Daily brief for 2018-11-07

ASIA

1. U.S. Air Force announced Hack the Air Force 3.0, the third Bug Bounty Program
2. Data Of Nearly 700,000 Amex India Customers Exposed Via Unsecured MongoDB Server
3. Amex India accounts exposed by misconfigured MongoDB installation
4. Data of nearly 700,000 Amex India customers exposed via unsecured MongoDB server
5. Weekly Threat Briefing: Scammers Ride on Popular Vote411 Voter Info Site to Push Scareware Alerts
6. Personal data of police and ministries employees leaked by Anonymous Italy
7. Linux servers and IoT devices, main targets of Shellbot botnet

WORLD

8. U.S. Air Force announced Hack the Air Force 3.0, the third Bug Bounty Program
9. Salesforce Aims to Curb Spam With Blockchain
10. Using Blockchain Technology to Solve Global Problems
11. Feds get guilty plea in 'DerpTrolling' attacks on video game sites
12. Half a Million People Potentially Affected by Data Breach at Bankers Life
13. Security Alert: New Dharma Ransomware Strains Alarmingly Go Undetected By Antivirus Engines
14. Learn About Phishing Incident Response on Nov 15
15. Hacker Leaked Unpatched Virtual Box Zero-day Vulnerability and its Exploit Online
16. HSBC Bank Data Breach Exposed Customer’s Account Details and More
17. HSBC US Customers Hit by Data Breach
18. Elon Musk Bitcoin Scammers Hijack Verified Status Accounts
19. Stop us if you've heard this one: Remote code hijacking flaw in Apache Struts, patch ASAP
20. Weekly Threat Briefing: Scammers Ride on Popular Vote411 Voter Info Site to Push Scareware Alerts
21. HSBC suffers data breach, customer banking info exposed
22. Bug bounty: Hack the US Air Force and Get Paid
23. VirtualBox zero-day published by disgruntled researcher
24. We recently detected an Android banking malware campaign (Anubis) actively targeting the Dutch market by #abusing the @PostNL brand. After
25. Personal data of police and ministries employees leaked by Anonymous Italy
26. Linux servers and IoT devices, main targets of Shellbot botnet
27. AMD and TSMC outline 7nm process products to be listed next year
28. Five Guys suffers employees’ data theft
29. Vulnerabilities in self encrypted SSD allow attackers to bypass disk encryption
30. Bitcoin Cryptojacking Attack Forces University to Disable Entire Network
31. Rushed My Health Record changes still missing the point
32. VirtualBox Zero-Day Vulnerability Details and Exploit Are Publicly Available

ATTACKS

33. New Jersey AG Announces $200,000 Settlement with Business Associate and Permanent Ban for BA’s Owner due to 2016 Data Breach Affecting Over 1,650 Patients
34. Half a Million People Potentially Affected by Data Breach at Bankers Life
35. Data Of Nearly 700,000 Amex India Customers Exposed Via Unsecured MongoDB Server
36. HSBC Bank Suffers Data Breach
37. A Phishing Incident is Being Investigated by the Carthage Police
38. Why you should use a password manager
39. Amex India accounts exposed by misconfigured MongoDB installation
40. They stopped a phishing attack in 10 minutes. It used to take days.
41. Password Grabber Module Added to Trickbot
42. Data of nearly 700,000 Amex India customers exposed via unsecured MongoDB server
43. Why Password Management and Security Strategies Fall Short
44. Learn About Phishing Incident Response on Nov 15
45. Learn why @Google chose U2F authentication over OTP to eliminate #PhishingEmails from expert Michael Cobb of @thehairyITdog.
46. Hacker Leaked Unpatched Virtual Box Zero-day Vulnerability and its Exploit Online
47. HSBC Bank Data Breach Exposed Customer’s Account Details and More
48. HSBC US Customers Hit by Data Breach
49. What do you think is the average cost of a data breach?
50. HSBC now stands for Hapless Security, Became Compromised: Thousands of customer files snatched by crims
51. ICO poised to fine Leave campaign and Arron Banks’ insurance biz £135,000
52. HSBC suffers data breach, customer banking info exposed
53. We recently detected an Android banking malware campaign (Anubis) actively targeting the Dutch market by #abusing the @PostNL brand. After
54. New dropper campaign with at least 8 droppers in #GooglePlay (30k+ installs total), found with the help of @avast_antivirus @apklabio.
55. A poor password is a key for the wrong person to get in.
56. How voting history data benefits political campaigns
57. HSBC Bank Data Breach Exposed Account Numbers, Balances, Transaction History and Other Details
58. Personal data of police and ministries employees leaked by Anonymous Italy
59. Five Guys suffers employees’ data theft
60. Rushed My Health Record changes still missing the point
61. What businesses can learn from political campaigns about using big data

