Sector brief for 2018-11-06

HEALTHCARE

1. Ransomware Keeps Ringing in Profits for Cybercrime Rings

TRANSPORT

2. Compromising vital infrastructure: transport and logistics
3. Zero-Day Vulnerability Explained
4. Nation states sponsoring increasingly sophisticated cyber attacks

BANKING & FINANCE

5. HSBC Data Breach Hits Online Banking Customers
6. HSBC Bank Confirms US Data Breach
7. HSBC Bank USA Warns Customers of Data Breach
8. HSBC Bank Data Breach Exposed Account Numbers, Balances, and More
9. Zero-Day Vulnerability Explained
10. Supply-chain attack on cryptocurrency exchange
11. Supply-chain attack on cryptocurrency exchange
12. HSBC Bank Notifies Customers of Data Breach
13. Business email compromise made easy for cybercriminals as 12.5 million company email inboxes and 33,000 finance department credentials openly accessible
14. Spam and phishing in Q3 2018
15. Worst malware and threat actors of 2018 so far
16. Nation states sponsoring increasingly sophisticated cyber attacks
17. #ThreatFabric discovers #NeoBot Android Banking Trojan (#Exobot spawn) in #GooglePlay with 10,000+ installs Please contact us if your interested in

INFORMATION & TELECOMMUNICATION

18. Compromising vital infrastructure: transport and logistics
19. Zero-Day Vulnerability Explained
20. It’s thought that the private message data was obtained via a malicious browser extension that scraped the data from users’
21. Pocket iNet ISP Exposed 73GB of Corporate Data Online
22. Why are fake Elon Musk bitcoin scams running rife on Twitter right now?
23. Intel responds to the Epyc server threat from AMD
24. Fake Telegram Apps Used to Spy on Iranian Users
25. Business email compromise made easy for cybercriminals as 12.5 million company email inboxes and 33,000 finance department credentials openly accessible
26. Security firm Armis has discovered two vulnerabilities in Bluetooth Chips from several networking industry leaders.
27. Spam and phishing in Q3 2018
28. Private messages from 81,000 hacked Facebook accounts were for sale online. The information was obtained through malicious browser extensions, such as
29. Our crucible SoC OTP fusing tool now support graphical mapping of fusemap definition files. This, other than being very pretty, facilitates
30. Shellbot Botnet Targets IoT devices and Linux servers
31. Vulnerability in Icecast can collapse online radio stations
32. #ThreatFabric discovers #NeoBot Android Banking Trojan (#Exobot spawn) in #GooglePlay with 10,000+ installs Please contact us if your interested in
33. Just half of Fortune 500 companies have installed DMARC, a tool that guards against email phishing scams, according to new

FOOD

Nil

WATER

34. Spam and phishing in Q3 2018

ENERGY

35. High risk vulnerability discovered in Sauter CASE Suite building automation software
36. Multiple Cisco Vulnerabilities Threat Alert
37. Two zero-day vulnerabilities expose millions of access points

GOVERNMENT & PUBLIC SERVICE

38. US DoD’s first malware submissions to Google-bought VirusTotal is Russia-linked LoJack
39. Election Day: Five Security Experts Conclude that Georgia’s Online Voter Database is Easily Hackable
40. UK Regulator Calls for Tougher Rules on Personal Data Use
41. Compromising vital infrastructure: transport and logistics
42. Fake Telegram Apps Used to Spy on Iranian Users
43. Tech companies offered free products to help secure the election. Now what?
44. A Blockchain Solution for Data Provenance Using Hyperledger Fabric
45. Shellbot Botnet Targets IoT devices and Linux servers
46. U.S. Air Force Announces Third Bug Bounty Program
47. Nation states sponsoring increasingly sophisticated cyber attacks
48. Anonymous Hackers Syndicate Defaces Huge Number of Websites of Gabon Government
49. New attack by Anonymous Italy: personal data from ministries and police have been released online

Daily brief for 2018-11-06

ASIA

1. Group-IB and CryptoIns introduce the world’s first insurance against cyber threats for cryptocurrency exchanges
2. Fake Telegram Apps Used to Spy on Iranian Users
3. Spam and phishing in Q3 2018
4. Worst malware and threat actors of 2018 so far
5. Shellbot Botnet Targets IoT devices and Linux servers
6. Nation states sponsoring increasingly sophisticated cyber attacks
7. New attack by Anonymous Italy: personal data from ministries and police have been released online
8. Multiple Cisco Vulnerabilities Threat Alert

