Daily brief for 2018-09-13

Asia

1. OilRig APT Continues Its Ongoing Malware Evolution
2. APT10 Targeting Japanese Corporations Using Updated TTPs

World

1. Russian man extradited to U.S. for ‘massive’ financial hacking campaign
2. Bacloud: Russia’s New Misinformation Safe Haven
3. Kelihos Botnet Operator Pleads Guilty in Federal Court
4. Scareware scheme operator thrown behind bars for targeting US media
5. Cobalt crime gang is using again CobInt malware in attacks on former soviet states
6. Russian Hacker Pleads Guilty to Operating Kelihos Botnet
7. Kelihos Botnet Author Pleads Guilty in U.S. Court
8. New PyLocky Ransomware Attack on Various Organization that Encrypt More than 100 File Extensions
9. Smashing Security : British Airways hack, Mac apps steal browser history, and one person has 285,000 texts leaked

Attacks

1. Russian man extradited to U.S. for ‘massive’ financial hacking campaign
2. Sly malware author hides cryptomining botnet behind ever-shifting proxy service
3. Park by Phone data breach affects 5000 customers
4. Cobalt Gang phishing campaign targets Eastern Europeans with CobInt backdoor-downloader
5. Cold-Boot Attack Steals Passwords In Under Two Minutes
6. Security flaw can leak Intel ME encryption keys
7. New Necurs Spam Campaign Targets Banks with Malicious .Wiz Files
8. Veeam leaves MongoDB database wide open, exposes 445m records
9. Kelihos Botnet Operator Pleads Guilty in Federal Court
10. Kodi add-ons launch cryptomining campaign
11. Jaxx wallet phishing campaign aimed to steal user cryptocurrency
12. Kelihos botnet operator jailed for account theft, ID trading in the Dark Web
13. Files With 42 Million Emails and Passwords Found On Free Hosting Service
14. Raise of IoT Botnets Responsible for Massive DDoS Attacks – Q2 2018 Threat Report
15. Russian Hacker Pleads Guilty to Operating Kelihos Botnet
16. Kelihos Botnet Author Pleads Guilty in U.S. Court
17. Mongo Lock: The attack that deletes MongoDB databases
18. Mongo Lock: The attack that deletes MongoDB databases
19. Smashing Security : British Airways hack, Mac apps steal browser history, and one person has 285,000 texts leaked

Threats

1. Domestic Kitten spyware targets ISIS supporters
2. September Patch Tuesday: Adobe patches seven critical vulnerabilities
3. Sly malware author hides cryptomining botnet behind ever-shifting proxy service
4. Apple store apps are not all safe: Malwarebytes, Tripwire
5. Uptick in malware designed to size up targets before launching full payload
6. Honolulu-based Fetal Diagnostic Institute of the Pacific hit with ransomware
7. Cobalt Gang phishing campaign targets Eastern Europeans with CobInt backdoor-downloader
8. Apple’s Safari and Microsoft’s Edge browsers contain spoofing bug
9. OilRig APT Continues Its Ongoing Malware Evolution
10. Apache Struts exploit found in Mirai variant may signify shift in attack strategy
11. Flaws in firmware expose almost any modern PC to Cold Boot Attacks
12. ThreatList: Microsoft Macros Remain Top Vector for Malware Delivery
13. Security flaw can leak Intel ME encryption keys
14. How to Perform Manual SQL Injection With Integer Based Method
15. [SingCERT] Alert on Critical Microsoft Vulnerabilities CVE-2018-8440, CVE-2018-8475, CVE-2018-0965, CVE-2018-8439 & CVE-2018-8449
16. 2 Billion Bluetooth Devices Remain Exposed to Airborne Attack Vulnerabilities
17. Really old computer viruses are still infecting new machines
18. New Necurs Spam Campaign Targets Banks with Malicious .Wiz Files
19. ICS CERT warns of several flaws in Fuji Electric V-Server
20. Two billion devices still vulnerable to Blueborne flaws a year after discovery
21. Prison for man who assisted scareware scheme that targeted newspaper website
22. Microsoft Office Macros: Still Your Leader in Malware Delivery
23. Windows and Linux Kodi users infected with cryptomining malware
24. Kodi add-ons launch cryptomining campaign
25. Ransomware attack shuts down small Canadian town; officials pay ransom
26. New Firmware Flaws Resurrect Cold Boot Attacks
27. New Gartner Report Recommends a Vulnerability Management Process Based on Weaponization and Asset Value
28. Kernel exploit discovered in macOS Webroot SecureAnywhere antivirus software
29. Malicious Kodi Add-ons Install Windows & Linux Coin Mining Trojans
30. Scareware scheme operator thrown behind bars for targeting US media
31. Cobalt crime gang is using again CobInt malware in attacks on former soviet states
32. New PyLocky Ransomware stands out for anti-machine learning capability
33. New PyLocky Ransomware Attack on Various Organization that Encrypt More than 100 File Extensions
34. Smashing Security : British Airways hack, Mac apps steal browser history, and one person has 285,000 texts leaked

