Threat report for 2018-09-25

DATA BREACH

1. Ex-NSA Hacker Sentenced to Jail Over Kaspersky Leak
2. Malware on SHEIN Servers Compromises Data of 6.4M Customers
3. Mozilla Launches Firefox Monitor Data Breach Notification Service
4. Third-Party Patch Available for Microsoft JET Database Zero-Day
5. 130 Million Hotel Customers Breached Due to Exposed Database
6. State Department data breach exposes employee info (w/ commentary from @TripwireInc’s @craigtweets http://bit.ly/2MTcplE
7. New Adwind RAT Campaign Targets Windows, Linux and Mac Users
8. Shein Data Breach Exposes Personal Data and Email Address of 6.42 Million Customers
9. SHEIN Data breach affected 6.42 million users
10. Security In The Crypto World: Exchanges, Wallets, Personal Data. Kiev To Host The Largest Cybersecurity Forum In Eastern Europe
11. Symantec accountancy audit uncovers customer transaction recorded as revenue
12. NewsNow suffers security breach - passwords should be considered compromised
13. First known malicious cryptomining campaign targeting Kodi discovered
14. SHEIN-Fashion Shopping Site Suffers Data Breach Affecting 6.5 Million Users
15. macOS zero-day vulnerability leads to user data leaks
16. How Long Does it Take to Find Compromised Data
17. DBeaver Community Edition 5.2.1 Releases: Free universal database tool and SQL client

DENIAL-OF-SERVICE

18. DDoS Attack on Infinite Campus Limits Parent Access http://dlvr.it/QlL12Z
19. DDoS Attack on Infinite Campus Limits Parent Access https://www.infosecurity-magazine.com/news/ddos-attacks-infinite-campus?utm_source=twitterfeed&utm_medium=twitter …
20. DDoS attack on education vendor hinders access to districts’ online portals
21. Bitcoin Core Team fixes a critical DDoS flaw in wallet software
22. Some credential-stuffing botnets don't care about being noticed any more
23. Advanced DDoS Detection and Defense
24. ZombieBoy
25. Bitcoin Core Software Patches a Critical DDoS Attack Vulnerability

MALVERTISING

Nothing to report

PHISHING

26. Firefox Monitor provides password breach alerts, Would it convince you to set up a Firefox Account
27. GrrCon Augusta 2018, Rachel Giacobozzi’s ‘The Hybrid Analyst: How Phishing Created A New Type Of Intel Analyst’
28. Tomorrow: Go beyond the usual defenses and *really* protect your email from #spearphishing attacks. Find out how with @AlexanderGTster and @illena_a from @SCmagazine. http://www.workcast.com/register?cpak=2026696370909275&referrer=valimailA …
29. Cisco patches critical default password vulnerability
30. Security researcher fined for hacking hotel Wi-Fi and putting passwords on the internet
31. Users fret over Chrome auto-login change
32. Security Engineer Hacks Hotel WiFi, Fined for Exposing Admin Password
33. AdGuard adblocker resets passwords after credential-stuffing attack
34. 5 Notable Security Incidents that Recently Affected Federal Entities https://tripwire.me/2xGwKoH
35. Anti-Phishing Requires A Three-Pronged Strategy https://www.infosecurity-magazine.com/white-papers/antiphishing-requires-threepronged?utm_source=twitterfeed&utm_medium=twitter …
36. Microsoft: Here's why we're declaring end of password era
37. Microsoft 'kills' passwords, throws up threat manager, APIs Graph Security
38. Baddies just need one email account with clout to unleash phishing hell
39. Why Was Equifax So Stupid About Passwords?
40. NewsNow suffers security breach - passwords should be considered compromised
41. Cisco patches critical default password vulnerability
42. 5 Notable Security Incidents that Recently Affected Federal Entities https://tripwire.me/2xGwKoH

WEB DEFACEMENT

Nothing to report

MALWARE

43. The MITRE ATT&CK Framework: Exfiltration https://tripwire.me/2NDbSJV
44. Malware on SHEIN Servers Compromises Data of 6.4M Customers
45. Operator of Scan4You Malware-Scanning sentenced to 14 Years in prison
46. New Adwind RAT Campaign Targets Windows, Linux and Mac Users
47. Cryptomining Malware Continues Rapid Growth: Report
48. Freelancers baited with job offers to download malicious macros
49. DanaBot trojan sets sights on Europe, new features
50. Crooks turn to Delphi packers to evade malware detection
51. Mac Mojave Zero-Day Allows Malicious Apps to Access Sensitive Info
52. Astaroth Trojan Resurges in South America
53. BrandPost: Malicious Tactics Have Evolved: Your DNS Needs to, Too
54. Bloodhound – A Tool For Exploring Active Directory Domain Security
55. #SecurityNews: #Cryptocurrency mining soars 459% from 2017 to 2018 with no indication of slowing down. Read more about this story here: https://bit.ly/2PXYSew
56. #SecurityNews: Scottish #Brewery recovers from #ransomware attack. #Arran Brewery in Scotland, received what they thought was a cover letter as part of a job application, but the email attachment contained malware. Read more here: https://bit.ly/2PYAR7k
57. Man gets two years in prison for sabotaging US Army servers with 'logic bomb'
58. Malware Analysis using Osquery Part 2
59. Off-the-shelf RATs Targeting Pakistan
60. Malware Analysis using Osquery Part 1
61. Malicious Documents from Lazarus Group Targeting South Korea
62. GZipDe: An Encrypted Downloader Serving Metasploit
63. Satan Ransomware Spawns New Methods to Spread
64. MassMiner Malware Targeting Web Servers
65. 14 years prison for man who helped hackers evade detection by anti-virus software
66. USB threats from malware to miners
67. DanaBot trojan sets sights on Europe, new features
68. Stealthy cryptomining apps still on Google Play
69. New Version of GandCrab Ransomware Appends 5 Character Extension To Encrypted Files
70. First known malicious cryptomining campaign targeting Kodi discovered
71. 14 years prison for man who helped hackers evade detection by anti-virus software
72. New malware-as-a-service, Black Rose Lucy targets Android devices
73. Domain registrar oversteps taking down Zoho domain, impacts over 30Mil users

