Daily brief for 2018-10-02

ASIA

1. Case involving 'AlfabetoVirtual' website defacements ends in guilty plea
2. Researchers Link New NOKKI Malware to North Korean Actor
3. TA18-275A: HIDDEN COBRA – FASTCash Campaign
4. Nielsen warns of Chinese influence campaign, but not with midterms
5. Report: Zoho's domain regularly exploited to move keylogger data
6. A Staggering Amount of Stolen Data is Heading to Zoho Domains
7. Hackers use malicious content delivery system to target iOS device

WORLD

8. Case involving 'AlfabetoVirtual' website defacements ends in guilty plea
9. Canadian restaurant chain suffers country-wide outage after malware outbreak
10. Torii botnet, probably the most sophisticated IoT botnet of ever
11. DanaBot Observed in Large Campaign Targeting U.S. Organizations
12. California Governor Signs Bill Requiring Bots to Disclose Their True Identity
13. AR18-275A: MAR-10201537 – HIDDEN COBRA FASTCash-Related Malware
14. Ignite 2018 highlights: passwordless sign-in, confidential computing, new threat protection, and more
15. TA18-275A: HIDDEN COBRA – FASTCash Campaign
16. Danabot Banking Malware Now Targeting Banks in the U.S.
17. Ransomware attacks via RDP on the rise | Avast
18. World Cup may have distracted malware hackers
19. Microsoft Detection Tools Sniff Out Fileless Malware
20. Gwinnett Medical Center investigating possible data breach
21. Rep. Speier: Congress needs a hack demo to understand election vulnerabilities
22. Fortnite gamers targeted by data theft malware
23. Nielsen warns of Chinese influence campaign, but not with midterms
24. DanaBot Observed in Large Campaign Targeting U.S. Organizations
25. Cyber Threat Landscape: How it’s Evolving & How to Respond
26. UK Conservative Party Conference dedicated app leaks attendee data
27. New Type of Malware Developed by Russian Hackers Eludes Discovery
28. #DanaBot Gains Popularity and Targets US Organizations in Large Campaigns. http://ow.ly/mJza50jiHdI via the Threat Insight research
29. Sites that use Facebook login could be affected by hack
30. Facebook may be fined up to $1.63 billion due to data breach

ATTACKS

31. Cyber criminals using lookalike online shopping domains to phish buyers
32. Nearly 50% of businesses have yet to take control of password security - report
33. Case involving 'AlfabetoVirtual' website defacements ends in guilty plea
34. Sophisticated Voice Phishing Scams
35. Torii botnet, probably the most sophisticated IoT botnet of ever
36. DanaBot Observed in Large Campaign Targeting U.S. Organizations
37. California Governor Signs Bill Requiring Bots to Disclose Their True Identity
38. Financial Sector Data Breaches Soar Despite Heavy Security Spending
39. WifiPhisher – WiFi Crack and Phishing Framework
40. Ignite 2018 highlights: passwordless sign-in, confidential computing, new threat protection, and more
41. Hackers can use Microsoft Sway to carry out phishing attacks 'without fear of detection'
42. TA18-275A: HIDDEN COBRA – FASTCash Campaign
43. Hacker 'AlfabetoVirtual' Pleads Guilty to NYC Comptroller, West Point Website Defacements
44. Gwinnett Medical Center investigating possible data breach
45. Fortnite gamers targeted by data theft malware
46. Nielsen warns of Chinese influence campaign, but not with midterms
47. Apollo Data Breach Leads To More Than 200 Million Contact Records Stolen
48. ThreatList: Password Hygiene Remains Lackluster in Global Businesses
49. The @UN accidentally exposed credentials on public @trello boards. Plus, #Uber is set to pay $148 million settlement following its
50. Boffins Tricks Password Protection Using Imposter Apps
51. DanaBot Observed in Large Campaign Targeting U.S. Organizations
52. Strengthen your security with Avast password generator | Avast
53. UK Conservative Party Conference dedicated app leaks attendee data
54. Researchers use Android password managers to make phishing attacks more practical
55. Breaking bank security: Record theft rises to new heights
56. Facebook could face $1.63bn fine under GDPR over latest data breach
57. How #livechatsoftware leaked
58. UN Sensitive Information Exposed Publicly Due to Neglected Security Settings
59. #DanaBot Gains Popularity and Targets US Organizations in Large Campaigns. http://ow.ly/mJza50jiHdI via the Threat Insight research
60. Vulnerable Android password managers make phishing attacks easier
61. Facebook Hacked: 50 Million Users' Data Exposed
62. True password behaviors in the workplace revealed
63. Rarely a week goes by without reports of a large and damaging #DDoS attack against a major business. Techniques are
64. #SecurityNews: #Tory App Snafu exposes Ministers’ personal info including phone numbers and other personal details of Cabinet ministers, as the
65. Torii Botnet – A New Sophisticated IoT Botnet Attack in Wide – More Powerful Than Mirai
66. Telegram vulnerability causes IP address leaking
67. Sites that use Facebook login could be affected by hack
68. Facebook may be fined up to $1.63 billion due to data breach
69. Wait, this isn't The Onion... "FBI fitness app asks users to agree to 'all of their activities monitored and recorded'"
70. ​NZ customs can now demand phone or laptop passwords
71. Stop DDoS Attacks In 10 Seconds – Organization’s Most Important Consideration for DDOS Attack Mitigation
72. When you need to make a new #Password, what do you do? The easiest and most secure way is to
73. #Video: Bringing all of your #data together under a single management portfolio, under a single #database, allows your organization to
74. At #MSIgnite, @Microsoft declared "an end to era of passwords" with an update to its Authenticator app, which will allow
75. Torii malware could be gateway to more sophisticated IoT botnet attacks