Crime

1. Sly malware author hides cryptomining botnet behind ever-shifting proxy service
2. Prison for man who assisted scareware scheme that targeted newspaper website
3. Bacloud: Russia’s New Misinformation Safe Haven
4. Windows and Linux Kodi users infected with cryptomining malware
5. Kelihos Botnet Operator Pleads Guilty in Federal Court
6. Kodi add-ons launch cryptomining campaign
7. Ransomware attack shuts down small Canadian town; officials pay ransom
8. New Gartner Report Recommends a Vulnerability Management Process Based on Weaponization and Asset Value
9. Kelihos botnet operator jailed for account theft, ID trading in the Dark Web
10. Files With 42 Million Emails and Passwords Found On Free Hosting Service
11. Scareware scheme operator thrown behind bars for targeting US media
12. Cobalt crime gang is using again CobInt malware in attacks on former soviet states
13. Russian Hacker Pleads Guilty to Operating Kelihos Botnet
14. Kelihos Botnet Author Pleads Guilty in U.S. Court

Politics

1. APT10 Targeting Japanese Corporations Using Updated TTPs
2. Bacloud: Russia’s New Misinformation Safe Haven

Daily brief for 2018-09-12

Asia

1. WTB: Apple Removes Top Security Tool for Secretly Stealing Data

World

1. Multi-Stage Malware Heavily Used in Recent Cobalt Attacks
2. Latvian hacker sentenced to 33 months in prison for scareware scheme
3. Russian hacker pleads guilty for role in massive botnet schemes
4. Modular Malware Brings Stealthy Attacks to Former Soviet States
5. Data breach — 380,000 British Airways transactions compromised | Avast
6. Researchers implicate online card-skimming group in British Airways hack
7. British Airways reveals details about data breach

Attacks

1. OilRig Uses Updated BONDUPDATER to Target Middle Eastern Government
2. Russian hacker pleads guilty for role in massive botnet schemes
3. Jaxx Cryptocurrency wallet phishing campaign shut down
4. Modular Malware Brings Stealthy Attacks to Former Soviet States
5. Data breach — 380,000 British Airways transactions compromised | Avast
6. Veeam Leaks 200 GB Customer Database, Goldmine for Phishers
7. Park by Phone data breach affects 5000 customers
8. Feeling the Pulse of Cyber Security in Healthcare
9. Phishing warning: One in every one hundred emails is now a hacking attempt
10. Cybercriminals Go Phishing For Jaxx Wallet Users
11. Dramatic Increase of DDoS Attack Sizes Attributed to IoT Devices
12. Data management firm Veeam mismanages own data, leaks 445m records
13. Crooks Combine Phishing and Impersonation For Higher Success Rate
14. Beware! Unpatched Safari Browser Hack Lets Attackers Spoof URLs
15. British Airways reveals details about data breach