WORLD

9. US DoD’s first malware submissions to Google-bought VirusTotal is Russia-linked LoJack
10. Hack the Air Force 3.0 Bug Bounty Announced by USAF
11. ThreatList: Despite Fraud Awareness, Password Reuse Persists for Half of U.S. Consumers
12. Election Day: Five Security Experts Conclude that Georgia’s Online Voter Database is Easily Hackable
13. Group-IB and CryptoIns introduce the world’s first insurance against cyber threats for cryptocurrency exchanges
14. HSBC Bank Confirms US Data Breach
15. UK Regulator Calls for Tougher Rules on Personal Data Use
16. Compromising vital infrastructure: transport and logistics
17. HSBC Bank USA Warns Customers of Data Breach
18. Flaws in several self-encrypting SSDs allows attackers to decrypt data they contain
19. Side-Channel Vulnerability PortSmash Steals Keys
20. Pocket iNet ISP Exposed 73GB of Corporate Data Online
21. Tech companies offered free products to help secure the election. Now what?
22. Magecart infiltrates UK online retailer Kitronik payment system
23. Spam and phishing in Q3 2018
24. Worst malware and threat actors of 2018 so far
25. Wealthy Moscow residents' data leaked in Akado Telecom incident
26. We're hosting a lunch and learn event geared towards endpoint #security and #ransomware, with technology partner @SentinelOne. Please join us on
27. Shellbot Botnet Targets IoT devices and Linux servers
28. U.S. Air Force Announces Third Bug Bounty Program
29. Nation states sponsoring increasingly sophisticated cyber attacks
30. Anonymous Hackers Syndicate Defaces Huge Number of Websites of Gabon Government
31. New attack by Anonymous Italy: personal data from ministries and police have been released online
32. Two zero-day vulnerabilities expose millions of access points
33. #ThreatFabric discovers #NeoBot Android Banking Trojan (#Exobot spawn) in #GooglePlay with 10,000+ installs Please contact us if your interested in

ATTACKS

34. HSBC Data Breach Hits Online Banking Customers
35. My Health Record data misuse penalties raised
36. Holiday Suppliers Already Under Assault by Fileless Malware Campaign
37. ThreatList: Despite Fraud Awareness, Password Reuse Persists for Half of U.S. Consumers
38. Election Day: Five Security Experts Conclude that Georgia’s Online Voter Database is Easily Hackable
39. HSBC Bank Confirms US Data Breach
40. UK Regulator Calls for Tougher Rules on Personal Data Use
41. HSBC Bank USA Warns Customers of Data Breach
42. HSBC Bank Data Breach Exposed Account Numbers, Balances, and More
43. Samsung, Crucial’s Flawed Storage Drive Encryption Leaves Data Exposed
44. Why business can't keep the public safe from data breaches
45. It’s thought that the private message data was obtained via a malicious browser extension that scraped the data from users’
46. Alert: Emotet is Back with Major Spam Campaign, Email Exfiltration Module
47. Zombie Phish
48. Azorult Malware Spread by New Ramnit Campaign
49. Login VSI announces Release 3 of Login PI for proactive monitoring
50. Pocket iNet ISP Exposed 73GB of Corporate Data Online
51. HSBC Bank Notifies Customers of Data Breach
52. Business email compromise made easy for cybercriminals as 12.5 million company email inboxes and 33,000 finance department credentials openly accessible
53. Spam and phishing in Q3 2018
54. Wealthy Moscow residents' data leaked in Akado Telecom incident
55. GPU side channel attacks can enable spying on web activity, password stealing
56. Our crucible SoC OTP fusing tool now support graphical mapping of fusemap definition files. This, other than being very pretty, facilitates
57. Social Media Brand Impersonators Go #Phishing: 3 Emerging Tactics from ZeroFOX Research
58. Gift Card Phishing Scam Using Email Addresses of Bosses’ is Latest Trend Adopted by Scammers
59. New attack by Anonymous Italy: personal data from ministries and police have been released online
60. Samsung & Crucial Storage Device Vulnerability Allow Attackers to Break the Password & Access the Entire Device Data
61. Just half of Fortune 500 companies have installed DMARC, a tool that guards against email phishing scams, according to new