THREATS

76. Cyber criminals using lookalike online shopping domains to phish buyers
77. PDF patch time: fixes land for over 100 flaws in Adobe's and Foxit's PDF software
78. Canadian restaurant chain suffers country-wide outage after malware outbreak
79. Foxit PDF Reader Fixes High-Severity Remote Code Execution Flaws
80. Foxit Reader 9.3 addresses 118 Vulnerabilities, 18 of them rated as critical
81. Researchers Link New NOKKI Malware to North Korean Actor
82. NOKKI Malware Sports Mysterious Link to Reaper APT Group
83. Malware 101: The Malware Tools That Attackers Use
84. Following a Trail of Confusion: PowerShell in Malicious Office Documents
85. Google taking new steps to prevent malicious Chrome extensions
86. Google Patches Critical Vulnerabilities in Android OS
87. AR18-275A: MAR-10201537 – HIDDEN COBRA FASTCash-Related Malware
88. Vulnerability Spotlight: Adobe Acrobat Reader DC Collab reviewServer Remote Code Execution Vulnerability
89. Enabling Enterprise-Grade Hybrid Cloud Data Processing with SAP and Cisco – Part 2
90. Foxit Reader Update Patches Over 100 Vulnerabilities
91. A remote access #Trojan -- dubbed #GravityRAT -- was discovered by Cisco Talos (@TalosSecurity) to be checking for #antimalware sandboxes.
92. Danabot Banking Malware Now Targeting Banks in the U.S.
93. Dogcall Rat links NOKKI malware with Reaper group - indicators provided
94. The MITRE ATT&CK Framework: Command and Control
95. Ransomware attacks via RDP on the rise | Avast
96. Use Windows, macOS? Don’t be hacked by PDF, patch these critical Adobe flaws now
97. Keyloggers Turn to Zoho Office Suite in Droves for Data Exfiltration
98. Keyloggers Turn to Zoho Office Suite in Droves for Data Exfiltration
99. World Cup may have distracted malware hackers
100. New study finds 5 of every 6 routers are inadequately updated for security flaws
101. Microsoft Detection Tools Sniff Out Fileless Malware
102. .@FBI, @DHSgov call on users to mitigate #RemoteDesktop Protocol vulnerabilities and handle RDP exploits on their own, even as the
103. Adobe Releases Updates For 85 PDF Related CVEs
104. Nine NAS Bugs Open LenovoEMC, Iomega Devices To Attack
105. Rep. Speier: Congress needs a hack demo to understand election vulnerabilities
106. Google Cracks Down on Malicious Chrome Extensions in Major Update
107. Cisco Talos discloses serious vulnerabilities in Foxit PDF Reader
108. Fortnite gamers targeted by data theft malware
109. Windows Defender exclusions reek of malware
110. DanaBot Observed in Large Campaign Targeting U.S. Organizations
111. Report: Zoho's domain regularly exploited to move keylogger data
112. A Staggering Amount of Stolen Data is Heading to Zoho Domains
113. AV-TEST Rates Check Point’s SandBlast Agent as a Top Product in Corporate Endpoint Protection
114. Adobe fixes 47 critical flaws in Acrobat and Reader
115. 86 Vulnerabilities Fixed with Adobe Security Updates for Adobe Acrobat and Reader
116. Malware Less Common in Q2, Still Top Attack Method
117. Malware Less Common in Q2, Still Top Attack Method
118. Alphabet's @chroniclesec unveiled #VirusTotal Enterprise, a new version of the file scanning service designed specifically for enterprise customers. By @RobWright22
119. Fruitfly Mac malware creator used it to spy on minors; FBI discloses technique
120. Use Windows, macOS? Don't be hacked by PDF, patch these critical Adobe flaws now
121. CVE-2018-8373: Hackers’ best partner to spread Trojans
122. Man-in-the-middle attacks allow hackers to intercept, send and receive data to and from your device undetected until the transaction is
123. Desktop Telegram users showing off not only their silly selfies but also their IP addresses
124. Facebook Breach: Attackers Exploited Privacy Feature
125. New Type of Malware Developed by Russian Hackers Eludes Discovery
126. The Army is working toward a cyber domain doctrine
127. Vulnerability Spotlight: Adobe Acrobat Reader DC Collab reviewServer Remote Code Execution Vulnerability
128. The MITRE ATT&CK Framework: Command and Control
129. SQL injection explained: How these attacks work and how to prevent them
130. Improving #mobilesecurity programs to detect
131. Adobe Patches 86 Vulnerabilities in Acrobat Products
132. Adobe security updates for Acrobat fix 86 Vulnerabilities, 46 rated as critical
133. A group of #malware was discovered targeting public SSH servers. However, certain #IPaddresses are avoided. Discover how this is possible
134. Telegram vulnerability causes IP address leaking
135. Security Update for Foxit PDF Reader Fixes 118 Vulnerabilities
136. Hackers use malicious content delivery system to target iOS device
137. Adobe Releases Security Updates for Acrobat that Fix 86 Vulnerabilities
138. Torii malware could be gateway to more sophisticated IoT botnet attacks

