Region brief for 2018-10-01

ASIA

1. Cyber Security Roundup for September 2018
2. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
3. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
4. Roaming Mantis Group Adds Phishing and Web Crypto Mining for iOS Devices
5. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
6. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
7. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
8. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
9. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
10. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers

OCEANIA

11. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
12. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT

NORTH AMERICA

13. Cyber Security Roundup for September 2018
14. Hacking Week Call for Pitches: Who Is the Weakest Link In Cybersecurity?
15. GhostDNS malware already infected over 100K+ devices and targets 70+ different types of home routers
16. A week in security (September 24 – 30)
17. 4 Ways to Protect Your Files from a Data Breach
18. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
19. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
20. Voice Phishing Scams Are Getting More Clever
21. Malwarebytes is a champion of National Cybersecurity Awareness Month
22. Formjacking in the Nutshell
23. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
24. CISO @rickhholland joins @drshellface and @mazzazone to discuss the latest #cybersecurity news: Security Flaws Affect 50 Million Facebook Accounts and

SOUTH AMERICA

25. GhostDNS malware already infected over 100K+ devices and targets 70+ different types of home routers
26. 4 Ways to Protect Your Files from a Data Breach
27. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
28. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
29. Gigantic 100,000-strong botnet used to hijack traffic meant for Brazilian banks
30. New Banking Malware Steal Money From Victim’s Bank Accounts Using Weaponized Adobe Reader

EUROPE

31. Cyber Security Roundup for September 2018
32. Hacking Week Call for Pitches: Who Is the Weakest Link In Cybersecurity?
33. Gemalto ID Card Provider Sued for €152 Million in eID Vulnerability Case
34. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
35. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
36. Facebook: How to minimize the risk of vulnerabilities
37. Voice Phishing Scams Are Getting More Clever
38. Formjacking in the Nutshell
39. TrickBot Banking Trojan Takes Center Stage in 2018
40. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
41. Facebook faces a whopping €1.4 billion penalty under GDPR for Sept. 30 data breach
42. UK firms’ password security score ‘average’

AFRICA

43. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
44. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT

Sector brief for 2018-10-01

HEALTHCARE

1. Malwarebytes is a champion of National Cybersecurity Awareness Month

TRANSPORT

2. Cyber Security Roundup for September 2018
3. A week in security (September 24 – 30)
4. Ransomware Casts Anchor at the Port of San Diego
5. Ransomware Casts Anchor at the Port of San Diego

BANKING & FINANCE

6. Cyber Security Roundup for September 2018
7. GhostDNS malware already infected over 100K+ devices and targets 70+ different types of home routers
8. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
9. Roaming Mantis Group Adds Phishing and Web Crypto Mining for iOS Devices
10. A week in security (September 24 – 30)
11. 4 Ways to Protect Your Files from a Data Breach
12. Facebook: How to minimize the risk of vulnerabilities
13. Hackers Are Selling Botnets and Stolen ‘Fortnite’ Accounts Over Instagram
14. Voice Phishing Scams Are Getting More Clever
15. Malwarebytes is a champion of National Cybersecurity Awareness Month
16. Formjacking in the Nutshell
17. Attackers chained three bugs to breach into the Facebook platform
18. TrickBot Banking Trojan Takes Center Stage in 2018
19. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
20. Hackers Hijacked More Than 100,000 Routers DNS Settings and Redirecting Users to Malicious WebSites
21. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
22. Gigantic 100,000-strong botnet used to hijack traffic meant for Brazilian banks
23. New Banking Malware Steal Money From Victim’s Bank Accounts Using Weaponized Adobe Reader

INFORMATION & TELECOMMUNICATION

24. Cyber Security Roundup for September 2018
25. Top Cloud Domain Controller for MSPs
26. Hacking Week Call for Pitches: Who Is the Weakest Link In Cybersecurity?
27. GhostDNS malware already infected over 100K+ devices and targets 70+ different types of home routers
28. Fileless Malware Attacks on the Rise, Microsoft Says
29. Google Bug Breaks Search Results with a Plus Sign On Mac Safari
30. A week in security (September 24 – 30)
31. Google Adds New Rules To End Malicious Chrome Extensions
32. Facebook hacked – 50 Million Users’ Data exposed in the security breach
33. Instagram Being Used To Sell Botnets And Stolen Fortnite Accounts
34. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
35. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
36. Facebook: How to minimize the risk of vulnerabilities
37. Hackers Are Selling Botnets and Stolen ‘Fortnite’ Accounts Over Instagram
38. Third-Party Apps Using Facebook Login Also Affected by Latest Hacking Incident
39. Voice Phishing Scams Are Getting More Clever
40. Attackers chained three bugs to breach into the Facebook platform
41. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
42. Facebook faces a whopping €1.4 billion penalty under GDPR for Sept. 30 data breach
43. Ransomware Casts Anchor at the Port of San Diego
44. Ransomware Casts Anchor at the Port of San Diego
45. Password Security Better, Still Poses Business Risk
46. Several Bugs Exploited in Massive Facebook Hack
47. Password Security Better, Still Poses Business Risk
48. Facebook Data Breach Extended to Third-Party Applications
49. Nasty Linux Kernel Vulnerability Discovered, Mandatory Kernel Update Required
50. CISO @rickhholland joins @drshellface and @mazzazone to discuss the latest #cybersecurity news: Security Flaws Affect 50 Million Facebook Accounts and
51. Following a loud critical backlash to a new #Chrome login feature and cookie retention functionality, @Google will make changes in
52. Facebook could face up to $1.6bn fine for data breach
53. Torii IoT Botnet Takes Mirai to the Next Level