THREATS

62. US DoD’s first malware submissions to Google-bought VirusTotal is Russia-linked LoJack
63. Apache Struts Vulnerability Would Allow System Takeover
64. Hack the Air Force 3.0 Bug Bounty Announced by USAF
65. Android November update fixes flaws galore
66. Holiday Suppliers Already Under Assault by Fileless Malware Campaign
67. Group-IB and CryptoIns introduce the world’s first insurance against cyber threats for cryptocurrency exchanges
68. Hackers Breach StatCounter To Hijack Bitcoin Transactions
69. StatCounter Hacked to Inject Malicious Script in gate.io Cryptocurrency Exchange
70. VMware Unveils New Blockchain Service
71. Hackers breach StatCounter to hijack Bitcoin transactions on Gate.io exchange
72. Zero-Day Vulnerability Explained
73. WordPress Design Flaw + WooCommerce Vulnerability Leads to Site Takeover
74. Flaws in several self-encrypting SSDs allows attackers to decrypt data they contain
75. It’s thought that the private message data was obtained via a malicious browser extension that scraped the data from users’
76. Backdoors Installed via macOS Cryptocurrency App
77. Malware Execution via Microsoft Word Embedded Video
78. Azorult Malware Spread by New Ramnit Campaign
79. Supply-chain attack on cryptocurrency exchange
80. Supply-chain attack on cryptocurrency exchange
81. Side-Channel Vulnerability PortSmash Steals Keys
82. Apache Struts Warns Users of Two-Year-Old Vulnerability
83. Why are fake Elon Musk bitcoin scams running rife on Twitter right now?
84. Apache Struts Warns Users of Two-Year-Old Vulnerability
85. Apache Struts 2.3.x vulnerable to two year old RCE flaw
86. IBM Watson will be used by NIST to assign CVSS scores to vulnerabilities
87. Security firm Armis has discovered two vulnerabilities in Bluetooth Chips from several networking industry leaders.
88. Hidden Costs of IoT Vulnerabilities
89. Evernote for Windows patch resolves stored XSS vulnerability
90. Ransomware Keeps Ringing in Profits for Cybercrime Rings
91. How IAM is Evolving in the Blockchain Era
92. A Blockchain Solution for Data Provenance Using Hyperledger Fabric
93. Private messages from 81,000 hacked Facebook accounts were for sale online. The information was obtained through malicious browser extensions, such as
94. New ransomware spotted using DiskCryptor
95. Exploit Developer Discovers Zero-Day Microsoft Edge Vulnerability Triggering RCE Attacks
96. How testing perspectives helps find application security flaws
97. Worst malware and threat actors of 2018 so far
98. We're hosting a lunch and learn event geared towards endpoint #security and #ransomware, with technology partner @SentinelOne. Please join us on
99. PortSmash Side-Channel Vulnerability – Another Threat For Intel CPUs
100. U.S. Air Force Announces Third Bug Bounty Program
101. CVE-2018-11759: Apache mod_jk Access Control Bypass Vulnerability
102. High risk vulnerability discovered in Sauter CASE Suite building automation software
103. Apache Struts Team Urges Users for Library Update to Plug Years-Old Bugs
104. Samsung & Crucial Storage Device Vulnerability Allow Attackers to Break the Password & Access the Entire Device Data
105. Flaws in Popular Self-Encrypting SSDs Let Attackers Decrypt Data
106. Apple Patches Critical iOS, macOS and watchOS Flaws
107. Watch Out for the “Programmer Who Cracked Your Email” Bitcoin Scam
108. Multiple Cisco Vulnerabilities Threat Alert
109. Vulnerability in Icecast can collapse online radio stations
110. Two zero-day vulnerabilities expose millions of access points
111. Gitlab v11.4.5 release: fix bugs
112. #ThreatFabric discovers #NeoBot Android Banking Trojan (#Exobot spawn) in #GooglePlay with 10,000+ installs Please contact us if your interested in
113. Symantec acquires Appthority to enhance protection from mobile application vulnerabilities

CRIME

114. ThreatList: Despite Fraud Awareness, Password Reuse Persists for Half of U.S. Consumers
115. Hackers Breach StatCounter To Hijack Bitcoin Transactions
116. Hackers breach StatCounter to hijack Bitcoin transactions on Gate.io exchange
117. Zero-Day Vulnerability Explained
118. Tech companies offered free products to help secure the election. Now what?
119. Business email compromise made easy for cybercriminals as 12.5 million company email inboxes and 33,000 finance department credentials openly accessible
120. Magecart infiltrates UK online retailer Kitronik payment system
121. Ransomware Keeps Ringing in Profits for Cybercrime Rings
122. Spam and phishing in Q3 2018
123. A Blockchain Solution for Data Provenance Using Hyperledger Fabric
124. Nation states sponsoring increasingly sophisticated cyber attacks
125. Gift Card Phishing Scam Using Email Addresses of Bosses’ is Latest Trend Adopted by Scammers
126. Watch Out for the “Programmer Who Cracked Your Email” Bitcoin Scam

POLITICS

127. Election Day: Five Security Experts Conclude that Georgia’s Online Voter Database is Easily Hackable
128. Compromising vital infrastructure: transport and logistics
129. Flaws in several self-encrypting SSDs allows attackers to decrypt data they contain
130. Pocket iNet ISP Exposed 73GB of Corporate Data Online
131. Fake Telegram Apps Used to Spy on Iranian Users
132. Tech companies offered free products to help secure the election. Now what?
133. Spam and phishing in Q3 2018
134. GPU side channel attacks can enable spying on web activity, password stealing
135. Nation states sponsoring increasingly sophisticated cyber attacks
136. New attack by Anonymous Italy: personal data from ministries and police have been released online

APT report for 2018-11-05

TRANSNATIONAL / UNKNOWN

1. Magecart Infiltrates U.K. Online Retailer Kitronik POS
2. Magecart Strikes Again, and Kitronik Is Latest Victim

CHINA

Nil

INDIA

Nil

NORTH KOREA

Nil

PAKISTAN

Nil

VIETNAM

Nil

IRAN

3. Persian Stalker pillages Iranian users of Instagram and Telegram

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

4. OPNids Integrates Machine Learning Into Open-Source Suricata IDS

SERBIA

Nil

UKRAINE

5. Cyber-Attacks: How to Stop a Multibillion-Dollar Problem

Platform report for 2018-11-05

WINDOWS

1. Inception Group Uses POWERSHOWER Backdoor in Two-Stage Spear Phishing Attacks
2. Shellbot Botnet Targets Linux, Android Devices
3. Inception Attackers Target Europe with Year-old Office Vulnerability
4. Android Rat – TheFatRat to Hack and Gain access to Targeted Android Phone

LINUX

5. Shellbot Botnet Targets Linux, Android Devices
6. Android Rat – TheFatRat to Hack and Gain access to Targeted Android Phone

