Threat report for 2018-10-18

DATA BREACH & DATA LOSS

1. 35 Million Records Of US Voters Data For Sale On The Dark Web
2. Thousands of Neoflam Clients Had Their Data Leaked After Buying Frying Pans
3. Tracking Tick Through Recent Campaigns Targeting East Asia
4. Cyber Espionage Campaign Reuses Code from China's APT1
5. The #NetSpectre vulnerability could enable a slow leak of data remotely via side channels. Expert Michael Cobb of @thehairyITdog explains
6. Tumblr Privacy Bug Could Have Exposed Sensitive Account Data
7. Apple to US users: Here's how you can now see what personal data we hold on you
8. Open source web hosting software compromised with DDoS malware
9. Anthem Settles with OCR for $16M for 2015 Data Breach
10. Card Factory Exposed Customers Photos Publicly Due To A Website Flaw
11. Hackers can use legitimate #AdminTools to compromise networks. Learn more about "living off the land" attacks from expert Michael Cobb
12. Tumblr patches bug that could have exposed user data
13. 12.5 Million Email Archives Exposed - Why would #cybercriminals go to a #darkweb market and pay for access when they
14. #NetSpectre exploits leak data remotely via side-channel attacks. Learn how to use #ThreatModeling to stop speculative execution from expert Ed
15. Tracking Tick Through Recent Campaigns Targeting East Asia
16. McAfee researchers uncover ‘significant’ espionage campaign
17. Apple to US users: Here's how you can now see what personal data we hold on you
18. Tumblr Fixes Security Bug that Leaked Private Account Info
19. Tumblr fixed a #vulnerability that could have exposed sensitive account #data, including usernames/passwords and individual IP addresses. But the company
20. The #TLBleed vulnerability uses @Intel's HTT chip feature to leak data. Learn about how hackers could use #malware to launch
21. VestaCP compromised in a new supply-chain attack
22. VestaCP compromised in a new supply-chain attack
23. Anthem to pay record £12M for 2015 data breach
24. Around 600 Computers of Anne Arundel County Public Library have been Exposed to Emotet Virus
25. In the wake of numerous high-profile data breaches and privacy incidents, consumers are more aware and concerned than ever about
26. Senate inquiry recommends locking down My Health Record by default
27. Tumblr Vulnerability Exposed User Account Information
28. The Equifax Hack Uploaded Files the Right Way
29. Bug Trio Affecting Eight D-Link Models Leads to Full Compromise
30. SEO pollution campaign affects web searches related to EU midterm elections

DENIAL-OF-SERVICE

31. Open source web hosting software compromised with DDoS malware
32. Who and Why Make DDoS Attacks on The Site of Colleges and Universities ?
33. A10 Networks provides cloud, Internet and gaming providers with 1 RU DDoS defense appliance

MALVERTISING

Nil

PHISHING

34. The libssh “login with no password” bug – what you need to know [VIDEO]

WEB DEFACEMENT

Nil

BOTNET

35. After an attempted comeback by the Russian built #VPNFilter #botnet, home #networkdevices are at risk. Learn how this #malware targets
36. How does the resurgent VPNFilter botnet target victims?

RANSOMWARE

37. 7 best practices for negotiating ransomware payments

CRYPTOMINING & CRYPTOCURRENCIES

38. Fake Adobe Flash update hides cryptocurrency malware
39. Crooks are attempting to spread their cryptojacking malware to unsuspecting victims by disguising it as an update for Flash. The malicious
40. Top 10 Blockchain Development Companies
41. Crypto Mining Malware Runs on iPhone
42. Cryptocurrency Miners Hiding As Flash Updates
43. Cryptomining Malware Attacks On iPhones Grew By 400%
44. Hacking Attacks On Cryptocurrency Exchanges Resulted in a Loss of $882 Million
45. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
46. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
47. LuminosityLink spyware mastermind gets 30 months in the clink, forfeits $725k in Bitcoin
48. Researcher Livestreams 51% Attack on Altcoin Blockchain
49. Cryptojacking: A hidden cost for your company
50. Report: Cryptocurrency Exchanges Lost $882 Million to Hackers

MALWARE

51. Fake Adobe Flash update hides cryptocurrency malware
52. After an attempted comeback by the Russian built #VPNFilter #botnet, home #networkdevices are at risk. Learn how this #malware targets
53. Open source web hosting software compromised with DDoS malware
54. LuminosityLink Spyware Mastermind Gets 30 Months In The Clink
55. Crooks are attempting to spread their cryptojacking malware to unsuspecting victims by disguising it as an update for Flash. The malicious
56. Crypto Mining Malware Runs on iPhone
57. GPlayed Trojan - .Net Playing with Google Market
58. Cryptomining Malware Attacks On iPhones Grew By 400%
59. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
60. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
61. LuminosityLink spyware mastermind gets 30 months in the clink, forfeits $725k in Bitcoin
62. The #TLBleed vulnerability uses @Intel's HTT chip feature to leak data. Learn about how hackers could use #malware to launch
63. XBash Malware Security Advisory
64. The author of the LuminosityLink RAT sentenced to 30 Months in Prison
65. Stegware: How is #malware using #steganography techniques to avoid detection?
66. Around 600 Computers of Anne Arundel County Public Library have been Exposed to Emotet Virus
67. In order to distribute the attack payload, the code needs to be downloaded onto the PLCs & safety controllers. This

