half of all Phishing Sites Now Have the Padlock
18. Despite growing concerns about cybersecurity and the number of data breach incidents in the news, many employees still have bad
19. Phishing Campaign targeting French Industry
20. Cyberthreats to financial institutions 2019: overview and predictions
21. Sextortion 2.0: We have continued to monitor the campaigns and have seen a recent change in tactics, with some unusual
22. An ongoing phishing campaign is targeting French industry, @FSLabs finds.

FOOD

Nil

WATER

Nil

ENERGY

23. Siemens patches major firewall flaw, other vulnerabilities

GOVERNMENT & PUBLIC SERVICE

24. Did UK city council over-react to a vulnerability report in its recycling app or not?
25. When Do You Need to Report a Data Breach?
26. Recent Attacks on US Entities Attributed to APT29
27. Russia Plans To tighten Data Protection Owing To Intelligence Leaks
28. Cyberthreats to financial institutions 2019: overview and predictions
29. Ukrainian Police Nab Suspected RAT-Slinger
30. Crypto Mining Malware Infects Make-A-Wish-Foundation Website

Sector brief for 2018-11-24

HEALTHCARE

Nil

TRANSPORT

Nil

BANKING & FINANCE

1. Quebec Dubbed As An Embarrassment After Paying $30,000 To Ransomware Authors
2. Powerful Mobile Malware Rotexy Launched over 70,000 Attacks with Banking Trojan & Ransomware Modules
3. North Korea-linked group Lazarus targets Latin American banks
4. .@TalosSecurity recently created a #decryptor that helps files affected by the #ransomware #Thanatos -- typically known to not decrypt files
5. TA505 Cybercrime Group Experimenting with a New RAT In The Wild

INFORMATION & TELECOMMUNICATION

6. Quebec Dubbed As An Embarrassment After Paying $30,000 To Ransomware Authors

FOOD

Nil

WATER

7. TA505 Cybercrime Group Experimenting with a New RAT In The Wild

ENERGY

Nil

GOVERNMENT & PUBLIC SERVICE

8. Quebec Dubbed As An Embarrassment After Paying $30,000 To Ransomware Authors
9. 42-year-old man Arrested For Hacking More than 2,000 Computers From 50 countries With DarkComet RAT

Sector brief for 2018-11-23

HEALTHCARE

1. US Says China Increased Hacking over Trade Dispute
2. Southwest Washington Regional Surgery Center suffered a Phishing attack

TRANSPORT

3. US Says China Increased Hacking over Trade Dispute

BANKING & FINANCE

4. North Korean Hackers Hit Latin American Banks
5. New Emotet Thanksgiving campaign differs from previous ones
6. Synthetic identity fraud to drive $48 billion in annual losses by 2023 – Juniper Research

INFORMATION & TELECOMMUNICATION

7. New Crypto-Miner Attacks Linux Machines, Kills Other Miners and Anti-Malware
8. Do you know the top myths and facts of #mobile #phishing? If not, don't worry, we've compiled a list of
9. “Back in Black” – Article 13 has YouTube threatening to pull the plug over upload filter
10. Internet connected devices might be the hot item for Christmas this year, but are they secure?
11. SAVE 50% FOR BLACK FRIDAY! Get half off FREEDOME VPN and TOTAL with coupon code BLACKFRIDAY.
12. The number of ransomware attacks on individuals has come down as it has become harder to get them to pay,
13. Over 500k Play Store users have installed 13 games that contain malware

FOOD

Nil

WATER

Nil

ENERGY

14. US Says China Increased Hacking over Trade Dispute

GOVERNMENT & PUBLIC SERVICE

15. German e-government SDK patched against ID spoofing vulnerability
16. US Says China Increased Hacking over Trade Dispute
17. Ukrainian police arrest hacker who infected over 2,000 users with DarkComet RAT
18. Ukrainian police arrest hacker who infected over 2,000 users with DarkComet RAT
19. US Postal Service Website Left Data Exposed for Over a Year
20. Exclusive Cybaze ZLab – Yoroi – Hunting Cozy Bear, new campaign, old habits
21. 60 million users’ data were exposed by the US Postal Service

Sector brief for 2018-11-22

HEALTHCARE

1. Phishing Attack Compromises Health First Patients’ Data
2. Data breaches in schools: How should an academic institution report a security incident to comply with the GDPR?

TRANSPORT

Nil

BANKING & FINANCE

3. Rotexy Mobile Trojan Launches 70k+ Attacks in Three Months
4. .@radware #cybersecurity researchers found hackers to be targeting bank users via a #router vulnerability. Learn how a fake banking site
5. VB2018 paper: Since the hacking of Sony Pictures
6. The Rotexy mobile Trojan – banker and ransomware
7. How was a black box attack used to exploit ATM vulnerabilities?
8. Hacking Syndicate TA505 Back with Focus on Info-Stealing Trojan
9. Facebook raises rewards for a security vulnerabilities to $40,000
10. Data breaches in schools: How should an academic institution report a security incident to comply with the GDPR?