THREATS

62. Uni cans crypto-mining CPU raid by switching off whole IT network
63. U.S. Air Force announced Hack the Air Force 3.0, the third Bug Bounty Program
64. Security Flaws Found in Widely Used Data Storage Devices | Avast
65. Salesforce Aims to Curb Spam With Blockchain
66. Using Blockchain Technology to Solve Global Problems
67. Cisco removed its seventh backdoor account this year, and that's a good thing
68. JavaScript attack aimed to reroute bitcoin transactions
69. 3,2 Million New Android Malicious Apps Detected Until the End of Q3 2018
70. A flaw in WooCommerce WordPress Plugin could be exploited to take over e-stores
71. Healthcare Targeted by 37 Percent of All Ransomware Attacks in Q3 2018
72. Flaw in Icecast streaming media server allows to take off online Radio Stations
73. VirtualBox zero-day dumped on GitHub
74. Security Researcher Drops VirtualBox Guest-to-Host Escape Zero-Day on GitHub
75. WordPress Flaw Opens Millions of WooCommerce Shops to Takeover
76. Rapidly Growing Router Botnet Takes Advantage of 5-Year-Old Flaw
77. Flaw Leads to RCE in WordPress Plugins, WooCommerce
78. Hacker education, inclusivity, and shifting perceptions of bug bounties
79. Apache alerts developers of remote code execution flaw
80. Evernote Flaw Allows Hackers to Steal Files, Execute Commands
81. Security Alert: New Dharma Ransomware Strains Alarmingly Go Undetected By Antivirus Engines
82. Top 20 application vulnerabilities in the enterprise are dominated by Adobe and Microsoft
83. Equifax nemesis Apache Struts found vulnerable to 2-year old unpatched flaw; workaround available
84. Rapid7 Wins Frost & Sullivan 2018 Global Vulnerability Management Market Leadership Award
85. Hacker Leaked Unpatched Virtual Box Zero-day Vulnerability and its Exploit Online
86. Zero-day flaw in VirtualBox details go public
87. Erratic Windows 10 Bug Breaks Changing of Default File Associations
88. Researcher discloses VirtualBox Zero-Day without reporting it to Oracle
89. Serious XSS flaw discovered in Evernote for Windows, update now!
90. Researchers say #Bleedingbit vulnerabilities could allow #RemoteCodeExecution on wireless access points, medical devices and any other products using the affected
91. University shuts down network to thwart Bitcoin cryptojacking scheme
92. Not sure how to tell if your Android phone has a virus? Android malware comes in many forms, ranging from spyware
93. Attackers breached Statcounter to steal cryptocurrency from gate.io users
94. Enterprises Sinking Under 100+ Critical Flaws Per Day
95. #SamSam #ransomware targeted 67 organizations in 2018, according to @symantec research. By @MaddieBacon11
96. WordPress, WooCommerce flaws combine to allow website hijacking
97. How to Remove NOBAD Ransomware
98. Elon Musk Bitcoin Scammers Hijack Verified Status Accounts
99. Apache Struts vulnerability would allow system take over
100. #Kraken #ransomware as a service is getting more popular after being bundled into the Fallout #ExploitKit and getting more update
101. Up to 4 million online merchants who use the popular @WooCommerce #WordPress plugin are vulnerable to a file deletion flaw.
102. Researcher Drops Oracle VirtualBox Zero-Day
103. Stop us if you've heard this one: Remote code hijacking flaw in Apache Struts, patch ASAP
104. Hackers seed StatCounter with nasty JavaScript in elaborate Bitcoin theft scheme
105. Weekly Threat Briefing: Scammers Ride on Popular Vote411 Voter Info Site to Push Scareware Alerts
106. Blockchain: The Good, the Bad and the Legal
107. Managing Third-Party Risk in the Age of Ransomware
108. Bug bounty: Hack the US Air Force and Get Paid
109. Microsoft, Google apps feature in the top 20 vulnerabilities in enterprise environments
110. VirtualBox zero-day published by disgruntled researcher
111. A fresh #botnet is rapidly growing by targeting a five-year-old #vulnerability. So far, @360Netlab said hundreds of thousands of bot
112. .@Siemens SICLOCK central plant clocks were recently found to be affected by several vulnerabilities, some of which have been rated
113. New cryptocurrencies offer better anonymity, new security challenges, from @CSOonline http://0fox.co/sSmx30i8vm4 ZeroFOX CTO weighs in on the #infosec challenges
114. Apache Struts users have to update FileUpload library to fix years-old flaws
115. On the #blog today, we talk about how fileless malware is changing the way we as organizations treats #cyberthreats.
116. Zero-Day #Vulnerability Explained
117. November Android Security Update Fixes Critical Bugs, Drops Media Library
118. We recently detected an Android banking malware campaign (Anubis) actively targeting the Dutch market by #abusing the @PostNL brand. After
119. New dropper campaign with at least 8 droppers in #GooglePlay (30k+ installs total), found with the help of @avast_antivirus @apklabio.
120. Coupa Simplifies Fragmented B2B Payments Process
121. Researcher publishes new VirtualBox zero-day vulnerability
122. Turning Malware Trends into Proactive Behaviors
123. DHS on Election Day: No malicious cyber-activity observed
124. AMD and TSMC outline 7nm process products to be listed next year
125. Vulnerabilities in self encrypted SSD allow attackers to bypass disk encryption
126. #Virtualbox hat eine #Zeroday Sicherheitslücke. Tipp: Ändern Sie Ihren virtuellen Netzwerkadapter auf etwas anderes als Intel PRO/1000.
127. Bitcoin Cryptojacking Attack Forces University to Disable Entire Network
128. Popular WooCommerce WordPress Plugin Patches Critical Vulnerability
129. Google's automated fuzz bot has found over 9,000 bugs in the past two years
130. VirtualBox Zero-Day Vulnerability Details and Exploit Are Publicly Available
131. Researchers rank cryptocurrency exchanges by how secure they are

CRIME

132. Feds get guilty plea in 'DerpTrolling' attacks on video game sites
133. JavaScript attack aimed to reroute bitcoin transactions
134. A Phishing Incident is Being Investigated by the Carthage Police
135. They stopped a phishing attack in 10 minutes. It used to take days.
136. HSBC Bank Data Breach Exposed Customer’s Account Details and More
137. University shuts down network to thwart Bitcoin cryptojacking scheme
138. Attackers breached Statcounter to steal cryptocurrency from gate.io users
139. HSBC US Customers Hit by Data Breach
140. Elon Musk Bitcoin Scammers Hijack Verified Status Accounts
141. Hackers seed StatCounter with nasty JavaScript in elaborate Bitcoin theft scheme
142. Weekly Threat Briefing: Scammers Ride on Popular Vote411 Voter Info Site to Push Scareware Alerts
143. Blockchain: The Good, the Bad and the Legal
144. Coupa Simplifies Fragmented B2B Payments Process
145. Five Guys suffers employees’ data theft

POLITICS

146. Weekly Threat Briefing: Scammers Ride on Popular Vote411 Voter Info Site to Push Scareware Alerts
147. DHS on Election Day: No malicious cyber-activity observed
148. Personal data of police and ministries employees leaked by Anonymous Italy
149. Vulnerabilities in self encrypted SSD allow attackers to bypass disk encryption

APT report for 2018-11-06

TRANSNATIONAL / UNKNOWN

1. Magecart infiltrates UK online retailer Kitronik payment system

CHINA

2. Intel responds to the Epyc server threat from AMD

INDIA

3. Tech companies offered free products to help secure the election. Now what?

NORTH KOREA

4. Group-IB and CryptoIns introduce the world’s first insurance against cyber threats for cryptocurrency exchanges
5. Worst malware and threat actors of 2018 so far