CRIME

139. Case involving 'AlfabetoVirtual' website defacements ends in guilty plea
140. DanaBot Observed in Large Campaign Targeting U.S. Organizations
141. Google taking new steps to prevent malicious Chrome extensions
142. TA18-275A: HIDDEN COBRA – FASTCash Campaign
143. Danabot Banking Malware Now Targeting Banks in the U.S.
144. Hacker 'AlfabetoVirtual' Pleads Guilty to NYC Comptroller, West Point Website Defacements
145. World Cup may have distracted malware hackers
146. Fortnite gamers targeted by data theft malware
147. DanaBot Observed in Large Campaign Targeting U.S. Organizations
148. Cyber Threat Landscape: How it’s Evolving & How to Respond
149. Strengthen your security with Avast password generator | Avast
150. Report: Zoho's domain regularly exploited to move keylogger data
151. A Staggering Amount of Stolen Data is Heading to Zoho Domains
152. Breaking bank security: Record theft rises to new heights
153. Fruitfly Mac malware creator used it to spy on minors; FBI discloses technique

POLITICS

154. Case involving 'AlfabetoVirtual' website defacements ends in guilty plea
155. Ignite 2018 highlights: passwordless sign-in, confidential computing, new threat protection, and more
156. Rep. Speier: Congress needs a hack demo to understand election vulnerabilities
157. Fruitfly Mac malware creator used it to spy on minors; FBI discloses technique
158. UN Sensitive Information Exposed Publicly Due to Neglected Security Settings

APT report for 2018-10-01

TRANSNATIONAL / UNKNOWN

1. A week in security (September 24 – 30)
2. Formjacking in the Nutshell

CHINA

3. Cyber Security Roundup for September 2018

INDIA

Nothing to report

NORTH KOREA

4. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
5. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
6. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
7. A new Browser Reaper exploit can crash or freeze Mozilla #Firefox, according to a proof of concept published by a
8. Report Ties North Korean Attacks to New Malware, Linked by Word Macros

PAKISTAN

Nothing to report

VIETNAM

Nothing to report

IRAN

Nothing to report

LEBANON

Nothing to report

PALESTINE

Nothing to report

SAUDI ARABIA

Nothing to report

UNITED ARAB EMIRATES

Nothing to report

RUSSIA

9. Hacking Week Call for Pitches: Who Is the Weakest Link In Cybersecurity?
10. A week in security (September 24 – 30)
11. LoJax: Fisrt UEFI Rootkit Found In The Wild

UKRAINE

Nothing to report

Platform report for 2018-10-01

WINDOWS

1. Cyber Security Roundup for September 2018
2. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
3. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
4. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
5. GandCrab ransomware is spreading wildly through several known vulnerabilities
6. Vulnerability Spotlight: Multiple vulnerabilities in Atlantis Word Processor
7. Telegram CVE-2018-17780 flaw causes the leak of IP addresses when initiating calls

LINUX

8. A week in security (September 24 – 30)
9. Nasty Linux Kernel Vulnerability Discovered, Mandatory Kernel Update Required
10. Telegram CVE-2018-17780 flaw causes the leak of IP addresses when initiating calls

UNIX

Nothing to report

ANDROID

11. Hacking Week Call for Pitches: Who Is the Weakest Link In Cybersecurity?
12. Roaming Mantis Group Adds Phishing and Web Crypto Mining for iOS Devices
13. Malwarebytes is a champion of National Cybersecurity Awareness Month
14. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
15. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
16. Nasty Linux Kernel Vulnerability Discovered, Mandatory Kernel Update Required
17. Telegram CVE-2018-17780 flaw causes the leak of IP addresses when initiating calls

IOS

18. Hacking Week Call for Pitches: Who Is the Weakest Link In Cybersecurity?
19. Roaming Mantis Group Adds Phishing and Web Crypto Mining for iOS Devices
20. A week in security (September 24 – 30)
21. Voice Phishing Scams Are Getting More Clever
22. Malwarebytes is a champion of National Cybersecurity Awareness Month
23. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system

MACOS

24. Google Bug Breaks Search Results with a Plus Sign On Mac Safari
25. A week in security (September 24 – 30)

Threat report for 2018-10-01

DATA BREACH

1. 100K Routers Hijacked for Phishing in GhostDNS Campaign
2. Picture-in-Picture Phishing Campaign Goes After Steam Credentials
3. 4 Ways to Protect Your Files from a Data Breach
4. Facebook hacked – 50 Million Users’ Data exposed in the security breach
5. Telegram Patched IP Address Leak Problem In Its Desktop Client
6. Telegram Leaks User IP Addresses
7. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
8. Flaws in Tory party conference app leak ministers' personal information
9. Facebook faces a whopping €1.4 billion penalty under GDPR for Sept. 30 data breach
10. Phishing campaign targets developers of Chrome extensions
11. 3 GOP senators doxed during Kavanaugh hearing
12. Facebook Data Breach Extended to Third-Party Applications
13. Facebook could face up to $1.6bn fine for data breach
14. Telegram CVE-2018-17780 flaw causes the leak of IP addresses when initiating calls
15. Telegram Calling Feature Leaks Your IP Addresses—Patch Released
16. High-Profile Instagram Accounts Hacked For Ransom In A Recent Campaign

DENIAL-OF-SERVICE

17. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
18. Instagram Being Used To Sell Botnets And Stolen Fortnite Accounts
19. Hackers Are Selling Botnets and Stolen ‘Fortnite’ Accounts Over Instagram
20. Torii malware could be gateway to more sophisticated IoT botnet attacks
21. New vicious Torii IoT botnet discovered
22. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
23. Gigantic 100,000-strong botnet used to hijack traffic meant for Brazilian banks
24. Torii IoT Botnet Takes Mirai to the Next Level