INFORMATION & TELECOMMUNICATION

11. Facebook And Instagram Went Down Due To A Server Bug
12. #DidYouKnow A single subscription of AVG Internet Security covers every PC in your family? It also includes webcam and ransomware protection,
13. Facebook 'walking dangerous line' as it appeals record fine
14. Emoji Kitten Denial Of Service Attack Continues to Haunt Skype
15. Found this picture of myself doing an internal briefing on the Nimda worm in 2001. Note the size of the
16. North Korea To Host Cryptocurrency and Blockchain Conference
17. Amazon technical failure caused to leaks users’ email addresses
18. Facebook Increases Average Bounty rewards for High Impact Vulnerabilities
19. Facebook raises rewards for a security vulnerabilities to $40,000

FOOD

Nil

WATER

Nil

ENERGY

Nil

GOVERNMENT & PUBLIC SERVICE

20. Flaw allowing identity spoofing affects authentication based on German eID cards
21. CyberSecurity Asean security alert on Multiple Vulnerabilities in VMware vSphere Data Protection Could Allow for Remote Code Execution
22. North Korea To Host Cryptocurrency and Blockchain Conference
23. US Postal Service Left 60 Million Users Data Exposed For Over a Year

Sector brief for 2018-11-21

HEALTHCARE

1. Google Taking Over Health Records Raises Patient Privacy Fears
2. Conficker: A 10-year retrospective on a legendary worm

TRANSPORT

3. Sofacy APT unleashes new 'Cannon' trojan
4. New Campaign by APT Group Sofacy Discovered using new Malware Named Cannon

BANKING & FINANCE

5. Emotet Banking Trojan Uses Stolen Templates to Boost Phishing Campaign Numbers
6. Lazarus APT Uses Modular Backdoor to Target Financial Institutions
7. What Is Windows PowerShell (And Could It Be Malicious)?
8. Spoofed addresses and anonymous sending: new Gmail bugs make for easy pickings
9. USPS Site Exposed Data on 60 Million Users
10. Major Flaws Found in IT Pentagon Processes After First Ever Financial Audit
11. Black Friday Phishing Dos and Don’ts
12. Bah HumBUG: 5 Recent Holiday Phishing Samples You Need to Watch Out For
13. How Retailers Can Protect Against Magecart This Black Friday and Holiday Season
14. New Wine in Old Bottle: New Azorult Variant Found in FindMyName Campaign using Fallout Exploit Kit
15. Phishing Emails with .COM Extensions Are Hitting Finance Departments
16. Black Friday & Cyber Monday Deals: Phishing and Site Skimmers
17. Magecart Black Hats Battle it Out On Infected Site
18. Is Magecart Checking Out Your Secure Online Transactions?
19. Weekly Threat Briefing: Russian APT Comes Back to Life with New US Spear-phishing Campaign
20. A @DLink #router vulnerability was used to send banking users to a fake site in order to steal #UserCredentials. Learn
21. Infowars Online Store Got Infected with Card Skimming Malware
22. Signing and Verifying Ethereum Signatures
23. Millions Stolen by North Korea-Linked Hacking Group from Atms in Africa and Asia
24. Malaysia’s largest media company becomes victim of a ransomware attack
25. US Department of Justice is investigating Tether for manipulation of market prices
26. MageCart Group Sabotages Rival to Ruin Data and Reputation
27. Major Flaws Found in IT Pentagon Processes After First Ever Financial Audit

INFORMATION & TELECOMMUNICATION

28. Facebook increases rewards for its bug bounty program and facilitate bug submission
29. Inspiring the Next Generation of Tech Talent
30. Google Taking Over Health Records Raises Patient Privacy Fears
31. What Is Windows PowerShell (And Could It Be Malicious)?
32. Spoofed addresses and anonymous sending: new Gmail bugs make for easy pickings
33. Facebook entices researchers with $40,000 reward for account takeover vulnerabilities
34. USPS Site Exposed Data on 60 Million Users
35. Researchers Reveal Identity of Hacker Behind Massive Data Breaches
36. A hacker known as #Tessa88 offered several compromise databases obtained from LinkedIn, MySpace and other companies. Now Recorded Future believes
37. Black Friday Phishing Dos and Don’ts
38. 13 Malware-Laden Fake Apps on Google Play
39. Facebook Ads Urge Its Staff To Leak Secrets
40. How Retailers Can Protect Against Magecart This Black Friday and Holiday Season
41. New Wine in Old Bottle: New Azorult Variant Found in FindMyName Campaign using Fallout Exploit Kit
42. Amazon UK is notifying a data breach to its customers days before Black Friday
43. Black Friday & Cyber Monday Deals: Phishing and Site Skimmers
44. New Campaign by APT Group Sofacy Discovered using new Malware Named Cannon
45. Weekly Threat Briefing: Russian APT Comes Back to Life with New US Spear-phishing Campaign
46. Malicious programs disguised as racing games on Google Play
47. Yikes...#Instagram Accidentally Exposed Some Users' #Passwords In Plaintext
48. #Gmail Glitch Enables Anonymous Messages in #Phishing Attacks:
49. Facebook Increases Rewards for Account Hacking Vulnerabilities
50. Facebook Boosts Bug Bounty Payouts for Account Takeover Flaws
51. OUR BLACK FRIDAY DEALS ARE LIVE! Get 50% off from FREEDOME VPN and TOTAL subscriptions with coupon code BLACKFRIDAY. Buy now:
52. "Luiz O Pinto" pushed 500,000+ installs of malware via Google Play, in ~1 week.
53. How to find, is link malicious/URL or not
54. Microsoft now lets you log into Outlook, Skype, Xbox Live without a password
55. Worried about cryptojacking? Check out how SentinelOne Detects and Protects from GhostMiner CryptoMiner