PAKISTAN

Nil

VIETNAM

Nil

IRAN

6. Fake Telegram Apps Used to Spy on Iranian Users
7. Worst malware and threat actors of 2018 so far

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

8. Compromising vital infrastructure: transport and logistics
9. Worst malware and threat actors of 2018 so far
10. Nation states sponsoring increasingly sophisticated cyber attacks

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-11-06

WINDOWS

1. Flaws in several self-encrypting SSDs allows attackers to decrypt data they contain
2. Malware Execution via Microsoft Word Embedded Video
3. Evernote for Windows patch resolves stored XSS vulnerability
4. Spam and phishing in Q3 2018
5. Worst malware and threat actors of 2018 so far
6. Shellbot Botnet Targets IoT devices and Linux servers

LINUX

7. Shellbot Botnet Targets IoT devices and Linux servers

UNIX

Nil

ANDROID

8. Android November update fixes flaws galore
9. Shellbot Botnet Targets IoT devices and Linux servers
10. #ThreatFabric discovers #NeoBot Android Banking Trojan (#Exobot spawn) in #GooglePlay with 10,000+ installs Please contact us if your interested in
11. Symantec acquires Appthority to enhance protection from mobile application vulnerabilities

IOS

12. Spam and phishing in Q3 2018
13. Apple Patches Critical iOS, macOS and watchOS Flaws
14. Symantec acquires Appthority to enhance protection from mobile application vulnerabilities

MACOS

15. Backdoors Installed via macOS Cryptocurrency App
16. Apple Patches Critical iOS, macOS and watchOS Flaws

Threat report for 2018-11-06

DATA BREACH & DATA LOSS

1. HSBC Data Breach Hits Online Banking Customers
2. My Health Record data misuse penalties raised
3. Holiday Suppliers Already Under Assault by Fileless Malware Campaign
4. Election Day: Five Security Experts Conclude that Georgia’s Online Voter Database is Easily Hackable
5. HSBC Bank Confirms US Data Breach
6. UK Regulator Calls for Tougher Rules on Personal Data Use
7. HSBC Bank USA Warns Customers of Data Breach
8. HSBC Bank Data Breach Exposed Account Numbers, Balances, and More
9. Samsung, Crucial’s Flawed Storage Drive Encryption Leaves Data Exposed
10. Why business can't keep the public safe from data breaches
11. It’s thought that the private message data was obtained via a malicious browser extension that scraped the data from users’
12. Alert: Emotet is Back with Major Spam Campaign, Email Exfiltration Module
13. Azorult Malware Spread by New Ramnit Campaign
14. Pocket iNet ISP Exposed 73GB of Corporate Data Online
15. HSBC Bank Notifies Customers of Data Breach
16. Business email compromise made easy for cybercriminals as 12.5 million company email inboxes and 33,000 finance department credentials openly accessible
17. Wealthy Moscow residents' data leaked in Akado Telecom incident
18. New attack by Anonymous Italy: personal data from ministries and police have been released online

DENIAL-OF-SERVICE

Nil

MALVERTISING

Nil

PHISHING

19. ThreatList: Despite Fraud Awareness, Password Reuse Persists for Half of U.S. Consumers
20. Zombie Phish
21. Login VSI announces Release 3 of Login PI for proactive monitoring
22. Spam and phishing in Q3 2018
23. GPU side channel attacks can enable spying on web activity, password stealing
24. Our crucible SoC OTP fusing tool now support graphical mapping of fusemap definition files. This, other than being very pretty, facilitates
25. Social Media Brand Impersonators Go #Phishing: 3 Emerging Tactics from ZeroFOX Research
26. Gift Card Phishing Scam Using Email Addresses of Bosses’ is Latest Trend Adopted by Scammers
27. Samsung & Crucial Storage Device Vulnerability Allow Attackers to Break the Password & Access the Entire Device Data
28. Just half of Fortune 500 companies have installed DMARC, a tool that guards against email phishing scams, according to new

WEB DEFACEMENT

29. Anonymous Hackers Syndicate Defaces Huge Number of Websites of Gabon Government

BOTNET

30. Zombie Phish
31. VB2018 paper: Uncovering the wholesale industry of social media fraud: from botnet to bulk reseller panels
32. Shellbot Botnet Targets IoT devices and Linux servers

RANSOMWARE

33. Ransomware Keeps Ringing in Profits for Cybercrime Rings
34. New ransomware spotted using DiskCryptor
35. We're hosting a lunch and learn event geared towards endpoint #security and #ransomware, with technology partner @SentinelOne. Please join us on

CRYPTOMINING & CRYPTOCURRENCIES

36. Group-IB and CryptoIns introduce the world’s first insurance against cyber threats for cryptocurrency exchanges
37. Hackers Breach StatCounter To Hijack Bitcoin Transactions
38. StatCounter Hacked to Inject Malicious Script in gate.io Cryptocurrency Exchange
39. VMware Unveils New Blockchain Service
40. Hackers breach StatCounter to hijack Bitcoin transactions on Gate.io exchange
41. Backdoors Installed via macOS Cryptocurrency App
42. Supply-chain attack on cryptocurrency exchange
43. Supply-chain attack on cryptocurrency exchange
44. Why are fake Elon Musk bitcoin scams running rife on Twitter right now?
45. How IAM is Evolving in the Blockchain Era
46. A Blockchain Solution for Data Provenance Using Hyperledger Fabric
47. Watch Out for the “Programmer Who Cracked Your Email” Bitcoin Scam

MALWARE

48. US DoD’s first malware submissions to Google-bought VirusTotal is Russia-linked LoJack
49. Holiday Suppliers Already Under Assault by Fileless Malware Campaign
50. StatCounter Hacked to Inject Malicious Script in gate.io Cryptocurrency Exchange
51. It’s thought that the private message data was obtained via a malicious browser extension that scraped the data from users’
52. Malware Execution via Microsoft Word Embedded Video
53. Azorult Malware Spread by New Ramnit Campaign
54. Private messages from 81,000 hacked Facebook accounts were for sale online. The information was obtained through malicious browser extensions, such as
55. Worst malware and threat actors of 2018 so far
56. #ThreatFabric discovers #NeoBot Android Banking Trojan (#Exobot spawn) in #GooglePlay with 10,000+ installs Please contact us if your interested in