EXPLOIT

74. New CVE-2018-8373 Exploit Spotted in the Wild

VULNERABILITY

75. Open-source reuse has left Android’s most-popular apps laced with critical vulnerabilities
76. Monero bug could have allowed hackers to steal massive amounts of cryptocurrency
77. New Linux 'Mutagen Astronomy' security flaw impacts Red Hat and CentOS distros
78. Third-Party Patch Available for Microsoft JET Database Zero-Day
79. Over 80 Cisco Products Affected by FragmentSmack DoS Bug
80. MacOS Mojave zero-day privacy vulnerability uncovered
81. Snyk gets $22 million for platform that tracks security flaws in open source projects
82. Cisco patches critical default password vulnerability
83. Twitter fixes API bug that shared data with wrong developers
84. Mac Mojave Zero-Day Allows Malicious Apps to Access Sensitive Info
85. Bitcoin Core Team fixes a critical DDoS flaw in wallet software
86. No Takers for Zero-Day Vulnerabilities on the Dark Web
87. macOS Mojave Patches Vulnerabilities, But New Flaws Already Emerge
88. New CVE-2018-8373 Exploit Spotted in the Wild
89. More Details on an ActiveX Vulnerability Recently Used to Target Users in South Korea
90. Vulnerability Spotlight: Epee Levin Packet Deserialization Code Execution Vulnerability
91. Twitter fixes API bug that shared data with wrong developers
92. Cisco patches critical default password vulnerability
93. White hat hacker found a macOS Mojave privacy bypass 0-day flaw on release day
94. macOS zero-day vulnerability leads to user data leaks
95. Bitcoin Core Software Patches a Critical DDoS Attack Vulnerability
96. Vulnerability in macOS Mojave allows access to protected files
97. Firefox bugs can cause browsers and even the entire operating system to crash directly
98. Why the market for zero-day vulnerabilities on the dark web is vanishing

Region brief for 2018-09-25

ASIA

1. Snyk gets $22 million for platform that tracks security flaws in open source projects
2. Security Engineer Hacks Hotel WiFi, Fined for Exposing Admin Password
3. Off-the-shelf RATs Targeting Pakistan
4. Malicious Documents from Lazarus Group Targeting South Korea
5. GZipDe: An Encrypted Downloader Serving Metasploit
6. More Details on an ActiveX Vulnerability Recently Used to Target Users in South Korea
7. USB threats from malware to miners

OCEANIA

Nothing to report

NORTH AMERICA

8. Ex-NSA Hacker Sentenced to Jail Over Kaspersky Leak
9. Astaroth Trojan Resurges in South America
10. Man gets two years in prison for sabotaging US Army servers with 'logic bomb'
11. Malware Analysis using Osquery Part 1
12. MassMiner Malware Targeting Web Servers
13. 14 years prison for man who helped hackers evade detection by anti-virus software
14. SHEIN-Fashion Shopping Site Suffers Data Breach Affecting 6.5 Million Users
15. 14 years prison for man who helped hackers evade detection by anti-virus software

SOUTH AMERICA

Nothing to report

EUROPE

16. Operator of Scan4You Malware-Scanning sentenced to 14 Years in prison
17. Snyk gets $22 million for platform that tracks security flaws in open source projects
18. Security In The Crypto World: Exchanges, Wallets, Personal Data. Kiev To Host The Largest Cybersecurity Forum In Eastern Europe
19. #SecurityNews: Scottish #Brewery recovers from #ransomware attack. #Arran Brewery in Scotland, received what they thought was a cover letter as part of a job application, but the email attachment contained malware. Read more here: https://bit.ly/2PYAR7k
20. Baddies just need one email account with clout to unleash phishing hell
21. 14 years prison for man who helped hackers evade detection by anti-virus software
22. New malware-as-a-service, Black Rose Lucy targets Android devices