MALVERTISING

Nothing to report

PHISHING

25. 100K Routers Hijacked for Phishing in GhostDNS Campaign
26. Picture-in-Picture Phishing Campaign Goes After Steam Credentials
27. Roaming Mantis Group Adds Phishing and Web Crypto Mining for iOS Devices
28. Weak Passwords Abused for 'FruitFly' Mac Malware Distribution
29. Third-Party Apps Using Facebook Login Also Affected by Latest Hacking Incident
30. How to Orchestrate a Smarter Phishing Response
31. Voice Phishing Scams Are Getting More Clever
32. Why nearly 50% of organizations are failing at password security
33. Employees Share Average of 6 Passwords With Co-Workers
34. UK firms’ password security score ‘average’
35. Phishing campaign targets developers of Chrome extensions
36. Password Security Better, Still Poses Business Risk
37. Password Security Better, Still Poses Business Risk
38. Following a loud critical backlash to a new #Chrome login feature and cookie retention functionality, @Google will make changes in

WEB DEFACEMENT

Nothing to report

MALWARE

39. Top Cloud Domain Controller for MSPs
40. Multiple Code Execution Vulnerabilities Found in Atlantis Word Processor
41. GhostDNS malware already infected over 100K+ devices and targets 70+ different types of home routers
42. GrandCrab Ransomware Spreads Using Multiple Known Vulnerabilities
43. Fileless Malware Attacks on the Rise, Microsoft Says
44. 'Short, Brutal Lives': Life Expectancy for Malicious Domains
45. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
46. Roaming Mantis Group Adds Phishing and Web Crypto Mining for iOS Devices
47. Google Adds New Rules To End Malicious Chrome Extensions
48. Code Execution Vulnerabilities Uncovered In Atlantis Word Processor
49. Deep Dive Into iTranslator - MITM Malware
50. LoJax: Fisrt UEFI Rootkit Found In The Wild
51. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
52. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
53. Telegram Patched IP Address Leak Problem In Its Desktop Client
54. Weak Passwords Abused for 'FruitFly' Mac Malware Distribution
55. Code execution vulnerabilities uncovered in Atlantis Word Processor
56. Malwarebytes is a champion of National Cybersecurity Awareness Month
57. Monitor privileged execution to defend against
58. Telegram Leaks User IP Addresses
59. Vulnerability Spotlight: Multiple vulnerabilities in Atlantis Word Processor
60. TrickBot Banking Trojan Takes Center Stage in 2018
61. More on the Five Eyes Statement on Encryption and Backdoors
62. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
63. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
64. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
65. GandCrab ransomware is spreading wildly through several known vulnerabilities
66. Docs reveal how Fruitfly Mac spyware initially spread
67. Torii malware could be gateway to more sophisticated IoT botnet attacks
68. SamSam ransomware: How is this version different from others?
69. Ransomware Casts Anchor at the Port of San Diego
70. Hackers Hijacked More Than 100,000 Routers DNS Settings and Redirecting Users to Malicious WebSites
71. Ransomware Casts Anchor at the Port of San Diego
72. #VPNFilter #malware: How can users protect themselves?
73. Vulnerability Spotlight: Multiple vulnerabilities in Atlantis Word Processor
74. Telegram CVE-2018-17780 flaw causes the leak of IP addresses when initiating calls
75. Telegram Calling Feature Leaks Your IP Addresses—Patch Released
76. New Banking Malware Steal Money From Victim’s Bank Accounts Using Weaponized Adobe Reader

EXPLOIT

77. A new Browser Reaper exploit can crash or freeze Mozilla #Firefox, according to a proof of concept published by a
78. Python-based attack tools are the most common vector for launching exploit attempts
79. Several Bugs Exploited in Massive Facebook Hack
80. Sophos recently discovered a #Samsam extortion code that performs whole-company attacks through a variety of vulnerability exploits. Discover how this
81. How can attackers exploit a buffer underflow #vulnerability?
82. New Banking Malware Steal Money From Victim’s Bank Accounts Using Weaponized Adobe Reader

VULNERABILITY

83. Adobe Patches 47 Critical Flaws in Acrobat and DC
84. Multiple Code Execution Vulnerabilities Found in Atlantis Word Processor
85. CVE-2018-11776 and why you need Black Duck Security Advisories
86. Nine NAS Bugs Open LenovoEMC, Iomega Devices to Attack
87. GrandCrab Ransomware Spreads Using Multiple Known Vulnerabilities
88. Google Bug Breaks Search Results with a Plus Sign On Mac Safari
89. Vulnerability Spotlight: Multiple Issues in Foxit PDF Reader
90. Gemalto ID Card Provider Sued for €152 Million in eID Vulnerability Case
91. Code Execution Vulnerabilities Uncovered In Atlantis Word Processor
92. Facebook: How to minimize the risk of vulnerabilities
93. Code execution vulnerabilities uncovered in Atlantis Word Processor
94. Attackers chained three bugs to breach into the Facebook platform
95. Vulnerability Spotlight: Multiple vulnerabilities in Atlantis Word Processor
96. Monero fixes major ‘burning bug’ flaw, preventing mass devaluation
97. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
98. Flaws in Tory party conference app leak ministers' personal information
99. Vulnerability Spotlight: Multiple Issues in Foxit PDF Reader
100. GandCrab ransomware is spreading wildly through several known vulnerabilities
101. Several Bugs Exploited in Massive Facebook Hack
102. Sophos recently discovered a #Samsam extortion code that performs whole-company attacks through a variety of vulnerability exploits. Discover how this
103. Nasty Linux Kernel Vulnerability Discovered, Mandatory Kernel Update Required
104. How can attackers exploit a buffer underflow #vulnerability?
105. CISO @rickhholland joins @drshellface and @mazzazone to discuss the latest #cybersecurity news: Security Flaws Affect 50 Million Facebook Accounts and
106. Vulnerability Spotlight: Multiple vulnerabilities in Atlantis Word Processor
107. Telegram CVE-2018-17780 flaw causes the leak of IP addresses when initiating calls