FOOD

Nil

WATER

Nil

ENERGY

Nil

GOVERNMENT & PUBLIC SERVICE

56. Analyzing OilRig’s Ops Tempo from Testing to Weaponization to Delivery
57. New Pterodo Backdoor Malware Detected By Ukraine
58. New Campaign by APT Group Sofacy Discovered using new Malware Named Cannon
59. White House admits Ivanka Trump used private email for government business
60. New OceanLotus watering hole attacks target southeast Asia
61. Fancy Bear hacker crew Putin dirty RATs in Word documents emailed to govt orgs – report
62. Weekly Threat Briefing: Russian APT Comes Back to Life with New US Spear-phishing Campaign
63. Sofacy APT group used a new tool in latest attacks, the Cannon
64. Phishing Scams Serious Problem for Canada’s Global Affairs
65. Russian hackers are conducting more covert attacks on US and European computers
66. Fancy Bear APT Uses New Cannon Trojan to Target Government Entities
67. Russia Linked Group Resurfaces With Large-Scale Phishing Campaign

Sector brief for 2018-11-20

HEALTHCARE

1. Hackers Linked to Russia Impersonate US Officials
2. Russian APT activity is resurgent, researchers say
3. Zscaler ThreatLabZ Phishing Roundup

TRANSPORT

Nil

BANKING & FINANCE

4. Emotet Returns with Thanksgiving Theme and Better Phishing Tricks
5. Emotet Returns with Thanksgiving Theme and Better Phishing Tricks
6. Web skimmers compete in Umbro Brasil hack
7. Malvertising in Apple Pay Targets iPhone Users
8. An Introduction to Magecart
9. Report: Emotet makes phishing lures more convincing by scraping victims' emails
10. Lazarus Continues Heists, Mounts Attacks on Financial Organizations in Latin America
11. Emotet Campaigns Persist, Utilize Updated Tactics and Techniques
12. For Smbs Ransomware Attacks still the Greatest Online Threat
13. Zscaler ThreatLabZ Phishing Roundup
14. Vision Direct 'fesses up to hack that exposed customer names, payment cards
15. Magecart Spies Payment Cards From Retailer Vision Direct
16. Kaspersky Security Bulletin: Threat Predictions for 2019
17. Experts analyzed how Iranian OilRIG hackers tested their weaponized documents
18. Can a D-Link router vulnerability threaten bank customers?
19. Google Account Hacked for Fake Bitcoin Reward
20. 2019 Security Predictions – Utilities and Industrial Control Systems Targeted with Ransomware
21. Two TalkTalk hackers jailed for 2015 data breach that cost it £77 million

INFORMATION & TELECOMMUNICATION

22. Instagram bug exposes user passwords
23. Gmail Glitch Enables Anonymous Messages in Phishing Attacks
24. 560,000 Duped Into Installing Android Malware in the Form of Fake Driving Games
25. Inspiring Gender Diversity at Women of the Channel Leadership Summit
26. Instagram glitch exposed some user passwords
27. Sofacy Continues Global Attacks and Wheels Out New ‘Cannon’ Trojan
28. Zscaler ThreatLabZ Phishing Roundup
29. 2018 holiday travel period expected to be the busiest travel season on record
30. Kaspersky Security Bulletin: Threat Predictions for 2019
31. Instagram Patched A Data Download Tool Bug That Exposed Users Passwords
32. Vulnerability Spotlight: Multiple remote code execution vulnerabilities in Atlantis Word Processor
33. Google Account Hacked for Fake Bitcoin Reward
34. Google, Target Hit by Twitter Bitcoin Scam Account Hacks

FOOD

Nil

WATER

35. Tech Docs: Keep Out of the Flood Zone with DoS Protection

ENERGY

36. Tech Docs: Keep Out of the Flood Zone with DoS Protection
37. Experts analyzed how Iranian OilRIG hackers tested their weaponized documents
38. 2019 Security Predictions – Utilities and Industrial Control Systems Targeted with Ransomware