UNIX

Nil

ANDROID

7. Shellbot Botnet Targets Linux, Android Devices
8. Blockhead makes blockchain easy for developers
9. Persian Stalker pillages Iranian users of Instagram and Telegram
10. Android Rat – TheFatRat to Hack and Gain access to Targeted Android Phone
11. Video analysis of Android banking Trojan found on Google Play (Red Alert 2)
12. Recently there have been a lot of packed Android malware around, so I decided to write a blog-post on how

IOS

13. Persian Stalker pillages Iranian users of Instagram and Telegram
14. Apple Patched Multiple XNU Kernel Vulnerabilities In MacOS And iOS

MACOS

15. Inside SearchPageInstaller | macOS Malware Deploys a MITM Attack
16. Apple Patched Multiple XNU Kernel Vulnerabilities In MacOS And iOS

Threat report for 2018-11-05

DATA BREACH & DATA LOSS

1. Week in review: Volume of Australian data breaches continues unabated
2. Google dorks were the root cause of a catastrophic compromise of CIA’s communications
3. Your personal data is widely available to hackers
4. This Tool Shows Exposed Cameras Around Your Neighborhood
5. New Side-Channel Vulnerability Leaks Sensitive Data From Intel Chips
6. Akado Telecom Accidentally Leaks Customers' Names, Phone Numbers, And Addresses
7. Australian shipbuilder Austal hit by data breach
8. Equifax Set to Share More PII with Experian
9. #SamSam #ransomware continues to be a thorn in the side of organizations in the U.S. with targeted ransomware campaigns continuing,
10. National biometric database could be on the way (and in private hands)
11. Over 80,000 Facebook User Accounts Compromised
12. "If an organization created #DMARC records for the first time, it would encounter syntax and content issues -- one of
13. Kemp Cites Voter Database Hacking Attempt, Gives No Evidence
14. "A lot of people in Congress are concerned that the Facebook influence campaigns are about the midterms, but to me
15. "Shipbuilder Austal Ltd said on Thursday its Australian business had detected and responded to a data breach"

DENIAL-OF-SERVICE

16. What were the DDoS numbers for Q2 & Q3 2018?
17. A cybersecurity lesson: educational sites suffer rise in DDoS attacks in Q3

MALVERTISING

Nil

PHISHING

18. Almost 300 Percent Increase in eCommerce Phishing Attacks in Q3 2018
19. Inception Group Uses POWERSHOWER Backdoor in Two-Stage Spear Phishing Attacks
20. How to use Firefox Master Password.
21. Why you should be using a password manager
22. How did @Google eliminate successful #PhishingAttacks? Learn how employees used U2F authentication and physical #SecurityKeys to defend against phishing from
23. Password Constraints and Their Unintended Security Consequences
24. Cybercriminals Using SMS Phishing Attack to Rob Cardless ATM
25. How can U2F authentication end phishing attacks?
26. Phishing attacks up by 297 percent across eCommerce in Q3 2018

WEB DEFACEMENT

Nil

BOTNET

27. Shellbot Botnet Targets Linux, Android Devices
28. Original Mirai botnet creator hit with hefty financial sentence

RANSOMWARE

29. #SamSam #ransomware continues to be a thorn in the side of organizations in the U.S. with targeted ransomware campaigns continuing,
30. Researchers found #Kraken #ransomware has become more popular after being packaged in the Fallout #ExploitKit and becoming part of an

CRYPTOMINING & CRYPTOCURRENCIES

31. No, blockchain isn't the answer to our voting system woes
32. Fake Elon Musk Twitter Bitcoin Scam Earned 180K in One Day
33. Another wave of Elon Musk bitcoin scams spread by verified Twitter accounts
34. Researchers found #Kraken #ransomware has become more popular after being packaged in the Fallout #ExploitKit and becoming part of an
35. Blockhead makes blockchain easy for developers
36. The building blocks of blockchain-based digital identity

MALWARE

37. Inception Group Uses POWERSHOWER Backdoor in Two-Stage Spear Phishing Attacks
38. Inside SearchPageInstaller | macOS Malware Deploys a MITM Attack
39. Malware of the 1980s: Looking back at the Brain Virus and the Morris Worm
40. Why malware attacks should no longer be a problem for businesses
41. Android Rat – TheFatRat to Hack and Gain access to Targeted Android Phone
42. Scammers Ride on Popular Vote411 Voter Info Site to Push Scareware Alerts
43. How to Get Rid of Cortana Runtime Broker CPU Miner Virus
44. Fake malicious @RSAsecurity #SecurID malware in pre-release state on @GooglePlay: - Currently gathering information (profiling) the mobile device it is installed
45. Video analysis of Android banking Trojan found on Google Play (Red Alert 2)
46. Recently there have been a lot of packed Android malware around, so I decided to write a blog-post on how

EXPLOIT

47. PoC Available for Microsoft Edge Zero-Day RCE, Exploit Under Development
48. Security researchers exploit Intel hyperthreading flaw to break encryption

