Threat report for 2018-09-20

DATA BREACH

1. 14 million customer records exposed in GovPayNow leak
2. State Department email breach leaks employee PII
3. Magecart data breach possibly avoidable -magecart-data-breach-possibly-avoidable/ …
4. Adams County clerk resigns over role in data breach
5. ICO to Fine Equifax £500,000 for 2017 Data Breach   via
6. Pegasus spyware spotted in 45 countries, many with questionable human rights records
7. State Department: Some Employee Info Possibly Exposed in Security Incident   via
8. This breach is a great example of how CT logs can be useful as an early indicator of an ongoing attack campaign. Orgs should be monitoring CT for certificates issued to look-alike domains to improve their situational awareness. -magazine.com/news/magecart-skimmed-newegg-cards/ …
9. Data commissioner fines Equifax £500,000 for US data breach affecting UK customers
10. Newegg Electronic Retailers Suffered a Data Breach and Hackers Stole Customers Credit Card Data
11. LG V40 ThinQ Alleged Specifications Sheet Leaked; Reveals 8GB RAM Model With a 6.4-Inch Display, but No Triple-Rear-Camera
12. ICO to Fine Equifax £500,000 for 2017 Data Breach   via
13. UK organisations’ email accounts used in mass phishing campaigns
14. Threat Spotlight: Barracuda study finds account takeover incidents widespread, most commonly used for phishing campaigns
15. 7GB of Medical Data Publicly Exposed Thanks to Misconfigured AWS S3 Bucket
16. The public's trust, politics and race, and dignity for the LGBT community: MP Murali Pillai goes On the Record
17. US State Department confirms data breach to unclassified email system
18. Researcher discovers buffer overflow vulnerability in Microsoft's JET Database Engine
19. HMRC Tax Refund Scam via Phishing Campaign
20. China Arrests Suspect for Customer Data Leak at Accor Partner
21. State Department Email Breach Exposed Personal Data Of Employees
22. Equifax fined £500,000 over customer data breach
23. Privacy advocates have failed to engage on My Health Record
24. UK Regulator Fines Equifax £500,000 Over 2017 Data Breach
25. GovPayNow Leak of 14M+ Records The All Time Low in Processing
26. State Department: Some Employee Info Possibly Exposed in Security Incident   via

DENIAL-OF-SERVICE

27. Snap! Adobe patches, sneaky Android botnets, Alexa invasion, robot skins
28. The makers of the Mirai IoT-hijacking botnet are sentenced   via
29. 3 Drivers Behind the Increasing Frequency of DDoS Attacks
30. New XBash malware combines features from ransomware, cryptocurrency miners, botnets, and worms
31. : The 3 people suspected of the have escaped jail after agreeing to provide “substantial assistance” to the in ongoing cases. Read more about this story here:   .twitter.com/Yzb9wM7KzU
32. 3 Drivers Behind the Increasing Frequency of DDoS Attacks
33. This Russian botnet mimics your click to prevent Android device factory resets
34. FBI wants to keep “helpful” Mirai botnet authors around
35. The makers of the Mirai IoT-hijacking botnet are sentenced   via
36. Mirai botnet developers collaborate with the FBI
37. Identifying botnets before an attack: The new DARPA challenge
38. US Signal partners with Cloudflare to deliver DDoS protection service

MALVERTISING

Nothing to report

DATA LEAK

39. Hackers Uploaded Fake Apps into Google Play Store to Steal Credit card details and Login Credentials

PHISHING

40. Account Takeover Attacks Become a Phishing Fave
41. Account Takeover Attacks Result in Phishing Scams  pic.twitter.com/hR2kSqlpCN
42. Malicious Login Attempts Spike in Finance, Retail  pic.twitter.com/OQPWqymDRB
43. Account Takeover Attacks Result in Phishing Scams -magazine.com/news/account-takeover-attacks-result-in?utm_source=twitterfeed&utm_medium=twitter …
44. Malicious Login Attempts Spike in Finance, Retail -magazine.com/news/malicious-login-attempts-spike-in?utm_source=twitterfeed&utm_medium=twitter …
45. Account Takeover Attacks Become a Phishing Fave
46. : malware detections have soared 273% since 2017 according to new stats from . The most popular way to spread is brute-forcing of passwords, used in 93% of detected attacks. Read more here:   .twitter.com/Ct8Z7qckRC
47. UK organisations’ email accounts used in mass phishing campaigns
48. Threat Spotlight: Barracuda study finds account takeover incidents widespread, most commonly used for phishing campaigns
49. Hackers Uploaded Fake Apps into Google Play Store to Steal Credit card details and Login Credentials
50. HMRC Tax Refund Scam via Phishing Campaign
51. Phishing finance apps make way back into Google Play
52. Manipulation tactics that you fall for in phishing attacks

