Daily brief for 2018-10-16

ASIA

1. Russia-linked APT group DustSquad targets diplomatic entities in Central Asia
2. New ShadowTalk Episode 45 This week, CISO @rickhholland, @drshellface, & Simon Hall join Rafael Amado to cover the
3. Hackers can use known security vulnerabilities with new technology to bypass Antivirus Software
4. Line lists cryptocurrency on Bitbox exchange

WORLD

5. Russia-linked APT group DustSquad targets diplomatic entities in Central Asia
6. Author of LuminosityLink Remote Access Trojan Gets 30 Months Sentence
7. Insurer Anthem Will Pay Record $16M for Massive Data Breach
8. A Russian cyber vigilante is patching outdated MikroTik routers exposed online
9. Bug in New iOS Lets Attacker Access iPhone Pics
10. Sony Fixed PlayStation 4 Message Exploit Leasing to a DoS Condition
11. New ShadowTalk Episode 45 This week, CISO @rickhholland, @drshellface, & Simon Hall join Rafael Amado to cover the
12. Madison County computer system infected with ransomware
13. Personal Records Of 30,000 US Department Of Defense Workers Swiped By Miscreants
14. 2018 US voter records offered for sale on hacking forum
15. Recent @Proofpoint research shows that #German-speaking regions are facing targeted #phishing, #malware, and #BEC attacks.
16. 35 million US voter records available for sale in a hacking forum
17. Anthem agrees to pay $16 million in data breach privacy settlement
18. Dating App for Trump Supporters Exposed Members’ Information
19. Dating app for Trump loners commits YUGE blunder: It leaks more than the West Wing
20. Penta-gone! Personal records of 30,000 US Dept of Defense workers swiped by miscreants
21. Estimated 35 Million Voter Records For Sale on Popular Hacking Forum
22. Pentagon Travel Provider Data Breach Counts 30,000 Victims
23. UK’s MoD Exposed in 37 Security Breaches: Report
24. Report: near-400% increase in crypto-mining malware attacks against iPhones
25. Hackers can use known security vulnerabilities with new technology to bypass Antivirus Software
26. 35 million voter records from 19 states for sale on hacking forum
27. Octopus malware wraps tentacles around former Telegram users in Central Asia
28. Phishing and Facebook – a test of reputation
29. Pentagon data breach puts personal details of 30,000 staff at risk
30. Data breach in Pentagon’s service provider affected 30k people
31. NotPetya linked to the Industroyer attack against energy infrastructure in Ukraine
32. New iPhone Bug Gives Anyone Access to Your Private Photos

ATTACKS

33. Chrome 70 arrives with fingerprint login for websites, extension controls, and 23 security fixes
34. Chrome 70 released with revamped Google account login system
35. Insurer Anthem Will Pay Record $16M for Massive Data Breach
36. Pentagon data breach exposed travel data for 30,000 individuals
37. A Russian cyber vigilante is patching outdated MikroTik routers exposed online
38. A Pentagon #DataBreach exposed data on at least 30,000 individuals, but other details about the incident are still scarce. By
39. Personal Records Of 30,000 US Department Of Defense Workers Swiped By Miscreants
40. Anthem Agrees To Pay $16 Million In Data Breach Privacy Settlement
41. The Donald Daters Trump Dating App Exposed Its Users Data
42. Phishing Site Impersonates Financial Services Institution: https://www.digitalshadows.com/blog-and-research/phishing-site-impersonates-financial-services-institution/ … (via @mazzazone)
43. 2018 US voter records offered for sale on hacking forum
44. Recent @Proofpoint research shows that #German-speaking regions are facing targeted #phishing, #malware, and #BEC attacks.
45. #TLBleed exploits abuse Intel's HTT chip feature to leak data. Find out how hackers could launch side-channel attacks to obtain
46. 35 million US voter records available for sale in a hacking forum
47. Anthem agrees to pay $16 million in data breach privacy settlement
48. Dating App for Trump Supporters Exposed Members’ Information
49. After originally disclosing its latest data breach last month, Facebook revealed that hackers obtained data from some 30 million users. Here’s
50. Dating app for Trump loners commits YUGE blunder: It leaks more than the West Wing
51. Penta-gone! Personal records of 30,000 US Dept of Defense workers swiped by miscreants
52. Estimated 35 Million Voter Records For Sale on Popular Hacking Forum
53. Pentagon Travel Provider Data Breach Counts 30,000 Victims
54. UK’s MoD Exposed in 37 Security Breaches: Report
55. 35 million voter records from 19 states for sale on hacking forum
56. Pentagon data breach puts personal details of 30,000 staff at risk
57. Facebook says fewer users affected by data breach
58. Phishing and Facebook – a test of reputation
59. Pentagon data breach puts personal details of 30,000 staff at risk
60. Data breach in Pentagon’s service provider affected 30k people