VULNERABILITY

49. Apache warns Struts 2.3 is using a library with a two year old critical flaw
50. Online Radio Stations at Risk from Icecast Flaw
51. PoC Available for Microsoft Edge Zero-Day RCE, Exploit Under Development
52. Flaws In Self-Encrypting SSDs Let Attackers Bypass Encryption
53. New Side-Channel Vulnerability Leaks Sensitive Data From Intel Chips
54. Why Are Deserialization Vulnerabilities So Popular?
55. Flaws in self-encrypting SSDs let attackers bypass disk encryption
56. [SingCERT] Technical Advisory on Vulnerabilities in Bluetooth Low Energy Chips by Texas Instruments (CVE-2018-16986 and CVE-2018-7080)
57. Inception Attackers Target Europe with Year-old Office Vulnerability
58. Kemp Investigates Dems, Not the Reported Vulnerability
59. Flaws in Popular SSD Drives Bypass Hardware Disk Encryption
60. Flaw in Icecast streaming media server allows to take off online Radio Stations
61. Security researchers exploit Intel hyperthreading flaw to break encryption
62. .@ArmisSecurity researchers discovered two chip-level #Bluetooth vulnerabilities -- dubbed #Bleedingbit -- that could allow pseudo #RemoteCodeExecution on wireless access points.
63. Vulnerabilities’ CVSS scores soon to be assigned by AI
64. Cisco Products Affected By A Zero-Day SIP Inspection Vulnerability Exploited In The Wild
65. High severity XML external entity flaw affects Sauter building automation product
66. Security firm Armis has discovered two vulnerabilities in Bluetooth Chips from several networking industry leaders.
67. Critical 'Bleedingbit' flaws found in microcontrollers used by Wi-Fi access points
68. Mozilla Patched Multiple Security Vulnerabilities in Thunderbird 60.3
69. Apple Patched Multiple XNU Kernel Vulnerabilities In MacOS And iOS
70. Companies implementing DevSecOps address vulnerabilities faster than others
71. The Ultimate Guide to Bug Bounty Platforms
72. PortSmash – A New Side Channel Vulnerability in SMT/Hyper-Threading That Allows Attackers To Steal Sensitive Data
73. Security Think Tank: Three ways to safeguard against application layer vulnerabilities
74. Security Bug in Icecast Puts Online Radio Stations At Risk
75. Researchers discover new zero-day vulnerability in EDGE browser

Region brief for 2018-11-05

ASIA

1. Google dorks were the root cause of a catastrophic compromise of CIA’s communications
2. Cyber-Attacks: How to Stop a Multibillion-Dollar Problem
3. Persian Stalker pillages Iranian users of Instagram and Telegram
4. A cybersecurity lesson: educational sites suffer rise in DDoS attacks in Q3

OCEANIA

5. Week in review: Volume of Australian data breaches continues unabated
6. Australian shipbuilder Austal hit by data breach
7. Persian Stalker pillages Iranian users of Instagram and Telegram
8. A cybersecurity lesson: educational sites suffer rise in DDoS attacks in Q3
9. "Shipbuilder Austal Ltd said on Thursday its Australian business had detected and responded to a data breach"

NORTH AMERICA

10. What were the DDoS numbers for Q2 & Q3 2018?
11. Google dorks were the root cause of a catastrophic compromise of CIA’s communications
12. Your personal data is widely available to hackers
13. Inside SearchPageInstaller | macOS Malware Deploys a MITM Attack
14. Magecart Strikes Again, and Kitronik Is Latest Victim
15. Cyber-Attacks: How to Stop a Multibillion-Dollar Problem
16. Equifax Set to Share More PII with Experian
17. #SamSam #ransomware continues to be a thorn in the side of organizations in the U.S. with targeted ransomware campaigns continuing,
18. Over 80,000 Facebook User Accounts Compromised
19. Why malware attacks should no longer be a problem for businesses
20. Critical 'Bleedingbit' flaws found in microcontrollers used by Wi-Fi access points
21. Persian Stalker pillages Iranian users of Instagram and Telegram
22. A cybersecurity lesson: educational sites suffer rise in DDoS attacks in Q3
23. "A lot of people in Congress are concerned that the Facebook influence campaigns are about the midterms, but to me
24. "Shipbuilder Austal Ltd said on Thursday its Australian business had detected and responded to a data breach"

SOUTH AMERICA

25. Over 80,000 Facebook User Accounts Compromised

EUROPE

26. Inception Group Uses POWERSHOWER Backdoor in Two-Stage Spear Phishing Attacks
27. Google dorks were the root cause of a catastrophic compromise of CIA’s communications
28. Magecart Infiltrates U.K. Online Retailer Kitronik POS
29. Akado Telecom Accidentally Leaks Customers' Names, Phone Numbers, And Addresses
30. Magecart Strikes Again, and Kitronik Is Latest Victim
31. Inception Attackers Target Europe with Year-old Office Vulnerability
32. Kemp Investigates Dems, Not the Reported Vulnerability
33. Over 80,000 Facebook User Accounts Compromised
34. Persian Stalker pillages Iranian users of Instagram and Telegram
35. Kemp Cites Voter Database Hacking Attempt, Gives No Evidence
36. A cybersecurity lesson: educational sites suffer rise in DDoS attacks in Q3