AFRICA

23. BrandPost: Malicious Tactics Have Evolved: Your DNS Needs to, Too

Sector brief for 2018-09-25

HEALTHCARE

1. macOS zero-day vulnerability leads to user data leaks

TRANSPORT

Nothing to report

BANKING & FINANCE

2. Porous portals, Newegg is a broken egg, and Mirai’s creators have new hats
3. Symantec accountancy audit uncovers customer transaction recorded as revenue
4. Malware Analysis using Osquery Part 2
5. Malware Analysis using Osquery Part 1
6. Malicious Documents from Lazarus Group Targeting South Korea
7. MassMiner Malware Targeting Web Servers
8. DanaBot trojan sets sights on Europe, new features

INFORMATION & TELECOMMUNICATION

Nothing to report

FOOD

Nothing to report

WATER

Nothing to report

ENERGY

9. Off-the-shelf RATs Targeting Pakistan
10. USB threats from malware to miners
11. Stealthy cryptomining apps still on Google Play

GOVERNMENT & PUBLIC SERVICE

Nothing to report

Daily brief for 2018-09-25

ASIA

1. Snyk gets $22 million for platform that tracks security flaws in open source projects
2. Security Engineer Hacks Hotel WiFi, Fined for Exposing Admin Password
3. Off-the-shelf RATs Targeting Pakistan
4. Malicious Documents from Lazarus Group Targeting South Korea
5. GZipDe: An Encrypted Downloader Serving Metasploit
6. More Details on an ActiveX Vulnerability Recently Used to Target Users in South Korea
7. USB threats from malware to miners

WORLD

8. Ex-NSA Hacker Sentenced to Jail Over Kaspersky Leak
9. Operator of Scan4You Malware-Scanning sentenced to 14 Years in prison
10. Snyk gets $22 million for platform that tracks security flaws in open source projects
11. Astaroth Trojan Resurges in South America
12. BrandPost: Malicious Tactics Have Evolved: Your DNS Needs to, Too
13. Security In The Crypto World: Exchanges, Wallets, Personal Data. Kiev To Host The Largest Cybersecurity Forum In Eastern Europe
14. #SecurityNews: Scottish #Brewery recovers from #ransomware attack. #Arran Brewery in Scotland, received what they thought was a cover letter as part of a job application, but the email attachment contained malware. Read more here: https://bit.ly/2PYAR7k
15. Man gets two years in prison for sabotaging US Army servers with 'logic bomb'
16. Baddies just need one email account with clout to unleash phishing hell
17. Malware Analysis using Osquery Part 1
18. MassMiner Malware Targeting Web Servers
19. 14 years prison for man who helped hackers evade detection by anti-virus software
20. SHEIN-Fashion Shopping Site Suffers Data Breach Affecting 6.5 Million Users
21. 14 years prison for man who helped hackers evade detection by anti-virus software
22. New malware-as-a-service, Black Rose Lucy targets Android devices

ATTACKS

23. Firefox Monitor provides password breach alerts, Would it convince you to set up a Firefox Account
24. Ex-NSA Hacker Sentenced to Jail Over Kaspersky Leak
25. Malware on SHEIN Servers Compromises Data of 6.4M Customers
26. GrrCon Augusta 2018, Rachel Giacobozzi’s ‘The Hybrid Analyst: How Phishing Created A New Type Of Intel Analyst’
27. Mozilla Launches Firefox Monitor Data Breach Notification Service
28. Tomorrow: Go beyond the usual defenses and *really* protect your email from #spearphishing attacks. Find out how with @AlexanderGTster and @illena_a from @SCmagazine. http://www.workcast.com/register?cpak=2026696370909275&referrer=valimailA …
29. Third-Party Patch Available for Microsoft JET Database Zero-Day
30. 130 Million Hotel Customers Breached Due to Exposed Database
31. State Department data breach exposes employee info (w/ commentary from @TripwireInc’s @craigtweets http://bit.ly/2MTcplE
32. DDoS Attack on Infinite Campus Limits Parent Access http://dlvr.it/QlL12Z
33. DDoS Attack on Infinite Campus Limits Parent Access https://www.infosecurity-magazine.com/news/ddos-attacks-infinite-campus?utm_source=twitterfeed&utm_medium=twitter …
34. New Adwind RAT Campaign Targets Windows, Linux and Mac Users
35. Cisco patches critical default password vulnerability
36. DDoS attack on education vendor hinders access to districts’ online portals
37. Bitcoin Core Team fixes a critical DDoS flaw in wallet software
38. Shein Data Breach Exposes Personal Data and Email Address of 6.42 Million Customers
39. Security researcher fined for hacking hotel Wi-Fi and putting passwords on the internet
40. SHEIN Data breach affected 6.42 million users
41. Security In The Crypto World: Exchanges, Wallets, Personal Data. Kiev To Host The Largest Cybersecurity Forum In Eastern Europe
42. Users fret over Chrome auto-login change
43. Security Engineer Hacks Hotel WiFi, Fined for Exposing Admin Password
44. AdGuard adblocker resets passwords after credential-stuffing attack
45. Symantec accountancy audit uncovers customer transaction recorded as revenue
46. 5 Notable Security Incidents that Recently Affected Federal Entities https://tripwire.me/2xGwKoH
47. Anti-Phishing Requires A Three-Pronged Strategy https://www.infosecurity-magazine.com/white-papers/antiphishing-requires-threepronged?utm_source=twitterfeed&utm_medium=twitter …
48. Microsoft: Here's why we're declaring end of password era
49. Microsoft 'kills' passwords, throws up threat manager, APIs Graph Security
50. Baddies just need one email account with clout to unleash phishing hell
51. Some credential-stuffing botnets don't care about being noticed any more
52. Advanced DDoS Detection and Defense
53. Why Was Equifax So Stupid About Passwords?
54. ZombieBoy
55. NewsNow suffers security breach - passwords should be considered compromised
56. Cisco patches critical default password vulnerability
57. First known malicious cryptomining campaign targeting Kodi discovered
58. SHEIN-Fashion Shopping Site Suffers Data Breach Affecting 6.5 Million Users
59. macOS zero-day vulnerability leads to user data leaks
60. How Long Does it Take to Find Compromised Data
61. Bitcoin Core Software Patches a Critical DDoS Attack Vulnerability
62. 5 Notable Security Incidents that Recently Affected Federal Entities https://tripwire.me/2xGwKoH
63. DBeaver Community Edition 5.2.1 Releases: Free universal database tool and SQL client