THREATS

61. SAP Boosts Blockchain Integration and Customer Flexibility
62. Author of LuminosityLink Remote Access Trojan Gets 30 Months Sentence
63. [SingCERT] Alert on Multiple Vulnerabilities in PHP
64. Multiple Vulnerabilities Allow Attackers to Take Full Control of Linksys Routers
65. In County Crippled by Hurricane, Water Utility Targeted in Ransomware Attack
66. 7 Useful Android Vulnerability Scanners
67. Vulnerability Spotlight: Linksys ESeries Multiple OS Command Injection Vulnerabilities
68. .@Trustlook Labs discovered an #Android #Trojan stealing data from messaging apps. Learn what #mobilesecurity programs should look for to detect
69. Bug in New iOS Lets Attacker Access iPhone Pics
70. Malicious RTF Documents Deliver Information Stealers
71. Info of 685 Million Users at Risk Because of Multiple Branch.io XSS Flaws
72. Madison County computer system infected with ransomware
73. CVE-2018-8453 Zero-Day Flaw Exploited by FruityArmor APT
74. How to Create Blockchain Applications
75. NC Water Utility Fights Post-Hurricane Ransomware
76. Learn about the #NetSpectre vulnerability and the benefits of #ThreatModeling for cloud deployments from expert Ed Moyle of @securitycurve.
77. Recent @Proofpoint research shows that #German-speaking regions are facing targeted #phishing, #malware, and #BEC attacks.
78. Tinder profiles were 'at risk' due to XSS vulnerability
79. 685 million users may be affected by the Branch.io service XSS vulnerability
80. A “critical water utility” in a county crippled by Hurricane #Florence was hit by a #ransomware attack. The #cyberattack has
81. #Stegware: it's #Malware that uses #steganography techniques to avoid detection
82. Vulnerability Spotlight: Linksys ESeries Multiple OS Command Injection Vulnerabilities
83. Report: near-400% increase in crypto-mining malware attacks against iPhones
84. Hackers can use known security vulnerabilities with new technology to bypass Antivirus Software
85. RiskSense cloud service protects against cyber threats and vulnerabilities ahead of midterm elections
86. #Shodan, a device search engine, can help identify #ICS security vulnerabilities. Learn more about how Shodan works and how it
87. Octopus malware wraps tentacles around former Telegram users in Central Asia
88. Mikko didn't put Brain -- the first PC virus -- on his list but he did track down its authors
89. Line lists cryptocurrency on Bitbox exchange
90. "It is no secret that the #RemoteDesktop Protocol has long been a source of exploitable vulnerabilities, and it is well
91. You are who you say you are: Establishing digital trust with the blockchain
92. Now Surfing about your Favourite Celebrities can make you Vulnerable to Virus Attack
93. Malware Attack Popular Amongst the Hackers, Even though it Dips in Q2 in 2018
94. Cryptomining attacks against Apple devices increase sharply
95. APT group called #TeleBots linked to #Industroyer #malware and #NotPetya #ransomware, according to @ESET researchers. By @MaddieBacon11
96. Cybercriminals Advertising Godzilla Loader Malware On Dark Web Forums
97. 685 million users may be affected by the Branch.io service XSS vulnerability
98. Cryptojacking attacks against iPhone devices increase
99. Juniper Networks launches multiple solutions for Junos OS vulnerabilities
100. Most Important Considerations with Malware Analysis Cheats And Tools list
101. New iPhone Bug Gives Anyone Access to Your Private Photos
102. Leveraging Falcon Sandbox to Detect and Analyze Malicious PDFs Containing Zero-Day Exploits

CRIME

103. Author of LuminosityLink Remote Access Trojan Gets 30 Months Sentence
104. A Russian cyber vigilante is patching outdated MikroTik routers exposed online
105. How to Create Blockchain Applications
106. Recent @Proofpoint research shows that #German-speaking regions are facing targeted #phishing, #malware, and #BEC attacks.
107. 35 million US voter records available for sale in a hacking forum
108. Dating app for Trump loners commits YUGE blunder: It leaks more than the West Wing
109. Estimated 35 Million Voter Records For Sale on Popular Hacking Forum
110. UK’s MoD Exposed in 37 Security Breaches: Report
111. Report: near-400% increase in crypto-mining malware attacks against iPhones
112. Facebook says fewer users affected by data breach
113. Pentagon data breach puts personal details of 30,000 staff at risk

POLITICS

114. Russia-linked APT group DustSquad targets diplomatic entities in Central Asia
115. A Russian cyber vigilante is patching outdated MikroTik routers exposed online
116. Estimated 35 Million Voter Records For Sale on Popular Hacking Forum
117. UK’s MoD Exposed in 37 Security Breaches: Report
118. RiskSense cloud service protects against cyber threats and vulnerabilities ahead of midterm elections
119. Octopus malware wraps tentacles around former Telegram users in Central Asia
120. "It is no secret that the #RemoteDesktop Protocol has long been a source of exploitable vulnerabilities, and it is well

APT report for 2018-10-15

TRANSNATIONAL / UNKNOWN

1. New Gallmaker APT group eschews malware in cyber espionage campaigns
2. A week in security (October 8 – 14)
3. Gallmaker - Threat Group Targeting Governments and Militaries
4. Gallmaker threat group evades detection by living off the land
5. Stopping Hidden Threats: How to Defend Against Fileless Attacks

CHINA

Nil

INDIA

Nil

NORTH KOREA

6. Nintendo Switch Diablo III bundle launches November 2

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

7. TeleBots APT Group - Links to Industroyer, NotPetya and BlackEnergy
8. Russia-linked BlackEnergy backed new cyber attacks on Ukraine’s state bodies
9. Octopus-infested seas of Central Asia

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-10-15

WINDOWS

1. Flash Updater Adds Cryptocurrency Miner
2. New Gallmaker APT group eschews malware in cyber espionage campaigns
3. Fake Adobe update really *does* update Flash (while also installing cryptominer)
4. September 2018’s Most Wanted Malware: Cryptomining Attacks Against Apple Devices On The Rise
5. Fake Adobe update really *does* update Flash (while also installing cryptominer)
6. Octopus-infested seas of Central Asia

LINUX

Nil

UNIX

Nil

ANDROID

7. September 2018’s Most Wanted Malware: Cryptomining Attacks Against Apple Devices On The Rise
8. Octopus-infested seas of Central Asia
9. #Nymaim and #BankBot #Anubis PL campaign hxxp://przelewy24[.]ml/ hxxp://faktura24[.]cf/ SHA256: 4cb0b471a2132a747abf78214fbdbf0e8d7f44857996117bdbb266d42a277970 C2: bilagoong[.]tk @ThreatFabric @virqdroid @LukasStefanko
10. Android Apps Pretend to Mine Unmineable CryptoCurrencies to Just Show Ads
11. Google to Encrypt Android Cloud Backups With Your Lock Screen Password