Threats

1. Multi-Stage Malware Heavily Used in Recent Cobalt Attacks
2. OilRig Uses Updated BONDUPDATER to Target Middle Eastern Government
3. Latvian hacker sentenced to 33 months in prison for scareware scheme
4. Canadian town bows to ransomware attack, will pay attackers
5. Russian hacker pleads guilty for role in massive botnet schemes
6. PowerShell Obfuscation Ups the Ante on Antivirus
7. New Python-based Ransomware Poses as Locky
8. Modular Malware Brings Stealthy Attacks to Former Soviet States
9. Uproar after Adobe winds down Magento rewards-based bug bounty program
10. Malware Campaign Targeting Jaxx Wallet Holders Shut Down
11. Osiris Banking Trojan Displays Modern Malware Innovation
12. September Patch Tuesday: Adobe patches seven critical vulnerabilities
13. Office VBA + AMSI: Parting the veil on malicious macros
14. A question of security: What is obfuscation and how does it work?
15. Feedify becomes latest victim of the Magecart malware campaign
16. Flaws Found in Fuji Electric Tool That Links Corporate PCs to ICS
17. Researchers implicate online card-skimming group in British Airways hack
18. Veeam Leaks 200 GB Customer Database, Goldmine for Phishers
19. September 2018 Security Notes address a total of 14 flaws in SAP products
20. Domestic Kitten spyware targets ISIS supporters
21. Six Critical Vulnerabilities in Adobe ColdFusion Get Patches
22. Microsoft purges 3,000 tech support scams hiding on TechNet
23. Faster Prod at the Expense of Security? 2018 ‘Under the Hoodie’ Reveals Gaps in Applications
24. Feedify Hacked with Magecart Information Stealing Script
25. Cybercriminals Go Phishing For Jaxx Wallet Users
26. Adobe patch update tackles six critical vulnerabilities in ColdFusion
27. Crooks Combine Phishing and Impersonation For Higher Success Rate
28. Microsoft Patch Tuesday updates for September 2018 also address recently disclosed Windows zero-day
29. September Patch Tuesday: Windows Fixes ALPC Elevation of Privilege, Remote Code Execution Vulnerabilities
30. Address Bar Spoofing Flaw Found in Edge, Safari
31. Beware! Unpatched Safari Browser Hack Lets Attackers Spoof URLs
32. Microsoft Released Security Updates with the Patch for Recent Windows Zero-day Flow

Crime

1. Russian hacker pleads guilty for role in massive botnet schemes
2. Osiris Banking Trojan Displays Modern Malware Innovation
3. Data breach — 380,000 British Airways transactions compromised | Avast
4. Researchers implicate online card-skimming group in British Airways hack
5. Veeam Leaks 200 GB Customer Database, Goldmine for Phishers
6. Feedify Hacked with Magecart Information Stealing Script
7. WTB: Apple Removes Top Security Tool for Secretly Stealing Data
8. British Airways reveals details about data breach

Politics

1. Nothing to report

Daily brief for 2018-09-11

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. UIDAI’s Aadhaar Software Hacked – Hackers Disabled Security Features & Compromise the Database

Threats

1. Microsoft patches recent ALPC zero-day in September 2018 Patch Tuesday updates
2. Microsoft September 2018 Patch Tuesday Fixes 16 Critical Vulnerabilities

Crime

1. MageCart crime gang is behind the British Airways data breach
2. The LIfecycle of Internet Fraud: How Credit Cards are Stolen, Sold and Used for Illegal Purchases
3. August’s Most Wanted Malware: Banking Trojan Attacks Turn up the Heat

Politics

1. Nothing to report

Daily brief for 2018-09-10

Asia

1. Chinese LuckyMouse APT has been using a digitally signed network filtering driver in recent attacks
2. Analysts expect Lazarus Group to evolve, clean up opsec
3. WTB: Computer Virus Cripples iPhone Chipmaker TSMC Plants
4. WTB: US State Governments Receive Malware-Laden CDs From China Via Snail Mail
5. WTB: Data Breach Exposes Trade Secrets of Carmakers GM, Ford, Tesla, Toyota
6. GAO Report shed the lights on the failures behind the Equifax hack
7. North Korean programmer charged for Sony, WannaCry attacks and more
8. Mirai and Gafgyt target Apache Struts and SonicWall to hit enterprises
9. LuckyMouse signs malicious NDISProxy driver with certificate of Chinese IT company

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. WTB: JavaScript Web Apps And Servers Vulnerable To ReDoS Attacks
2. WTB: Vulnerabilities In mPOS Devices Could Lead To Fraud And Theft
3. GAO Report shed the lights on the failures behind the Equifax hack
4. From the year of ransomware to the year of cryptojacking
5. IBM X-Force Delves Into ExoBot’s Leaked Source Code

Politics

1. Nothing to report

Daily brief for 2018-09-09

Asia

1. Domestic Kitten – An Iranian surveillance operation under the radar since 2016

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-09-08

Asia

1. Apple removed the popular app Adware Doctor because steals user browsing history
2. US Department of Justice accuses North Korea of spying on Sony

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. USB drives shipped with Schneider Solar products are infected with malware
2. Data theft in British Airways; over 300k users affected
3. US Department of Justice accuses North Korea of spying on Sony