Region brief for 2018-10-01

ASIA

1. Cyber Security Roundup for September 2018
2. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
3. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
4. Roaming Mantis Group Adds Phishing and Web Crypto Mining for iOS Devices
5. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
6. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
7. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
8. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
9. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
10. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers

OCEANIA

11. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
12. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT

NORTH AMERICA

13. Cyber Security Roundup for September 2018
14. Hacking Week Call for Pitches: Who Is the Weakest Link In Cybersecurity?
15. GhostDNS malware already infected over 100K+ devices and targets 70+ different types of home routers
16. A week in security (September 24 – 30)
17. 4 Ways to Protect Your Files from a Data Breach
18. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
19. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
20. Voice Phishing Scams Are Getting More Clever
21. Malwarebytes is a champion of National Cybersecurity Awareness Month
22. Formjacking in the Nutshell
23. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
24. CISO @rickhholland joins @drshellface and @mazzazone to discuss the latest #cybersecurity news: Security Flaws Affect 50 Million Facebook Accounts and

SOUTH AMERICA

25. GhostDNS malware already infected over 100K+ devices and targets 70+ different types of home routers
26. 4 Ways to Protect Your Files from a Data Breach
27. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
28. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
29. Gigantic 100,000-strong botnet used to hijack traffic meant for Brazilian banks
30. New Banking Malware Steal Money From Victim’s Bank Accounts Using Weaponized Adobe Reader

EUROPE

31. Cyber Security Roundup for September 2018
32. Hacking Week Call for Pitches: Who Is the Weakest Link In Cybersecurity?
33. Gemalto ID Card Provider Sued for €152 Million in eID Vulnerability Case
34. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
35. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
36. Facebook: How to minimize the risk of vulnerabilities
37. Voice Phishing Scams Are Getting More Clever
38. Formjacking in the Nutshell
39. TrickBot Banking Trojan Takes Center Stage in 2018
40. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
41. Facebook faces a whopping €1.4 billion penalty under GDPR for Sept. 30 data breach
42. UK firms’ password security score ‘average’

AFRICA

43. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
44. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT

Sector brief for 2018-10-01

HEALTHCARE

1. Malwarebytes is a champion of National Cybersecurity Awareness Month

TRANSPORT

2. Cyber Security Roundup for September 2018
3. A week in security (September 24 – 30)
4. Ransomware Casts Anchor at the Port of San Diego
5. Ransomware Casts Anchor at the Port of San Diego

BANKING & FINANCE

6. Cyber Security Roundup for September 2018
7. GhostDNS malware already infected over 100K+ devices and targets 70+ different types of home routers
8. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
9. Roaming Mantis Group Adds Phishing and Web Crypto Mining for iOS Devices
10. A week in security (September 24 – 30)
11. 4 Ways to Protect Your Files from a Data Breach
12. Facebook: How to minimize the risk of vulnerabilities
13. Hackers Are Selling Botnets and Stolen ‘Fortnite’ Accounts Over Instagram
14. Voice Phishing Scams Are Getting More Clever
15. Malwarebytes is a champion of National Cybersecurity Awareness Month
16. Formjacking in the Nutshell
17. Attackers chained three bugs to breach into the Facebook platform
18. TrickBot Banking Trojan Takes Center Stage in 2018
19. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
20. Hackers Hijacked More Than 100,000 Routers DNS Settings and Redirecting Users to Malicious WebSites
21. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
22. Gigantic 100,000-strong botnet used to hijack traffic meant for Brazilian banks
23. New Banking Malware Steal Money From Victim’s Bank Accounts Using Weaponized Adobe Reader

INFORMATION & TELECOMMUNICATION

24. Cyber Security Roundup for September 2018
25. Top Cloud Domain Controller for MSPs
26. Hacking Week Call for Pitches: Who Is the Weakest Link In Cybersecurity?
27. GhostDNS malware already infected over 100K+ devices and targets 70+ different types of home routers
28. Fileless Malware Attacks on the Rise, Microsoft Says
29. Google Bug Breaks Search Results with a Plus Sign On Mac Safari
30. A week in security (September 24 – 30)
31. Google Adds New Rules To End Malicious Chrome Extensions
32. Facebook hacked – 50 Million Users’ Data exposed in the security breach
33. Instagram Being Used To Sell Botnets And Stolen Fortnite Accounts
34. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
35. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
36. Facebook: How to minimize the risk of vulnerabilities
37. Hackers Are Selling Botnets and Stolen ‘Fortnite’ Accounts Over Instagram
38. Third-Party Apps Using Facebook Login Also Affected by Latest Hacking Incident
39. Voice Phishing Scams Are Getting More Clever
40. Attackers chained three bugs to breach into the Facebook platform
41. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
42. Facebook faces a whopping €1.4 billion penalty under GDPR for Sept. 30 data breach
43. Ransomware Casts Anchor at the Port of San Diego
44. Ransomware Casts Anchor at the Port of San Diego
45. Password Security Better, Still Poses Business Risk
46. Several Bugs Exploited in Massive Facebook Hack
47. Password Security Better, Still Poses Business Risk
48. Facebook Data Breach Extended to Third-Party Applications
49. Nasty Linux Kernel Vulnerability Discovered, Mandatory Kernel Update Required
50. CISO @rickhholland joins @drshellface and @mazzazone to discuss the latest #cybersecurity news: Security Flaws Affect 50 Million Facebook Accounts and
51. Following a loud critical backlash to a new #Chrome login feature and cookie retention functionality, @Google will make changes in
52. Facebook could face up to $1.6bn fine for data breach
53. Torii IoT Botnet Takes Mirai to the Next Level