IOS

12. 400 Percent Increase in Cryptocurrency Mining Attacks Against iOS Devices
13. Apple VoiceOver iOS Vulnerability Permits Hacker Access To User Photos
14. iPhone a Growing Target of Crypto-Mining Attacks
15. Apple VoiceOver iOS vulnerability permits hacker access to user photos
16. September 2018’s Most Wanted Malware: Cryptomining Attacks Against Apple Devices On The Rise

MACOS

Nil

Threat report for 2018-10-15

DATA BREACH & DATA LOSS

1. Facebook Hack Update – 30 Million Affected; More Details Exposed; No ID Protection
2. Malware Campaign Distributes Data Stealer Trojan/RAT, Circumvents Anti-Malware
3. Up to 35 Million 2018 Voter Records For Sale on Hacking Forum
4. US voter records from 19 states sold on hacking forum
5. Tens of Millions of U.S. Voter Records for Sale
6. Pentagon Defense Department travel records data breach
7. Did Jamal Khashoggi’s Apple Watch record his murder at Saudi consulate? Probably not
8. New Gallmaker APT group eschews malware in cyber espionage campaigns
9. Microsoft Incompletely Patches JET Database Vulnerability
10. Old dog, new tricks – Analysing new RTF-based campaign distributing Agent Tesla, Loki with PyREbox
11. Millions of Voter Records Found for Sale on the Dark Web
12. Pentagon reveals cyber breach of travel records
13. Pentagon Employee Data Breach, An Eye-Opener
14. Facebook opens up about data breach details
15. Facebook data breach: Victims will not be offered free identity theft protection
16. A flaw in @Google Firebase #DatabaseSecurity allowed hackers to bypass security and leak data. Learn more about this #SecurityFlaw and
17. Iceland hit by Biggest Cyber Attack on Record
18. Scottish Ambulance Service Exposed Employees’ Data Online
19. Pentagon Staff Hit by Major Data Breach
20. FitMetrix data exposed on unprotected Elasticsearch servers
21. Pentagon Data Breach Exposes up to 30,000 Travel Records
22. Iceland's largest phishing campaign imitated police
23. #Nymaim and #BankBot #Anubis PL campaign hxxp://przelewy24[.]ml/ hxxp://faktura24[.]cf/ SHA256: 4cb0b471a2132a747abf78214fbdbf0e8d7f44857996117bdbb266d42a277970 C2: bilagoong[.]tk @ThreatFabric @virqdroid @LukasStefanko
24. Old dog, new tricks - Analysing new RTF-based campaign distributing Agent Tesla, Loki with PyREbox
25. A Russian cyber vigilante is patching outdated MikroTik routers exposed online
26. FitMetrix Unprotected Passwordless Database Exposed Millions of User​ Data
27. Stringent password rules lower risk of personal data breaches
28. Branch.io Flaws Exposed Tinder, Shopify, Yelp Users to XSS Attacks

DENIAL-OF-SERVICE

Nil

MALVERTISING

Nil

PHISHING

29. Create an email phishing test to minimize attack vectors
30. Learn how we are using #MachineLearning to detect mobile #phishing attacks with @thepacketrat and @dyngnosis: https://okt.to/W29vsS @PhishingAi @arstechnica
31. Learn how hackers launched #phishing attacks against @netflix users with expert Michael Cobb of @thehairyITdog
32. Hackers could use emoji domains to spread phishing attacks
33. Iceland's largest phishing campaign imitated police
34. Stringent password rules lower risk of personal data breaches
35. According to #GroupIB experts, online market for counterfeit goods in Russia has reached $1,5 billion, while the number of phishing
36. Google to Encrypt Android Cloud Backups With Your Lock Screen Password

WEB DEFACEMENT

Nil

BOTNET

Nil

RANSOMWARE

37. Small businesses repeatedly falling victim to ransomware - Kaspersky
38. Ransomware hits computer networks of North Carolina water utility
39. Un nouveau rapport montre que les attaques par ransomware ont diminué au premier semestre 2018. Les pirates se tournent vers

CRYPTOMINING & CRYPTOCURRENCIES

40. 400 Percent Increase in Cryptocurrency Mining Attacks Against iOS Devices
41. Flash Updater Adds Cryptocurrency Miner
42. iPhone a Growing Target of Crypto-Mining Attacks
43. Economist Nouriel Roubini: Blockchain and bitcoin are the world’s biggest scams
44. Fake Adobe update really *does* update Flash (while also installing cryptominer)
45. Cryptomining Malware Infects Computers via Fake Adobe Updates
46. September 2018’s Most Wanted Malware: Cryptomining Attacks Against Apple Devices On The Rise
47. Fake Adobe update really *does* update Flash (while also installing cryptominer)
48. 'Flash update' scam serves up legit software, but with a side of cryptominer
49. How a #cryptocurrency mining #malware infects systems
50. What are blockchain’s smart contracts? And how to secure them
51. Android Apps Pretend to Mine Unmineable CryptoCurrencies to Just Show Ads
52. SpankChain hacker steals the virtual currency and returns stolen ethereum