EXPLOIT

Nil

VULNERABILITY

68. GitHub now warns devs about bugs that led to Equifax breach
69. Flaws in telepresence robots allow hackers access to pictures, video feeds
70. Branch.io Flaws may have affected as many as 685 million individuals
71. Critical Remote Code Execution Vulnerabilities Patched by Drupal
72. Code Execution Vulnerability Patched in Library Used by VLC, Other Media Players
73. Flaws Open Telepresence Robots to Prying Eyes
74. [SingCERT] Alert on Multiple Security Vulnerabilities in Oracle's Enterprise Products
75. The #NetSpectre vulnerability could enable a slow leak of data remotely via side channels. Expert Michael Cobb of @thehairyITdog explains
76. A newly disclosed #libSSH vulnerability could allow an attacker #AdminAccess to a server with little effort. By @MT_Heller
77. Drupal addresses multiple critical flaws with latest release
78. Tumblr Privacy Bug Could Have Exposed Sensitive Account Data
79. CVE-2018-8460: Exposing a Double Free in Internet Explorer for Code Execution
80. Wapiti – The Black Box Vulnerability Scanner for Web Applications
81. Vulnerability Spotlight: Live Networks LIVE555 streaming media RTSPServer code execution vulnerability
82. The libssh “login with no password” bug – what you need to know [VIDEO]
83. Card Factory Exposed Customers Photos Publicly Due To A Website Flaw
84. How Shodan helps identify ICS cybersecurity vulnerabilities
85. Oracle extends its thanks to Qihoo 360 for fixing the vulnerabilities of Weblogic
86. Tumblr patches bug that could have exposed user data
87. [SingCERT] Alert on Linksys E Series Routers Vulnerabilities (CVE-2018-3953, CVE-2018-3954, and CVE-2018-3955)
88. Apache Access Vulnerability Could Affect Thousands of Applications
89. Last year, D-Link flubbed a router bug-fix, so it's back with total pwnage
90. Party like it's 1989... SVGA code bug haunts VMware's house, lets guests flee to host OS
91. Oracle Patches 301 Vulnerabilities in October Update
92. Tumblr Fixes Security Bug that Leaked Private Account Info
93. Ruby 2.4.5 released: 40 bug fixes
94. Tumblr fixed a #vulnerability that could have exposed sensitive account #data, including usernames/passwords and individual IP addresses. But the company
95. The #TLBleed vulnerability uses @Intel's HTT chip feature to leak data. Learn about how hackers could use #malware to launch
96. New libSSH vulnerability gives root access to servers
97. A 4-year-old #libSSH vulnerability can allow attackers to easily log in to servers with full administrative control, but it is
98. The implications of the NetSpectre vulnerability
99. #Shodan can be a helpful tool for security professionals to locate #ICSsecurity vulnerabilities. Expert Ernie Hayden explains how Shodan works
100. Oracle security updates contains 45 critical-rated vulnerability
101. A #libSSH vulnerability that went undisclosed for almost five years could allow an attacker easy #AdminAccess to servers, @0xAmit said
102. Vulnerability Spotlight: Live Networks LIVE555 streaming media RTSPServer code execution vulnerability
103. Chaining three critical vulnerabilities allows takeover of D-Link routers
104. Tumblr Fixes Critical Security Bug That Exposes User Account Details
105. Tumblr Vulnerability Exposed User Account Information
106. Bug Trio Affecting Eight D-Link Models Leads to Full Compromise

Region brief for 2018-10-18

ASIA

1. Threat Report: BlackEnergy APT Group Becomes GreyEnergy
2. GreyEnergy cyberespionage group targets Poland and Ukraine
3. Tracking Tick Through Recent Campaigns Targeting East Asia
4. Cyber Espionage Campaign Reuses Code from China's APT1
5. Oceansalt cyberattack wave linked to defunct Chinese APT Comment Crew
6. Oceansalt Linked To Defunct Chinese APT Comment Crew
7. Group-IB: 14 cyber attacks on crypto exchanges resulted in a loss of $882 million
8. Hacking Attacks On Cryptocurrency Exchanges Resulted in a Loss of $882 Million
9. 'Operation Oceansalt' Reuses Code from Chinese Group APT1
10. Oracle extends its thanks to Qihoo 360 for fixing the vulnerabilities of Weblogic
11. Tracking Tick Through Recent Campaigns Targeting East Asia
12. XBash Malware Security Advisory
13. Operation Oceansalt research reveals cyber-attacks targeting South Korea, USA and Canada
14. Targeted attacks on crypto exchanges resulted in a loss of $882 million
15. The Equifax Hack Uploaded Files the Right Way
16. Oceansalt cyberattack wave linked to defunct Chinese APT Comment Crew
17. ‘Operation Oceansalt’ Delivers Wave After Wave
18. New Reconnaissance Tool Uses Code from Eight-Year-Old Comment Crew Implant