WEB DEFACEMENT

Nothing to report

MALWARE

53. US authorities Have Pardoned Authors of Mirai Ransomware in Return For Government “Cooperation”
54. Domain Joined Outlook 2016 Issues - 0x8004011D
55. Report: Cryptomining malware detections up more than 459 percent since 2017
56. Bad actors are sizing up systems via lightweight recon before attack, researchers at Proofpoint said:
57. The rate at which new threats appear now requires a much greater reliance on threat intelligence. Learn more about its opportunities and challenges in our .  pic.twitter.com/bEh9MKP6nS
58. Malicious Login Attempts Spike in Finance, Retail  pic.twitter.com/OQPWqymDRB
59. Malicious Login Attempts Spike in Finance, Retail -magazine.com/news/malicious-login-attempts-spike-in?utm_source=twitterfeed&utm_medium=twitter …
60. New XBash malware combines features from ransomware, cryptocurrency miners, botnets, and worms
61. Pegasus spyware spotted in 45 countries, many with questionable human rights records
62. Book Review: Malware Data Science
63. Increased Use of a Delphi Packer to Evade Malware Classification
64. Hundreds of Indian Government Websites Hit with Cryptojacking Malware
65. This breach is a great example of how CT logs can be useful as an early indicator of an ongoing attack campaign. Orgs should be monitoring CT for certificates issued to look-alike domains to improve their situational awareness. -magazine.com/news/magecart-skimmed-newegg-cards/ …
66. Mitigate Risk From Malicious and Accidental Insiders
67. : malware detections have soared 273% since 2017 according to new stats from . The most popular way to spread is brute-forcing of passwords, used in 93% of detected attacks. Read more here:   .twitter.com/Ct8Z7qckRC
68. Sustes Malware: CPU for Monero
69. Report: Cryptomining malware detections up more than 459 percent since 2017
70. Threats posed by using RATs in ICS
71. Report Reveals Widespread Use of Pegasus Spyware
72. GovPayNow Leak of 14M+ Records The All Time Low in Processing
73. Evil Clone Attack – Hackers Injecting Crypto-mining Malware into Legitimate PDF Software
74. Newegg hacked: The new victim of Magecart malware
75. How to detect and remove a virus from your Android phone | Avast

EXPLOIT

76. : Hackers say and have been the easiest attack vectors to exploit this year. 56% of said that social engineering is the fastest account seizing technique to use on them. Read more here:   .twitter.com/e5ogD8VYWT
77. Researcher discovers buffer overflow vulnerability in Microsoft's JET Database Engine

VULNERABILITY

78. Android bug bounty tops $3m in third year, but pay flattens out
79. Facebook Bug Bounty opens to reward access token exposure
80. Bug hunters fail third year in a row to get top prize in Android hacking program
81. Cisco Issues New Warning for 6-Month-Old Critical Bug in IOS XE
82. Guarding the Gate: Cybersecurity De-Mystified
83. Researcher discovers buffer overflow vulnerability in Microsoft's JET Database Engine
84. Interview with Daniel Stenberg: His thoughts on the Curl Bug Bounty Program
85. Western Digital goes quiet on unpatched MyCloud flaw
86. CVE-2018-0150: Cisco IOS XE Software Static Credential Vulnerability
87. Adobe releases patch out of schedule to squash critical code execution bug
88. Cisco IOS XE Software Static Credential Vulnerability
89. Adobe issued a critical out-of-band patch to address CVE-2018-12848 Acrobat flaw
90. Ubuntu Released Security Updates & Fixed Multiple Critical Vulnerabilities
91. Vulnerability in My cloud devices exposes sensitive information
92. Western Digital My Cloud vulnerability, let’s hacker gives full access
93. Guarding the Gate: Cybersecurity De-Mystified

Region brief for 2018-09-20

ASIA

1. Hundreds of Indian Government Websites Hit with Cryptojacking Malware
2. The public's trust, politics and race, and dignity for the LGBT community: MP Murali Pillai goes On the Record
3. China Arrests Suspect for Customer Data Leak at Accor Partner

OCEANIA

4. Privacy advocates have failed to engage on My Health Record

NORTH AMERICA

5. A worrying future for the next generation?
6. US authorities Have Pardoned Authors of Mirai Ransomware in Return For Government “Cooperation”
7. Book Review: Malware Data Science
8. Wyden: Tech company has told multiple senators of foreign hacking attempts
9. Data commissioner fines Equifax £500,000 for US data breach affecting UK customers
10. LG V40 ThinQ Alleged Specifications Sheet Leaked; Reveals 8GB RAM Model With a 6.4-Inch Display, but No Triple-Rear-Camera
11. 7GB of Medical Data Publicly Exposed Thanks to Misconfigured AWS S3 Bucket
12. US State Department confirms data breach to unclassified email system
13. Threats posed by using RATs in ICS
14. GovPayNow Leak of 14M+ Records The All Time Low in Processing
15. Card Data-Scraping Magecart Code Found on Newegg
16. Mirai botnet developers collaborate with the FBI
17. US Signal partners with Cloudflare to deliver DDoS protection service

SOUTH AMERICA

Nothing to report

EUROPE

18. New Magecart victims ABS-CBN and Newegg are just the tip of the iceberg
19. Magecart Strikes Again, Siphoning Payment Info from Newegg
20. Wyden: Tech company has told multiple senators of foreign hacking attempts
21. Data commissioner fines Equifax £500,000 for US data breach affecting UK customers
22. UK organisations’ email accounts used in mass phishing campaigns
23. Newegg Inc. Suffers Hack, Credit Card Data Stolen
24. This Russian botnet mimics your click to prevent Android device factory resets
25. HMRC Tax Refund Scam via Phishing Campaign
26. NewEgg Network is attacked by hackers
27. UK Regulator Fines Equifax £500,000 Over 2017 Data Breach
28. Magecart cybercrime group stole customers’ credit cards from Newegg electronics retailer
29. Latest Hacking News Podcast
30. Newegg hacked: The new victim of Magecart malware
31. Western Digital My Cloud vulnerability, let’s hacker gives full access