MALWARE

53. Malware Campaign Distributes Data Stealer Trojan/RAT, Circumvents Anti-Malware
54. New Gallmaker APT group eschews malware in cyber espionage campaigns
55. Octopus Trojan exploits Telegram ban fears to snag diplomatic targets across Asia
56. At the 2018 @RSAConference, researchers discussed the rise of stegware -- #malware that uses #steganography techniques to avoid detection. Learn
57. Cryptomining Malware Infects Computers via Fake Adobe Updates
58. September 2018’s Most Wanted Malware: Cryptomining Attacks Against Apple Devices On The Rise
59. #Mobile #malware is on the rise. With mobile devices, hackers are able to access data far more sensitive than what
60. .@TrendMicro researchers discovered #FacexWorm, a #malware that uses a #ChromeExtension and @Facebook Messenger to spread. Learn which users are at
61. How does the MnuBot banking Trojan use unusual C&C servers?
62. How a #cryptocurrency mining #malware infects systems
63. @ThreatFabric Gaetan van Diemen showed us the actual situation and future predictions of Mobile Banking Malware. Thx for that awesome
64. Godzilla Loader and the Long Tail of Malware
65. Sony PS4 encounters malicious code attack and receives malicious messages

EXPLOIT

66. New Technique Recycles Exploit Chain to Keep Antivirus Silent

VULNERABILITY

67. FDA Warns of Flaws in Medtronic Programmers
68. Microsoft Incompletely Patches JET Database Vulnerability
69. Apple VoiceOver iOS Vulnerability Permits Hacker Access To User Photos
70. .@TenableSecurity research finds new exploits of an already patched #MikroTik router vulnerability that could enable hackers to launch remote code
71. Sony working on a fix for bug that's crashing PlayStation 4 consoles
72. Apple VoiceOver iOS vulnerability permits hacker access to user photos
73. Multiple Vulnerabilities Discovered in PHP Lead to Arbitrary Code Execution, DoS
74. Details of Vulnerability in Google PDFium’s JBIG2 Revealed
75. A flaw in @Google Firebase #DatabaseSecurity allowed hackers to bypass security and leak data. Learn more about this #SecurityFlaw and
76. Branch.io Flaws may have affected as many as 685 million individuals
77. Branch.io Flaws Exposed Tinder, Shopify, Yelp Users to XSS Attacks

Region brief for 2018-10-15

ASIA

1. Did Jamal Khashoggi’s Apple Watch record his murder at Saudi consulate? Probably not
2. Octopus-infested seas of Central Asia

OCEANIA

Nil

NORTH AMERICA

3. US voter records from 19 states sold on hacking forum
4. Tens of Millions of U.S. Voter Records for Sale
5. Pentagon Defense Department travel records data breach
6. FDA Warns of Flaws in Medtronic Programmers
7. Millions of Voter Records Found for Sale on the Dark Web
8. Pentagon Employee Data Breach, An Eye-Opener
9. Economist Nouriel Roubini: Blockchain and bitcoin are the world’s biggest scams
10. September 2018’s Most Wanted Malware: Cryptomining Attacks Against Apple Devices On The Rise
11. Pentagon Staff Hit by Major Data Breach
12. Pentagon Data Breach Exposes up to 30,000 Travel Records
13. Old dog, new tricks - Analysing new RTF-based campaign distributing Agent Tesla, Loki with PyREbox
14. @ThreatFabric Gaetan van Diemen showed us the actual situation and future predictions of Mobile Banking Malware. Thx for that awesome
15. Branch.io Flaws may have affected as many as 685 million individuals
16. Stopping Hidden Threats: How to Defend Against Fileless Attacks
17. SpankChain hacker steals the virtual currency and returns stolen ethereum

SOUTH AMERICA

18. A Russian cyber vigilante is patching outdated MikroTik routers exposed online

EUROPE

19. New Gallmaker APT group eschews malware in cyber espionage campaigns
20. TeleBots APT Group - Links to Industroyer, NotPetya and BlackEnergy
21. Iceland hit by Biggest Cyber Attack on Record
22. Scottish Ambulance Service Exposed Employees’ Data Online
23. Russia-linked BlackEnergy backed new cyber attacks on Ukraine’s state bodies
24. Un nouveau rapport montre que les attaques par ransomware ont diminué au premier semestre 2018. Les pirates se tournent vers
25. Octopus-infested seas of Central Asia
26. Iceland's largest phishing campaign imitated police
27. A Russian cyber vigilante is patching outdated MikroTik routers exposed online
28. According to #GroupIB experts, online market for counterfeit goods in Russia has reached $1,5 billion, while the number of phishing

AFRICA

Nil

Sector brief for 2018-10-15

HEALTHCARE

1. A week in security (October 8 – 14)

TRANSPORT

Nil

BANKING & FINANCE

2. Pentagon Defense Department travel records data breach
3. A week in security (October 8 – 14)
4. Pentagon Employee Data Breach, An Eye-Opener
5. Economist Nouriel Roubini: Blockchain and bitcoin are the world’s biggest scams
6. September 2018’s Most Wanted Malware: Cryptomining Attacks Against Apple Devices On The Rise
7. Pentagon Staff Hit by Major Data Breach
8. FitMetrix data exposed on unprotected Elasticsearch servers
9. How does the MnuBot banking Trojan use unusual C&C servers?
10. @ThreatFabric Gaetan van Diemen showed us the actual situation and future predictions of Mobile Banking Malware. Thx for that awesome
11. Stopping Hidden Threats: How to Defend Against Fileless Attacks
12. SpankChain hacker steals the virtual currency and returns stolen ethereum

INFORMATION & TELECOMMUNICATION

13. Ransomware hits computer networks of North Carolina water utility
14. Facebook Hack Update – 30 Million Affected; More Details Exposed; No ID Protection
15. A week in security (October 8 – 14)
16. Learn how we are using #MachineLearning to detect mobile #phishing attacks with @thepacketrat and @dyngnosis: https://okt.to/W29vsS @PhishingAi @arstechnica
17. Facebook opens up about data breach details
18. Facebook data breach: Victims will not be offered free identity theft protection
19. #Mobile #malware is on the rise. With mobile devices, hackers are able to access data far more sensitive than what
20. Un nouveau rapport montre que les attaques par ransomware ont diminué au premier semestre 2018. Les pirates se tournent vers
21. .@TrendMicro researchers discovered #FacexWorm, a #malware that uses a #ChromeExtension and @Facebook Messenger to spread. Learn which users are at
22. @ThreatFabric Gaetan van Diemen showed us the actual situation and future predictions of Mobile Banking Malware. Thx for that awesome
23. Stringent password rules lower risk of personal data breaches
24. According to #GroupIB experts, online market for counterfeit goods in Russia has reached $1,5 billion, while the number of phishing