THREATS

64. Open-source reuse has left Android’s most-popular apps laced with critical vulnerabilities
65. The MITRE ATT&CK Framework: Exfiltration https://tripwire.me/2NDbSJV
66. Monero bug could have allowed hackers to steal massive amounts of cryptocurrency
67. New Linux 'Mutagen Astronomy' security flaw impacts Red Hat and CentOS distros
68. Once Popular Online Ad Format Opens Top Tier Sites to XSS Attacks
69. Malware on SHEIN Servers Compromises Data of 6.4M Customers
70. Third-Party Patch Available for Microsoft JET Database Zero-Day
71. Over 80 Cisco Products Affected by FragmentSmack DoS Bug
72. Operator of Scan4You Malware-Scanning sentenced to 14 Years in prison
73. MacOS Mojave zero-day privacy vulnerability uncovered
74. New Adwind RAT Campaign Targets Windows, Linux and Mac Users
75. Cryptomining Malware Continues Rapid Growth: Report
76. Freelancers baited with job offers to download malicious macros
77. Snyk gets $22 million for platform that tracks security flaws in open source projects
78. Cisco patches critical default password vulnerability
79. Twitter fixes API bug that shared data with wrong developers
80. DanaBot trojan sets sights on Europe, new features
81. Crooks turn to Delphi packers to evade malware detection
82. Mac Mojave Zero-Day Allows Malicious Apps to Access Sensitive Info
83. Bitcoin Core Team fixes a critical DDoS flaw in wallet software
84. Astaroth Trojan Resurges in South America
85. BrandPost: Malicious Tactics Have Evolved: Your DNS Needs to, Too
86. Bloodhound – A Tool For Exploring Active Directory Domain Security
87. No Takers for Zero-Day Vulnerabilities on the Dark Web
88. macOS Mojave Patches Vulnerabilities, But New Flaws Already Emerge
89. #SecurityNews: #Cryptocurrency mining soars 459% from 2017 to 2018 with no indication of slowing down. Read more about this story here: https://bit.ly/2PXYSew
90. New CVE-2018-8373 Exploit Spotted in the Wild
91. #SecurityNews: Scottish #Brewery recovers from #ransomware attack. #Arran Brewery in Scotland, received what they thought was a cover letter as part of a job application, but the email attachment contained malware. Read more here: https://bit.ly/2PYAR7k
92. Man gets two years in prison for sabotaging US Army servers with 'logic bomb'
93. Malware Analysis using Osquery Part 2
94. Off-the-shelf RATs Targeting Pakistan
95. Malware Analysis using Osquery Part 1
96. Malicious Documents from Lazarus Group Targeting South Korea
97. GZipDe: An Encrypted Downloader Serving Metasploit
98. More Details on an ActiveX Vulnerability Recently Used to Target Users in South Korea
99. Satan Ransomware Spawns New Methods to Spread
100. MassMiner Malware Targeting Web Servers
101. Vulnerability Spotlight: Epee Levin Packet Deserialization Code Execution Vulnerability
102. 14 years prison for man who helped hackers evade detection by anti-virus software
103. USB threats from malware to miners
104. DanaBot trojan sets sights on Europe, new features
105. Twitter fixes API bug that shared data with wrong developers
106. Stealthy cryptomining apps still on Google Play
107. New Version of GandCrab Ransomware Appends 5 Character Extension To Encrypted Files
108. Cisco patches critical default password vulnerability
109. White hat hacker found a macOS Mojave privacy bypass 0-day flaw on release day
110. First known malicious cryptomining campaign targeting Kodi discovered
111. 14 years prison for man who helped hackers evade detection by anti-virus software
112. macOS zero-day vulnerability leads to user data leaks
113. New malware-as-a-service, Black Rose Lucy targets Android devices
114. Bitcoin Core Software Patches a Critical DDoS Attack Vulnerability
115. Vulnerability in macOS Mojave allows access to protected files
116. Firefox bugs can cause browsers and even the entire operating system to crash directly
117. Domain registrar oversteps taking down Zoho domain, impacts over 30Mil users
118. Why the market for zero-day vulnerabilities on the dark web is vanishing