AFRICA

Nothing to report

Sector brief for 2018-09-20

HEALTHCARE

1. 7GB of Medical Data Publicly Exposed Thanks to Misconfigured AWS S3 Bucket

TRANSPORT

2. US Signal partners with Cloudflare to deliver DDoS protection service

BANKING & FINANCE

3. Malicious Login Attempts Spike in Finance, Retail  pic.twitter.com/OQPWqymDRB
4. Malicious Login Attempts Spike in Finance, Retail -magazine.com/news/malicious-login-attempts-spike-in?utm_source=twitterfeed&utm_medium=twitter …
5. New Magecart victims ABS-CBN and Newegg are just the tip of the iceberg
6. Magecart Strikes Again, Siphoning Payment Info from Newegg
7. Newegg Electronic Retailers Suffered a Data Breach and Hackers Stole Customers Credit Card Data
8. Newegg Inc. Suffers Hack, Credit Card Data Stolen
9. Hackers Uploaded Fake Apps into Google Play Store to Steal Credit card details and Login Credentials
10. HMRC Tax Refund Scam via Phishing Campaign
11. Phishing finance apps make way back into Google Play
12. NewEgg Network is attacked by hackers
13. UK Regulator Fines Equifax £500,000 Over 2017 Data Breach
14. Magecart cybercrime group stole customers’ credit cards from Newegg electronics retailer
15. Manipulation tactics that you fall for in phishing attacks
16. GovPayNow Leak of 14M+ Records The All Time Low in Processing
17. Card Data-Scraping Magecart Code Found on Newegg

INFORMATION & TELECOMMUNICATION

Nothing to report

FOOD

Nothing to report

WATER

Nothing to report

ENERGY

Nothing to report

PUBLIC SERVICE

18. Wyden: Tech company has told multiple senators of foreign hacking attempts

Daily brief for 2018-09-20

ASIA

1. Hundreds of Indian Government Websites Hit with Cryptojacking Malware
2. The public's trust, politics and race, and dignity for the LGBT community: MP Murali Pillai goes On the Record
3. China Arrests Suspect for Customer Data Leak at Accor Partner

WORLD

4. A worrying future for the next generation?
5. US authorities Have Pardoned Authors of Mirai Ransomware in Return For Government “Cooperation”
6. Book Review: Malware Data Science
7. New Magecart victims ABS-CBN and Newegg are just the tip of the iceberg
8. Magecart Strikes Again, Siphoning Payment Info from Newegg
9. Wyden: Tech company has told multiple senators of foreign hacking attempts
10. Data commissioner fines Equifax £500,000 for US data breach affecting UK customers
11. LG V40 ThinQ Alleged Specifications Sheet Leaked; Reveals 8GB RAM Model With a 6.4-Inch Display, but No Triple-Rear-Camera
12. UK organisations’ email accounts used in mass phishing campaigns
13. Newegg Inc. Suffers Hack, Credit Card Data Stolen
14. This Russian botnet mimics your click to prevent Android device factory resets
15. 7GB of Medical Data Publicly Exposed Thanks to Misconfigured AWS S3 Bucket
16. US State Department confirms data breach to unclassified email system
17. HMRC Tax Refund Scam via Phishing Campaign
18. Threats posed by using RATs in ICS
19. NewEgg Network is attacked by hackers
20. Privacy advocates have failed to engage on My Health Record
21. UK Regulator Fines Equifax £500,000 Over 2017 Data Breach
22. Magecart cybercrime group stole customers’ credit cards from Newegg electronics retailer
23. GovPayNow Leak of 14M+ Records The All Time Low in Processing
24. Latest Hacking News Podcast
25. Card Data-Scraping Magecart Code Found on Newegg
26. Newegg hacked: The new victim of Magecart malware
27. Mirai botnet developers collaborate with the FBI
28. Western Digital My Cloud vulnerability, let’s hacker gives full access
29. US Signal partners with Cloudflare to deliver DDoS protection service