GOVERNMENT & PUBLIC SERVICE

39. ESET: Vietnamese hacking group hijacks Southeast Asian sites in watering hole campaign
40. 200K Outlaw Botnet Uses SSH Brute Forcing to Propagate, Monero Mining for Profit
41. Infamous Russian Hacking Group Used New Trojan in Recent Attacks
42. APT29 Re-Emerges After 2 Years with Widespread Espionage Campaign
43. APT29 Re-Emerges After 2 Years with Widespread Espionage Campaign
44. Russia’s Elite Hackers May Have New Phishing Tricks
45. Government Agencies and Think Tanks attacked, APT29 suspected
46. Hackers Linked to Russia Impersonate US Officials
47. Russian APT activity is resurgent, researchers say
48. Sofacy Continues Global Attacks and Wheels Out New ‘Cannon’ Trojan
49. OceanLotus: New watering hole attack in Southeast Asia
50. OceanLotus: New watering hole attack in Southeast Asia
51. Kaspersky Security Bulletin: Threat Predictions for 2019
52. Experts analyzed how Iranian OilRIG hackers tested their weaponized documents
53. Google, Target Hit by Twitter Bitcoin Scam Account Hacks

Sector brief for 2018-11-19

HEALTHCARE

1. Not So Cozy: An Uncomfortable Examination of a Suspected APT29 Phishing Campaign
2. SUNY Upstate Hospital announced a former employee inappropriately accessed more than 1,200 patient records.
3. Texas hospital becomes victim of Dharma ransomware

TRANSPORT

Nil

BANKING & FINANCE

4. New Modular tRat Remote Access Trojan Surfaced During September
5. Tianfu Cup PWN hacking contest – White hat hackers earn $1 Million for Zero-Day exploits
6. Collective Intelligence Podcast, Vitali Kremez on Magecart
7. Business email compromise scam costs Pathé $21.5 million
8. Subject: Invoice. The cause of 6 out of 10 of the most effective phishing campaigns in 2018
9. Vision Direct reveals customer credit card leak, fake Google script may be to blame
10. Vision Direct Notifies Customers of Data Compromise
11. Email campaign spreading new tRAT malware
12. October 2018’s Most Wanted Malware: For The First Time, Remote Access Trojan Reaches Global Threat Index’s Top 10

INFORMATION & TELECOMMUNICATION

13. U.S. warns countries not to 'manipulate the extradition process' for cybercriminals
14. Tianfu Cup PWN hacking contest – White hat hackers earn $1 Million for Zero-Day exploits
15. Instagram Flaw Exposes User Passwords
16. Multiple Remote TP-Link TL-R600VPN Router Vulnerabilities Patched
17. A week in security (November 12 – 18)
18. Instagram Bug, Now Fixed, Exposed User Passwords
19. The Most Damaging Election Disinformation Campaign Came From Donald Trump, Not Russia
20. 2FA Login Failure in Office 365 and Azure
21. SUNY Upstate Hospital announced a former employee inappropriately accessed more than 1,200 patient records.
22. New ShadowTalk update looks at: New nation-state threat actor uses advanced TTPs to target Pakistan Lazarus Group’s FASTCash malware
23. Cybaze ZLab – Yoroi team analyzed malware used in recent attacks on US entities attributed to APT29
24. Outlaw Group Distributes Botnet for Cryptocurrency-Mining, Scanning, and Brute-Force
25. Instagram flaw exposes user passwords
26. Instagram Privacy Tool Exposed Passwords
27. Proofpoint #ThreatInsight research: #sLoad and #Ramnit pairing in sustained personalized campaigns against UK and Italy:
28. Instagram Accidentally Exposed Some User Passwords
29. How #privacy intersects with #CyberSecurity. “Criminals can craft better phishing emails to scam you when they know what you’re interested in.”
30. Instagram Critical Bug Leaked User’s Password Via its Data Download Tool
31. Fun fact: The Morris Worm of 1988 did never spread to Finland, as the outbreak happened two weeks before we
32. Instagram Accidentally Exposed Some Users' Passwords In Plaintext

FOOD

Nil

WATER

Nil

ENERGY

Nil

GOVERNMENT & PUBLIC SERVICE

33. Not So Cozy: An Uncomfortable Examination of a Suspected APT29 Phishing Campaign
34. U.S. warns countries not to 'manipulate the extradition process' for cybercriminals
35. The Most Damaging Election Disinformation Campaign Came From Donald Trump, Not Russia
36. Cybaze ZLab – Yoroi team analyzed malware used in recent attacks on US entities attributed to APT29
37. Russian Cozy Bear APT 29 hackers may be impersonating State Department
38. Turkish Police Arrested Cryptocurrency Hackers

Sector brief for 2018-11-18

HEALTHCARE

1. WatchGuard Technologies 2019 Security Predictions

TRANSPORT

Nil

BANKING & FINANCE

2. Ransomware Remediation for Comprehensive Protection
3. A Look Inside MageCart, A Notorious Hacker Group
4. Security Affairs newsletter Round 189 – News of the week
5. WatchGuard Technologies 2019 Security Predictions