CRIME

119. Ex-NSA Hacker Sentenced to Jail Over Kaspersky Leak
120. Porous portals, Newegg is a broken egg, and Mirai’s creators have new hats
121. Operator of Scan4You Malware-Scanning sentenced to 14 Years in prison
122. Cryptomining Malware Continues Rapid Growth: Report
123. Bitcoin Core Team fixes a critical DDoS flaw in wallet software
124. SHEIN Data breach affected 6.42 million users
125. #SecurityNews: #Cryptocurrency mining soars 459% from 2017 to 2018 with no indication of slowing down. Read more about this story here: https://bit.ly/2PXYSew
126. Man gets two years in prison for sabotaging US Army servers with 'logic bomb'
127. Microsoft: Here's why we're declaring end of password era
128. Malware Analysis using Osquery Part 2
129. Malware Analysis using Osquery Part 1
130. ZombieBoy
131. Malicious Documents from Lazarus Group Targeting South Korea
132. MassMiner Malware Targeting Web Servers
133. 14 years prison for man who helped hackers evade detection by anti-virus software
134. DanaBot trojan sets sights on Europe, new features
135. Stealthy cryptomining apps still on Google Play
136. First known malicious cryptomining campaign targeting Kodi discovered
137. 14 years prison for man who helped hackers evade detection by anti-virus software
138. Bitcoin Core Software Patches a Critical DDoS Attack Vulnerability

POLITICS

139. Ex-NSA Hacker Sentenced to Jail Over Kaspersky Leak
140. Man gets two years in prison for sabotaging US Army servers with 'logic bomb'
141. Vulnerability in macOS Mojave allows access to protected files

Threat report for 2018-09-24

DATA BREACH

1. Experts uncovered a new Adwind campaign aimed at Linux, Windows, and macOS systems
2. New Adwind Campaign Targets Linux, Windows, and macOS
3. Survey: Nearly one-third of breached companies reported job losses after data breach
4. 4 Things To Do To Get Your Smartphone Compromised
5. [SingCERT] Alert on Microsoft JET Database Engine Vulnerabilities CVE-2018-8392 and CVE-2018-8393
6. Freelance workers targeted in new malware campaign
7. Bug Exposed Direct Messages of Millions of Twitter Users
8. A bug in Twitter Account Activity API exposed users messages to wrong developers
9. Do you know who the biggest threat actors are? Check out this paper that shares our perspective on the key takeaways from the 2018 Verizon Data Breach Investigations Report. Get your copy here:   #DBIR #
10. Hackers Compromised Thousands of WordPress Sites and Redirects to Tech Support Scams

DENIAL-OF-SERVICE

11. It’s an active buyer’s market for DDoS-as-a-Service - NETSCOUT
12. Tricky DoS Attack Crashes Mozilla Firefox
13. Virobot Ransomware Logs Keystrokes and Adds PC to Spam Botnet
14. Credential Stuffing Attacks Are Reaching DDoS Proportions
15. Viborot ransomware comes with a botnet

MALVERTISING

Nothing to report

PHISHING

16. Microsoft goes password-free for Azure AD sign-in
17. Cisco: We’ve killed another critical hard-coded root password bug, patch urgently
18. Yubico's latest authentication keys get the jump on a 'passwordless' future
19. US ISP RCN stores customer passwords in cleartext
20. Zoho Suspended by Domain Registrar Over Phishy Emails
21. [SingCERT] Alert on Cisco Video Surveillance Manager Default Password Vulnerability CVE-2018-15427
22. Breaking Chrome / Google account auto login (and tracking)
23. Microsoft Deletes Passwords for Azure Active Directory Applications
24. Cisco: We've killed another critical hard-coded root password bug, patch urgently
25. Cisco Removes Default Password From Video Surveillance Manager
26. Western Digital resolves year-old password bypass bug in My Cloud NAS devices
27. Pervasive email #security threats have dampened adoption of #cloud-based productivity tools: #survey   #BarracudaNetworks #phishing #Office365 #fraud #AI #