OCEANIA

19. Threat Report: BlackEnergy APT Group Becomes GreyEnergy
20. Thousands of Neoflam Clients Had Their Data Leaked After Buying Frying Pans
21. The author of the LuminosityLink RAT sentenced to 30 Months in Prison
22. Senate inquiry recommends locking down My Health Record by default

NORTH AMERICA

23. Threat Report: BlackEnergy APT Group Becomes GreyEnergy
24. Branch.io Flaws may have affected as many as 685 million individuals
25. 35 Million Records Of US Voters Data For Sale On The Dark Web
26. Cyber Espionage Campaign Reuses Code from China's APT1
27. Apple to US users: Here's how you can now see what personal data we hold on you
28. CVE-2018-8460: Exposing a Double Free in Internet Explorer for Code Execution
29. New Pennsylvania Law Imposes Fine for Using Drones to Spy
30. Oceansalt cyberattack wave linked to defunct Chinese APT Comment Crew
31. Crypto Mining Malware Runs on iPhone
32. 'Operation Oceansalt' Reuses Code from Chinese Group APT1
33. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
34. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
35. Apple to US users: Here's how you can now see what personal data we hold on you
36. XBash Malware Security Advisory
37. Anthem to pay record £12M for 2015 data breach
38. The author of the LuminosityLink RAT sentenced to 30 Months in Prison
39. Operation Oceansalt research reveals cyber-attacks targeting South Korea, USA and Canada
40. ‘Operation Oceansalt’ Delivers Wave After Wave
41. SEO pollution campaign affects web searches related to EU midterm elections
42. New Reconnaissance Tool Uses Code from Eight-Year-Old Comment Crew Implant

SOUTH AMERICA

Nil

EUROPE

43. Threat Report: BlackEnergy APT Group Becomes GreyEnergy
44. GreyEnergy cyberespionage group targets Poland and Ukraine
45. After an attempted comeback by the Russian built #VPNFilter #botnet, home #networkdevices are at risk. Learn how this #malware targets
46. GreyEnergy Potential Successor of BlackEnergy
47. The author of the LuminosityLink RAT sentenced to 30 Months in Prison
48. Chaining three critical vulnerabilities allows takeover of D-Link routers

AFRICA

49. The author of the LuminosityLink RAT sentenced to 30 Months in Prison

Sector brief for 2018-10-18

HEALTHCARE

1. Anthem to pay record £12M for 2015 data breach

TRANSPORT

Nil

BANKING & FINANCE

2. Anthem Settles with OCR for $16M for 2015 Data Breach
3. Top 10 Blockchain Development Companies
4. Group-IB: 14 cyber attacks on crypto exchanges resulted in a loss of $882 million

INFORMATION & TELECOMMUNICATION

5. Tumblr Privacy Bug Could Have Exposed Sensitive Account Data
6. CVE-2018-8460: Exposing a Double Free in Internet Explorer for Code Execution
7. Group-IB: 14 cyber attacks on crypto exchanges resulted in a loss of $882 million
8. Tumblr patches bug that could have exposed user data
9. [SingCERT] Alert on Linksys E Series Routers Vulnerabilities (CVE-2018-3953, CVE-2018-3954, and CVE-2018-3955)
10. 12.5 Million Email Archives Exposed - Why would #cybercriminals go to a #darkweb market and pay for access when they
11. Tumblr Fixes Security Bug that Leaked Private Account Info
12. Tumblr fixed a #vulnerability that could have exposed sensitive account #data, including usernames/passwords and individual IP addresses. But the company
13. In the wake of numerous high-profile data breaches and privacy incidents, consumers are more aware and concerned than ever about
14. Report: Cryptocurrency Exchanges Lost $882 Million to Hackers
15. Tumblr Fixes Critical Security Bug That Exposes User Account Details
16. Tumblr Vulnerability Exposed User Account Information
17. Who and Why Make DDoS Attacks on The Site of Colleges and Universities ?

FOOD

Nil

WATER

Nil

ENERGY

18. Threat Report: BlackEnergy APT Group Becomes GreyEnergy
19. GreyEnergy cyberespionage group targets Poland and Ukraine
20. New Pennsylvania Law Imposes Fine for Using Drones to Spy
21. GreyEnergy Potential Successor of BlackEnergy

GOVERNMENT & PUBLIC SERVICE

22. Threat Report: BlackEnergy APT Group Becomes GreyEnergy
23. 35 Million Records Of US Voters Data For Sale On The Dark Web
24. Cyber Espionage Campaign Reuses Code from China's APT1
25. New Pennsylvania Law Imposes Fine for Using Drones to Spy
26. Oceansalt cyberattack wave linked to defunct Chinese APT Comment Crew
27. Operation Oceansalt research reveals cyber-attacks targeting South Korea, USA and Canada
28. Oceansalt cyberattack wave linked to defunct Chinese APT Comment Crew
29. SEO pollution campaign affects web searches related to EU midterm elections