Politics

1. Nothing to report

Daily brief for 2018-09-07

Asia

1. Researchers Discover New "Fallout" Exploit Kit
2. Industry Reactions to U.S. Charging North Korean Hacker: Feedback Friday
3. Apple Removes Top Security App For Stealing Data and Sending it to China
4. Palestinian, Middle East Targets Hit with New Surveillance Attacks
5. Stolen Data from Chinese Hotel Chain and Other Illicit Products Sold in Deep Web Forum
6. No.1 Adware Removal Tool On Apple App Store Caught Spying On Mac Users
7. Top MacOS App Exfiltrates Browser Histories Behind Users’ Backs
8. US charges North Korea agent over Sony Pictures hack and WannaCry
9. Opsec Mistakes Allowed U.S. to Link North Korean Man to Hacks
10. U.S. Charges North Korean Spy Over WannaCry and Sony Pictures Hack

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Georgia Extradites Russian Data Theft Suspect to US
2. Phishing scams pick up the phone and MikroTik routers watch and listen | Avast
3. BA Scrambles to Address Theft of Passenger Bank Details
4. Teenage hacker admits making hoax bomb threats against schools and airlines
5. USB Drives shipped with Schneider Solar Products were infected with malware
6. British Airways Website and App Compromised
7. British Airways Hacked – 380,000 Payment Cards Compromised

Politics

1. Nothing to report

Daily brief for 2018-09-06

Asia

1. U.S. Ties Lazarus to North Korea and Major Hacking Conspiracy
2. U.S. Charges North Korean Over Lazarus Group Hacks
3. U.S. charges North Korean hacker over Sony, WannaCry incidents
4. Fallout Exploit Kit Used in Malvertising Campaign to Deliver GandCrab Ransomware
5. New OilRig APT campaign leverages a new variant of the OopsIE Trojan
6. Experts ask Google for clarifications about backdoor in Titan Security Key

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. British Airways hacked, attackers stole details of 380,000 customers
2. British Airways Hacked With Details of 380,000 Cards Stolen
3. U.S. charges North Korean hacker over Sony, WannaCry incidents
4. Silence, a new group of hackers with alleged links to the cybersecurity industry
5. CroniX CryptoMiner Kills Rivals to Reign Supreme

Politics

1. Nothing to report

Daily brief for 2018-09-05

Asia

1. OilRig Sends an OopsIE to Mideast Government Targets
2. CrowdStrike uncovered a new campaign of GOBLIN PANDA APT aimed at Vietnam
3. Iranian Hackers Improve Recently Used Cyber Weapon
4. Web-based Threats-2018 Q2: U.S. Remains in Malicious Web Addresses, China Falls from to
5. DHS supply chain and CDM bills pass the House

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Active Campaign Exploits Critical Apache Struts 2 Flaw in the Wild
2. Ran Levi interviews Graham Cluley on the Malicious Life podcast
3. NSA official: Foreign hackers have ‘pummeled’ U.S. by stealing IP
4. X-Force IRIS Identifies FIN6 Activity on POS Networks
5. CamuBot banking malware is able to bypass biometric authentication
6. Payment card data stealing malware campaign affects dozens of websites each day
7. White-Hats Go Rogue, Attack Financial Institutions

Politics

1. Nothing to report

Daily brief for 2018-09-04

Asia

1. A well-known hacking group is getting better at evading detection
2. Russia’s Vulnerability Database Focuses Inward
3. Thousands of MikroTik Routers Hacked to Eavesdrop On Network Traffic

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Attackers Employ Social Engineering to Distribute New Banking Trojan
2. Credit card gobbling malware found piggybacking on ecommerce sites
3. New Banking Trojan Poses As A Security Module
4. CamuBot: New Financial Malware Targets Brazilian Banking Customers
5. ‘CamuBot’ Banking Malware Ups the Trojan Game with Biometric Bypass
6. SIM Hijacking Explained

Politics

1. Nothing to report

Daily brief for 2018-09-03

Asia

1. [SingCERT] Alert on Privilege Escalation Vulnerability in ANTlabs Internet Gateway Products
2. APT10 Under Close Scrutiny as Potentially Linked to Chinese Ministry of State Security
3. TrendMicro links Urpage hacking crew to other threat actors

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Banking Trojans and Shady Apps Galore In Google Play

Politics

1. Nothing to report

Daily brief for 2018-09-02

Asia

1. Security Affairs newsletter Round 178 – News of the week

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Security Affairs newsletter Round 178 – News of the week
2. MagentoCore skimmer already infected 7,339 Magento stores

Politics

1. Nothing to report

Daily brief for 2018-09-01

Asia

1. CrowdStrike verifies portions of report linking APT10 activity to Chinese government actors
2. Over 80% of app users in China have suffered the leaking of their data