INFORMATION & TELECOMMUNICATION

6. Twitter Bitcoin Scam Account Hacks Were Caused By Third-Party Apps
7. Instagram glitch exposed some user passwords
8. See how SearchLight identifies when your data is exposed, your brand is abused, or your company is mentioned on the
9. Security Affairs newsletter Round 189 – News of the week
10. Hacking Gmail’s UX with from fields for phishing attacks
11. To help you rule out the worst password ideas, FrontNet has put together a list of the 25 words passwords
12. WatchGuard Technologies 2019 Security Predictions

FOOD

Nil

WATER

Nil

ENERGY

13. WatchGuard Technologies 2019 Security Predictions

GOVERNMENT & PUBLIC SERVICE

14. SMS 2FA database leak drama, MageCart mishaps, Black Friday badware, and more
15. Suspected APT29 hackers behind attacks on US gov agencies, think tanks, and businesses
16. WatchGuard Technologies 2019 Security Predictions

Sector brief for 2018-11-17

HEALTHCARE

1. Million password resets and 2FA codes exposed in unsecured Vovox DB

TRANSPORT

Nil

BANKING & FINANCE

2. Million password resets and 2FA codes exposed in unsecured Vovox DB
3. 4 Effective Ways on How to Prevent Cryptocurrency Mining Infection
4. Emotet Banking Trojan Family Re-emerges, Taps Malicious PDF/Doc Files to Spread

INFORMATION & TELECOMMUNICATION

5. 4 Effective Ways on How to Prevent Cryptocurrency Mining Infection
6. SPOILER: These are not good password tricks.

FOOD

Nil

WATER

Nil

ENERGY

Nil

GOVERNMENT & PUBLIC SERVICE

7. 8 Cybersecurity Prediction for 2019

Sector brief for 2018-11-16

HEALTHCARE

1. New HealthEquity Data Breach Exposes PII/PHI of Almost 21,000 Customers
2. SUNY Upstate Hospital announced a former employee inappropriately accessed more than 1,200 patient records.
3. Apache Struts2 Commons FileUpload Deserialization Remote Code Execution Vulnerability (CVE-2016-100031)Threat Alert

TRANSPORT

4. Group-IB presented latest cybercrime and nation-state hacking trends in Asia

BANKING & FINANCE

5. InfoWars: Magecart Infection Points to 'Industrial Sabotage'
6. Reappearance of Magecart Malware to Infect Virtual Stores
7. New HealthEquity Data Breach Exposes PII/PHI of Almost 21,000 Customers
8. Hacking group returns, switches attacks from ransomware to trojan malware
9. Details of 170,000 Pakistani debit cards leaked on dark web
10. Cyber News Rundown: Infowars Hacked by Card Skimmers
11. .@TalosSecurity recently created a #decryptor that helps files affected by the #ransomware #Thanatos -- typically known to not decrypt files
12. Russian Banks Hit By Major Phishing Attacks
13. How to Stay One Step Ahead of Phishing Websites — Literally
14. Group-IB presented latest cybercrime and nation-state hacking trends in Asia
15. Russian banks hit by major phishing attacks from two hacker groups
16. ATM Tests Reveal Surprising Security Flaws
17. tRat is a new modular RAT used by the threat actor TA505
18. Malaysia’s Largest Media Company Allegedly Suffers Ransomware Attack
19. Data Breaches on the Rise in Financial Services
20. Four More Malicious Cryptocurrency Apps on Google Play
21. Hackers infect Malaysia’s largest media company with ransomware, then demand $6.45 million
22. #GroupIB #ThreatIntelligence detected large set of compromised payment cards details that was put on sale on underground card shop on
23. Two hacker groups attacked Russian banks posing as the Central Bank of Russia
25. Apache Struts2 Commons FileUpload Deserialization Remote Code Execution Vulnerability (CVE-2016-100031)Threat Alert
26. 5 Top Techniques for Testing Blockchain Apps
27. Warning Issued by Emirates NBD over VAT Phishing Email Targeting its Customers
28. Looking Back at LogRhythm Labs' 2018 Predictions for Security - How Did We Do?