Daily brief for 2018-10-18

ASIA

1. Threat Report: BlackEnergy APT Group Becomes GreyEnergy
2. GreyEnergy cyberespionage group targets Poland and Ukraine
3. Tracking Tick Through Recent Campaigns Targeting East Asia
4. Cyber Espionage Campaign Reuses Code from China's APT1
5. Oceansalt cyberattack wave linked to defunct Chinese APT Comment Crew
6. Oceansalt Linked To Defunct Chinese APT Comment Crew
7. Group-IB: 14 cyber attacks on crypto exchanges resulted in a loss of $882 million
8. Hacking Attacks On Cryptocurrency Exchanges Resulted in a Loss of $882 Million
9. 'Operation Oceansalt' Reuses Code from Chinese Group APT1
10. Oracle extends its thanks to Qihoo 360 for fixing the vulnerabilities of Weblogic
11. Tracking Tick Through Recent Campaigns Targeting East Asia
12. XBash Malware Security Advisory
13. Operation Oceansalt research reveals cyber-attacks targeting South Korea, USA and Canada
14. Targeted attacks on crypto exchanges resulted in a loss of $882 million
15. The Equifax Hack Uploaded Files the Right Way
16. Oceansalt cyberattack wave linked to defunct Chinese APT Comment Crew
17. ‘Operation Oceansalt’ Delivers Wave After Wave
18. New Reconnaissance Tool Uses Code from Eight-Year-Old Comment Crew Implant

WORLD

19. Threat Report: BlackEnergy APT Group Becomes GreyEnergy
20. Branch.io Flaws may have affected as many as 685 million individuals
21. GreyEnergy cyberespionage group targets Poland and Ukraine
22. 35 Million Records Of US Voters Data For Sale On The Dark Web
23. Thousands of Neoflam Clients Had Their Data Leaked After Buying Frying Pans
24. Cyber Espionage Campaign Reuses Code from China's APT1
25. After an attempted comeback by the Russian built #VPNFilter #botnet, home #networkdevices are at risk. Learn how this #malware targets
26. Apple to US users: Here's how you can now see what personal data we hold on you
27. CVE-2018-8460: Exposing a Double Free in Internet Explorer for Code Execution
28. New Pennsylvania Law Imposes Fine for Using Drones to Spy
29. GreyEnergy Potential Successor of BlackEnergy
30. Oceansalt cyberattack wave linked to defunct Chinese APT Comment Crew
31. Crypto Mining Malware Runs on iPhone
32. 'Operation Oceansalt' Reuses Code from Chinese Group APT1
33. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
34. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
35. Apple to US users: Here's how you can now see what personal data we hold on you
36. XBash Malware Security Advisory
37. Anthem to pay record £12M for 2015 data breach
38. The author of the LuminosityLink RAT sentenced to 30 Months in Prison
39. Operation Oceansalt research reveals cyber-attacks targeting South Korea, USA and Canada
40. Chaining three critical vulnerabilities allows takeover of D-Link routers
41. Senate inquiry recommends locking down My Health Record by default
42. ‘Operation Oceansalt’ Delivers Wave After Wave
43. SEO pollution campaign affects web searches related to EU midterm elections
44. New Reconnaissance Tool Uses Code from Eight-Year-Old Comment Crew Implant

ATTACKS

45. 35 Million Records Of US Voters Data For Sale On The Dark Web
46. Thousands of Neoflam Clients Had Their Data Leaked After Buying Frying Pans
47. Tracking Tick Through Recent Campaigns Targeting East Asia
48. Cyber Espionage Campaign Reuses Code from China's APT1
49. The #NetSpectre vulnerability could enable a slow leak of data remotely via side channels. Expert Michael Cobb of @thehairyITdog explains
50. Tumblr Privacy Bug Could Have Exposed Sensitive Account Data
51. Apple to US users: Here's how you can now see what personal data we hold on you
52. Open source web hosting software compromised with DDoS malware
53. Anthem Settles with OCR for $16M for 2015 Data Breach
54. The libssh “login with no password” bug – what you need to know [VIDEO]
55. Card Factory Exposed Customers Photos Publicly Due To A Website Flaw
56. Hackers can use legitimate #AdminTools to compromise networks. Learn more about "living off the land" attacks from expert Michael Cobb
57. Tumblr patches bug that could have exposed user data
58. 12.5 Million Email Archives Exposed - Why would #cybercriminals go to a #darkweb market and pay for access when they
59. #NetSpectre exploits leak data remotely via side-channel attacks. Learn how to use #ThreatModeling to stop speculative execution from expert Ed
60. Tracking Tick Through Recent Campaigns Targeting East Asia
61. McAfee researchers uncover ‘significant’ espionage campaign
62. Apple to US users: Here's how you can now see what personal data we hold on you
63. Tumblr Fixes Security Bug that Leaked Private Account Info
64. Tumblr fixed a #vulnerability that could have exposed sensitive account #data, including usernames/passwords and individual IP addresses. But the company
65. The #TLBleed vulnerability uses @Intel's HTT chip feature to leak data. Learn about how hackers could use #malware to launch
66. VestaCP compromised in a new supply-chain attack
67. VestaCP compromised in a new supply-chain attack
68. Anthem to pay record £12M for 2015 data breach
69. Around 600 Computers of Anne Arundel County Public Library have been Exposed to Emotet Virus
70. In the wake of numerous high-profile data breaches and privacy incidents, consumers are more aware and concerned than ever about
71. Senate inquiry recommends locking down My Health Record by default
72. Tumblr Vulnerability Exposed User Account Information
73. The Equifax Hack Uploaded Files the Right Way
74. Bug Trio Affecting Eight D-Link Models Leads to Full Compromise
75. SEO pollution campaign affects web searches related to EU midterm elections