FOOD

Nil

WATER

25. Ransomware hits computer networks of North Carolina water utility

ENERGY

26. TeleBots APT Group - Links to Industroyer, NotPetya and BlackEnergy

GOVERNMENT & PUBLIC SERVICE

27. Tens of Millions of U.S. Voter Records for Sale
28. A week in security (October 8 – 14)

Daily brief for 2018-10-15

ASIA

1. Did Jamal Khashoggi’s Apple Watch record his murder at Saudi consulate? Probably not
2. Octopus-infested seas of Central Asia

WORLD

3. US voter records from 19 states sold on hacking forum
4. Tens of Millions of U.S. Voter Records for Sale
5. Pentagon Defense Department travel records data breach
6. FDA Warns of Flaws in Medtronic Programmers
7. New Gallmaker APT group eschews malware in cyber espionage campaigns
8. Millions of Voter Records Found for Sale on the Dark Web
9. Pentagon Employee Data Breach, An Eye-Opener
10. Economist Nouriel Roubini: Blockchain and bitcoin are the world’s biggest scams
11. TeleBots APT Group - Links to Industroyer, NotPetya and BlackEnergy
12. September 2018’s Most Wanted Malware: Cryptomining Attacks Against Apple Devices On The Rise
13. Iceland hit by Biggest Cyber Attack on Record
14. Scottish Ambulance Service Exposed Employees’ Data Online
15. Pentagon Staff Hit by Major Data Breach
16. Russia-linked BlackEnergy backed new cyber attacks on Ukraine’s state bodies
17. Pentagon Data Breach Exposes up to 30,000 Travel Records
18. Un nouveau rapport montre que les attaques par ransomware ont diminué au premier semestre 2018. Les pirates se tournent vers
19. Octopus-infested seas of Central Asia
20. Iceland's largest phishing campaign imitated police
21. Old dog, new tricks - Analysing new RTF-based campaign distributing Agent Tesla, Loki with PyREbox
22. @ThreatFabric Gaetan van Diemen showed us the actual situation and future predictions of Mobile Banking Malware. Thx for that awesome
23. Branch.io Flaws may have affected as many as 685 million individuals
24. A Russian cyber vigilante is patching outdated MikroTik routers exposed online
25. According to #GroupIB experts, online market for counterfeit goods in Russia has reached $1,5 billion, while the number of phishing
26. Stopping Hidden Threats: How to Defend Against Fileless Attacks
27. SpankChain hacker steals the virtual currency and returns stolen ethereum

ATTACKS

28. Create an email phishing test to minimize attack vectors
29. Facebook Hack Update – 30 Million Affected; More Details Exposed; No ID Protection
30. Malware Campaign Distributes Data Stealer Trojan/RAT, Circumvents Anti-Malware
31. Up to 35 Million 2018 Voter Records For Sale on Hacking Forum
32. US voter records from 19 states sold on hacking forum
33. Tens of Millions of U.S. Voter Records for Sale
34. Pentagon Defense Department travel records data breach
35. Did Jamal Khashoggi’s Apple Watch record his murder at Saudi consulate? Probably not
36. New Gallmaker APT group eschews malware in cyber espionage campaigns
37. Microsoft Incompletely Patches JET Database Vulnerability
38. Old dog, new tricks – Analysing new RTF-based campaign distributing Agent Tesla, Loki with PyREbox
39. Millions of Voter Records Found for Sale on the Dark Web
40. Learn how we are using #MachineLearning to detect mobile #phishing attacks with @thepacketrat and @dyngnosis: https://okt.to/W29vsS @PhishingAi @arstechnica
41. Learn how hackers launched #phishing attacks against @netflix users with expert Michael Cobb of @thehairyITdog
42. Hackers could use emoji domains to spread phishing attacks
43. Pentagon reveals cyber breach of travel records
44. Pentagon Employee Data Breach, An Eye-Opener
45. Facebook opens up about data breach details
46. Facebook data breach: Victims will not be offered free identity theft protection
47. A flaw in @Google Firebase #DatabaseSecurity allowed hackers to bypass security and leak data. Learn more about this #SecurityFlaw and
48. Iceland hit by Biggest Cyber Attack on Record
49. Scottish Ambulance Service Exposed Employees’ Data Online
50. Pentagon Staff Hit by Major Data Breach
51. FitMetrix data exposed on unprotected Elasticsearch servers
52. Pentagon Data Breach Exposes up to 30,000 Travel Records
53. Iceland's largest phishing campaign imitated police
54. #Nymaim and #BankBot #Anubis PL campaign hxxp://przelewy24[.]ml/ hxxp://faktura24[.]cf/ SHA256: 4cb0b471a2132a747abf78214fbdbf0e8d7f44857996117bdbb266d42a277970 C2: bilagoong[.]tk @ThreatFabric @virqdroid @LukasStefanko
55. Old dog, new tricks - Analysing new RTF-based campaign distributing Agent Tesla, Loki with PyREbox
56. A Russian cyber vigilante is patching outdated MikroTik routers exposed online
57. FitMetrix Unprotected Passwordless Database Exposed Millions of User​ Data
58. Stringent password rules lower risk of personal data breaches
59. Branch.io Flaws Exposed Tinder, Shopify, Yelp Users to XSS Attacks
60. According to #GroupIB experts, online market for counterfeit goods in Russia has reached $1,5 billion, while the number of phishing
61. Google to Encrypt Android Cloud Backups With Your Lock Screen Password