EXPLOIT

57. Exploit Developer Discovers Zero-Day Microsoft Edge Vulnerability Triggering RCE Attacks

VULNERABILITY

58. Apache Struts Vulnerability Would Allow System Takeover
59. Hack the Air Force 3.0 Bug Bounty Announced by USAF
60. Android November update fixes flaws galore
61. Zero-Day Vulnerability Explained
62. WordPress Design Flaw + WooCommerce Vulnerability Leads to Site Takeover
63. Flaws in several self-encrypting SSDs allows attackers to decrypt data they contain
64. Side-Channel Vulnerability PortSmash Steals Keys
65. Apache Struts Warns Users of Two-Year-Old Vulnerability
66. Apache Struts Warns Users of Two-Year-Old Vulnerability
67. Apache Struts 2.3.x vulnerable to two year old RCE flaw
68. IBM Watson will be used by NIST to assign CVSS scores to vulnerabilities
69. Security firm Armis has discovered two vulnerabilities in Bluetooth Chips from several networking industry leaders.
70. Hidden Costs of IoT Vulnerabilities
71. Evernote for Windows patch resolves stored XSS vulnerability
72. Exploit Developer Discovers Zero-Day Microsoft Edge Vulnerability Triggering RCE Attacks
73. How testing perspectives helps find application security flaws
74. PortSmash Side-Channel Vulnerability – Another Threat For Intel CPUs
75. U.S. Air Force Announces Third Bug Bounty Program
76. CVE-2018-11759: Apache mod_jk Access Control Bypass Vulnerability
77. High risk vulnerability discovered in Sauter CASE Suite building automation software
78. Apache Struts Team Urges Users for Library Update to Plug Years-Old Bugs
79. Samsung & Crucial Storage Device Vulnerability Allow Attackers to Break the Password & Access the Entire Device Data
80. Flaws in Popular Self-Encrypting SSDs Let Attackers Decrypt Data
81. Apple Patches Critical iOS, macOS and watchOS Flaws
82. Multiple Cisco Vulnerabilities Threat Alert
83. Vulnerability in Icecast can collapse online radio stations
84. Two zero-day vulnerabilities expose millions of access points
85. Gitlab v11.4.5 release: fix bugs
86. Symantec acquires Appthority to enhance protection from mobile application vulnerabilities

Region brief for 2018-11-06

ASIA

1. Group-IB and CryptoIns introduce the world’s first insurance against cyber threats for cryptocurrency exchanges
2. Fake Telegram Apps Used to Spy on Iranian Users
3. Spam and phishing in Q3 2018
4. Worst malware and threat actors of 2018 so far
5. Shellbot Botnet Targets IoT devices and Linux servers
6. Nation states sponsoring increasingly sophisticated cyber attacks
7. New attack by Anonymous Italy: personal data from ministries and police have been released online
8. Multiple Cisco Vulnerabilities Threat Alert

OCEANIA

9. Spam and phishing in Q3 2018

NORTH AMERICA

10. US DoD’s first malware submissions to Google-bought VirusTotal is Russia-linked LoJack
11. Hack the Air Force 3.0 Bug Bounty Announced by USAF
12. ThreatList: Despite Fraud Awareness, Password Reuse Persists for Half of U.S. Consumers
13. Group-IB and CryptoIns introduce the world’s first insurance against cyber threats for cryptocurrency exchanges
14. HSBC Bank Confirms US Data Breach
15. Compromising vital infrastructure: transport and logistics
16. HSBC Bank USA Warns Customers of Data Breach
17. Pocket iNet ISP Exposed 73GB of Corporate Data Online
18. Tech companies offered free products to help secure the election. Now what?
19. Spam and phishing in Q3 2018
20. We're hosting a lunch and learn event geared towards endpoint #security and #ransomware, with technology partner @SentinelOne. Please join us on
21. U.S. Air Force Announces Third Bug Bounty Program
22. Nation states sponsoring increasingly sophisticated cyber attacks
23. New attack by Anonymous Italy: personal data from ministries and police have been released online
24. Two zero-day vulnerabilities expose millions of access points
25. #ThreatFabric discovers #NeoBot Android Banking Trojan (#Exobot spawn) in #GooglePlay with 10,000+ installs Please contact us if your interested in

SOUTH AMERICA

26. Spam and phishing in Q3 2018

EUROPE

27. US DoD’s first malware submissions to Google-bought VirusTotal is Russia-linked LoJack
28. Election Day: Five Security Experts Conclude that Georgia’s Online Voter Database is Easily Hackable
29. Group-IB and CryptoIns introduce the world’s first insurance against cyber threats for cryptocurrency exchanges
30. UK Regulator Calls for Tougher Rules on Personal Data Use
31. Compromising vital infrastructure: transport and logistics
32. Flaws in several self-encrypting SSDs allows attackers to decrypt data they contain
33. Side-Channel Vulnerability PortSmash Steals Keys
34. Magecart infiltrates UK online retailer Kitronik payment system
35. Spam and phishing in Q3 2018
36. Worst malware and threat actors of 2018 so far
37. Wealthy Moscow residents' data leaked in Akado Telecom incident
38. Shellbot Botnet Targets IoT devices and Linux servers
39. Nation states sponsoring increasingly sophisticated cyber attacks
40. New attack by Anonymous Italy: personal data from ministries and police have been released online

AFRICA

41. Anonymous Hackers Syndicate Defaces Huge Number of Websites of Gabon Government

Sector brief for 2018-11-06

HEALTHCARE

1. Ransomware Keeps Ringing in Profits for Cybercrime Rings

TRANSPORT

2. Compromising vital infrastructure: transport and logistics
3. Zero-Day Vulnerability Explained
4. Nation states sponsoring increasingly sophisticated cyber attacks

BANKING & FINANCE

5. HSBC Data Breach Hits Online Banking Customers
6. HSBC Bank Confirms US Data Breach
7. HSBC Bank USA Warns Customers of Data Breach
8. HSBC Bank Data Breach Exposed Account Numbers, Balances, and More
9. Zero-Day Vulnerability Explained
10. Supply-chain attack on cryptocurrency exchange
11. Supply-chain attack on cryptocurrency exchange
12. HSBC Bank Notifies Customers of Data Breach
13. Business email compromise made easy for cybercriminals as 12.5 million company email inboxes and 33,000 finance department credentials openly accessible
14. Spam and phishing in Q3 2018
15. Worst malware and threat actors of 2018 so far
16. Nation states sponsoring increasingly sophisticated cyber attacks
17. #ThreatFabric discovers #NeoBot Android Banking Trojan (#Exobot spawn) in #GooglePlay with 10,000+ installs Please contact us if your interested in