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Cobalt cybercrime gang targets Russian and Romanian banks

Politics

1. Nothing to report

Daily brief for 2018-08-31

Asia

1. Who is Mr An, and was he working for APT10?
2. Hacker sells data of 130M Chinese hotel costumers in dark web

World

1. Who is Mr An, and was he working for APT10?

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Banking trojans, not , are the biggest threat to the enterprise now.   via @TechRepublic
2. Air Canada admits app data breach included customers’ passport details
3. Hacker sells data of 130M Chinese hotel costumers in dark web
4. Over 20k stolen passports of Air Canada users
5. DDoS attack at Spain’s central bank

Politics

1. Nothing to report

Daily brief for 2018-08-30

Asia

1. Two Birds, One STONE PANDA
2. China Probes Suspected Customer Data Leak at Accor Partner

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. New Threat Actor ‘Rocke’: A Rising Monero Cryptomining Menace
2. MagentoCore Malware Found on 7,339 Magento Stores
3. Only 54% of companies know where their data is
4. Air Canada data breach – 20,000 users of its mobile app affected
5. Anonymous Catalonia Claims DDoS Attack On Bank of Spain Website
6. Rocke: The Champion of Monero Miners
7. Data breach in cryptocurrency investment platform

Politics

1. Nothing to report

Daily brief for 2018-08-29

Asia

1. Meet CrowdStrike’s Adversary of the Month for August: GOBLIN PANDA
2. FBI: No Evidence Clinton Server Hacked Despite Trump Tweet
3. Data of 130 Million hotel chain guests offered for 8 BTC on Dark Web
4. How the 13 million dollar robbery occurred in Cosmos Bank

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Data of 130 Million hotel chain guests offered for 8 BTC on Dark Web
2. Avoid malicious websites by learning to surf safely
3. How the 13 million dollar robbery occurred in Cosmos Bank

Politics

1. Nothing to report

Daily brief for 2018-08-28

Asia

1. Data of 130 Million Chinese Hotel Chain Guests Sold on Dark Web Forum
2. Iran-linked COBALT DICKENS group targets universities in new phishing campaign
3. Security firm attributes Cosmos Bank cyberheist to Lazarus APT
4. Google shuts down nation-state activity, thwarts phishing, names Iran

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Data of 130 Million Chinese Hotel Chain Guests Sold on Dark Web Forum
2. The rise of mobile banker Asacub
3. Security firm attributes Cosmos Bank cyberheist to Lazarus APT

Politics

1. Nothing to report

Daily brief for 2018-08-27

Asia

1. Technical Analysis and Solution | Apache Struts 2 Remote Code Execution Vulnerability (S2-057)
2. North Korean Hacking Group Steals $13.5 Million From Indian Bank
3. North Korea-linked Hackers Stole $13.5 Million From Cosmos Bank: Report
4. Critical Apache Struts flaw just waiting to be exploited; PoC reported in the wild

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. North Korean Hacking Group Steals $13.5 Million From Indian Bank
2. North Korea-linked Hackers Stole $13.5 Million From Cosmos Bank: Report
3. Into a Dark Realm: The Shifting Ways of Geodo Malware
4. 2.3 Million T-Mobile Customers Exposed Following Data Breach
5. Remote Access Phone Scams Bilk Australians of AU$4.4 Million Stolen So Far in 2018

Politics

1. Nothing to report

Daily brief for 2018-08-26

Asia

1. Security Affairs newsletter Round 177 – News of the week

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Personal details of 37,000 Eir customers exposed after the theft of a laptop

Politics

1. Nothing to report

Daily brief for 2018-08-25

Asia

1. Lazarus Group launches Mac malware for the first time

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. The restaurant chain Cheddar’s Scratch Kitchen has suffered a payment card breach
2. Hack on T-Mobile: Data theft of 2 million customers
3. $1M USD per minute is lost due to cybercrime

Politics

1. Nothing to report

Daily brief for 2018-08-24

Asia

1. Cobalt Dickens threat group looks to be similar to indicted hackers
2. Ryuk ransomware attacks business networks

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Ryuk ransomware attacks business networks
2. Animoto alerts on possible data breach
3. Necurs botnet abuses Microsoft Publisher file format to deliver FlawedAmmyy RAT to bank employees

Politics

1. Nothing to report

Daily brief for 2018-08-23

Asia

1. North Korean Hackers Hit Cryptocurrency Exchange with macOS Malware
2. Google removes dozens of YouTube channels linked to 'influence operation'