AFRICA

37. Cyber-Attacks: How to Stop a Multibillion-Dollar Problem

Sector brief for 2018-11-05

HEALTHCARE

Nil

TRANSPORT

Nil

BANKING & FINANCE

1. Original Mirai botnet creator hit with hefty financial sentence
2. Magecart Strikes Again, and Kitronik Is Latest Victim
3. Cyber-Attacks: How to Stop a Multibillion-Dollar Problem
4. Over 80,000 Facebook User Accounts Compromised
5. Why malware attacks should no longer be a problem for businesses
6. Cybercriminals Using SMS Phishing Attack to Rob Cardless ATM
7. Persian Stalker pillages Iranian users of Instagram and Telegram
8. Phishing attacks up by 297 percent across eCommerce in Q3 2018
9. A cybersecurity lesson: educational sites suffer rise in DDoS attacks in Q3
10. Video analysis of Android banking Trojan found on Google Play (Red Alert 2)

INFORMATION & TELECOMMUNICATION

11. PoC Available for Microsoft Edge Zero-Day RCE, Exploit Under Development
12. Original Mirai botnet creator hit with hefty financial sentence
13. Inside SearchPageInstaller | macOS Malware Deploys a MITM Attack
14. Fake Elon Musk Twitter Bitcoin Scam Earned 180K in One Day
15. Another wave of Elon Musk bitcoin scams spread by verified Twitter accounts
16. Inception Attackers Target Europe with Year-old Office Vulnerability
17. Flaw in Icecast streaming media server allows to take off online Radio Stations
18. Security firm Armis has discovered two vulnerabilities in Bluetooth Chips from several networking industry leaders.
19. Over 80,000 Facebook User Accounts Compromised
20. Persian Stalker pillages Iranian users of Instagram and Telegram
21. Phishing attacks up by 297 percent across eCommerce in Q3 2018
22. The Ultimate Guide to Bug Bounty Platforms
23. Researchers discover new zero-day vulnerability in EDGE browser
24. Fake malicious @RSAsecurity #SecurID malware in pre-release state on @GooglePlay: - Currently gathering information (profiling) the mobile device it is installed
25. "A lot of people in Congress are concerned that the Facebook influence campaigns are about the midterms, but to me

FOOD

Nil

WATER

Nil

ENERGY

26. [SingCERT] Technical Advisory on Vulnerabilities in Bluetooth Low Energy Chips by Texas Instruments (CVE-2018-16986 and CVE-2018-7080)
27. Critical 'Bleedingbit' flaws found in microcontrollers used by Wi-Fi access points

GOVERNMENT & PUBLIC SERVICE

28. No, blockchain isn't the answer to our voting system woes
29. Google dorks were the root cause of a catastrophic compromise of CIA’s communications
30. Akado Telecom Accidentally Leaks Customers' Names, Phone Numbers, And Addresses
31. Inception Attackers Target Europe with Year-old Office Vulnerability
32. Kemp Investigates Dems, Not the Reported Vulnerability
33. Persian Stalker pillages Iranian users of Instagram and Telegram
34. Phishing attacks up by 297 percent across eCommerce in Q3 2018
35. Kemp Cites Voter Database Hacking Attempt, Gives No Evidence
36. "A lot of people in Congress are concerned that the Facebook influence campaigns are about the midterms, but to me

Daily brief for 2018-11-05

ASIA

1. Google dorks were the root cause of a catastrophic compromise of CIA’s communications
2. Cyber-Attacks: How to Stop a Multibillion-Dollar Problem
3. Persian Stalker pillages Iranian users of Instagram and Telegram
4. A cybersecurity lesson: educational sites suffer rise in DDoS attacks in Q3

WORLD

5. Week in review: Volume of Australian data breaches continues unabated
6. Inception Group Uses POWERSHOWER Backdoor in Two-Stage Spear Phishing Attacks
7. What were the DDoS numbers for Q2 & Q3 2018?
8. Google dorks were the root cause of a catastrophic compromise of CIA’s communications
9. Your personal data is widely available to hackers
10. Magecart Infiltrates U.K. Online Retailer Kitronik POS
11. Inside SearchPageInstaller | macOS Malware Deploys a MITM Attack
12. Akado Telecom Accidentally Leaks Customers' Names, Phone Numbers, And Addresses
13. Magecart Strikes Again, and Kitronik Is Latest Victim
14. Inception Attackers Target Europe with Year-old Office Vulnerability
15. Kemp Investigates Dems, Not the Reported Vulnerability
16. Australian shipbuilder Austal hit by data breach
17. Cyber-Attacks: How to Stop a Multibillion-Dollar Problem
18. Equifax Set to Share More PII with Experian
19. #SamSam #ransomware continues to be a thorn in the side of organizations in the U.S. with targeted ransomware campaigns continuing,
20. Over 80,000 Facebook User Accounts Compromised
21. Why malware attacks should no longer be a problem for businesses
22. Critical 'Bleedingbit' flaws found in microcontrollers used by Wi-Fi access points
23. Persian Stalker pillages Iranian users of Instagram and Telegram
24. Kemp Cites Voter Database Hacking Attempt, Gives No Evidence
25. A cybersecurity lesson: educational sites suffer rise in DDoS attacks in Q3
26. "A lot of people in Congress are concerned that the Facebook influence campaigns are about the midterms, but to me
27. "Shipbuilder Austal Ltd said on Thursday its Australian business had detected and responded to a data breach"