FOOD

Nothing to report

WATER

Nothing to report

ENERGY

54. GrandCrab Ransomware Spreads Using Multiple Known Vulnerabilities
55. Malwarebytes is a champion of National Cybersecurity Awareness Month

GOVERNMENT & PUBLIC SERVICE

56. Gemalto ID Card Provider Sued for €152 Million in eID Vulnerability Case
57. Malwarebytes is a champion of National Cybersecurity Awareness Month

Daily brief for 2018-10-01

ASIA

1. Cyber Security Roundup for September 2018
2. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
3. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
4. Roaming Mantis Group Adds Phishing and Web Crypto Mining for iOS Devices
5. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
6. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
7. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
8. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
9. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
10. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers

WORLD

11. Cyber Security Roundup for September 2018
12. Hacking Week Call for Pitches: Who Is the Weakest Link In Cybersecurity?
13. GhostDNS malware already infected over 100K+ devices and targets 70+ different types of home routers
14. A week in security (September 24 – 30)
15. 4 Ways to Protect Your Files from a Data Breach
16. Gemalto ID Card Provider Sued for €152 Million in eID Vulnerability Case
17. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
18. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
19. Facebook: How to minimize the risk of vulnerabilities
20. Voice Phishing Scams Are Getting More Clever
21. Malwarebytes is a champion of National Cybersecurity Awareness Month
22. Formjacking in the Nutshell
23. TrickBot Banking Trojan Takes Center Stage in 2018
24. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
25. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
26. Facebook faces a whopping €1.4 billion penalty under GDPR for Sept. 30 data breach
27. UK firms’ password security score ‘average’
28. CISO @rickhholland joins @drshellface and @mazzazone to discuss the latest #cybersecurity news: Security Flaws Affect 50 Million Facebook Accounts and
29. Gigantic 100,000-strong botnet used to hijack traffic meant for Brazilian banks
30. New Banking Malware Steal Money From Victim’s Bank Accounts Using Weaponized Adobe Reader

ATTACKS

31. 100K Routers Hijacked for Phishing in GhostDNS Campaign
32. Picture-in-Picture Phishing Campaign Goes After Steam Credentials
33. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
34. Roaming Mantis Group Adds Phishing and Web Crypto Mining for iOS Devices
35. 4 Ways to Protect Your Files from a Data Breach
36. Facebook hacked – 50 Million Users’ Data exposed in the security breach
37. Instagram Being Used To Sell Botnets And Stolen Fortnite Accounts
38. Telegram Patched IP Address Leak Problem In Its Desktop Client
39. Weak Passwords Abused for 'FruitFly' Mac Malware Distribution
40. Hackers Are Selling Botnets and Stolen ‘Fortnite’ Accounts Over Instagram
41. Third-Party Apps Using Facebook Login Also Affected by Latest Hacking Incident
42. How to Orchestrate a Smarter Phishing Response
43. Voice Phishing Scams Are Getting More Clever
44. Why nearly 50% of organizations are failing at password security
45. Employees Share Average of 6 Passwords With Co-Workers
46. Telegram Leaks User IP Addresses
47. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
48. Flaws in Tory party conference app leak ministers' personal information
49. Facebook faces a whopping €1.4 billion penalty under GDPR for Sept. 30 data breach
50. UK firms’ password security score ‘average’
51. Torii malware could be gateway to more sophisticated IoT botnet attacks
52. Phishing campaign targets developers of Chrome extensions
53. Password Security Better, Still Poses Business Risk
54. New vicious Torii IoT botnet discovered
55. Password Security Better, Still Poses Business Risk
56. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
57. 3 GOP senators doxed during Kavanaugh hearing
58. Facebook Data Breach Extended to Third-Party Applications
59. Following a loud critical backlash to a new #Chrome login feature and cookie retention functionality, @Google will make changes in
60. Facebook could face up to $1.6bn fine for data breach
61. Telegram CVE-2018-17780 flaw causes the leak of IP addresses when initiating calls
62. Telegram Calling Feature Leaks Your IP Addresses—Patch Released
63. Gigantic 100,000-strong botnet used to hijack traffic meant for Brazilian banks
64. Torii IoT Botnet Takes Mirai to the Next Level
65. High-Profile Instagram Accounts Hacked For Ransom In A Recent Campaign