THREATS

62. Small businesses repeatedly falling victim to ransomware - Kaspersky
63. 400 Percent Increase in Cryptocurrency Mining Attacks Against iOS Devices
64. Flash Updater Adds Cryptocurrency Miner
65. Ransomware hits computer networks of North Carolina water utility
66. Malware Campaign Distributes Data Stealer Trojan/RAT, Circumvents Anti-Malware
67. FDA Warns of Flaws in Medtronic Programmers
68. New Gallmaker APT group eschews malware in cyber espionage campaigns
69. Microsoft Incompletely Patches JET Database Vulnerability
70. Apple VoiceOver iOS Vulnerability Permits Hacker Access To User Photos
71. .@TenableSecurity research finds new exploits of an already patched #MikroTik router vulnerability that could enable hackers to launch remote code
72. iPhone a Growing Target of Crypto-Mining Attacks
73. Octopus Trojan exploits Telegram ban fears to snag diplomatic targets across Asia
74. Sony working on a fix for bug that's crashing PlayStation 4 consoles
75. Economist Nouriel Roubini: Blockchain and bitcoin are the world’s biggest scams
76. At the 2018 @RSAConference, researchers discussed the rise of stegware -- #malware that uses #steganography techniques to avoid detection. Learn
77. Fake Adobe update really *does* update Flash (while also installing cryptominer)
78. Apple VoiceOver iOS vulnerability permits hacker access to user photos
79. Cryptomining Malware Infects Computers via Fake Adobe Updates
80. September 2018’s Most Wanted Malware: Cryptomining Attacks Against Apple Devices On The Rise
81. Fake Adobe update really *does* update Flash (while also installing cryptominer)
82. Multiple Vulnerabilities Discovered in PHP Lead to Arbitrary Code Execution, DoS
83. Details of Vulnerability in Google PDFium’s JBIG2 Revealed
84. A flaw in @Google Firebase #DatabaseSecurity allowed hackers to bypass security and leak data. Learn more about this #SecurityFlaw and
85. #Mobile #malware is on the rise. With mobile devices, hackers are able to access data far more sensitive than what
86. Un nouveau rapport montre que les attaques par ransomware ont diminué au premier semestre 2018. Les pirates se tournent vers
87. .@TrendMicro researchers discovered #FacexWorm, a #malware that uses a #ChromeExtension and @Facebook Messenger to spread. Learn which users are at
88. 'Flash update' scam serves up legit software, but with a side of cryptominer
89. How does the MnuBot banking Trojan use unusual C&C servers?
90. How a #cryptocurrency mining #malware infects systems
91. @ThreatFabric Gaetan van Diemen showed us the actual situation and future predictions of Mobile Banking Malware. Thx for that awesome
92. Branch.io Flaws may have affected as many as 685 million individuals
93. Godzilla Loader and the Long Tail of Malware
94. Branch.io Flaws Exposed Tinder, Shopify, Yelp Users to XSS Attacks
95. What are blockchain’s smart contracts? And how to secure them
96. Android Apps Pretend to Mine Unmineable CryptoCurrencies to Just Show Ads
97. SpankChain hacker steals the virtual currency and returns stolen ethereum
98. Sony PS4 encounters malicious code attack and receives malicious messages

CRIME

99. Online ads: a potential way in for XSS attacks
100. Facebook data breach: Victims will not be offered free identity theft protection
101. September 2018’s Most Wanted Malware: Cryptomining Attacks Against Apple Devices On The Rise
102. Octopus-infested seas of Central Asia
103. Iceland's largest phishing campaign imitated police
104. 'Flash update' scam serves up legit software, but with a side of cryptominer
105. Old dog, new tricks - Analysing new RTF-based campaign distributing Agent Tesla, Loki with PyREbox
106. A Russian cyber vigilante is patching outdated MikroTik routers exposed online
107. SpankChain hacker steals the virtual currency and returns stolen ethereum

POLITICS

108. Pentagon Defense Department travel records data breach
109. New Gallmaker APT group eschews malware in cyber espionage campaigns
110. A week in security (October 8 – 14)
111. Gallmaker - Threat Group Targeting Governments and Militaries
112. Octopus-infested seas of Central Asia
113. Old dog, new tricks - Analysing new RTF-based campaign distributing Agent Tesla, Loki with PyREbox
114. A Russian cyber vigilante is patching outdated MikroTik routers exposed online

APT report for 2018-10-14

TRANSNATIONAL / UNKNOWN

1. DDoS Attacks Hit Games Like Assassin’s Creed and Final Fantasy XIV
2. Security Affairs newsletter Round 184 – News of the week

CHINA

Nil

INDIA

Nil

NORTH KOREA

Nil

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

3. Security Affairs newsletter Round 184 – News of the week

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-10-14

WINDOWS

1. Microsoft fixed the Zero-Day for JET flaw, but the fix is incomplete
2. Microsoft patch for JET flaw zero-day is ‘incomplete,’ Windows still vulnerable
3. Expert released PoC Code Microsoft Edge Remote Code Execution flaw
4. Exploiting Windows Using Microsoft Office DDE Exploit (MACROLESS)

LINUX

Nil

UNIX

Nil

ANDROID

5. .@ThreatFabric researchers uncovered a #malware that uses overlay techniques to avoid detection. Learn from @lewisnic how this new #Androidmalware --