INFORMATION & TELECOMMUNICATION

29. InfoWars: Magecart Infection Points to 'Industrial Sabotage'
30. Gmail Glitch Offers Stealthy Trick for Phishing Attacks
31. Analyzing OilRig’s Ops Tempo from Testing to Weaponization to Delivery
32. This Week in Security News: Holiday Cybercriminals & Cryptomining Malware
33. Cybaze ZLab- Yoroi team spotted a new variant of the APT28 Lojax rootkit
34. Word of the Day: social engineering
35. SUNY Upstate Hospital announced a former employee inappropriately accessed more than 1,200 patient records.
36. 2FA codes are great for security, except when 26M of them are leaked
37. #GroupIB #ThreatIntelligence detected large set of compromised payment cards details that was put on sale on underground card shop on
38. Google, US and Israeli politician Twitter accounts hijacked to promote 'Elon Musk' Bitcoin scam
39. Two hacker groups attacked Russian banks posing as the Central Bank of Russia
40. Apache Struts2 Commons FileUpload Deserialization Remote Code Execution Vulnerability (CVE-2016-100031)Threat Alert
41. French Company Data Breach Causes Sensitive Information Stolen to the Hackers
42. Magecart become close to a household name with hacks of massive sites like http://Ticketmaster.com , http://Newegg.com and British Airways.
43. Amid calls for a Windows bug status dashboard, Microsoft belatedly agrees to build one
44. Looking Back at LogRhythm Labs' 2018 Predictions for Security - How Did We Do?
45. SentinelOne Detects KeyPass Ransomware! KeyPass is a new ransomware threat that has hit at least 20 countries and appears to be

FOOD

Nil

WATER

Nil

ENERGY

46. Group-IB presented latest cybercrime and nation-state hacking trends in Asia
47. Apache Struts2 Commons FileUpload Deserialization Remote Code Execution Vulnerability (CVE-2016-100031)Threat Alert
48. French Company Data Breach Causes Sensitive Information Stolen to the Hackers

GOVERNMENT & PUBLIC SERVICE

49. Using Microsoft Powerpoint as Malware Dropper
50. Operation Shaheen – Pakistan Air Force members targeted by nation-state attackers
51. Analyzing OilRig’s Ops Tempo from Testing to Weaponization to Delivery
52. This Week in Security News: Holiday Cybercriminals & Cryptomining Malware
53. Group-IB presented latest cybercrime and nation-state hacking trends in Asia
54. Kaspersky Announces the Details of Windows 7 Zero-Day Vulnerability
55. Looking Back at LogRhythm Labs' 2018 Predictions for Security - How Did We Do?

Sector brief for 2018-11-15

HEALTHCARE

1. Phishing Attack Causes Breach at Southwest Washington Regional Surgery Center
2. WannaCry Still Impacts Thousands of Systems Every Month

TRANSPORT

3. Compromising vital infrastructure: air traffic control
4. Bots on a plane? Bad bots cause unique cyber-security issues for airlines

BANKING & FINANCE

5. Proofpoint: Hackers testing new reconnaissance malware on financial institutions
6. Survey Says: Bad PR Due to Data Breach News, Very Bad for Businesses
7. Compromising vital infrastructure: air traffic control
8. Phishing Attack Causes Breach at Southwest Washington Regional Surgery Center
9. 20% of MageCart-compromised merchants get reinfected within days
10. 20% of MageCart-compromised merchants get reinfected within days
11. RiskIQ’s 2018 Black Friday E-commerce Blacklist: Key Intel for This Year’s Mega Shopping Weekend
12. Phishing Emails with .COM Extensions Are Hitting Finance Departments
13. Brazilian Users Under Attack From Metamorfo Banking Trojan
14. Today #GroupIB detected a massive phishing campaign sent to Russian banks from a fake email address purporting to belong to
15. Massive Data Leaks Keep Happening Because Big Companies Can Afford to Lose Your Data
16. 14 Malware Families Targeting E-Commerce Brands Ahead of Black Friday
17. Phishing fraudsters set their sights on online storage portals
18. Skimmed BA and Newegg Customer Card Details Up for Sale
19. InfoWars online store hit by Magecart
20. Alex Jones's InfoWars online store hit by Magecart
21. Cryptocurrency fraud is the exception, not the rule
22. Ransomware Attack Strikes Media Prima
23. Access Control Acronyms: ACL, RBAC, ABAC, PBAC, RAdAC, and a Dash of CBAC

INFORMATION & TELECOMMUNICATION

24. Suspected Russian cybercriminal arrested in Bulgaria at U.S. request, lawyer says
25. Vulnerability: Emojis can kill Skype for Business
26. 5 Ways #Cybercriminals Can Access Your Emails Without #Phishing [Infographic]:
27. Massive Data Leaks Keep Happening Because Big Companies Can Afford to Lose Your Data
28. Official Google Twitter account hacked in Bitcoin scam
29. Law firm uncovers exposed sensitive details about top attorney online. @mazzazone gives the details:
30. #ThreatHuntThursday: How to hunt for lateral movement by #PSExec. Check out our new blog post by @sp1nl0ck on how remote
31. Two whitehats receive $60,000 in rewards for successfully finding iOS 12.1 vulnerabilities
32. #tRat: New modular #RAT appears in multiple email campaigns: http://ow.ly/1nsX50jHzgd via the Proofpoint @threatinsight research team.
33. Cryptocurrency fraud is the exception, not the rule
34. Nordstrom is notifying employees of a data breach that exposed their personal information, including names, Social Security numbers, dates of
35. Facebook fixed a new security bug
36. I forgot to follow up on this… According to Apple, the process could take up to 7 days. It