ATTACKS

30. 14 million customer records exposed in GovPayNow leak
31. State Department email breach leaks employee PII
32. Magecart data breach possibly avoidable -magecart-data-breach-possibly-avoidable/ …
33. Adams County clerk resigns over role in data breach
34. Snap! Adobe patches, sneaky Android botnets, Alexa invasion, robot skins
35. Account Takeover Attacks Become a Phishing Fave
36. ICO to Fine Equifax £500,000 for 2017 Data Breach   via
37. Account Takeover Attacks Result in Phishing Scams  pic.twitter.com/hR2kSqlpCN
38. Malicious Login Attempts Spike in Finance, Retail  pic.twitter.com/OQPWqymDRB
39. Account Takeover Attacks Result in Phishing Scams -magazine.com/news/account-takeover-attacks-result-in?utm_source=twitterfeed&utm_medium=twitter …
40. Malicious Login Attempts Spike in Finance, Retail -magazine.com/news/malicious-login-attempts-spike-in?utm_source=twitterfeed&utm_medium=twitter …
41. The makers of the Mirai IoT-hijacking botnet are sentenced   via
42. 3 Drivers Behind the Increasing Frequency of DDoS Attacks
43. New XBash malware combines features from ransomware, cryptocurrency miners, botnets, and worms
44. Pegasus spyware spotted in 45 countries, many with questionable human rights records
45. Account Takeover Attacks Become a Phishing Fave
46. : The 3 people suspected of the have escaped jail after agreeing to provide “substantial assistance” to the in ongoing cases. Read more about this story here:   .twitter.com/Yzb9wM7KzU
47. State Department: Some Employee Info Possibly Exposed in Security Incident   via
48. This breach is a great example of how CT logs can be useful as an early indicator of an ongoing attack campaign. Orgs should be monitoring CT for certificates issued to look-alike domains to improve their situational awareness. -magazine.com/news/magecart-skimmed-newegg-cards/ …
49. 3 Drivers Behind the Increasing Frequency of DDoS Attacks
50. Data commissioner fines Equifax £500,000 for US data breach affecting UK customers
51. Newegg Electronic Retailers Suffered a Data Breach and Hackers Stole Customers Credit Card Data
52. LG V40 ThinQ Alleged Specifications Sheet Leaked; Reveals 8GB RAM Model With a 6.4-Inch Display, but No Triple-Rear-Camera
53. : malware detections have soared 273% since 2017 according to new stats from . The most popular way to spread is brute-forcing of passwords, used in 93% of detected attacks. Read more here:   .twitter.com/Ct8Z7qckRC
54. ICO to Fine Equifax £500,000 for 2017 Data Breach   via
55. UK organisations’ email accounts used in mass phishing campaigns
56. Threat Spotlight: Barracuda study finds account takeover incidents widespread, most commonly used for phishing campaigns
57. Hackers Uploaded Fake Apps into Google Play Store to Steal Credit card details and Login Credentials
58. This Russian botnet mimics your click to prevent Android device factory resets
59. 7GB of Medical Data Publicly Exposed Thanks to Misconfigured AWS S3 Bucket
60. The public's trust, politics and race, and dignity for the LGBT community: MP Murali Pillai goes On the Record
61. FBI wants to keep “helpful” Mirai botnet authors around
62. US State Department confirms data breach to unclassified email system
63. Researcher discovers buffer overflow vulnerability in Microsoft's JET Database Engine
64. HMRC Tax Refund Scam via Phishing Campaign
65. China Arrests Suspect for Customer Data Leak at Accor Partner
66. Phishing finance apps make way back into Google Play
67. State Department Email Breach Exposed Personal Data Of Employees
68. Equifax fined £500,000 over customer data breach
69. The makers of the Mirai IoT-hijacking botnet are sentenced   via
70. Privacy advocates have failed to engage on My Health Record
71. UK Regulator Fines Equifax £500,000 Over 2017 Data Breach
72. Manipulation tactics that you fall for in phishing attacks
73. GovPayNow Leak of 14M+ Records The All Time Low in Processing
74. Mirai botnet developers collaborate with the FBI
75. State Department: Some Employee Info Possibly Exposed in Security Incident   via
76. Identifying botnets before an attack: The new DARPA challenge
77. US Signal partners with Cloudflare to deliver DDoS protection service