THREATS

76. GitHub now warns devs about bugs that led to Equifax breach
77. Flaws in telepresence robots allow hackers access to pictures, video feeds
78. Fake Adobe Flash update hides cryptocurrency malware
79. Branch.io Flaws may have affected as many as 685 million individuals
80. Critical Remote Code Execution Vulnerabilities Patched by Drupal
81. Code Execution Vulnerability Patched in Library Used by VLC, Other Media Players
82. Flaws Open Telepresence Robots to Prying Eyes
83. [SingCERT] Alert on Multiple Security Vulnerabilities in Oracle's Enterprise Products
84. The #NetSpectre vulnerability could enable a slow leak of data remotely via side channels. Expert Michael Cobb of @thehairyITdog explains
85. A newly disclosed #libSSH vulnerability could allow an attacker #AdminAccess to a server with little effort. By @MT_Heller
86. After an attempted comeback by the Russian built #VPNFilter #botnet, home #networkdevices are at risk. Learn how this #malware targets
87. Drupal addresses multiple critical flaws with latest release
88. Tumblr Privacy Bug Could Have Exposed Sensitive Account Data
89. CVE-2018-8460: Exposing a Double Free in Internet Explorer for Code Execution
90. Open source web hosting software compromised with DDoS malware
91. Wapiti – The Black Box Vulnerability Scanner for Web Applications
92. Vulnerability Spotlight: Live Networks LIVE555 streaming media RTSPServer code execution vulnerability
93. LuminosityLink Spyware Mastermind Gets 30 Months In The Clink
94. Crooks are attempting to spread their cryptojacking malware to unsuspecting victims by disguising it as an update for Flash. The malicious
95. Top 10 Blockchain Development Companies
96. Crypto Mining Malware Runs on iPhone
97. The libssh “login with no password” bug – what you need to know [VIDEO]
98. Cryptocurrency Miners Hiding As Flash Updates
99. GPlayed Trojan - .Net Playing with Google Market
100. Card Factory Exposed Customers Photos Publicly Due To A Website Flaw
101. How Shodan helps identify ICS cybersecurity vulnerabilities
102. Cryptomining Malware Attacks On iPhones Grew By 400%
103. Hacking Attacks On Cryptocurrency Exchanges Resulted in a Loss of $882 Million
104. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
105. Oracle extends its thanks to Qihoo 360 for fixing the vulnerabilities of Weblogic
106. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
107. Tumblr patches bug that could have exposed user data
108. [SingCERT] Alert on Linksys E Series Routers Vulnerabilities (CVE-2018-3953, CVE-2018-3954, and CVE-2018-3955)
109. Apache Access Vulnerability Could Affect Thousands of Applications
110. LuminosityLink spyware mastermind gets 30 months in the clink, forfeits $725k in Bitcoin
111. Last year, D-Link flubbed a router bug-fix, so it's back with total pwnage
112. Party like it's 1989... SVGA code bug haunts VMware's house, lets guests flee to host OS
113. Oracle Patches 301 Vulnerabilities in October Update
114. Tumblr Fixes Security Bug that Leaked Private Account Info
115. Ruby 2.4.5 released: 40 bug fixes
116. Tumblr fixed a #vulnerability that could have exposed sensitive account #data, including usernames/passwords and individual IP addresses. But the company
117. The #TLBleed vulnerability uses @Intel's HTT chip feature to leak data. Learn about how hackers could use #malware to launch
118. XBash Malware Security Advisory
119. New libSSH vulnerability gives root access to servers
120. A 4-year-old #libSSH vulnerability can allow attackers to easily log in to servers with full administrative control, but it is
121. The implications of the NetSpectre vulnerability
122. Researcher Livestreams 51% Attack on Altcoin Blockchain
123. The author of the LuminosityLink RAT sentenced to 30 Months in Prison
124. #Shodan can be a helpful tool for security professionals to locate #ICSsecurity vulnerabilities. Expert Ernie Hayden explains how Shodan works
125. Oracle security updates contains 45 critical-rated vulnerability
126. A #libSSH vulnerability that went undisclosed for almost five years could allow an attacker easy #AdminAccess to servers, @0xAmit said
127. Vulnerability Spotlight: Live Networks LIVE555 streaming media RTSPServer code execution vulnerability
128. Stegware: How is #malware using #steganography techniques to avoid detection?
129. Cryptojacking: A hidden cost for your company
130. Chaining three critical vulnerabilities allows takeover of D-Link routers
131. Around 600 Computers of Anne Arundel County Public Library have been Exposed to Emotet Virus
132. Report: Cryptocurrency Exchanges Lost $882 Million to Hackers
133. Tumblr Fixes Critical Security Bug That Exposes User Account Details
134. In order to distribute the attack payload, the code needs to be downloaded onto the PLCs & safety controllers. This
135. Tumblr Vulnerability Exposed User Account Information
136. Bug Trio Affecting Eight D-Link Models Leads to Full Compromise
137. 7 best practices for negotiating ransomware payments