FOOD

Nil

WATER

Nil

ENERGY

Nil

GOVERNMENT & PUBLIC SERVICE

37. My Health Record extension highlights lingering security, privacy concerns
38. Compromising vital infrastructure: air traffic control
39. Suspected Russian cybercriminal arrested in Bulgaria at U.S. request, lawyer says
40. Report: Microsoft’s enterprise products covertly gather personal data on users
41. Chinese TEMP.Periscope cyberespionage group was using TTPs associated with Russian APTs
42. Cryptocurrency fraud is the exception, not the rule
43. My Health Record remains opt-out as Senate passes privacy amendments
44. Symantec Honored for its Collaboration With Leading Industry Group to Protect Against Business Email Compromise Scams

Sector brief for 2018-11-14

HEALTHCARE

1. CVE-2018-15961: Adobe ColdFusion Flaw exploited in attacks in the wild
2. Australian Senate extends My Health Record opt-out period
3. Healthcare.gov Health Data Breach Exposes Personal Data
4. Big Game Hunting: The Evolution of INDRIK SPIDER From Dridex Wire Fraud to BitPaymer Targeted Ransomware

TRANSPORT

5. A 100k routers around the world are on the botnet to conduct emails spam

BANKING & FINANCE

6. FlawedAmmy, the Only RAT in CheckPoint’s Global Threat Index 2018 List
7. 1,000 Bitcoins Ransom Asked from Media Prima After Successful Ransomware Attack
8. Weekly Threat Briefing: Adobe ColdFusion Servers Under Attack from APT Group
9. Magecart Cybercrime Groups Harvest Payment Card Data
10. How Threat Intelligence Prioritizes Risk in Vulnerability Management
11. Monitoring file output for malicious code 'could have stopped BA attack more quickly'
12. Operation FastCash
13. Magecart- The Card-Skimming Group and Its Many Faces
14. Infowars Store Affected by Magecart Credit Card Stealing Hack
15. Alex Jones’ Infowars store was infected with credit card skimming software
16. BDO Unibank Warned its Customers to Remain Beware from New Phishing Scheme
17. Healthcare.gov Health Data Breach Exposes Personal Data
18. Big Game Hunting: The Evolution of INDRIK SPIDER From Dridex Wire Fraud to BitPaymer Targeted Ransomware

INFORMATION & TELECOMMUNICATION

19. Bitcoin Giveaway Scam Balloons, with Google the Latest Victim
20. 1,000 Bitcoins Ransom Asked from Media Prima After Successful Ransomware Attack
21. Weekly Threat Briefing: Adobe ColdFusion Servers Under Attack from APT Group
22. Google services collapsed due to BGP leak
23. Google services collapsed due to BGP leak
24. Facebook vulnerability could have leaked your private information – again
25. How Threat Intelligence Prioritizes Risk in Vulnerability Management
26. Business Email Compromise - When You Don’t Need to Phish:
27. Is it time to change your password? Check out this list of the 25 worst passwords for 2018 and make
28. A Large Retailer Responds to #DDoS Extortion: To Pay or Not to Pay?
29. Microsoft covertly collects personal data from enterprise Office ProPlus users
30. Facebook reportedly fixes search bug that could have threatened user privacy
31. Beers with Talos Ep. #41: Sex, money and malware
32. A #bug allowing websites to capture private data from Facebook users through Chrome has been discovered:
33. Cyber security is a process: Prevent, Detect, Respond, Predict. @5ean5ullivan @FSecure @ohjelmisto_ry
34. Are you safe on social? "Countering the Social Hack" a 5-step process from ZF CEO @FirstNameFoster in @BRINKNewsNow
35. Facebook flaw could have exposed private info of users and their friends
36. Bitcoin fraud on the official Twitter account of Google GSuite
37. Exploits confirmed! Congrats to F-Secure’s @MWRLabs team for another great #Pwn2Own performance. @thezdi
38. BDO Unibank Warned its Customers to Remain Beware from New Phishing Scheme
39. New Press Release: Team from @FSecure's @MWRLabs demos exploits for previously undisclosed vulnerabilities at Mobile #Pwn2Own competition -
40. Facebook Patches Another Vulnerability That Exposed User’s Private Information
41. A 100k routers around the world are on the botnet to conduct emails spam
42. Big Game Hunting: The Evolution of INDRIK SPIDER From Dridex Wire Fraud to BitPaymer Targeted Ransomware

FOOD

Nil

WATER

Nil

ENERGY

Nil

GOVERNMENT & PUBLIC SERVICE

43. Did you by chance hack OPM back in 2015? Good news, your password probably still works!
44. Weekly Threat Briefing: Adobe ColdFusion Servers Under Attack from APT Group
45. Cyber espionage group used CVE-2018-8589 Windows Zero-Day in Middle East Attacks
46. CVE-2018-15961: Adobe ColdFusion Flaw exploited in attacks in the wild
47. CyberSecurity Asean security alert on A Vulnerability in Cisco Unity Express Could Allow for Arbitrary Code Execution
48. Hunt finally submits to My Health Record arm-twists as opt-out window extended
49. Healthcare.gov Health Data Breach Exposes Personal Data
50. Senate votes to extend My Health Record opt-out to January 31