FOOD

Nothing to report

WATER

Nothing to report

ENERGY

54. GrandCrab Ransomware Spreads Using Multiple Known Vulnerabilities
55. Malwarebytes is a champion of National Cybersecurity Awareness Month

GOVERNMENT & PUBLIC SERVICE

56. Gemalto ID Card Provider Sued for €152 Million in eID Vulnerability Case
57. Malwarebytes is a champion of National Cybersecurity Awareness Month

Daily brief for 2018-10-01

ASIA

1. Cyber Security Roundup for September 2018
2. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
3. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
4. Roaming Mantis Group Adds Phishing and Web Crypto Mining for iOS Devices
5. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
6. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
7. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
8. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
9. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
10. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers

WORLD

11. Cyber Security Roundup for September 2018
12. Hacking Week Call for Pitches: Who Is the Weakest Link In Cybersecurity?
13. GhostDNS malware already infected over 100K+ devices and targets 70+ different types of home routers
14. A week in security (September 24 – 30)
15. 4 Ways to Protect Your Files from a Data Breach
16. Gemalto ID Card Provider Sued for €152 Million in eID Vulnerability Case
17. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
18. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
19. Facebook: How to minimize the risk of vulnerabilities
20. Voice Phishing Scams Are Getting More Clever
21. Malwarebytes is a champion of National Cybersecurity Awareness Month
22. Formjacking in the Nutshell
23. TrickBot Banking Trojan Takes Center Stage in 2018
24. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
25. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
26. Facebook faces a whopping €1.4 billion penalty under GDPR for Sept. 30 data breach
27. UK firms’ password security score ‘average’
28. CISO @rickhholland joins @drshellface and @mazzazone to discuss the latest #cybersecurity news: Security Flaws Affect 50 Million Facebook Accounts and
29. Gigantic 100,000-strong botnet used to hijack traffic meant for Brazilian banks
30. New Banking Malware Steal Money From Victim’s Bank Accounts Using Weaponized Adobe Reader

ATTACKS

31. 100K Routers Hijacked for Phishing in GhostDNS Campaign
32. Picture-in-Picture Phishing Campaign Goes After Steam Credentials
33. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
34. Roaming Mantis Group Adds Phishing and Web Crypto Mining for iOS Devices
35. 4 Ways to Protect Your Files from a Data Breach
36. Facebook hacked – 50 Million Users’ Data exposed in the security breach
37. Instagram Being Used To Sell Botnets And Stolen Fortnite Accounts
38. Telegram Patched IP Address Leak Problem In Its Desktop Client
39. Weak Passwords Abused for 'FruitFly' Mac Malware Distribution
40. Hackers Are Selling Botnets and Stolen ‘Fortnite’ Accounts Over Instagram
41. Third-Party Apps Using Facebook Login Also Affected by Latest Hacking Incident
42. How to Orchestrate a Smarter Phishing Response
43. Voice Phishing Scams Are Getting More Clever
44. Why nearly 50% of organizations are failing at password security
45. Employees Share Average of 6 Passwords With Co-Workers
46. Telegram Leaks User IP Addresses
47. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
48. Flaws in Tory party conference app leak ministers' personal information
49. Facebook faces a whopping €1.4 billion penalty under GDPR for Sept. 30 data breach
50. UK firms’ password security score ‘average’
51. Torii malware could be gateway to more sophisticated IoT botnet attacks
52. Phishing campaign targets developers of Chrome extensions
53. Password Security Better, Still Poses Business Risk
54. New vicious Torii IoT botnet discovered
55. Password Security Better, Still Poses Business Risk
56. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
57. 3 GOP senators doxed during Kavanaugh hearing
58. Facebook Data Breach Extended to Third-Party Applications
59. Following a loud critical backlash to a new #Chrome login feature and cookie retention functionality, @Google will make changes in
60. Facebook could face up to $1.6bn fine for data breach
61. Telegram CVE-2018-17780 flaw causes the leak of IP addresses when initiating calls
62. Telegram Calling Feature Leaks Your IP Addresses—Patch Released
63. Gigantic 100,000-strong botnet used to hijack traffic meant for Brazilian banks
64. Torii IoT Botnet Takes Mirai to the Next Level
65. High-Profile Instagram Accounts Hacked For Ransom In A Recent Campaign