INFORMATION & TELECOMMUNICATION

18. Compromising vital infrastructure: transport and logistics
19. Zero-Day Vulnerability Explained
20. It’s thought that the private message data was obtained via a malicious browser extension that scraped the data from users’
21. Pocket iNet ISP Exposed 73GB of Corporate Data Online
22. Why are fake Elon Musk bitcoin scams running rife on Twitter right now?
23. Intel responds to the Epyc server threat from AMD
24. Fake Telegram Apps Used to Spy on Iranian Users
25. Business email compromise made easy for cybercriminals as 12.5 million company email inboxes and 33,000 finance department credentials openly accessible
26. Security firm Armis has discovered two vulnerabilities in Bluetooth Chips from several networking industry leaders.
27. Spam and phishing in Q3 2018
28. Private messages from 81,000 hacked Facebook accounts were for sale online. The information was obtained through malicious browser extensions, such as
29. Our crucible SoC OTP fusing tool now support graphical mapping of fusemap definition files. This, other than being very pretty, facilitates
30. Shellbot Botnet Targets IoT devices and Linux servers
31. Vulnerability in Icecast can collapse online radio stations
32. #ThreatFabric discovers #NeoBot Android Banking Trojan (#Exobot spawn) in #GooglePlay with 10,000+ installs Please contact us if your interested in
33. Just half of Fortune 500 companies have installed DMARC, a tool that guards against email phishing scams, according to new

FOOD

Nil

WATER

34. Spam and phishing in Q3 2018

ENERGY

35. High risk vulnerability discovered in Sauter CASE Suite building automation software
36. Multiple Cisco Vulnerabilities Threat Alert
37. Two zero-day vulnerabilities expose millions of access points

GOVERNMENT & PUBLIC SERVICE

38. US DoD’s first malware submissions to Google-bought VirusTotal is Russia-linked LoJack
39. Election Day: Five Security Experts Conclude that Georgia’s Online Voter Database is Easily Hackable
40. UK Regulator Calls for Tougher Rules on Personal Data Use
41. Compromising vital infrastructure: transport and logistics
42. Fake Telegram Apps Used to Spy on Iranian Users
43. Tech companies offered free products to help secure the election. Now what?
44. A Blockchain Solution for Data Provenance Using Hyperledger Fabric
45. Shellbot Botnet Targets IoT devices and Linux servers
46. U.S. Air Force Announces Third Bug Bounty Program
47. Nation states sponsoring increasingly sophisticated cyber attacks
48. Anonymous Hackers Syndicate Defaces Huge Number of Websites of Gabon Government
49. New attack by Anonymous Italy: personal data from ministries and police have been released online

Daily brief for 2018-11-06

ASIA

1. Group-IB and CryptoIns introduce the world’s first insurance against cyber threats for cryptocurrency exchanges
2. Fake Telegram Apps Used to Spy on Iranian Users
3. Spam and phishing in Q3 2018
4. Worst malware and threat actors of 2018 so far
5. Shellbot Botnet Targets IoT devices and Linux servers
6. Nation states sponsoring increasingly sophisticated cyber attacks
7. New attack by Anonymous Italy: personal data from ministries and police have been released online
8. Multiple Cisco Vulnerabilities Threat Alert

WORLD

9. US DoD’s first malware submissions to Google-bought VirusTotal is Russia-linked LoJack
10. Hack the Air Force 3.0 Bug Bounty Announced by USAF
11. ThreatList: Despite Fraud Awareness, Password Reuse Persists for Half of U.S. Consumers
12. Election Day: Five Security Experts Conclude that Georgia’s Online Voter Database is Easily Hackable
13. Group-IB and CryptoIns introduce the world’s first insurance against cyber threats for cryptocurrency exchanges
14. HSBC Bank Confirms US Data Breach
15. UK Regulator Calls for Tougher Rules on Personal Data Use
16. Compromising vital infrastructure: transport and logistics
17. HSBC Bank USA Warns Customers of Data Breach
18. Flaws in several self-encrypting SSDs allows attackers to decrypt data they contain
19. Side-Channel Vulnerability PortSmash Steals Keys
20. Pocket iNet ISP Exposed 73GB of Corporate Data Online
21. Tech companies offered free products to help secure the election. Now what?
22. Magecart infiltrates UK online retailer Kitronik payment system
23. Spam and phishing in Q3 2018
24. Worst malware and threat actors of 2018 so far
25. Wealthy Moscow residents' data leaked in Akado Telecom incident
26. We're hosting a lunch and learn event geared towards endpoint #security and #ransomware, with technology partner @SentinelOne. Please join us on
27. Shellbot Botnet Targets IoT devices and Linux servers
28. U.S. Air Force Announces Third Bug Bounty Program
29. Nation states sponsoring increasingly sophisticated cyber attacks
30. Anonymous Hackers Syndicate Defaces Huge Number of Websites of Gabon Government
31. New attack by Anonymous Italy: personal data from ministries and police have been released online
32. Two zero-day vulnerabilities expose millions of access points
33. #ThreatFabric discovers #NeoBot Android Banking Trojan (#Exobot spawn) in #GooglePlay with 10,000+ installs Please contact us if your interested in