CRIME

138. Threat Report: BlackEnergy APT Group Becomes GreyEnergy
139. GreyEnergy cyberespionage group targets Poland and Ukraine
140. Thousands of Neoflam Clients Had Their Data Leaked After Buying Frying Pans
141. New Pennsylvania Law Imposes Fine for Using Drones to Spy
142. Group-IB: 14 cyber attacks on crypto exchanges resulted in a loss of $882 million
143. Hacking Attacks On Cryptocurrency Exchanges Resulted in a Loss of $882 Million
144. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
145. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
146. Tumblr patches bug that could have exposed user data
147. 12.5 Million Email Archives Exposed - Why would #cybercriminals go to a #darkweb market and pay for access when they
148. XBash Malware Security Advisory
149. VestaCP compromised in a new supply-chain attack
150. VestaCP compromised in a new supply-chain attack
151. The author of the LuminosityLink RAT sentenced to 30 Months in Prison
152. Targeted attacks on crypto exchanges resulted in a loss of $882 million
153. 7 best practices for negotiating ransomware payments

POLITICS

154. Threat Report: BlackEnergy APT Group Becomes GreyEnergy
155. GreyEnergy cyberespionage group targets Poland and Ukraine
156. New APT Could Signal Reemergence of Notorious Comment Crew
157. Cyber Espionage Campaign Reuses Code from China's APT1
158. New Pennsylvania Law Imposes Fine for Using Drones to Spy
159. GreyEnergy Spy APT Mounts Sophisticated Effort Against Critical Infrastructure
160. GreyEnergy Potential Successor of BlackEnergy
161. Oceansalt cyberattack wave linked to defunct Chinese APT Comment Crew
162. 'Operation Oceansalt' Reuses Code from Chinese Group APT1
163. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
164. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
165. Tracking Tick Through Recent Campaigns Targeting East Asia
166. McAfee researchers uncover ‘significant’ espionage campaign
167. Operation Oceansalt research reveals cyber-attacks targeting South Korea, USA and Canada
168. New Reconnaissance Tool Uses Code from Eight-Year-Old Comment Crew Implant

APT report for 2018-10-17

TRANSNATIONAL / UNKNOWN

1. WTB: MuddyWater Expands Operations
2. Russian Hackers Attack Specialist in Customer Review Tied to Innumerable Websites

CHINA

3. Top 5 Publicly Accessible Hacking Tools You Can Download Today
4. WTB: MuddyWater Expands Operations

INDIA

Nil

NORTH KOREA

Nil

PAKISTAN

Nil

VIETNAM

5. New research highlights Vietnamese group's custom hacking tools

IRAN

6. WTB: MuddyWater Expands Operations

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

7. 'GreyEnergy' Cyberspies Target Ukraine, Poland
8. 3 Years After Attacks on Ukraine Power Grid, BlackEnergy Successor Poses Growing Threat
9. Meet GreyEnergy, the newest hacking group hitting Ukraine’s power grid
10. Attackers identified in the pre-espionage stage of CNI attack
11. GreyEnergy group targeting critical infrastructure with espionage
12. GreyEnergy: Updated arsenal of one of the most dangerous threat actors
13. GreyEnergy: Updated arsenal of one of the most dangerous threat actors
14. New GreyEnergy Malware Targets ICS, Tied with BlackEnergy and TeleBots

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-10-17

WINDOWS

1. MartyMcFly Malware: new Cyber-Espionage Campaign targeting Italian Naval Industry
2. CVE-2018-3211: Java Usage Tracker Local Elevation of Privilege on Windows
3. Top 5 Publicly Accessible Hacking Tools You Can Download Today
4. WTB: MuddyWater Expands Operations
5. VMware addressed Code Execution Flaw in its ESXi, Workstation, and Fusion products
6. Git RCE Vulnerability (CVE-2018-17456)Security Advisory

LINUX

7. Git RCE Vulnerability (CVE-2018-17456)Security Advisory

UNIX

Nil

ANDROID

8. WTB: MuddyWater Expands Operations
9. VMware addressed Code Execution Flaw in its ESXi, Workstation, and Fusion products
10. Android Apps claim to mine unminable cryptocurrency, just show ads

IOS

11. VoiceOver iOS 12 Bug Creates Lock Screen Bypass Exposing User Photos
12. Vulnerability in Apple VoiceOver allows hackers access to user photos
13. Google Chrome 70.0.3538.67 releases: fix multiple high-risk vulnerabilities

MACOS

14. Git RCE Vulnerability (CVE-2018-17456)Security Advisory
15. Vulnerability in Apple VoiceOver allows hackers access to user photos