THREATS

66. Adobe Patches 47 Critical Flaws in Acrobat and DC
67. Top Cloud Domain Controller for MSPs
68. Multiple Code Execution Vulnerabilities Found in Atlantis Word Processor
69. CVE-2018-11776 and why you need Black Duck Security Advisories
70. GhostDNS malware already infected over 100K+ devices and targets 70+ different types of home routers
71. Nine NAS Bugs Open LenovoEMC, Iomega Devices to Attack
72. GrandCrab Ransomware Spreads Using Multiple Known Vulnerabilities
73. Fileless Malware Attacks on the Rise, Microsoft Says
74. 'Short, Brutal Lives': Life Expectancy for Malicious Domains
75. Google Bug Breaks Search Results with a Plus Sign On Mac Safari
76. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
77. Roaming Mantis Group Adds Phishing and Web Crypto Mining for iOS Devices
78. Vulnerability Spotlight: Multiple Issues in Foxit PDF Reader
79. Google Adds New Rules To End Malicious Chrome Extensions
80. Gemalto ID Card Provider Sued for €152 Million in eID Vulnerability Case
81. Code Execution Vulnerabilities Uncovered In Atlantis Word Processor
82. Deep Dive Into iTranslator - MITM Malware
83. LoJax: Fisrt UEFI Rootkit Found In The Wild
84. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
85. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
86. Telegram Patched IP Address Leak Problem In Its Desktop Client
87. Weak Passwords Abused for 'FruitFly' Mac Malware Distribution
88. Facebook: How to minimize the risk of vulnerabilities
89. Code execution vulnerabilities uncovered in Atlantis Word Processor
90. A new Browser Reaper exploit can crash or freeze Mozilla #Firefox, according to a proof of concept published by a
91. Malwarebytes is a champion of National Cybersecurity Awareness Month
92. Monitor privileged execution to defend against
93. Attackers chained three bugs to breach into the Facebook platform
94. Telegram Leaks User IP Addresses
95. Vulnerability Spotlight: Multiple vulnerabilities in Atlantis Word Processor
96. TrickBot Banking Trojan Takes Center Stage in 2018
97. More on the Five Eyes Statement on Encryption and Backdoors
98. Monero fixes major ‘burning bug’ flaw, preventing mass devaluation
99. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
100. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
101. Flaws in Tory party conference app leak ministers' personal information
102. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
103. Vulnerability Spotlight: Multiple Issues in Foxit PDF Reader
104. GandCrab ransomware is spreading wildly through several known vulnerabilities
105. Python-based attack tools are the most common vector for launching exploit attempts
106. Docs reveal how Fruitfly Mac spyware initially spread
107. Torii malware could be gateway to more sophisticated IoT botnet attacks
108. SamSam ransomware: How is this version different from others?
109. Ransomware Casts Anchor at the Port of San Diego
110. Hackers Hijacked More Than 100,000 Routers DNS Settings and Redirecting Users to Malicious WebSites
111. Ransomware Casts Anchor at the Port of San Diego
112. Several Bugs Exploited in Massive Facebook Hack
113. Sophos recently discovered a #Samsam extortion code that performs whole-company attacks through a variety of vulnerability exploits. Discover how this
114. #VPNFilter #malware: How can users protect themselves?
115. Nasty Linux Kernel Vulnerability Discovered, Mandatory Kernel Update Required
116. How can attackers exploit a buffer underflow #vulnerability?
117. CISO @rickhholland joins @drshellface and @mazzazone to discuss the latest #cybersecurity news: Security Flaws Affect 50 Million Facebook Accounts and
118. Vulnerability Spotlight: Multiple vulnerabilities in Atlantis Word Processor
119. Telegram CVE-2018-17780 flaw causes the leak of IP addresses when initiating calls
120. Telegram Calling Feature Leaks Your IP Addresses—Patch Released
121. New Banking Malware Steal Money From Victim’s Bank Accounts Using Weaponized Adobe Reader

CRIME

122. Cyber Security Roundup for September 2018
123. Hacking Week Call for Pitches: Who Is the Weakest Link In Cybersecurity?
124. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
125. 4 Ways to Protect Your Files from a Data Breach
126. Gemalto ID Card Provider Sued for €152 Million in eID Vulnerability Case
127. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
128. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
129. Facebook: How to minimize the risk of vulnerabilities
130. Hackers Are Selling Botnets and Stolen ‘Fortnite’ Accounts Over Instagram
131. How to Orchestrate a Smarter Phishing Response
132. Voice Phishing Scams Are Getting More Clever
133. Formjacking in the Nutshell
134. Attackers chained three bugs to breach into the Facebook platform
135. TrickBot Banking Trojan Takes Center Stage in 2018
136. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
137. Hackers Hijacked More Than 100,000 Routers DNS Settings and Redirecting Users to Malicious WebSites
138. Sophos recently discovered a #Samsam extortion code that performs whole-company attacks through a variety of vulnerability exploits. Discover how this
139. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
140. New Banking Malware Steal Money From Victim’s Bank Accounts Using Weaponized Adobe Reader

POLITICS

141. Hacking Week Call for Pitches: Who Is the Weakest Link In Cybersecurity?
142. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
143. A week in security (September 24 – 30)
144. Facebook: How to minimize the risk of vulnerabilities
145. Hackers Are Selling Botnets and Stolen ‘Fortnite’ Accounts Over Instagram
146. Malwarebytes is a champion of National Cybersecurity Awareness Month
147. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
148. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system

APT report for 2018-09-30

TRANSNATIONAL / UNKNOWN

1. The British Airways #databreach may be the handiwork of hacking group #Magecart, according to researchers. By @MaddieBacon11

CHINA

Nothing to report

INDIA

Nothing to report

NORTH KOREA

2. A security researcher developed a proof-of-concept attack on #Firefox called Browser Reaper that can crash or freeze the browser, but

PAKISTAN

Nothing to report

VIETNAM

Nothing to report

IRAN

Nothing to report

LEBANON

Nothing to report

PALESTINE

Nothing to report

SAUDI ARABIA

Nothing to report

UNITED ARAB EMIRATES

Nothing to report

RUSSIA

3. Security Affairs newsletter Round 182 – News of the week

UKRAINE

Nothing to report

Platform report for 2018-09-30

WINDOWS

1. Telegram Leaks Public & Private IP Address While Making Calls
2. Cryptomining Malware Grows by 86% in Q2: McAfee Report
3. Security Affairs newsletter Round 182 – News of the week
4. Telegram exposes the IP address during a user call by default
5. Xbash Malware Combines Many Malicious Functions in Worm
6. Cisco Multiple Security Vulnerabilities Alert
7. USBStealer – Password Hacking Tool For Windows Machine Applications to Perform Windows Penetration Testing