ATTACKS

34. HSBC Data Breach Hits Online Banking Customers
35. My Health Record data misuse penalties raised
36. Holiday Suppliers Already Under Assault by Fileless Malware Campaign
37. ThreatList: Despite Fraud Awareness, Password Reuse Persists for Half of U.S. Consumers
38. Election Day: Five Security Experts Conclude that Georgia’s Online Voter Database is Easily Hackable
39. HSBC Bank Confirms US Data Breach
40. UK Regulator Calls for Tougher Rules on Personal Data Use
41. HSBC Bank USA Warns Customers of Data Breach
42. HSBC Bank Data Breach Exposed Account Numbers, Balances, and More
43. Samsung, Crucial’s Flawed Storage Drive Encryption Leaves Data Exposed
44. Why business can't keep the public safe from data breaches
45. It’s thought that the private message data was obtained via a malicious browser extension that scraped the data from users’
46. Alert: Emotet is Back with Major Spam Campaign, Email Exfiltration Module
47. Zombie Phish
48. Azorult Malware Spread by New Ramnit Campaign
49. Login VSI announces Release 3 of Login PI for proactive monitoring
50. Pocket iNet ISP Exposed 73GB of Corporate Data Online
51. HSBC Bank Notifies Customers of Data Breach
52. Business email compromise made easy for cybercriminals as 12.5 million company email inboxes and 33,000 finance department credentials openly accessible
53. Spam and phishing in Q3 2018
54. Wealthy Moscow residents' data leaked in Akado Telecom incident
55. GPU side channel attacks can enable spying on web activity, password stealing
56. Our crucible SoC OTP fusing tool now support graphical mapping of fusemap definition files. This, other than being very pretty, facilitates
57. Social Media Brand Impersonators Go #Phishing: 3 Emerging Tactics from ZeroFOX Research
58. Gift Card Phishing Scam Using Email Addresses of Bosses’ is Latest Trend Adopted by Scammers
59. New attack by Anonymous Italy: personal data from ministries and police have been released online
60. Samsung & Crucial Storage Device Vulnerability Allow Attackers to Break the Password & Access the Entire Device Data
61. Just half of Fortune 500 companies have installed DMARC, a tool that guards against email phishing scams, according to new

THREATS

62. US DoD’s first malware submissions to Google-bought VirusTotal is Russia-linked LoJack
63. Apache Struts Vulnerability Would Allow System Takeover
64. Hack the Air Force 3.0 Bug Bounty Announced by USAF
65. Android November update fixes flaws galore
66. Holiday Suppliers Already Under Assault by Fileless Malware Campaign
67. Group-IB and CryptoIns introduce the world’s first insurance against cyber threats for cryptocurrency exchanges
68. Hackers Breach StatCounter To Hijack Bitcoin Transactions
69. StatCounter Hacked to Inject Malicious Script in gate.io Cryptocurrency Exchange
70. VMware Unveils New Blockchain Service
71. Hackers breach StatCounter to hijack Bitcoin transactions on Gate.io exchange
72. Zero-Day Vulnerability Explained
73. WordPress Design Flaw + WooCommerce Vulnerability Leads to Site Takeover
74. Flaws in several self-encrypting SSDs allows attackers to decrypt data they contain
75. It’s thought that the private message data was obtained via a malicious browser extension that scraped the data from users’
76. Backdoors Installed via macOS Cryptocurrency App
77. Malware Execution via Microsoft Word Embedded Video
78. Azorult Malware Spread by New Ramnit Campaign
79. Supply-chain attack on cryptocurrency exchange
80. Supply-chain attack on cryptocurrency exchange
81. Side-Channel Vulnerability PortSmash Steals Keys
82. Apache Struts Warns Users of Two-Year-Old Vulnerability
83. Why are fake Elon Musk bitcoin scams running rife on Twitter right now?
84. Apache Struts Warns Users of Two-Year-Old Vulnerability
85. Apache Struts 2.3.x vulnerable to two year old RCE flaw
86. IBM Watson will be used by NIST to assign CVSS scores to vulnerabilities
87. Security firm Armis has discovered two vulnerabilities in Bluetooth Chips from several networking industry leaders.
88. Hidden Costs of IoT Vulnerabilities
89. Evernote for Windows patch resolves stored XSS vulnerability
90. Ransomware Keeps Ringing in Profits for Cybercrime Rings
91. How IAM is Evolving in the Blockchain Era
92. A Blockchain Solution for Data Provenance Using Hyperledger Fabric
93. Private messages from 81,000 hacked Facebook accounts were for sale online. The information was obtained through malicious browser extensions, such as
94. New ransomware spotted using DiskCryptor
95. Exploit Developer Discovers Zero-Day Microsoft Edge Vulnerability Triggering RCE Attacks
96. How testing perspectives helps find application security flaws
97. Worst malware and threat actors of 2018 so far
98. We're hosting a lunch and learn event geared towards endpoint #security and #ransomware, with technology partner @SentinelOne. Please join us on
99. PortSmash Side-Channel Vulnerability – Another Threat For Intel CPUs
100. U.S. Air Force Announces Third Bug Bounty Program
101. CVE-2018-11759: Apache mod_jk Access Control Bypass Vulnerability
102. High risk vulnerability discovered in Sauter CASE Suite building automation software
103. Apache Struts Team Urges Users for Library Update to Plug Years-Old Bugs
104. Samsung & Crucial Storage Device Vulnerability Allow Attackers to Break the Password & Access the Entire Device Data
105. Flaws in Popular Self-Encrypting SSDs Let Attackers Decrypt Data
106. Apple Patches Critical iOS, macOS and watchOS Flaws
107. Watch Out for the “Programmer Who Cracked Your Email” Bitcoin Scam
108. Multiple Cisco Vulnerabilities Threat Alert
109. Vulnerability in Icecast can collapse online radio stations
110. Two zero-day vulnerabilities expose millions of access points
111. Gitlab v11.4.5 release: fix bugs
112. #ThreatFabric discovers #NeoBot Android Banking Trojan (#Exobot spawn) in #GooglePlay with 10,000+ installs Please contact us if your interested in
113. Symantec acquires Appthority to enhance protection from mobile application vulnerabilities

CRIME

114. ThreatList: Despite Fraud Awareness, Password Reuse Persists for Half of U.S. Consumers
115. Hackers Breach StatCounter To Hijack Bitcoin Transactions
116. Hackers breach StatCounter to hijack Bitcoin transactions on Gate.io exchange
117. Zero-Day Vulnerability Explained
118. Tech companies offered free products to help secure the election. Now what?
119. Business email compromise made easy for cybercriminals as 12.5 million company email inboxes and 33,000 finance department credentials openly accessible
120. Magecart infiltrates UK online retailer Kitronik payment system
121. Ransomware Keeps Ringing in Profits for Cybercrime Rings
122. Spam and phishing in Q3 2018
123. A Blockchain Solution for Data Provenance Using Hyperledger Fabric
124. Nation states sponsoring increasingly sophisticated cyber attacks
125. Gift Card Phishing Scam Using Email Addresses of Bosses’ is Latest Trend Adopted by Scammers
126. Watch Out for the “Programmer Who Cracked Your Email” Bitcoin Scam