THREATS

78. Android bug bounty tops $3m in third year, but pay flattens out
79. Facebook Bug Bounty opens to reward access token exposure
80. US authorities Have Pardoned Authors of Mirai Ransomware in Return For Government “Cooperation”
81. Bug hunters fail third year in a row to get top prize in Android hacking program
82. Domain Joined Outlook 2016 Issues - 0x8004011D
83. Report: Cryptomining malware detections up more than 459 percent since 2017
84. Bad actors are sizing up systems via lightweight recon before attack, researchers at Proofpoint said:
85. The rate at which new threats appear now requires a much greater reliance on threat intelligence. Learn more about its opportunities and challenges in our .  pic.twitter.com/bEh9MKP6nS
86. Malicious Login Attempts Spike in Finance, Retail  pic.twitter.com/OQPWqymDRB
87. Malicious Login Attempts Spike in Finance, Retail -magazine.com/news/malicious-login-attempts-spike-in?utm_source=twitterfeed&utm_medium=twitter …
88. New XBash malware combines features from ransomware, cryptocurrency miners, botnets, and worms
89. Pegasus spyware spotted in 45 countries, many with questionable human rights records
90. Book Review: Malware Data Science
91. Increased Use of a Delphi Packer to Evade Malware Classification
92. Cisco Issues New Warning for 6-Month-Old Critical Bug in IOS XE
93. Hundreds of Indian Government Websites Hit with Cryptojacking Malware
94. This breach is a great example of how CT logs can be useful as an early indicator of an ongoing attack campaign. Orgs should be monitoring CT for certificates issued to look-alike domains to improve their situational awareness. -magazine.com/news/magecart-skimmed-newegg-cards/ …
95. Mitigate Risk From Malicious and Accidental Insiders
96. : malware detections have soared 273% since 2017 according to new stats from . The most popular way to spread is brute-forcing of passwords, used in 93% of detected attacks. Read more here:   .twitter.com/Ct8Z7qckRC
97. Sustes Malware: CPU for Monero
98. : Hackers say and have been the easiest attack vectors to exploit this year. 56% of said that social engineering is the fastest account seizing technique to use on them. Read more here:   .twitter.com/e5ogD8VYWT
99. Guarding the Gate: Cybersecurity De-Mystified
100. Researcher discovers buffer overflow vulnerability in Microsoft's JET Database Engine
101. Interview with Daniel Stenberg: His thoughts on the Curl Bug Bounty Program
102. Report: Cryptomining malware detections up more than 459 percent since 2017
103. Threats posed by using RATs in ICS
104. Western Digital goes quiet on unpatched MyCloud flaw
105. CVE-2018-0150: Cisco IOS XE Software Static Credential Vulnerability
106. Adobe releases patch out of schedule to squash critical code execution bug
107. Cisco IOS XE Software Static Credential Vulnerability
108. Report Reveals Widespread Use of Pegasus Spyware
109. GovPayNow Leak of 14M+ Records The All Time Low in Processing
110. Adobe issued a critical out-of-band patch to address CVE-2018-12848 Acrobat flaw
111. Ubuntu Released Security Updates & Fixed Multiple Critical Vulnerabilities
112. Evil Clone Attack – Hackers Injecting Crypto-mining Malware into Legitimate PDF Software
113. Newegg hacked: The new victim of Magecart malware
114. Vulnerability in My cloud devices exposes sensitive information
115. Western Digital My Cloud vulnerability, let’s hacker gives full access
116. Guarding the Gate: Cybersecurity De-Mystified
117. How to detect and remove a virus from your Android phone | Avast

CRIME

118. Report: Cryptomining malware detections up more than 459 percent since 2017
119. The makers of the Mirai IoT-hijacking botnet are sentenced   via
120. : The 3 people suspected of the have escaped jail after agreeing to provide “substantial assistance” to the in ongoing cases. Read more about this story here:   .twitter.com/Yzb9wM7KzU
121. New Magecart victims ABS-CBN and Newegg are just the tip of the iceberg
122. Magecart Strikes Again, Siphoning Payment Info from Newegg
123. Newegg Electronic Retailers Suffered a Data Breach and Hackers Stole Customers Credit Card Data
124. Newegg Inc. Suffers Hack, Credit Card Data Stolen
125. Hackers Uploaded Fake Apps into Google Play Store to Steal Credit card details and Login Credentials
126. 7GB of Medical Data Publicly Exposed Thanks to Misconfigured AWS S3 Bucket
127. HMRC Tax Refund Scam via Phishing Campaign
128. Report: Cryptomining malware detections up more than 459 percent since 2017
129. NewEgg Network is attacked by hackers
130. The makers of the Mirai IoT-hijacking botnet are sentenced   via
131. Magecart cybercrime group stole customers’ credit cards from Newegg electronics retailer
132. Manipulation tactics that you fall for in phishing attacks
133. GovPayNow Leak of 14M+ Records The All Time Low in Processing
134. Card Data-Scraping Magecart Code Found on Newegg
135. Newegg hacked: The new victim of Magecart malware
136. Mirai botnet developers collaborate with the FBI

POLITICS

137. Wyden: Tech company has told multiple senators of foreign hacking attempts
138. 7GB of Medical Data Publicly Exposed Thanks to Misconfigured AWS S3 Bucket

Threat report for 2018-09-19

DATA BREACH

1. Survey: Nearly one-third of breached companies reported job losses after data breach
2. Access to over 3,000 compromised sites sold on Russian black marketplace MagBo
3. NSA Leak Fuels Rise in Hacking for Crypto Mining: Report
4. Magecart claims another victim in Newegg merchant data theft
5. Here we Mongo again! Millions of records exposed by insecure database
6. How Facebook wants to protect political campaigners from hacking
7. Yahoo settles for $47 million in litigation following data breach of 3 billion accounts
8. State Department reveals data breach, employee information exposed
9. Vulnerabilities Discovered in NUUO Network Video Recorder
10. Veeam gets hacked: Data management enterprise exposes database with more than 400 million emails
11. New ransomware campaign encrypts files even if the ransom is paid

DENIAL-OF-SERVICE

1. A Hybrid Solution to Taming SOC Alert Overload
2. The makers of the Mirai IoT-hijacking botnet are sentenced
3. Mirai botnet authors avoid prison after "substantial assistance" to the FBI
4. New Malware Combines Ransomware, Coin Mining and Botnet Features in One
5. Mirai Botnet Creators Helping FBI Fight Cybercrime to Stay Out of Jail

MALVERTISING

1. Nothing to report

DATA LEAK

1. Nothing to report

PHISHING

1. Phishing finance apps make way back into Google Play
2. Hackers Constantly Carrying out Password Stealing Attacks Targeting Financial Services Industry
3. FBI: Phishing Attacks Aim to Swap Payroll Information
4. Credential Stuffing Attacks Generate Billions of Login Attempts
5. This Windows file may be secretly hoarding your passwords and emails
6. Your business should be more afraid of phishing than malware