IOS

Nil

MACOS

Nil

Threat report for 2018-10-14

DATA BREACH & DATA LOSS

1. My Health Record privacy amendments 'woefully inadequate': Labor
2. #NetSpectre exploits speculative execution to leak data remotely via side-channel attacks. Learn how this #SecurityVulnerability affects the #cloud from expert
3. Web Hosting Provider Suffers Data Breach Second Time in a Year
4. Find out how #TLBleed abuses @Intel's HTT chip feature to leak data via TLB
5. Microsoft still has not completely solved the Microsoft JET database engine vulnerability
6. See how SearchLight identifies when your data is exposed, your brand is abused, or your company is mentioned on the
7. Pentagon Discloses Data Breach, More Than 30,000 Workers Have Affected
8. A @Google security audit uncovered a glitch in #GooglePlus that exposed data from nearly 500,000 accounts, causing the company to
9. PHASE 4 – INFORMATION GATHERING AND PLANNING Meet Eric, a control systems engineer working for a third-party integrator. He’s guy who uploaded

DENIAL-OF-SERVICE

10. DDoS Attacks Hit Games Like Assassin’s Creed and Final Fantasy XIV

MALVERTISING

Nil

PHISHING

Nil

WEB DEFACEMENT

Nil

BOTNET

Nil

RANSOMWARE

11. New @ESET research finds APT group dubbed #TeleBots was behind #Industroyer #malware attacks, #NotPetya #ransomware outbreaks, and a recent Exaramel

CRYPTOMINING & CRYPTOCURRENCIES

12. Fake Flash Updates pushing Malware to Inject XMRig Cryptocurrency Miners

MALWARE

13. Week in review: Enterprise cybersecurity PKIs, keeping your cloud malware-free
14. New @ESET research finds APT group dubbed #TeleBots was behind #Industroyer #malware attacks, #NotPetya #ransomware outbreaks, and a recent Exaramel
15. .@ThreatFabric researchers uncovered a #malware that uses overlay techniques to avoid detection. Learn from @lewisnic how this new #Androidmalware --
16. At the 2018 @RSAConference, researchers discussed the rise of stegware -- #malware that uses #steganography techniques to avoid detection. Learn
17. How a remote access #Trojan checks for
18. Fake Flash Updates pushing Malware to Inject XMRig Cryptocurrency Miners

EXPLOIT

19. Expert released PoC Code Microsoft Edge Remote Code Execution flaw
20. Exploiting Windows Using Microsoft Office DDE Exploit (MACROLESS)

VULNERABILITY

21. Microsoft fixed the Zero-Day for JET flaw, but the fix is incomplete
22. A2SV – SSL Vulnerability Analysis Tool
23. Microsoft patch for JET flaw zero-day is ‘incomplete,’ Windows still vulnerable
24. Microsoft still has not completely solved the Microsoft JET database engine vulnerability
25. Expert released PoC Code Microsoft Edge Remote Code Execution flaw

Region brief for 2018-10-14

ASIA

Nil

OCEANIA

1. My Health Record privacy amendments 'woefully inadequate': Labor

NORTH AMERICA

2. Security Affairs newsletter Round 184 – News of the week
3. Expert released PoC Code Microsoft Edge Remote Code Execution flaw
4. Pentagon Discloses Data Breach, More Than 30,000 Workers Have Affected

SOUTH AMERICA

Nil

EUROPE

5. Week in review: Enterprise cybersecurity PKIs, keeping your cloud malware-free
6. Web Hosting Provider Suffers Data Breach Second Time in a Year
7. A @Google security audit uncovered a glitch in #GooglePlus that exposed data from nearly 500,000 accounts, causing the company to

AFRICA

8. Web Hosting Provider Suffers Data Breach Second Time in a Year

Sector brief for 2018-10-14

HEALTHCARE

Nil

TRANSPORT

Nil

BANKING & FINANCE

1. Web Hosting Provider Suffers Data Breach Second Time in a Year
2. Security Affairs newsletter Round 184 – News of the week
3. Pentagon Discloses Data Breach, More Than 30,000 Workers Have Affected

INFORMATION & TELECOMMUNICATION

4. Security Affairs newsletter Round 184 – News of the week
5. Expert released PoC Code Microsoft Edge Remote Code Execution flaw
6. See how SearchLight identifies when your data is exposed, your brand is abused, or your company is mentioned on the
7. PHASE 4 – INFORMATION GATHERING AND PLANNING Meet Eric, a control systems engineer working for a third-party integrator. He’s guy who uploaded

FOOD

Nil

WATER

Nil

ENERGY

8. Week in review: Enterprise cybersecurity PKIs, keeping your cloud malware-free

GOVERNMENT & PUBLIC SERVICE

Nil

Daily brief for 2018-10-14

ASIA

Nil

WORLD

1. My Health Record privacy amendments 'woefully inadequate': Labor
2. Week in review: Enterprise cybersecurity PKIs, keeping your cloud malware-free
3. Web Hosting Provider Suffers Data Breach Second Time in a Year
4. Security Affairs newsletter Round 184 – News of the week
5. Expert released PoC Code Microsoft Edge Remote Code Execution flaw
6. Pentagon Discloses Data Breach, More Than 30,000 Workers Have Affected
7. A @Google security audit uncovered a glitch in #GooglePlus that exposed data from nearly 500,000 accounts, causing the company to

ATTACKS

8. My Health Record privacy amendments 'woefully inadequate': Labor
9. #NetSpectre exploits speculative execution to leak data remotely via side-channel attacks. Learn how this #SecurityVulnerability affects the #cloud from expert
10. Web Hosting Provider Suffers Data Breach Second Time in a Year
11. Find out how #TLBleed abuses @Intel's HTT chip feature to leak data via TLB
12. Microsoft still has not completely solved the Microsoft JET database engine vulnerability
13. See how SearchLight identifies when your data is exposed, your brand is abused, or your company is mentioned on the
14. Pentagon Discloses Data Breach, More Than 30,000 Workers Have Affected
15. A @Google security audit uncovered a glitch in #GooglePlus that exposed data from nearly 500,000 accounts, causing the company to
16. PHASE 4 – INFORMATION GATHERING AND PLANNING Meet Eric, a control systems engineer working for a third-party integrator. He’s guy who uploaded