POLITICS

127. Election Day: Five Security Experts Conclude that Georgia’s Online Voter Database is Easily Hackable
128. Compromising vital infrastructure: transport and logistics
129. Flaws in several self-encrypting SSDs allows attackers to decrypt data they contain
130. Pocket iNet ISP Exposed 73GB of Corporate Data Online
131. Fake Telegram Apps Used to Spy on Iranian Users
132. Tech companies offered free products to help secure the election. Now what?
133. Spam and phishing in Q3 2018
134. GPU side channel attacks can enable spying on web activity, password stealing
135. Nation states sponsoring increasingly sophisticated cyber attacks
136. New attack by Anonymous Italy: personal data from ministries and police have been released online

APT report for 2018-11-05

TRANSNATIONAL / UNKNOWN

1. Magecart Infiltrates U.K. Online Retailer Kitronik POS
2. Magecart Strikes Again, and Kitronik Is Latest Victim

CHINA

Nil

INDIA

Nil

NORTH KOREA

Nil

PAKISTAN

Nil

VIETNAM

Nil

IRAN

3. Persian Stalker pillages Iranian users of Instagram and Telegram

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

4. OPNids Integrates Machine Learning Into Open-Source Suricata IDS

SERBIA

Nil

UKRAINE

5. Cyber-Attacks: How to Stop a Multibillion-Dollar Problem

Platform report for 2018-11-05

WINDOWS

1. Inception Group Uses POWERSHOWER Backdoor in Two-Stage Spear Phishing Attacks
2. Shellbot Botnet Targets Linux, Android Devices
3. Inception Attackers Target Europe with Year-old Office Vulnerability
4. Android Rat – TheFatRat to Hack and Gain access to Targeted Android Phone

LINUX

5. Shellbot Botnet Targets Linux, Android Devices
6. Android Rat – TheFatRat to Hack and Gain access to Targeted Android Phone

UNIX

Nil

ANDROID

7. Shellbot Botnet Targets Linux, Android Devices
8. Blockhead makes blockchain easy for developers
9. Persian Stalker pillages Iranian users of Instagram and Telegram
10. Android Rat – TheFatRat to Hack and Gain access to Targeted Android Phone
11. Video analysis of Android banking Trojan found on Google Play (Red Alert 2)
12. Recently there have been a lot of packed Android malware around, so I decided to write a blog-post on how

IOS

13. Persian Stalker pillages Iranian users of Instagram and Telegram
14. Apple Patched Multiple XNU Kernel Vulnerabilities In MacOS And iOS

MACOS

15. Inside SearchPageInstaller | macOS Malware Deploys a MITM Attack
16. Apple Patched Multiple XNU Kernel Vulnerabilities In MacOS And iOS

Threat report for 2018-11-05

DATA BREACH & DATA LOSS

1. Week in review: Volume of Australian data breaches continues unabated
2. Google dorks were the root cause of a catastrophic compromise of CIA’s communications
3. Your personal data is widely available to hackers
4. This Tool Shows Exposed Cameras Around Your Neighborhood
5. New Side-Channel Vulnerability Leaks Sensitive Data From Intel Chips
6. Akado Telecom Accidentally Leaks Customers' Names, Phone Numbers, And Addresses
7. Australian shipbuilder Austal hit by data breach
8. Equifax Set to Share More PII with Experian
9. #SamSam #ransomware continues to be a thorn in the side of organizations in the U.S. with targeted ransomware campaigns continuing,
10. National biometric database could be on the way (and in private hands)
11. Over 80,000 Facebook User Accounts Compromised
12. "If an organization created #DMARC records for the first time, it would encounter syntax and content issues -- one of
13. Kemp Cites Voter Database Hacking Attempt, Gives No Evidence
14. "A lot of people in Congress are concerned that the Facebook influence campaigns are about the midterms, but to me
15. "Shipbuilder Austal Ltd said on Thursday its Australian business had detected and responded to a data breach"

DENIAL-OF-SERVICE

16. What were the DDoS numbers for Q2 & Q3 2018?
17. A cybersecurity lesson: educational sites suffer rise in DDoS attacks in Q3

MALVERTISING

Nil

PHISHING

18. Almost 300 Percent Increase in eCommerce Phishing Attacks in Q3 2018
19. Inception Group Uses POWERSHOWER Backdoor in Two-Stage Spear Phishing Attacks
20. How to use Firefox Master Password.
21. Why you should be using a password manager
22. How did @Google eliminate successful #PhishingAttacks? Learn how employees used U2F authentication and physical #SecurityKeys to defend against phishing from
23. Password Constraints and Their Unintended Security Consequences
24. Cybercriminals Using SMS Phishing Attack to Rob Cardless ATM
25. How can U2F authentication end phishing attacks?
26. Phishing attacks up by 297 percent across eCommerce in Q3 2018

WEB DEFACEMENT

Nil

BOTNET

27. Shellbot Botnet Targets Linux, Android Devices
28. Original Mirai botnet creator hit with hefty financial sentence

RANSOMWARE

29. #SamSam #ransomware continues to be a thorn in the side of organizations in the U.S. with targeted ransomware campaigns continuing,
30. Researchers found #Kraken #ransomware has become more popular after being packaged in the Fallout #ExploitKit and becoming part of an

CRYPTOMINING & CRYPTOCURRENCIES

31. No, blockchain isn't the answer to our voting system woes
32. Fake Elon Musk Twitter Bitcoin Scam Earned 180K in One Day
33. Another wave of Elon Musk bitcoin scams spread by verified Twitter accounts
34. Researchers found #Kraken #ransomware has become more popular after being packaged in the Fallout #ExploitKit and becoming part of an
35. Blockhead makes blockchain easy for developers
36. The building blocks of blockchain-based digital identity