ATTACKS

28. Week in review: Volume of Australian data breaches continues unabated
29. Almost 300 Percent Increase in eCommerce Phishing Attacks in Q3 2018
30. Inception Group Uses POWERSHOWER Backdoor in Two-Stage Spear Phishing Attacks
31. Google dorks were the root cause of a catastrophic compromise of CIA’s communications
32. Your personal data is widely available to hackers
33. This Tool Shows Exposed Cameras Around Your Neighborhood
34. New Side-Channel Vulnerability Leaks Sensitive Data From Intel Chips
35. How to use Firefox Master Password.
36. Why you should be using a password manager
37. Akado Telecom Accidentally Leaks Customers' Names, Phone Numbers, And Addresses
38. Australian shipbuilder Austal hit by data breach
39. How did @Google eliminate successful #PhishingAttacks? Learn how employees used U2F authentication and physical #SecurityKeys to defend against phishing from
40. Password Constraints and Their Unintended Security Consequences
41. Equifax Set to Share More PII with Experian
42. #SamSam #ransomware continues to be a thorn in the side of organizations in the U.S. with targeted ransomware campaigns continuing,
43. National biometric database could be on the way (and in private hands)
44. Over 80,000 Facebook User Accounts Compromised
45. Cybercriminals Using SMS Phishing Attack to Rob Cardless ATM
46. How can U2F authentication end phishing attacks?
47. Phishing attacks up by 297 percent across eCommerce in Q3 2018
48. "If an organization created #DMARC records for the first time, it would encounter syntax and content issues -- one of
49. Kemp Cites Voter Database Hacking Attempt, Gives No Evidence
50. "A lot of people in Congress are concerned that the Facebook influence campaigns are about the midterms, but to me
51. "Shipbuilder Austal Ltd said on Thursday its Australian business had detected and responded to a data breach"

THREATS

52. Apache warns Struts 2.3 is using a library with a two year old critical flaw
53. Inception Group Uses POWERSHOWER Backdoor in Two-Stage Spear Phishing Attacks
54. Online Radio Stations at Risk from Icecast Flaw
55. No, blockchain isn't the answer to our voting system woes
56. PoC Available for Microsoft Edge Zero-Day RCE, Exploit Under Development
57. Flaws In Self-Encrypting SSDs Let Attackers Bypass Encryption
58. New Side-Channel Vulnerability Leaks Sensitive Data From Intel Chips
59. Inside SearchPageInstaller | macOS Malware Deploys a MITM Attack
60. Why Are Deserialization Vulnerabilities So Popular?
61. Fake Elon Musk Twitter Bitcoin Scam Earned 180K in One Day
62. Another wave of Elon Musk bitcoin scams spread by verified Twitter accounts
63. Flaws in self-encrypting SSDs let attackers bypass disk encryption
64. [SingCERT] Technical Advisory on Vulnerabilities in Bluetooth Low Energy Chips by Texas Instruments (CVE-2018-16986 and CVE-2018-7080)
65. Inception Attackers Target Europe with Year-old Office Vulnerability
66. Malware of the 1980s: Looking back at the Brain Virus and the Morris Worm
67. Kemp Investigates Dems, Not the Reported Vulnerability
68. Flaws in Popular SSD Drives Bypass Hardware Disk Encryption
69. Flaw in Icecast streaming media server allows to take off online Radio Stations
70. Security researchers exploit Intel hyperthreading flaw to break encryption
71. .@ArmisSecurity researchers discovered two chip-level #Bluetooth vulnerabilities -- dubbed #Bleedingbit -- that could allow pseudo #RemoteCodeExecution on wireless access points.
72. Vulnerabilities’ CVSS scores soon to be assigned by AI
73. Cisco Products Affected By A Zero-Day SIP Inspection Vulnerability Exploited In The Wild
74. #SamSam #ransomware continues to be a thorn in the side of organizations in the U.S. with targeted ransomware campaigns continuing,
75. Researchers found #Kraken #ransomware has become more popular after being packaged in the Fallout #ExploitKit and becoming part of an
76. High severity XML external entity flaw affects Sauter building automation product
77. Security firm Armis has discovered two vulnerabilities in Bluetooth Chips from several networking industry leaders.
78. Blockhead makes blockchain easy for developers
79. Why malware attacks should no longer be a problem for businesses
80. Critical 'Bleedingbit' flaws found in microcontrollers used by Wi-Fi access points
81. Mozilla Patched Multiple Security Vulnerabilities in Thunderbird 60.3
82. Android Rat – TheFatRat to Hack and Gain access to Targeted Android Phone
83. Apple Patched Multiple XNU Kernel Vulnerabilities In MacOS And iOS
84. Scammers Ride on Popular Vote411 Voter Info Site to Push Scareware Alerts
85. The building blocks of blockchain-based digital identity
86. Companies implementing DevSecOps address vulnerabilities faster than others
87. How to Get Rid of Cortana Runtime Broker CPU Miner Virus
88. The Ultimate Guide to Bug Bounty Platforms
89. PortSmash – A New Side Channel Vulnerability in SMT/Hyper-Threading That Allows Attackers To Steal Sensitive Data
90. Security Think Tank: Three ways to safeguard against application layer vulnerabilities
91. Security Bug in Icecast Puts Online Radio Stations At Risk
92. Researchers discover new zero-day vulnerability in EDGE browser
93. Fake malicious @RSAsecurity #SecurID malware in pre-release state on @GooglePlay: - Currently gathering information (profiling) the mobile device it is installed
94. Video analysis of Android banking Trojan found on Google Play (Red Alert 2)
95. Recently there have been a lot of packed Android malware around, so I decided to write a blog-post on how