WEB DEFACEMENT

1. Nothing to report

MALWARE

1. VAI MALANDRA: A LOOK INTO THE LIFECYCLE OF BRAZILIAN FINANCIAL MALWARE
2. WANNAMINE CRYPTOMINER THAT USES ETERNALBLUE STILL ACTIVE
3. Colorado firm claims ransomware attack behind closure
4. Access to over 3,000 backdoored sites sold on Russian hacking forum
5. NSA Leak Fuels Rise in Hacking for Crypto Mining: Report
6. Researchers find new financial malware targeting banking customers in Brazil
7. XBash Malware Packs Double Punch: Destroys Data and Mines for Crypto Coins
8. The Past, the Present, and the Future of Illicit Cryptomining: Cyber Threat Alliance Publishes Landmark White Paper
9. New Malware Combines Ransomware, Coin Mining and Botnet Features in One
10. Your business should be more afraid of phishing than malware
11. Cyber Threat Alliance Releases Cryptomining Whitepaper
12. Hackers using Android & iOS Spyware “Pegasus” to Conducting Massive Surveillance Operations in 45 Countries
13. New ransomware campaign encrypts files even if the ransom is paid

EXPLOIT

1. Nothing to report

VULNERABILITY

1. Adobe Patches Code Execution, Other Flaws in Acrobat and Reader
2. Bug in Bitcoin code also opens smaller cryptocurrencies to attacks
3. Rapid7 Threat Intelligence Book Club: ‘Countdown to Zero Day’ Recap
4. ‘Peekaboo’ zero-day lets hackers view and alter surveillance camera footage
5. WTB: Windows Systems Vulnerable To FragmentSmack, 90s-Like DoS Bug
6. Flaw in Western Digital My Cloud exposes the content to hackers
7. Vulnerabilities Discovered in NUUO Network Video Recorder
8. Zero Day vulnerability allows access to CCTV cameras
9. Windows 10 Build 18242 (19H1) Released With Bug Fixes

Region brief for 2018-09-19

ASIA

1. APT10 targets Japanese media company with upgraded UPPERCUT
2. New Malware Combines Ransomware, Coin Mining and Botnet Features in One
3. Zero Day vulnerability allows access to CCTV cameras
4. Hackers using Android & iOS Spyware “Pegasus” to Conducting Massive Surveillance Operations in 45 Countries

OCEANIA

1. Nothing to report

NORTH AMERICA

1. NSA Leak Fuels Rise in Hacking for Crypto Mining: Report
2. Magecart strikes again, this time at electronics retailer Newegg
3. Yahoo settles for $47 million in litigation following data breach of 3 billion accounts
4. Mirai Botnet Creators Helping FBI Fight Cybercrime to Stay Out of Jail

SOUTH AMERICA

1. Researchers find new financial malware targeting banking customers in Brazil

EUROPE

1. Access to over 3,000 compromised sites sold on Russian black marketplace MagBo
2. Access to over 3,000 backdoored sites sold on Russian hacking forum
3. Newegg Credit Card Info Stolen For a Month by Injected MageCart Script
4. Another Victim of the Magecart Assault Emerges: Newegg
5. Hackers Steal Customers' Credit Cards From Newegg Electronics Retailer

AFRICA

1. Nothing to report

Sector brief for 2018-09-19

HEALTHCARE

1. Nothing to report

TRANSPORT

1. Nothing to report

BANKING & FINANCE

1. Phishing finance apps make way back into Google Play
2. VAI MALANDRA: A LOOK INTO THE LIFECYCLE OF BRAZILIAN FINANCIAL MALWARE
3. Magecart strikes again, this time at electronics retailer Newegg
4. Researchers find new financial malware targeting banking customers in Brazil
5. Hackers Constantly Carrying out Password Stealing Attacks Targeting Financial Services Industry
6. Newegg Credit Card Info Stolen For a Month by Injected MageCart Script
7. Another Victim of the Magecart Assault Emerges: Newegg
8. Hackers Steal Customers' Credit Cards From Newegg Electronics Retailer
9. FBI: Phishing Attacks Aim to Swap Payroll Information
10. Credential Stuffing Attacks Generate Billions of Login Attempts

INFORMATION & TELECOMMUNICATION

1. Nothing to report

FOOD

1. Nothing to report

WATER

1. Nothing to report

ENERGY

1. Nothing to report

PUBLIC SERVICE

1. Nothing to report

Daily brief for 2018-09-19

ASIA

1. APT10 targets Japanese media company with upgraded UPPERCUT
2. New Malware Combines Ransomware, Coin Mining and Botnet Features in One
3. Zero Day vulnerability allows access to CCTV cameras
4. Hackers using Android & iOS Spyware “Pegasus” to Conducting Massive Surveillance Operations in 45 Countries