THREATS

17. Microsoft fixed the Zero-Day for JET flaw, but the fix is incomplete
18. Week in review: Enterprise cybersecurity PKIs, keeping your cloud malware-free
19. A2SV – SSL Vulnerability Analysis Tool
20. New @ESET research finds APT group dubbed #TeleBots was behind #Industroyer #malware attacks, #NotPetya #ransomware outbreaks, and a recent Exaramel
21. .@ThreatFabric researchers uncovered a #malware that uses overlay techniques to avoid detection. Learn from @lewisnic how this new #Androidmalware --
22. Microsoft patch for JET flaw zero-day is ‘incomplete,’ Windows still vulnerable
23. At the 2018 @RSAConference, researchers discussed the rise of stegware -- #malware that uses #steganography techniques to avoid detection. Learn
24. Microsoft still has not completely solved the Microsoft JET database engine vulnerability
25. Expert released PoC Code Microsoft Edge Remote Code Execution flaw
26. How a remote access #Trojan checks for
27. Fake Flash Updates pushing Malware to Inject XMRig Cryptocurrency Miners

CRIME

28. Security Affairs newsletter Round 184 – News of the week
29. Expert released PoC Code Microsoft Edge Remote Code Execution flaw

POLITICS

30. Security Affairs newsletter Round 184 – News of the week
31. Pentagon Discloses Data Breach, More Than 30,000 Workers Have Affected

APT report for 2018-10-13

TRANSNATIONAL / UNKNOWN

Nil

CHINA

Nil

INDIA

Nil

NORTH KOREA

Nil

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

1. Security researchers found that Industroyer and NotPetya belong to the Russian hacker group

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-10-13

WINDOWS

1. Microsoft Fix for Windows JET Database Bug Not Perfect, Micropatch Available

LINUX

Nil

UNIX

Nil

ANDROID

2. GPlayed – New Malware Posed as Google Play App to Spy & Steal Data From Your Entire Android Phone

IOS

Nil

MACOS

Nil

Threat report for 2018-10-13

DATA BREACH & DATA LOSS

1. Pentagon Defense Department travel records data breach
2. A combination of #SecurityFlaws and inadequate back-end development of the @Google Firebase database led to #DataLeaks and #SecurityVulnerabilities including HospitalGown.
3. 'Only' 30 million accounts were compromised in Facebook hack
4. Researchers @proofpoint have been tracking a downloader dubbed #AdvisorsBot as a first-stage payload in campaigns since May 2018.
5. Facebook Clarifies Extent of Data Breach
6. An Assessment of Google's Data Leak
7. ArangoDB v3.3.18 releases: native multi-model database
8. Facebook Now Revealed Hackers Stolen 29 Million Facebook Users Personal Data
9. Microsoft Fix for Windows JET Database Bug Not Perfect, Micropatch Available
10. Breach of Pentagon travel records exposes defense personnel PII

DENIAL-OF-SERVICE

Nil

MALVERTISING

Nil

PHISHING

11. Hackers launched @netflix #phishing attacks by obtaining TLS certificates. Learn how hackers mimic popular websites to spoof users and steal
12. This skyscraper reminds me of those really long ANSI art BBS login screens. Cc: @sixteencolors @blocktronics @velikani

WEB DEFACEMENT

Nil

BOTNET

Nil

RANSOMWARE

13. [SingCERT] Updated Advisory on Ransomware
14. APT group called #TeleBots linked to #Industroyer #malware and #NotPetya #ransomware, according to @ESET researchers. By @MaddieBacon11

CRYPTOMINING & CRYPTOCURRENCIES

15. Criminals' Cryptocurrency Addiction Continues
16. .@alienvault researchers recently discovered #MassMiner, a #cryptocurrency mining #malware that has the ability to infect systems across the web. Discover
17. Cryptocurrency Miners trick the user through Fake Flash Updates
18. Blockchain and Healthcare in Today’s World

MALWARE

19. GPlayed – New Malware Posed as Google Play App to Spy & Steal Data From Your Entire Android Phone
20. Researchers @proofpoint have been tracking a downloader dubbed #AdvisorsBot as a first-stage payload in campaigns since May 2018.
21. .@alienvault researchers recently discovered #MassMiner, a #cryptocurrency mining #malware that has the ability to infect systems across the web. Discover
22. Hackers use Googlebot in mining malware attacks
23. Researchers at @TrendMicro found a new strain of #malware -- dubbed #FacexWorm -- that targets users through a malicious #ChromeExtension.
24. APT group called #TeleBots linked to #Industroyer #malware and #NotPetya #ransomware, according to @ESET researchers. By @MaddieBacon11

EXPLOIT

Nil

VULNERABILITY

25. Now this might be going out on a limb, but here's how a branch.io bug left '685 million' netizens open to website hacks
26. Review Shows Glaring Flaws In Xiongmai IoT Devices
27. Microsoft JET vulnerability still open to attacks, despite recent patch
28. DOM-based XSS Vulnerability Affected 685 Million Users of Tinder, Shopify, Western Union, and Imgur
29. A patched #MikroTik router vulnerability amps up severity rating as @TenableSecurity researchers find new potential exploits with more critical consequences.
30. Microsoft Fix for Windows JET Database Bug Not Perfect, Micropatch Available
31. Vulnerabilities affect Shopify, Tinder and many other sites

Region brief for 2018-10-13

ASIA

1. Review Shows Glaring Flaws In Xiongmai IoT Devices

OCEANIA

2. Security researchers found that Industroyer and NotPetya belong to the Russian hacker group

NORTH AMERICA

3. Pentagon Defense Department travel records data breach

SOUTH AMERICA

Nil

EUROPE

4. Security researchers found that Industroyer and NotPetya belong to the Russian hacker group

AFRICA

Nil