Threat report for 2018-10-17

DATA BREACH & DATA LOSS

1. Tumblr Patches Security Issue that Would Leak Emails, Hashed-Salted Passwords
2. MartyMcFly Malware: new Cyber-Espionage Campaign targeting Italian Naval Industry
3. Redis 5.0 release, High-performance key-value database
4. Information of 396K Users Exposed in Facepunch Data Breach
5. 35 Million US Voter Registration Records Found for Sale on Dark Web
6. Phishers target book publishers in new campaign
7. Pentagon Disclosed Data Breach At Department Of Defense Affecting 30,000 Workers
8. 35 million US voter records up for sale on the dark web
9. Who is to blame for the majority of data breaches?
10. GreyEnergy: New malware campaign targets critical infrastructure companies
11. Tumblr Patches A Flaw That Could Have Exposed Users’ Account Info
12. Anthem pays out record $16m over data breach
13. SEO Poisoning Campaign Targeting U.S. Midterm Election Keywords
14. .@Google Firebase #DatabaseSecurity proved insufficient when bypassed by hackers to leak data. Learn more about this #SecurityFlaw from expert Michael
15. 35 million voter records from 19 US states for sale
16. Alphabet in the soup for keeping quiet about Google+ data leak bug
17. Anthem Mega-Breach: Record $16 Million HIPAA Settlement
18. US Voter Records for Sale on Hacker Forum
19. Millions of US Voter Records for Sale
20. 35 Million U.S Voter Records Selling in Popular Dark web Hacking Forum from $150 USD to $12,500 USD
21. Travel data for about 30,000 individuals was exposed in a Pentagon #DataBreach and experts expect that the information could be

DENIAL-OF-SERVICE

22. Brazil expert discovers Oracle flaw that allows massive DDoS attacks

MALVERTISING

Nil

PHISHING

23. FBI Releases Document with Measures for Defending Against Payroll Phishing Scams
24. How Office 365 learned to reel in phish
25. Another Phishing Scam is Appearing in Small Business Inboxes
26. Is this the simple solution to password re-use?
27. Public Cloud Phishing
28. Learn how hackers used TLS certificates to launch @netflix #phishing attacks from expert Michael Cobb of @thehairyITdog
29. "Attackers have expanded [phishing attacks] significantly into SMS and social media, and are displaying a preference for targeting personal email
30. Faculties and Staff of Chapman got Affected by the ‘Critical’ Phishing Attack
31. LibSSH Flaw Allows Hackers to Take Over Servers Without Password

WEB DEFACEMENT

Nil

BOTNET

Nil

RANSOMWARE

32. Podcast: A Utility Ransomware Attack, Post-Hurricane
33. Ransomware attack hits North Carolina water utility following hurricane
34. A crippling ransomware attack hit a water utility in the aftermath of Hurricane Florence

CRYPTOMINING & CRYPTOCURRENCIES

35. AISA 2018: Japan's journey from a cryptocurrency hack to better regulation
36. .@alienvault researchers recently discovered #MassMiner, a #cryptocurrency mining #malware that has the ability to infect systems across the web. Discover
37. How Blockchain Is Making it Easier for Fintech Companies to Scale Up
38. Im Interview erläutert Georgeta Toth, Regional Director bei dem Security-Spezialisten #Proofpoint, den Einfluss der Crypto-Mining-#Malware auf Endgeräte in Unternehmen.
39. Android Apps claim to mine unminable cryptocurrency, just show ads
40. #GroupIB has estimated that cryptocurrency exchanges suffered a total loss of $882 mln due to targeted attacks in 2017 and

MALWARE

41. LuminosityLink RAT Author Sentenced to 30 Months in Prison
42. MartyMcFly Malware: new Cyber-Espionage Campaign targeting Italian Naval Industry
43. .@alienvault researchers recently discovered #MassMiner, a #cryptocurrency mining #malware that has the ability to infect systems across the web. Discover
44. A hacker who used fake advertisements placed on local newspaper websites to spread malware has been sentenced to 33 months
45. Im Interview erläutert Georgeta Toth, Regional Director bei dem Security-Spezialisten #Proofpoint, den Einfluss der Crypto-Mining-#Malware auf Endgeräte in Unternehmen.
46. GreyEnergy: New malware campaign targets critical infrastructure companies
47. Insult to injury: Malware menace soaks water-logged utility ravaged by Hurricane Florence
48. How does #FacexWorm #malware use @Facebook Messenger to spread? Learn more about this new malware with expert @lewisnic.
49. New GreyEnergy Malware Targets ICS, Tied with BlackEnergy and TeleBots
50. How does #MassMiner #malware infect systems across the web?
51. Avast scores high in malware protection | Avast
52. Sony has solved the crash of PS4 receiving malicious message
53. Abandoned Tweet Counter Hijacked With Malicious Script
54. 21-year-old Hacker Sentenced to 30 Months Prison for Creating Popular Hacking Tool LumunosityLink RAT
55. The attackers learn that due to the complexity and fluctuations of the pulping process, any changes could take up to