WEB DEFACEMENT

Nothing to report

MALWARE

28. Hackers Use Cloud Hosting Services To Deliver Malware That Steals Cryptocurrency Wallet Details
29. Pennsylvania Senate Democrats paid $700,000 to recover from ransomware attack
30. Adwind RAT Scurries By AV Software With New DDE Variant
31. Join our LIVE Webcast with @SCMagazine on 9/25: #Cryptomining: The Next #Malware Attack >>> register now   <<<
32. Scottish Brewery Recovered from Ransomware Attack
33. Cybercriminals Target Kodi Media Player for Malware Distribution
34. Scottish Brewery Recovered from Ransomware Attack  …
35. Zoho Suspended by Domain Registrar Over Phishy Emails
36. Operator of hackers' favorite malware scanning service gets 14 years in prison
37. Black Rose Lucy Android malware mimics user's on-screen click
38. Adwind RAT Scurries By AV Software With New DDE Variant
39. Hacker Sentenced for Running “Scan4you” Malware Scanning Service
40. Blocking ransomware for free with honeypots
41. Unraveling Emotet's Latest Macro Obfuscation
42. Adwind Trojan circumvents antivirus software to infect your PC
43. #SecurityNews: Over 90% of US retail domains analyzed recently were found to be non-compliant with #PCI DSS. The sector also performed worst out of the 18 appraised. Read more about this here:   #compliance #cyberattack #
44. Researchers warn of iTranslator man-in-the-middle malware
45. Virobot Ransomware Logs Keystrokes and Adds PC to Spam Botnet
46. Pennsylvania Senate Democrats paid $700,000 to recover from ransomware attack
47. Ransomware, Fileless Attacks and Cold Boot the Current Trend
48. Virobot Malware Emerges
49. Freelance workers targeted in new malware campaign
50. Viborot ransomware comes with a botnet
51. Scottish brewery ransomware attack leverages job opening
52. Arran Brewery Hits Massive Ransomware Attack – Warned Other Companies to Stay Safe
53. Thousands of WordPress sites are infected with the malicious code

EXPLOIT

Nothing to report

VULNERABILITY

54. macOS Mojave Privacy Bypass Flaw Allows Access to Protected Files
55. Cisco: We’ve killed another critical hard-coded root password bug, patch urgently
56. U.S. General Service Administration Launches Bug Bounty Program
57. Cisco patches 'critical' credential bug in video surveillance software
58. [SingCERT] Alert on Cisco Video Surveillance Manager Default Password Vulnerability CVE-2018-15427
59. Apple MacOS Mojave zero-day privacy bypass vulnerability revealed
60. The MyCloud Auth Vulnerability Fixed by Western Digital with a Hotfix
61. [SingCERT] Alert on Microsoft JET Database Engine Vulnerabilities CVE-2018-8392 and CVE-2018-8393
62. Cisco Patches Critical Flaw in Cisco Video Surveillance Manager (VSM) Software
63. New Bug Crashes Mozilla Firefox on Windows, Linux, and Mac Systems
64. Cisco Patched Critical Vulnerability With Video Surveillance Manager Appliance
65. [SingCERT] Alert on Critical Out-Of-Band Adobe Acrobat Vulnerability (CVE-2018-12848)
66. Critical flaw affects Cisco Video Surveillance Manager
67. macOS Mojave Privacy Bypass Flaw Allows Access to Protected Files
68. Cisco: We've killed another critical hard-coded root password bug, patch urgently
69. Report: Microsoft misses disclosure deadline to patch RCE bug in JET
70. Western Digital resolves year-old password bypass bug in My Cloud NAS devices
71. Cisco Patched Critical Vulnerability In Its Video Surveillance Manager Software
72. Bug Exposed Direct Messages of Millions of Twitter Users
73. A bug in Twitter Account Activity API exposed users messages to wrong developers

Region brief for 2018-09-24

ASIA

1. Experts uncovered a new Adwind campaign aimed at Linux, Windows, and macOS systems
2. Adwind RAT Scurries By AV Software With New DDE Variant

OCEANIA

Nothing to report

NORTH AMERICA

3. Pennsylvania Senate Democrats paid $700,000 to recover from ransomware attack
4. macOS Mojave Privacy Bypass Flaw Allows Access to Protected Files
5. Yubico's latest authentication keys get the jump on a 'passwordless' future
6. U.S. General Service Administration Launches Bug Bounty Program
7. US ISP RCN stores customer passwords in cleartext
8. Operator of hackers' favorite malware scanning service gets 14 years in prison
9. Hacker Sentenced for Running “Scan4you” Malware Scanning Service
10. Unraveling Emotet's Latest Macro Obfuscation
11. #SecurityNews: Over 90% of US retail domains analyzed recently were found to be non-compliant with #PCI DSS. The sector also performed worst out of the 18 appraised. Read more about this here:   #compliance #cyberattack #
12. Ransomware, Fileless Attacks and Cold Boot the Current Trend

SOUTH AMERICA

Nothing to report

EUROPE

13. Experts uncovered a new Adwind campaign aimed at Linux, Windows, and macOS systems
14. Scottish Brewery Recovered from Ransomware Attack
15. Yubico's latest authentication keys get the jump on a 'passwordless' future
16. Scottish Brewery Recovered from Ransomware Attack  …
17. Cybersecurity Has Become a Major Liability for Online Retailers
18. Operator of hackers' favorite malware scanning service gets 14 years in prison
19. Black Rose Lucy Android malware mimics user's on-screen click
20. Adwind RAT Scurries By AV Software With New DDE Variant
21. Hacker Sentenced for Running “Scan4you” Malware Scanning Service
22. Virobot Malware Emerges
23. Scottish brewery ransomware attack leverages job opening
24. Arran Brewery Hits Massive Ransomware Attack – Warned Other Companies to Stay Safe

AFRICA

Nothing to report

Sector brief for 2018-09-24

HEALTHCARE

1. Ransomware, Fileless Attacks and Cold Boot the Current Trend

TRANSPORT

Nothing to report

BANKING & FINANCE

2. Pennsylvania Senate Democrats paid $700,000 to recover from ransomware attack
3. Cybersecurity Has Become a Major Liability for Online Retailers
4. Unraveling Emotet's Latest Macro Obfuscation