LINUX

8. Mutagen Astronomy – Linux Vulnerability Hits CentOS, Debian, and Red Hat Distros
9. Security Affairs newsletter Round 182 – News of the week
10. Telegram exposes the IP address during a user call by default
11. Xbash Malware Combines Many Malicious Functions in Worm

UNIX

Nothing to report

ANDROID

12. #Android #Trojan: How is data being stolen from #messagingapps?
13. Cryptomining Malware Grows by 86% in Q2: McAfee Report
14. Security Affairs newsletter Round 182 – News of the week
15. Telegram exposes the IP address during a user call by default

IOS

16. Security Affairs newsletter Round 182 – News of the week
17. Telegram exposes the IP address during a user call by default
18. Cisco Multiple Security Vulnerabilities Alert

MACOS

19. Security Affairs newsletter Round 182 – News of the week
20. Mojave Flaws Allow An Attacker To Bypass Full Disk Access Requirement
21. Zero-Day MacOS Mojave Privacy Bypass Bug Exposes Protected Files

Threat report for 2018-09-30

DATA BREACH

1. Experts comment on Facebook’s 50 million user credential leak
2. 40 million more likely affected by massive Facebook data leak - Bitdefender
3. Project Insecurity (@insecurity) researchers discovered certain #livechatsoftware that were leaking personal details of employee at several high-profile sites. Discover how
4. Telegram Leaks Public & Private IP Address While Making Calls
5. The United Nations (@UN) accidentally exposed sensitive information on public @trello boards, in the Jira app, and in #GoogleDocs and
6. 3 GOP senators doxed during Kavanaugh hearing
7. Uber has agreed to pay more than $140 Million for a data breach settlement

DENIAL-OF-SERVICE

Nothing to report

MALVERTISING

Nothing to report

PHISHING

8. Chegg forces password reset on 40 million users
9. Hackers are Selling Social Media Logins & Financial Details On Dark Web starting from £2
10. USBStealer – Password Hacking Tool For Windows Machine Applications to Perform Windows Penetration Testing

WEB DEFACEMENT

Nothing to report

MALWARE

11. GANDCRAB 5.0.1 Ransom Virus – How to Remove It and Restore Data
12. Week in review: First-ever UEFI rootkit, Apple DEP vulnerability, new tactics subvert traditional security measures
13. Apple DEP Authentication Flaw Leaves Devices Vulnerable To Malicious MDM Enrolling
14. Telegram Leaks Public & Private IP Address While Making Calls
15. #Android #Trojan: How is data being stolen from #messagingapps?
16. Docs reveal how Fruitfly Mac spyware initially spread
17. Cryptomining Malware Grows by 86% in Q2: McAfee Report
18. Facebook monetizes 2FA, Singapore monetizes hacker, and ransomware creeps monetize US Democrats
19. Security roundup: Facebook, ransomware, UEFI rootkit, Berners-Lee’s plan for new internet
20. Telegram exposes the IP address during a user call by default
21. #GoScanSSH: How does this #malware work and differ from others?
22. Xbash Malware Combines Many Malicious Functions in Worm
23. Discover how the #VPNFilter #malware works and affects users
24. Alphabet's Chronicle has given #VirusTotal a makeover. Find out what's in the new VirusTotal Enterprise offering. By @RobWright22
25. Improving core processes with next-generation mobile productivity solutions can bring power and cost efficiency gains. However, we must not lose
26. Malware in the Cloud: What You Need to Know
27. Beware !! USB Devices & Removable Media are Used to Inject Cryptocurrency Mining Malware

EXPLOIT

28. Facebook Ad Targeting Exploits Users’ 2FA Phone Numbers
29. FBI IC3 warns of cyber attacks exploiting Remote Desktop Protocol (RDP)

VULNERABILITY

30. Mutagen Astronomy – Linux Vulnerability Hits CentOS, Debian, and Red Hat Distros
31. Facebook Says Three Different Bugs Are Responsible For The Massive Account Hacks
32. Week in review: First-ever UEFI rootkit, Apple DEP vulnerability, new tactics subvert traditional security measures
33. Estonia sues Gemalto for 152M euros over flaws in citizen ID cards issued by the company
34. Apple DEP Authentication Flaw Leaves Devices Vulnerable To Malicious MDM Enrolling
35. #Cisco patches yet another hardcoded credentials flaw, this time in its video surveillance manager appliance; the latest vulnerability is at
36. Mojave Flaws Allow An Attacker To Bypass Full Disk Access Requirement
37. Election equipment vendors come under fire for #votingmachine security in the latest #DEFCON report, which details flaws -- one from
38. Cisco Multiple Security Vulnerabilities Alert
39. Zero-Day MacOS Mojave Privacy Bypass Bug Exposes Protected Files
40. A Top Facebook Bug Bounty Hunter Shares Their Insights on the Facebook Breach

Region brief for 2018-09-30

ASIA

1. Cryptomining Malware Grows by 86% in Q2: McAfee Report
2. Facebook monetizes 2FA, Singapore monetizes hacker, and ransomware creeps monetize US Democrats

OCEANIA

Nothing to report

NORTH AMERICA

3. Facebook monetizes 2FA, Singapore monetizes hacker, and ransomware creeps monetize US Democrats
4. Telegram exposes the IP address during a user call by default

SOUTH AMERICA

Nothing to report

EUROPE

5. Estonia sues Gemalto for 152M euros over flaws in citizen ID cards issued by the company
6. Cryptomining Malware Grows by 86% in Q2: McAfee Report
7. Security Affairs newsletter Round 182 – News of the week
8. The British Airways #databreach may be the handiwork of hacking group #Magecart, according to researchers. By @MaddieBacon11

AFRICA

Nothing to report