WORLD

1. Access to over 3,000 compromised sites sold on Russian black marketplace MagBo
2. Access to over 3,000 backdoored sites sold on Russian hacking forum
3. NSA Leak Fuels Rise in Hacking for Crypto Mining: Report
4. Magecart strikes again, this time at electronics retailer Newegg
5. Researchers find new financial malware targeting banking customers in Brazil
6. Newegg Credit Card Info Stolen For a Month by Injected MageCart Script
7. Another Victim of the Magecart Assault Emerges: Newegg
8. Hackers Steal Customers' Credit Cards From Newegg Electronics Retailer
9. Yahoo settles for $47 million in litigation following data breach of 3 billion accounts
10. Mirai Botnet Creators Helping FBI Fight Cybercrime to Stay Out of Jail

ATTACKS

1. Phishing finance apps make way back into Google Play
2. Survey: Nearly one-third of breached companies reported job losses after data breach
3. Access to over 3,000 compromised sites sold on Russian black marketplace MagBo
4. NSA Leak Fuels Rise in Hacking for Crypto Mining: Report
5. Hackers Constantly Carrying out Password Stealing Attacks Targeting Financial Services Industry
6. A Hybrid Solution to Taming SOC Alert Overload
7. Magecart claims another victim in Newegg merchant data theft
8. The makers of the Mirai IoT-hijacking botnet are sentenced
9. Here we Mongo again! Millions of records exposed by insecure database
10. How Facebook wants to protect political campaigners from hacking
11. FBI: Phishing Attacks Aim to Swap Payroll Information
12. Yahoo settles for $47 million in litigation following data breach of 3 billion accounts
13. Mirai botnet authors avoid prison after "substantial assistance" to the FBI
14. New Malware Combines Ransomware, Coin Mining and Botnet Features in One
15. State Department reveals data breach, employee information exposed
16. Credential Stuffing Attacks Generate Billions of Login Attempts
17. This Windows file may be secretly hoarding your passwords and emails
18. Your business should be more afraid of phishing than malware
19. Mirai Botnet Creators Helping FBI Fight Cybercrime to Stay Out of Jail
20. Vulnerabilities Discovered in NUUO Network Video Recorder
21. Veeam gets hacked: Data management enterprise exposes database with more than 400 million emails
22. New ransomware campaign encrypts files even if the ransom is paid

THREATS

1. VAI MALANDRA: A LOOK INTO THE LIFECYCLE OF BRAZILIAN FINANCIAL MALWARE
2. WANNAMINE CRYPTOMINER THAT USES ETERNALBLUE STILL ACTIVE
3. Colorado firm claims ransomware attack behind closure
4. Access to over 3,000 backdoored sites sold on Russian hacking forum
5. Adobe Patches Code Execution, Other Flaws in Acrobat and Reader
6. Bug in Bitcoin code also opens smaller cryptocurrencies to attacks
7. NSA Leak Fuels Rise in Hacking for Crypto Mining: Report
8. Researchers find new financial malware targeting banking customers in Brazil
9. XBash Malware Packs Double Punch: Destroys Data and Mines for Crypto Coins
10. Rapid7 Threat Intelligence Book Club: ‘Countdown to Zero Day’ Recap
11. The Past, the Present, and the Future of Illicit Cryptomining: Cyber Threat Alliance Publishes Landmark White Paper
12. ‘Peekaboo’ zero-day lets hackers view and alter surveillance camera footage
13. WTB: Windows Systems Vulnerable To FragmentSmack, 90s-Like DoS Bug
14. New Malware Combines Ransomware, Coin Mining and Botnet Features in One
15. Your business should be more afraid of phishing than malware
16. Flaw in Western Digital My Cloud exposes the content to hackers
17. Vulnerabilities Discovered in NUUO Network Video Recorder
18. Cyber Threat Alliance Releases Cryptomining Whitepaper
19. Zero Day vulnerability allows access to CCTV cameras
20. Hackers using Android & iOS Spyware “Pegasus” to Conducting Massive Surveillance Operations in 45 Countries
21. New ransomware campaign encrypts files even if the ransom is paid
22. Windows 10 Build 18242 (19H1) Released With Bug Fixes

CRIME

1. Bug in Bitcoin code also opens smaller cryptocurrencies to attacks
2. Magecart strikes again, this time at electronics retailer Newegg
3. Researchers find new financial malware targeting banking customers in Brazil
4. Newegg Credit Card Info Stolen For a Month by Injected MageCart Script
5. Magecart claims another victim in Newegg merchant data theft
6. XBash Malware Packs Double Punch: Destroys Data and Mines for Crypto Coins
7. The Past, the Present, and the Future of Illicit Cryptomining: Cyber Threat Alliance Publishes Landmark White Paper
8. Another Victim of the Magecart Assault Emerges: Newegg
9. Hackers Steal Customers' Credit Cards From Newegg Electronics Retailer
10. The makers of the Mirai IoT-hijacking botnet are sentenced
11. FBI: Phishing Attacks Aim to Swap Payroll Information
12. WTB: Windows Systems Vulnerable To FragmentSmack, 90s-Like DoS Bug
13. Mirai botnet authors avoid prison after "substantial assistance" to the FBI
14. Mirai Botnet Creators Helping FBI Fight Cybercrime to Stay Out of Jail
15. Cyber Threat Alliance Releases Cryptomining Whitepaper
16. New ransomware campaign encrypts files even if the ransom is paid