INFORMATION & TELECOMMUNICATION

5. US ISP RCN stores customer passwords in cleartext

FOOD

Nothing to report

WATER

Nothing to report

ENERGY

Nothing to report

GOVERNMENT & PUBLIC SERVICE

Nothing to report

Daily brief for 2018-09-24

ASIA

1. Experts uncovered a new Adwind campaign aimed at Linux, Windows, and macOS systems
2. Adwind RAT Scurries By AV Software With New DDE Variant

WORLD

3. Pennsylvania Senate Democrats paid $700,000 to recover from ransomware attack
4. macOS Mojave Privacy Bypass Flaw Allows Access to Protected Files
5. Experts uncovered a new Adwind campaign aimed at Linux, Windows, and macOS systems
6. Scottish Brewery Recovered from Ransomware Attack
7. Yubico's latest authentication keys get the jump on a 'passwordless' future
8. Scottish Brewery Recovered from Ransomware Attack  …
9. U.S. General Service Administration Launches Bug Bounty Program
10. Cybersecurity Has Become a Major Liability for Online Retailers
11. US ISP RCN stores customer passwords in cleartext
12. Operator of hackers' favorite malware scanning service gets 14 years in prison
13. Black Rose Lucy Android malware mimics user's on-screen click
14. Adwind RAT Scurries By AV Software With New DDE Variant
15. Hacker Sentenced for Running “Scan4you” Malware Scanning Service
16. Unraveling Emotet's Latest Macro Obfuscation
17. #SecurityNews: Over 90% of US retail domains analyzed recently were found to be non-compliant with #PCI DSS. The sector also performed worst out of the 18 appraised. Read more about this here:   #compliance #cyberattack #
18. Ransomware, Fileless Attacks and Cold Boot the Current Trend
19. Virobot Malware Emerges
20. Scottish brewery ransomware attack leverages job opening
21. Arran Brewery Hits Massive Ransomware Attack – Warned Other Companies to Stay Safe

ATTACKS

22. Microsoft goes password-free for Azure AD sign-in
23. Cisco: We’ve killed another critical hard-coded root password bug, patch urgently
24. Experts uncovered a new Adwind campaign aimed at Linux, Windows, and macOS systems
25. Yubico's latest authentication keys get the jump on a 'passwordless' future
26. New Adwind Campaign Targets Linux, Windows, and macOS
27. US ISP RCN stores customer passwords in cleartext
28. Zoho Suspended by Domain Registrar Over Phishy Emails
29. [SingCERT] Alert on Cisco Video Surveillance Manager Default Password Vulnerability CVE-2018-15427
30. Survey: Nearly one-third of breached companies reported job losses after data breach
31. Breaking Chrome / Google account auto login (and tracking)
32. 4 Things To Do To Get Your Smartphone Compromised
33. Microsoft Deletes Passwords for Azure Active Directory Applications
34. [SingCERT] Alert on Microsoft JET Database Engine Vulnerabilities CVE-2018-8392 and CVE-2018-8393
35. It’s an active buyer’s market for DDoS-as-a-Service - NETSCOUT
36. Tricky DoS Attack Crashes Mozilla Firefox
37. Virobot Ransomware Logs Keystrokes and Adds PC to Spam Botnet
38. Cisco: We've killed another critical hard-coded root password bug, patch urgently
39. Cisco Removes Default Password From Video Surveillance Manager
40. Credential Stuffing Attacks Are Reaching DDoS Proportions
41. Freelance workers targeted in new malware campaign
42. Viborot ransomware comes with a botnet
43. Western Digital resolves year-old password bypass bug in My Cloud NAS devices
44. Bug Exposed Direct Messages of Millions of Twitter Users
45. A bug in Twitter Account Activity API exposed users messages to wrong developers
46. Do you know who the biggest threat actors are? Check out this paper that shares our perspective on the key takeaways from the 2018 Verizon Data Breach Investigations Report. Get your copy here:   #DBIR #
47. Pervasive email #security threats have dampened adoption of #cloud-based productivity tools: #survey   #BarracudaNetworks #phishing #Office365 #fraud #AI #
48. Hackers Compromised Thousands of WordPress Sites and Redirects to Tech Support Scams