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-08-22

Asia

1. IQY and PowerShell Abused by Spam Campaign to Infect Users in Japan with BEBLOH and URSNIF

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. UPDATE: Necurs Botnet Banks on a Second Bite of the Apple with New Malware Delivery Method
2. IQY and PowerShell Abused by Spam Campaign to Infect Users in Japan with BEBLOH and URSNIF
3. BackSwap Malware Now Targets Six Banks in Spain

Politics

1. Nothing to report

Daily brief for 2018-08-21

Asia

1. Google’s Dragonfly: A Bellwether for Human Rights in the Digital Age
2. Supply Chain Attack Operation Red Signature Targets South Korean Organizations

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Supply Chain Attack Operation Red Signature Targets South Korean Organizations
2. Latin America Served with 'Dark Tequila' Banking Malware
3. Dark Tequila Añejo
4. Rapid7 Quarterly Threat Report: 2018 Q2
5. Dark Tequila Banking Malware Uncovered After 5 Years of Activity

Politics

1. Nothing to report

Daily brief for 2018-08-20

Asia

1. Chinese Espionage Activity Tracks Economic Development Efforts
2. Rotten EGGs spread ransomware in South Korea
3. Chinese company exposes data of 50.5 million users, mostly children

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Types of Cybercrime
2. CIS Critical Security Control 20: Measure Your Security Standing with Penetration Tests and Red Team Exercises

Politics

1. Nothing to report

Daily brief for 2018-08-17

Asia

1. Report: Chinese hackers targeted Alaska networks

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-08-16

Asia

1. Chinese Cyberespionage Originating From Tsinghua University Infrastructure
2. Middle Eastern energy sector at risk, top target of Iranian hackers

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Hackers steal $13.5 million from Indian bank in global attack
2. The Top Threat Actors Targeting Financial Services Organizations

Politics

1. Nothing to report

Daily brief for 2018-08-15

Asia

1. APT10 was managed by the Tianjin bureau of the Chinese Ministry of State Security

World

1. APT10 was managed by the Tianjin bureau of the Chinese Ministry of State Security

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Necurs Targeting Banks with PUB File that Drops FlawedAmmyy

Politics

1. Nothing to report

Daily brief for 2018-08-14

Asia

1. Forbes Article Addresses Growing Threat of Software Supply Chain Attacks

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-08-13

Asia

1. Brief Analysis and Solution | Virus Infection Shuts Down TSMC Factories
2. Tibetan activists, diaspora hit by resurfacing malware in cyberespionage operation

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Researchers from @proofpoint have announced the discovery of a remote access trojan, and an upgraded version of an old banking trojan.   via @SCMagazine

Politics

1. Nothing to report

Daily brief for 2018-08-12

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-08-10

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-08-09

Asia

1. Mixed-Use Zoning in Malicious Infrastructure
2. AR18-221A: MAR-10135536-17 – North Korean Trojan: KEYMARBLE
3. Examining Code Reuse Reveals Undiscovered Links Among North Korea’s Malware Families
4. More on Huaying Haitai and Laoying Baichaun, the companies associated with APT10. Is there a state connection?

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Protecting the protector: Hardening machine learning defenses against adversarial attacks
2. Ransomware as a Service Princess Evolution Looking for Affiliates

Politics

1. Nothing to report

Daily brief for 2018-08-08

Asia

1. Lennart Maschmeyer on the Effect of Cyber Conflict on Civil Society
2. No cryptocurrency exchange can fully guarantee security, researchers say

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. No cryptocurrency exchange can fully guarantee security, researchers say
2. BankBot Anubis Still a Threat, Gets Upgrade

Politics

1. Nothing to report

Daily brief for 2018-08-07

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Must-Know Ransomware Statistics 2018
2. Malware Targeting Bitcoin ATMs Pops Up in the Underground

Politics

1. Nothing to report

Daily brief for 2018-08-06

Asia

1. IT threat evolution Q2 2018

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. IT threat evolution Q2 2018. Statistics

Politics

1. Nothing to report

Daily brief for 2018-08-03

Asia

1. BGP / DNS Hijacks Target Payment Systems

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. BGP / DNS Hijacks Target Payment Systems
2. Defcon Expectations and Hopes

Politics

1. Nothing to report

Daily brief for 2018-08-02

Asia

1. The Gorgon Group: Slithering Between Nation State and Cybercrime
2. Who is Mr Gao?

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. The Gorgon Group: Slithering Between Nation State and Cybercrime