Sector brief for 2018-11-13

HEALTHCARE

1. Premier Media Conglomerate of Malaysia, Falls for Ransomware Infection
2. The Cybersecurity Tech Accord endorses the Paris Call
3. Former Employee Accessed Medical Records For Nearly a Year
4. Chinese Threat Actor TEMP.Periscope Targets UK-Based Engineering Company Using Russian APT Techniques
5. What’s on Our Minds for 2019? Key Themes from the RSA Speaker Selection Process

TRANSPORT

6. Chinese Threat Actor TEMP.Periscope Targets UK-Based Engineering Company Using Russian APT Techniques
7. What’s on Our Minds for 2019? Key Themes from the RSA Speaker Selection Process

BANKING & FINANCE

8. Fake Crypto Wallet Apps Discovered in Google Play, Built Using Drag-n-Drop
9. Premier Media Conglomerate of Malaysia, Falls for Ransomware Infection
10. The Cybersecurity Tech Accord endorses the Paris Call
11. Magecart Cybercrime Groups Mass Harvest Payment Card Data
12. Seven Hacking Groups Operate Under “Magecart” Umbrella, Analysis Shows
13. That Domain You Forgot to Renew? Yeah, it’s Now Stealing Credit Cards
14. Nordstrom Quick to Tell Employees of a Data Breach
15. Inside Magecart: RiskIQ and Flashpoint Release Comprehensive Report on the Assault on E-Commerce
16. ‘Inside Magecart’ Exposes the Operation Behind the Web’s Biggest E-Commerce Scourge
17. The Tactic Cybercriminals Use to Steal Bitcoin
18. Beware !! Worlds Most Active Malware Emotet Launching New Campaign With Malicious Word and PDF Attachments
19. Compromised security in millions of cards in the US

INFORMATION & TELECOMMUNICATION

20. Fixed Facebook Privacy Bug Could Have Allowed Bad Actors to Steal Personal Info
21. Facebook flaw opened your profile to data thieves
22. Facebook Patches Another User Data Harvesting Bug
23. That Domain You Forgot to Renew? Yeah, it’s Now Stealing Credit Cards
24. Nordstrom Quick to Tell Employees of a Data Breach
25. Facebook Bug Let Websites Access Private User Data
26. Target and other high profile Twitter accounts exploited for cryptocurrency scams
27. The Ontario Cannabis Store has reported a data breach that took place Nov. 1 through the Canada Post and affected
28. Facebook patches another bug that could have allowed mass-harvesting of user data
29. Chinese Threat Actor TEMP.Periscope Targets UK-Based Engineering Company Using Russian APT Techniques
30. It’s Amateur Hour in the World of Spyware and Victims Will Pay the Price
31. Microsoft Patch Tuesday — November 2018: Vulnerability disclosures and Snort coverage
32. Another Facebook Bug Could Have Exposed Your Private Information
33. #Gallmaker eschews custom malware, uses living off the land and publicly available #hack tools. Find out more:
34. Attacker hijacks Elon Musk Twitter account to implement fake bitcoin fraud
35. Google Services down due to BGP leak, traffic hijacked through Russia, China, and Nigeria
36. To help you rule out the worst password ideas, FrontNet has put together a list of the 25 words passwords
37. WebCobra Malware Uses Victims’ Computers to Mine Cryptocurrency
38. WebCobra Malware Uses Victims’ Computers to Mine Cryptocurrency
39. Illegal cryptocurrency mining
40. Leak: Windows 10 October Update will be re-launched tomorrow
41. Twitter grapples with fake Elon Musk accounts promoting bitcoin scams

FOOD

Nil

WATER

42. That Domain You Forgot to Renew? Yeah, it’s Now Stealing Credit Cards

ENERGY

43. Chinese Threat Actor TEMP.Periscope Targets UK-Based Engineering Company Using Russian APT Techniques
44. WebCobra Malware Uses Victims’ Computers to Mine Cryptocurrency
45. WebCobra Malware Uses Victims’ Computers to Mine Cryptocurrency
46. Illegal cryptocurrency mining

GOVERNMENT & PUBLIC SERVICE

47. Scare Force: Pakistan military hit by Operation Shaheen malware
48. Pakistan Military Hit By Operation Shaheen Malware
49. Sophisticated cyber-espionage campaign targeting Pakistani government and air force
50. Chinese Threat Actor TEMP.Periscope Targets UK-Based Engineering Company Using Russian APT Techniques
51. It’s Amateur Hour in the World of Spyware and Victims Will Pay the Price
52. Using Machine Learning to Cluster Malicious Network Flows From Gh0st RAT Variants
53. WebCobra Malware Uses Victims’ Computers to Mine Cryptocurrency
54. WebCobra Malware Uses Victims’ Computers to Mine Cryptocurrency