THREATS

49. Hackers Use Cloud Hosting Services To Deliver Malware That Steals Cryptocurrency Wallet Details
50. Pennsylvania Senate Democrats paid $700,000 to recover from ransomware attack
51. macOS Mojave Privacy Bypass Flaw Allows Access to Protected Files
52. Adwind RAT Scurries By AV Software With New DDE Variant
53. Cisco: We’ve killed another critical hard-coded root password bug, patch urgently
54. Join our LIVE Webcast with @SCMagazine on 9/25: #Cryptomining: The Next #Malware Attack >>> register now   <<<
55. Scottish Brewery Recovered from Ransomware Attack
56. Cybercriminals Target Kodi Media Player for Malware Distribution
57. Scottish Brewery Recovered from Ransomware Attack  …
58. U.S. General Service Administration Launches Bug Bounty Program
59. Zoho Suspended by Domain Registrar Over Phishy Emails
60. Operator of hackers' favorite malware scanning service gets 14 years in prison
61. Cisco patches 'critical' credential bug in video surveillance software
62. Black Rose Lucy Android malware mimics user's on-screen click
63. Adwind RAT Scurries By AV Software With New DDE Variant
64. [SingCERT] Alert on Cisco Video Surveillance Manager Default Password Vulnerability CVE-2018-15427
65. Hacker Sentenced for Running “Scan4you” Malware Scanning Service
66. Apple MacOS Mojave zero-day privacy bypass vulnerability revealed
67. The MyCloud Auth Vulnerability Fixed by Western Digital with a Hotfix
68. Blocking ransomware for free with honeypots
69. Unraveling Emotet's Latest Macro Obfuscation
70. [SingCERT] Alert on Microsoft JET Database Engine Vulnerabilities CVE-2018-8392 and CVE-2018-8393
71. Adwind Trojan circumvents antivirus software to infect your PC
72. Cisco Patches Critical Flaw in Cisco Video Surveillance Manager (VSM) Software
73. #SecurityNews: Over 90% of US retail domains analyzed recently were found to be non-compliant with #PCI DSS. The sector also performed worst out of the 18 appraised. Read more about this here:   #compliance #cyberattack #
74. Researchers warn of iTranslator man-in-the-middle malware
75. New Bug Crashes Mozilla Firefox on Windows, Linux, and Mac Systems
76. Virobot Ransomware Logs Keystrokes and Adds PC to Spam Botnet
77. Cisco Patched Critical Vulnerability With Video Surveillance Manager Appliance
78. [SingCERT] Alert on Critical Out-Of-Band Adobe Acrobat Vulnerability (CVE-2018-12848)
79. Critical flaw affects Cisco Video Surveillance Manager
80. Pennsylvania Senate Democrats paid $700,000 to recover from ransomware attack
81. Ransomware, Fileless Attacks and Cold Boot the Current Trend
82. macOS Mojave Privacy Bypass Flaw Allows Access to Protected Files
83. Cisco: We've killed another critical hard-coded root password bug, patch urgently
84. Virobot Malware Emerges
85. Report: Microsoft misses disclosure deadline to patch RCE bug in JET
86. Freelance workers targeted in new malware campaign
87. Viborot ransomware comes with a botnet
88. Scottish brewery ransomware attack leverages job opening
89. Arran Brewery Hits Massive Ransomware Attack – Warned Other Companies to Stay Safe
90. Western Digital resolves year-old password bypass bug in My Cloud NAS devices
91. Cisco Patched Critical Vulnerability In Its Video Surveillance Manager Software
92. Bug Exposed Direct Messages of Millions of Twitter Users
93. A bug in Twitter Account Activity API exposed users messages to wrong developers
94. Thousands of WordPress sites are infected with the malicious code

CRIME

95. Pennsylvania Senate Democrats paid $700,000 to recover from ransomware attack
96. Join our LIVE Webcast with @SCMagazine on 9/25: #Cryptomining: The Next #Malware Attack >>> register now   <<<
97. Cybercriminals Target Kodi Media Player for Malware Distribution
98. Cybersecurity Has Become a Major Liability for Online Retailers
99. Operator of hackers' favorite malware scanning service gets 14 years in prison
100. Hacker Sentenced for Running “Scan4you” Malware Scanning Service
101. Unraveling Emotet's Latest Macro Obfuscation
102. Ransomware, Fileless Attacks and Cold Boot the Current Trend
103. Arran Brewery Hits Massive Ransomware Attack – Warned Other Companies to Stay Safe

POLITICS

104. macOS Mojave Privacy Bypass Flaw Allows Access to Protected Files

Region brief for 2018-09-23

ASIA

1. Second Quarter Threat Report 2018: Nasty Malware Trend, Growing not Shrinking

OCEANIA

2. DanaBot Banking Trojan Emerges Again With New Features Steals Banking Credentials

NORTH AMERICA

Nothing to report

SOUTH AMERICA

Nothing to report

EUROPE

3. Security Affairs newsletter Round 181 – News of the week
4. DanaBot Banking Trojan Emerges Again With New Features Steals Banking Credentials
5. Brewery became victim of targeted ransomware attack via job vacancy ad
6. Hacker behind the “Scan4you” Malware Scanning Service Sentenced 14 Years in Jail

AFRICA

Nothing to report

Sector brief for 2018-09-23

HEALTHCARE

Nothing to report

TRANSPORT

1. Security Affairs newsletter Round 181 – News of the week

BANKING & FINANCE

2. DanaBot Banking Trojan Emerges Again With New Features Steals Banking Credentials
3. Brewery became victim of targeted ransomware attack via job vacancy ad

INFORMATION & TELECOMMUNICATION

4. Tor Browser 8.0.1 released: fix security bugs

FOOD

Nothing to report

WATER

Nothing to report

ENERGY

Nothing to report

GOVERNMENT & PUBLIC SERVICE

Nothing to report