Politics

1. Nothing to report

Daily brief for 2018-08-01

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Arrests Put New Focus on CARBON SPIDER Adversary Group

Politics

1. Nothing to report

Daily brief for 2018-07-31

Asia

1. NSO Group Infrastructure Linked to Targeting of Amnesty International and Saudi Dissident
2. Spam Campaign Abusing SettingContent-ms Found Dropping Same FlawedAmmyy RAT Distributed by Necurs
3. Bisonal Malware Used in Attacks Against Russia and South Korea

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Kronos Banking resurrection, new campaigns spotted in the wild:   via CyberDefenseMag .twitter.com/XVWpFtQRBZ
2. Spam Campaign Abusing SettingContent-ms Found Dropping Same FlawedAmmyy RAT Distributed by Necurs

Politics

1. Nothing to report

Daily brief for 2018-07-30

Asia

1. Who is Mr Zheng?

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-07-27

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-07-26

Asia

1. Meet CrowdStrike’s Adversary of the Month for July: WICKED SPIDER

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Kronos banking Trojan re-emerges after re-tooling and re-brand as Osiris    via @Computing_News
2. Microsoft Office Vulnerabilities Used to Distribute FELIXROOT Backdoor
   in Recent Campaign
3. A Week in the Life of a Bank Threat Intelligence Analyst

Politics

1. Nothing to report

Daily brief for 2018-07-25

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Emotet Epidemic: Infections Costing Orgs Up to $1 Million Per Incident

Politics

1. Nothing to report

Daily brief for 2018-07-24

Asia

1. Advanced Mobile Malware Campaign in India uses Malicious MDM - Part 2

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Beyond Digital: How Social Media Can Lead to Physical Threats Towards Brands

Politics

1. Nothing to report

Daily brief for 2018-07-23

Asia

1. Open ADB Ports Being Exploited to Spread Possible Satori Variant in Android Devices

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-07-20

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. TA18-201A: Emotet Malware

Politics

1. Nothing to report

Daily brief for 2018-07-19

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. New Sextortion Scam Flaunts Real Passwords, Rakes in $250,000 in Two Weeks

Politics

1. Nothing to report

Daily brief for 2018-07-18

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. NSFOCUS Weekly Cybersecurity Report （ID: 201827）
2. How the Rise of Cryptocurrencies Is Shaping the Cyber Crime Landscape:
   The Growth of Miners
3. Malware Team Up: Malspam Pushing Emotet + Trickbot

Politics

1. Nothing to report

Daily brief for 2018-07-17

Asia

1. Blackgear Cyberespionage Campaign Resurfaces, Abuses Social Media for C&C Communication

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Move Over, Ransomware: Why Cybercriminals Are Shifting Their Focus to Cryptojacking

Politics

1. Who was behind this unprecedented Cyber attack on Western infrastructure?

Daily brief for 2018-07-16

Asia

1. New Andariel Reconnaissance Tactics Hint At Next Targets

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-07-15

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Beers with Talos EP33 - Change the Conversation or the People Having It?

Politics

1. Nothing to report

Daily brief for 2018-07-13

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-07-12

Asia

1. Advanced Mobile Malware Campaign in India uses Malicious MDM

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Trends 2018: Doing time for cybercrime

Politics

1. Nothing to report

Daily brief for 2018-07-11

Asia

1. Chinese Espionage Group TEMP.Periscope Targets Cambodia Ahead of July
   2018 Elections and Reveals Broad Operations Globally

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. New Cyber Trends and Threats Targeting Financial Services Organizations [Infographic]

Politics

1. Nothing to report

Daily brief for 2018-07-10

Asia

1. WTB: APT Attack In the Middle East: The Big Bang

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Anubis Strikes Again: Mobile Malware Continues to Plague Users in Official App Stores

Politics

1. Nothing to report

Daily brief for 2018-07-09

Asia

1. Certificates stolen from Taiwanese tech-companies misused in Plead malware campaign

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. XXE Vulnerability in WeChat Payment

Politics

1. Nothing to report

Daily brief for 2018-07-08

Asia

1. APT Attack In the Middle East: The Big Bang

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-07-06

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-07-05

Asia

1. An Invasive Spyware Attack on Military Mobile Devices

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. June’s Most Wanted Malware: Banking Trojans Up 50% Among Threat Actors