MALWARE

37. Inception Group Uses POWERSHOWER Backdoor in Two-Stage Spear Phishing Attacks
38. Inside SearchPageInstaller | macOS Malware Deploys a MITM Attack
39. Malware of the 1980s: Looking back at the Brain Virus and the Morris Worm
40. Why malware attacks should no longer be a problem for businesses
41. Android Rat – TheFatRat to Hack and Gain access to Targeted Android Phone
42. Scammers Ride on Popular Vote411 Voter Info Site to Push Scareware Alerts
43. How to Get Rid of Cortana Runtime Broker CPU Miner Virus
44. Fake malicious @RSAsecurity #SecurID malware in pre-release state on @GooglePlay: - Currently gathering information (profiling) the mobile device it is installed
45. Video analysis of Android banking Trojan found on Google Play (Red Alert 2)
46. Recently there have been a lot of packed Android malware around, so I decided to write a blog-post on how

EXPLOIT

47. PoC Available for Microsoft Edge Zero-Day RCE, Exploit Under Development
48. Security researchers exploit Intel hyperthreading flaw to break encryption

VULNERABILITY

49. Apache warns Struts 2.3 is using a library with a two year old critical flaw
50. Online Radio Stations at Risk from Icecast Flaw
51. PoC Available for Microsoft Edge Zero-Day RCE, Exploit Under Development
52. Flaws In Self-Encrypting SSDs Let Attackers Bypass Encryption
53. New Side-Channel Vulnerability Leaks Sensitive Data From Intel Chips
54. Why Are Deserialization Vulnerabilities So Popular?
55. Flaws in self-encrypting SSDs let attackers bypass disk encryption
56. [SingCERT] Technical Advisory on Vulnerabilities in Bluetooth Low Energy Chips by Texas Instruments (CVE-2018-16986 and CVE-2018-7080)
57. Inception Attackers Target Europe with Year-old Office Vulnerability
58. Kemp Investigates Dems, Not the Reported Vulnerability
59. Flaws in Popular SSD Drives Bypass Hardware Disk Encryption
60. Flaw in Icecast streaming media server allows to take off online Radio Stations
61. Security researchers exploit Intel hyperthreading flaw to break encryption
62. .@ArmisSecurity researchers discovered two chip-level #Bluetooth vulnerabilities -- dubbed #Bleedingbit -- that could allow pseudo #RemoteCodeExecution on wireless access points.
63. Vulnerabilities’ CVSS scores soon to be assigned by AI
64. Cisco Products Affected By A Zero-Day SIP Inspection Vulnerability Exploited In The Wild
65. High severity XML external entity flaw affects Sauter building automation product
66. Security firm Armis has discovered two vulnerabilities in Bluetooth Chips from several networking industry leaders.
67. Critical 'Bleedingbit' flaws found in microcontrollers used by Wi-Fi access points
68. Mozilla Patched Multiple Security Vulnerabilities in Thunderbird 60.3
69. Apple Patched Multiple XNU Kernel Vulnerabilities In MacOS And iOS
70. Companies implementing DevSecOps address vulnerabilities faster than others
71. The Ultimate Guide to Bug Bounty Platforms
72. PortSmash – A New Side Channel Vulnerability in SMT/Hyper-Threading That Allows Attackers To Steal Sensitive Data
73. Security Think Tank: Three ways to safeguard against application layer vulnerabilities
74. Security Bug in Icecast Puts Online Radio Stations At Risk
75. Researchers discover new zero-day vulnerability in EDGE browser

Region brief for 2018-11-05

ASIA

1. Google dorks were the root cause of a catastrophic compromise of CIA’s communications
2. Cyber-Attacks: How to Stop a Multibillion-Dollar Problem
3. Persian Stalker pillages Iranian users of Instagram and Telegram
4. A cybersecurity lesson: educational sites suffer rise in DDoS attacks in Q3

OCEANIA

5. Week in review: Volume of Australian data breaches continues unabated
6. Australian shipbuilder Austal hit by data breach
7. Persian Stalker pillages Iranian users of Instagram and Telegram
8. A cybersecurity lesson: educational sites suffer rise in DDoS attacks in Q3
9. "Shipbuilder Austal Ltd said on Thursday its Australian business had detected and responded to a data breach"

NORTH AMERICA

10. What were the DDoS numbers for Q2 & Q3 2018?
11. Google dorks were the root cause of a catastrophic compromise of CIA’s communications
12. Your personal data is widely available to hackers
13. Inside SearchPageInstaller | macOS Malware Deploys a MITM Attack
14. Magecart Strikes Again, and Kitronik Is Latest Victim
15. Cyber-Attacks: How to Stop a Multibillion-Dollar Problem
16. Equifax Set to Share More PII with Experian
17. #SamSam #ransomware continues to be a thorn in the side of organizations in the U.S. with targeted ransomware campaigns continuing,
18. Over 80,000 Facebook User Accounts Compromised
19. Why malware attacks should no longer be a problem for businesses
20. Critical 'Bleedingbit' flaws found in microcontrollers used by Wi-Fi access points
21. Persian Stalker pillages Iranian users of Instagram and Telegram
22. A cybersecurity lesson: educational sites suffer rise in DDoS attacks in Q3
23. "A lot of people in Congress are concerned that the Facebook influence campaigns are about the midterms, but to me
24. "Shipbuilder Austal Ltd said on Thursday its Australian business had detected and responded to a data breach"

SOUTH AMERICA

25. Over 80,000 Facebook User Accounts Compromised

EUROPE

26. Inception Group Uses POWERSHOWER Backdoor in Two-Stage Spear Phishing Attacks
27. Google dorks were the root cause of a catastrophic compromise of CIA’s communications
28. Magecart Infiltrates U.K. Online Retailer Kitronik POS
29. Akado Telecom Accidentally Leaks Customers' Names, Phone Numbers, And Addresses
30. Magecart Strikes Again, and Kitronik Is Latest Victim
31. Inception Attackers Target Europe with Year-old Office Vulnerability
32. Kemp Investigates Dems, Not the Reported Vulnerability
33. Over 80,000 Facebook User Accounts Compromised
34. Persian Stalker pillages Iranian users of Instagram and Telegram
35. Kemp Cites Voter Database Hacking Attempt, Gives No Evidence
36. A cybersecurity lesson: educational sites suffer rise in DDoS attacks in Q3

AFRICA

37. Cyber-Attacks: How to Stop a Multibillion-Dollar Problem