CRIME

96. Week in review: Volume of Australian data breaches continues unabated
97. Original Mirai botnet creator hit with hefty financial sentence
98. Fake Elon Musk Twitter Bitcoin Scam Earned 180K in One Day
99. Australian shipbuilder Austal hit by data breach
100. Cyber-Attacks: How to Stop a Multibillion-Dollar Problem
101. Equifax Set to Share More PII with Experian
102. Over 80,000 Facebook User Accounts Compromised
103. Cybercriminals Using SMS Phishing Attack to Rob Cardless ATM
104. Persian Stalker pillages Iranian users of Instagram and Telegram
105. Phishing attacks up by 297 percent across eCommerce in Q3 2018
106. The Ultimate Guide to Bug Bounty Platforms

POLITICS

107. Google dorks were the root cause of a catastrophic compromise of CIA’s communications
108. Kemp Investigates Dems, Not the Reported Vulnerability
109. Cyber-Attacks: How to Stop a Multibillion-Dollar Problem
110. "A lot of people in Congress are concerned that the Facebook influence campaigns are about the midterms, but to me

APT report for 2018-11-04

TRANSNATIONAL / UNKNOWN

1. Who’s In Your Online Shopping Cart?
2. Security Affairs newsletter Round 187 – News of the week

CHINA

Nil

INDIA

Nil

NORTH KOREA

3. WireGuard has not been merged into the Linux kernel mainline

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

Nil

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-11-04

WINDOWS

1. Security Affairs newsletter Round 187 – News of the week

LINUX

2. Security Affairs newsletter Round 187 – News of the week
3. WireGuard has not been merged into the Linux kernel mainline

UNIX

Nil

ANDROID

Nil

IOS

4. Security Affairs newsletter Round 187 – News of the week

MACOS

Nil

Threat report for 2018-11-04

DATA BREACH & DATA LOSS

1. PortSmash flaw in Hyper-Threading CPU could allow sensitive data theft

DENIAL-OF-SERVICE

Nil

MALVERTISING

Nil

PHISHING

2. Beware!! Cyber Criminals Stealing Cash From Cardless ATM Using SMS Phishing Attack

WEB DEFACEMENT

Nil

BOTNET

Nil

RANSOMWARE

3. Kraken ransomware 2.0 is available through the RaaS model
4. Targeted SamSam Ransomware Attacks Continues to Breaking & Lock 67 Different Organizations Network

CRYPTOMINING & CRYPTOCURRENCIES

5. Kraken ransomware 2.0 is available through the RaaS model

MALWARE

6. Week in review: Bleedingbit, nastiest malware of 2018, Cisco security appliances under attack
7. Google logins make JavaScript mandatory, Huawei China spy shock, Mac malware, Iran gets new Stuxnet, and more
8. What should you do when you realize you've click on a malicious link?

EXPLOIT

9. New Microsoft Edge Browser Zero-Day RCE Exploit in the Works

VULNERABILITY

10. Vulnerability Scanners 101
11. PortSmash flaw in Hyper-Threading CPU could allow sensitive data theft
12. New Microsoft Edge Browser Zero-Day RCE Exploit in the Works
13. Researchers recently found vulnerabilities within the robot controllers from @Universal_Robot. Learn what these #robot controllers are used for and how
14. Why Vulnerability Management Does Not Work
15. Bluetooth chip has serious security vulnerabilities that widely affect smart electronic products
16. Intel processors are vulnerable to new PortSmash side-channel vulnerability
17. New Intel CPU Flaw Exploits Hyper-Threading to Steal Encrypted Data

Region brief for 2018-11-04

ASIA

1. Security Affairs newsletter Round 187 – News of the week
2. Kraken ransomware 2.0 is available through the RaaS model
3. Google logins make JavaScript mandatory, Huawei China spy shock, Mac malware, Iran gets new Stuxnet, and more
4. Bluetooth chip has serious security vulnerabilities that widely affect smart electronic products

OCEANIA

5. Security Affairs newsletter Round 187 – News of the week

NORTH AMERICA

6. Who’s In Your Online Shopping Cart?
7. PortSmash flaw in Hyper-Threading CPU could allow sensitive data theft
8. Security Affairs newsletter Round 187 – News of the week
9. Targeted SamSam Ransomware Attacks Continues to Breaking & Lock 67 Different Organizations Network
10. Intel processors are vulnerable to new PortSmash side-channel vulnerability
11. WireGuard has not been merged into the Linux kernel mainline

SOUTH AMERICA

12. Kraken ransomware 2.0 is available through the RaaS model

EUROPE

13. Who’s In Your Online Shopping Cart?
14. PortSmash flaw in Hyper-Threading CPU could allow sensitive data theft
15. Security Affairs newsletter Round 187 – News of the week
16. Kraken ransomware 2.0 is available through the RaaS model
17. Bluetooth chip has serious security vulnerabilities that widely affect smart electronic products
18. Intel processors are vulnerable to new PortSmash side-channel vulnerability

AFRICA

19. Who’s In Your Online Shopping Cart?