EXPLOIT

Nil

VULNERABILITY

56. Cisco Patches Remotely Exploitable High Risk Security Bugs in Multiple Products
57. Libssh Vulnerability Exposes Servers to Attacks
58. Chrome 70 Updates Sign-In Options, Patches 23 Flaws
59. VoiceOver iOS 12 Bug Creates Lock Screen Bypass Exposing User Photos
60. Tumblr discloses vulnerability but says 'no evidence that this bug was abused'
61. Oracle Fixes 301 Flaws in October Critical Patch Update
62. Serious SSH bug lets crooks log in just by asking nicely
63. Oracle Patched Over 300 Vulnerabilities in Its Q3 2018 Critical Patch Update
64. LibSSH Flaw Leaves Thousands Of Servers At Risk Of Hijacking
65. CVE-2018-10933: Libssh Server Side Authentication Bypass Vulnerability Alert
66. Thousands of servers easy to hack due to a LibSSH Flaw
67. Take a Bite out of the Vulnerability Remediation Backlog with InsightVM
68. WhiteSource raises $35 million for open source flaw detection platform
69. CVE-2018-3211: Java Usage Tracker Local Elevation of Privilege on Windows
70. Oracle CPU October 2018: 301 vulnerabilities patched
71. Thousands Of Servers Vulnerable To Hacking Due To libssh Flaw
72. Critical Vulnerabilities Allow Takeover of D-Link Routers
73. Tumblr Patches A Flaw That Could Have Exposed Users’ Account Info
74. Remote Code Implantation Flaw Found in Medtronic Cardiac Programmers
75. Alphabet in the soup for keeping quiet about Google+ data leak bug
76. Hacker: I'm logged in. New LibSSH Vulnerability: OK! I believe you.
77. Brazil expert discovers Oracle flaw that allows massive DDoS attacks
78. Endpoint security solutions challenged by zero-day and fileless attacks
79. VMware addressed Code Execution Flaw in its ESXi, Workstation, and Fusion products
80. Flaws in Branch.io Affected Over 685 Million Users
81. Security flaw in libssh leaves thousands of servers at risk of hijacking
82. Oracle patches 301 vulnerabilities, including 46 with a 9.8+ severity rating
83. VMware Patches Code Execution Flaw in Virtual Graphics Card
84. CVE-2018-3245: Weblogic Remote Code Execution Vulnerability Alert
85. Oracle releases Critical Patch Update Advisory – October 2018: fix 301 security bugs
86. Git RCE Vulnerability (CVE-2018-17456)Security Advisory
87. LibSSH Flaw Allows Hackers to Take Over Servers Without Password
88. Vulnerability in voting machines has not been corrected after 11 years
89. Vulnerability in Apple VoiceOver allows hackers access to user photos
90. Google Chrome 70.0.3538.67 releases: fix multiple high-risk vulnerabilities
91. The Qihoo @360CoreSec team found a @Microsoft vulnerability -- named Double Kill -- that affects applications through #MicrosoftOffice documents. Learn

Region brief for 2018-10-17

ASIA

1. AISA 2018: Japan's journey from a cryptocurrency hack to better regulation
2. New research highlights Vietnamese group's custom hacking tools
3. Meet GreyEnergy, the newest hacking group hitting Ukraine’s power grid
4. WhiteSource raises $35 million for open source flaw detection platform
5. Top 5 Publicly Accessible Hacking Tools You Can Download Today
6. WTB: MuddyWater Expands Operations
7. Git RCE Vulnerability (CVE-2018-17456)Security Advisory

OCEANIA

Nil

NORTH AMERICA

8. LuminosityLink RAT Author Sentenced to 30 Months in Prison
9. MartyMcFly Malware: new Cyber-Espionage Campaign targeting Italian Naval Industry
10. 35 Million US Voter Registration Records Found for Sale on Dark Web
11. Podcast: A Utility Ransomware Attack, Post-Hurricane
12. How Office 365 learned to reel in phish
13. Meet GreyEnergy, the newest hacking group hitting Ukraine’s power grid
14. 35 million US voter records up for sale on the dark web
15. SEO Poisoning Campaign Targeting U.S. Midterm Election Keywords
16. 35 million voter records from 19 US states for sale
17. Insult to injury: Malware menace soaks water-logged utility ravaged by Hurricane Florence
18. WTB: MuddyWater Expands Operations
19. US Voter Records for Sale on Hacker Forum
20. Brazil expert discovers Oracle flaw that allows massive DDoS attacks
21. Millions of US Voter Records for Sale
22. 35 Million U.S Voter Records Selling in Popular Dark web Hacking Forum from $150 USD to $12,500 USD
23. A crippling ransomware attack hit a water utility in the aftermath of Hurricane Florence
24. Vulnerability in voting machines has not been corrected after 11 years

SOUTH AMERICA

25. Brazil expert discovers Oracle flaw that allows massive DDoS attacks

EUROPE

26. MartyMcFly Malware: new Cyber-Espionage Campaign targeting Italian Naval Industry
27. 'GreyEnergy' Cyberspies Target Ukraine, Poland
28. 3 Years After Attacks on Ukraine Power Grid, BlackEnergy Successor Poses Growing Threat
29. Information of 396K Users Exposed in Facepunch Data Breach
30. Meet GreyEnergy, the newest hacking group hitting Ukraine’s power grid
31. Who is to blame for the majority of data breaches?
32. Attackers identified in the pre-espionage stage of CNI attack
33. WTB: MuddyWater Expands Operations
34. GreyEnergy group targeting critical infrastructure with espionage
35. Millions of US Voter Records for Sale
36. Russian Hackers Attack Specialist in Customer Review Tied to Innumerable Websites
37. Sony has solved the crash of PS4 receiving malicious message

AFRICA

38. WTB: MuddyWater Expands Operations