POLITICS

1. ‘Peekaboo’ zero-day lets hackers view and alter surveillance camera footage
2. Veeam gets hacked: Data management enterprise exposes database with more than 400 million emails
3. Zero Day vulnerability allows access to CCTV cameras

Threat report for 2018-09-18

Data Breach

1. US Dept of State says attack on email system exposed employees’ personal data
2. State Department email breach leaks employee PII
3. 14 million customer records exposed in GovPayNow leak
4. Xbash Malware Deletes Databases on Linux, Mines for Coins on Windows
5. Survey: Nearly one-third of breached companies reported job losses after data breach
6. Insiders Continue to be Data Theft’s Best Friend
7. Symantec offers political campaigns service to guard against website spoofing
8. Huge E-marketing Database that Contains 11 Million Sensitive Personal Records Exposed Online
9. GovPayNow Leak of 14M+ Records Dates Back to 2012
10. MongoDB server leaks 11 million user records from e-marketing service
11. GovPayNow payment portal may have exposed over 14 million customer records
12. Database with 11 Million Email Records Exposed
13. UK watchdog has not issued any GDPR data breach-related fines yet
14. Political Figures Differ Online: Names of Trump, Obama, Merkel Attached to Ransomware Campaigns
15. 900,000 Australians opt out of My Health Record

Denial-of-Service

1. Bizarre botnet infects your PC to scrub away cryptocurrency mining malware
2. New Xbash Malware Attack on Linux & Windows with Botnet, Ransomware & Coinminer Capabilities
3. New XBash malware combines features from ransomware, cryptocurrency miners, botnets, and worms

Malvertising

1. Nothing to report

Data Leak

1. Nothing to report

Phishing

1. Here’s a Free Turnkey Phishing Awareness Program for National Cybersecurity Awareness Month
2. Hackers selling research phished from universities on WhatsApp

Web Defacement

1. Nothing to report

Malware

1. NSO mobile Pegasus Spyware used in operations in 45 countries
2. ThreatList: Malware Samples Targeting IoT More Than Double in 2018
3. Xbash Malware Deletes Databases on Linux, Mines for Coins on Windows
4. Chinese-speaking cybercrime group launches destructive malware family
5. Pegasus spyware active in 45 countries, Citizen Lab says
6. Destructive Xbash Linux Malware Targets Enterprise Intranets
7. Dangerous Pegasus Spyware Has Spread to 45 Countries
8. "Lawful intercept" Pegasus spyware found deployed in 45 countries
9. Cybercrime: Ransomware remains a 'key' malware threat says Europol
10. HIDE AND SEEK: Tracking NSO Group’s Pegasus Spyware to Operations in 45 Countries
11. Bizarre botnet infects your PC to scrub away cryptocurrency mining malware
12. Powerful Android and iOS Spyware Found Deployed in 45 Countries
13. New Xbash Malware Attack on Linux & Windows with Botnet, Ransomware & Coinminer Capabilities
14. New XBash malware combines features from ransomware, cryptocurrency miners, botnets, and worms
15. Political Figures Differ Online: Names of Trump, Obama, Merkel Attached to Ransomware Campaigns
16. Ransomware attack causes blackout on screens of Bristol Airport

Exploit

1. 91 “child friendly” Android apps accused of exploitation
2. Cracked Windows installations are serially infected with EternalBlue exploit code

Vulnerability

1. Facebook Bug Bounty opens to reward access token exposure
2. iOS Webkit flaw found that forces iPhone restart
3. The NUUO Peekaboo vulnerability gives hackers your camera feed | Avast
4. Intel releases firmware update for ME flaw
5. Critical Vulnerability Impacts Hundreds of Thousands of IoT Cameras
6. iOS 12 Brings Patches for 16 Security Vulnerabilities
7. A flaw in Alpine Linux could allow executing arbitrary code
8. Windows 10 Build 17763 Released As Microsoft Continues to Squash Bugs
9. Hackers acknowledge Windows flaws but prefer social engineering tricks
10. Critical RCE Peekaboo Bug in NVR Surveillance System, PoC Available
11. Facebook Offers Rewards for Access Token Exposure Flaws
12. Response Guide of IBM WebSphere Code Execution Vulnerability

Region brief for 2018-09-18

Asia

1. NSO mobile Pegasus Spyware used in operations in 45 countries
2. Chinese-speaking cybercrime group launches destructive malware family
3. Pegasus spyware active in 45 countries, Citizen Lab says
4. Political Figures Differ Online: Names of Trump, Obama, Merkel Attached to Ransomware Campaigns

Oceania

1. 900,000 Australians opt out of My Health Record

North America

1. US Dept of State says attack on email system exposed employees’ personal data
2. NSO mobile Pegasus Spyware used in operations in 45 countries
3. 91 “child friendly” Android apps accused of exploitation
4. GovPayNow Leak of 14M+ Records Dates Back to 2012
5. Political Figures Differ Online: Names of Trump, Obama, Merkel Attached to Ransomware Campaigns

South America

1. Nothing to report

Europe

1. Broadcaster ABS-CBN customer data stolen, sent to Russian servers
2. Hackers selling research phished from universities on WhatsApp
3. UK watchdog has not issued any GDPR data breach-related fines yet
4. Ransomware attack causes blackout on screens of Bristol Airport

Africa

1. Nothing to report