Politics

1. Nothing to report

Daily brief for 2018-07-04

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-07-03

Asia

1. Infrastructure and Samples of Hamas’ Android Malware Targeting Israeli Soldiers

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-07-02

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Down but Not Out: A Look Into Recent Exploit Kit Activities

Politics

1. Nothing to report

Daily brief for 2018-06-29

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-06-28

Asia

1. AsiaHitGroup Gang Again Sneaks Billing-Fraud Apps Onto Google Play

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. A Dark Web Analysis of the Bank of Montreal and Simplii Financial Breach

Politics

1. Nothing to report

Daily brief for 2018-06-27

Asia

1. ‘McAfee Labs Threats Report’ Spotlights Innovative Attack Techniques, Cryptocurrency Mining, Multisector Attacks

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. ‘McAfee Labs Threats Report’ Spotlights Innovative Attack Techniques, Cryptocurrency Mining, Multisector Attacks

Politics

1. Nothing to report

Daily brief for 2018-06-26

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Checking In Halfway: The McAfee Labs 2018 Threats Predictions

Politics

1. Nothing to report

Daily brief for 2018-06-22

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-06-21

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-06-20

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-06-19

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Anonymous
2. Apply MITRE’s ‘ATT&CK’ Model to Check Your Defenses

Politics

1. Nothing to report

Daily brief for 2018-06-18

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Cyber-Criminals Are On The Offensive During the World Cup: Wallchart Phishing Campaign Exploits Soccer Fans

Politics

1. Nothing to report

Daily brief for 2018-06-15

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-06-14

Asia

1. AR18-165A: MAR-10135536-12 – North Korean Trojan: TYPEFRAME

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-06-13

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. European credential theft industry booming as US market sees decline
2. Threat Report: Don’t Join Blockchain Revolution Without Ensuring Security

Politics

1. Nothing to report

Daily brief for 2018-06-12

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Deep Dive into UPAS Kit vs. Kronos

Politics

1. Nothing to report

Daily brief for 2018-06-08

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-06-07

Asia

1. [SingCERT] Alert on "VPNFilter" Malware Infecting Networking Devices Worldwide

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Banking Trojans Continue to Lurk Beneath the Surface
2. May’s Most Wanted Malware: Cryptomining Malware Digs into Nearly 40% of Organizations Globally

Politics

1. Nothing to report

Daily brief for 2018-06-06

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Banking Trojans Under Development

Politics

1. Nothing to report

Daily brief for 2018-06-05

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. FBI’s IC3 Report Reconfirms Impact of Phishing on Consumers

Politics

1. Nothing to report

Daily brief for 2018-06-04

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-06-01

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-05-31

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-05-30

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-05-29

Asia

1. Open Letter to Francisco Partners: Request for follow up on apparent misuse of Sandvine technology and sale of NSO Group to Verint Systems
2. TA18-149A: HIDDEN COBRA – Joanap Backdoor Trojan and Brambul Server Message Block Worm

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Understanding your Identity and Information Risk

Politics

1. Nothing to report

Daily brief for 2018-05-25

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Is it a Phish? May 25 Edition
2. BackSwap malware finds innovative ways to empty bank accounts

Politics

1. Nothing to report

Daily brief for 2018-05-24

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-05-23

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-05-22

Asia

1. The destruction of APT3

World

1. The destruction of APT3

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Supply Chain Threats to Industrial Control: Third-Party Compromise

Politics

1. Nothing to report

Daily brief for 2018-05-21

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. It’s a Zoo Out There! Data Analysis of Alleged ZooPark Dump

Politics

1. Nothing to report

Daily brief for 2018-05-18

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-05-17

Asia

1. Malware on Google Play Targets North Korean Defectors

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-05-15

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Two Romanian Threat Actors Extradited to US After $18M Fraud Scheme

Politics

1. Nothing to report

Daily brief for 2018-05-14

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. April’s Most Wanted Malware: Cryptomining Malware Targeting Unpatched Server Vulnerabilities

Politics

1. Nothing to report

Daily brief for 2018-05-11

Asia

1. SeaMeWe-3 Experiences Another Cable Break

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-05-10

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. This is How Threat Actors Overwhelm the Defenses of Ad Networks

Politics

1. Nothing to report

Daily brief for 2018-05-09

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-05-08

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Telegram: The New Channel of Choice for Conducting Cyber Crime
2. Telegram: Cyber Crime’s Channel of Choice

Politics

1. Nothing to report

Daily brief for 2018-05-07

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-05-04

Asia

1. Nothing to report

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report