THREATS

66. Adobe Patches 47 Critical Flaws in Acrobat and DC
67. Top Cloud Domain Controller for MSPs
68. Multiple Code Execution Vulnerabilities Found in Atlantis Word Processor
69. CVE-2018-11776 and why you need Black Duck Security Advisories
70. GhostDNS malware already infected over 100K+ devices and targets 70+ different types of home routers
71. Nine NAS Bugs Open LenovoEMC, Iomega Devices to Attack
72. GrandCrab Ransomware Spreads Using Multiple Known Vulnerabilities
73. Fileless Malware Attacks on the Rise, Microsoft Says
74. 'Short, Brutal Lives': Life Expectancy for Malicious Domains
75. Google Bug Breaks Search Results with a Plus Sign On Mac Safari
76. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
77. Roaming Mantis Group Adds Phishing and Web Crypto Mining for iOS Devices
78. Vulnerability Spotlight: Multiple Issues in Foxit PDF Reader
79. Google Adds New Rules To End Malicious Chrome Extensions
80. Gemalto ID Card Provider Sued for €152 Million in eID Vulnerability Case
81. Code Execution Vulnerabilities Uncovered In Atlantis Word Processor
82. Deep Dive Into iTranslator - MITM Malware
83. LoJax: Fisrt UEFI Rootkit Found In The Wild
84. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
85. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
86. Telegram Patched IP Address Leak Problem In Its Desktop Client
87. Weak Passwords Abused for 'FruitFly' Mac Malware Distribution
88. Facebook: How to minimize the risk of vulnerabilities
89. Code execution vulnerabilities uncovered in Atlantis Word Processor
90. A new Browser Reaper exploit can crash or freeze Mozilla #Firefox, according to a proof of concept published by a
91. Malwarebytes is a champion of National Cybersecurity Awareness Month
92. Monitor privileged execution to defend against
93. Attackers chained three bugs to breach into the Facebook platform
94. Telegram Leaks User IP Addresses
95. Vulnerability Spotlight: Multiple vulnerabilities in Atlantis Word Processor
96. TrickBot Banking Trojan Takes Center Stage in 2018
97. More on the Five Eyes Statement on Encryption and Backdoors
98. Monero fixes major ‘burning bug’ flaw, preventing mass devaluation
99. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
100. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
101. Flaws in Tory party conference app leak ministers' personal information
102. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
103. Vulnerability Spotlight: Multiple Issues in Foxit PDF Reader
104. GandCrab ransomware is spreading wildly through several known vulnerabilities
105. Python-based attack tools are the most common vector for launching exploit attempts
106. Docs reveal how Fruitfly Mac spyware initially spread
107. Torii malware could be gateway to more sophisticated IoT botnet attacks
108. SamSam ransomware: How is this version different from others?
109. Ransomware Casts Anchor at the Port of San Diego
110. Hackers Hijacked More Than 100,000 Routers DNS Settings and Redirecting Users to Malicious WebSites
111. Ransomware Casts Anchor at the Port of San Diego
112. Several Bugs Exploited in Massive Facebook Hack
113. Sophos recently discovered a #Samsam extortion code that performs whole-company attacks through a variety of vulnerability exploits. Discover how this
114. #VPNFilter #malware: How can users protect themselves?
115. Nasty Linux Kernel Vulnerability Discovered, Mandatory Kernel Update Required
116. How can attackers exploit a buffer underflow #vulnerability?
117. CISO @rickhholland joins @drshellface and @mazzazone to discuss the latest #cybersecurity news: Security Flaws Affect 50 Million Facebook Accounts and
118. Vulnerability Spotlight: Multiple vulnerabilities in Atlantis Word Processor
119. Telegram CVE-2018-17780 flaw causes the leak of IP addresses when initiating calls
120. Telegram Calling Feature Leaks Your IP Addresses—Patch Released
121. New Banking Malware Steal Money From Victim’s Bank Accounts Using Weaponized Adobe Reader

CRIME

122. Cyber Security Roundup for September 2018
123. Hacking Week Call for Pitches: Who Is the Weakest Link In Cybersecurity?
124. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
125. 4 Ways to Protect Your Files from a Data Breach
126. Gemalto ID Card Provider Sued for €152 Million in eID Vulnerability Case
127. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
128. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
129. Facebook: How to minimize the risk of vulnerabilities
130. Hackers Are Selling Botnets and Stolen ‘Fortnite’ Accounts Over Instagram
131. How to Orchestrate a Smarter Phishing Response
132. Voice Phishing Scams Are Getting More Clever
133. Formjacking in the Nutshell
134. Attackers chained three bugs to breach into the Facebook platform
135. TrickBot Banking Trojan Takes Center Stage in 2018
136. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
137. Hackers Hijacked More Than 100,000 Routers DNS Settings and Redirecting Users to Malicious WebSites
138. Sophos recently discovered a #Samsam extortion code that performs whole-company attacks through a variety of vulnerability exploits. Discover how this
139. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
140. New Banking Malware Steal Money From Victim’s Bank Accounts Using Weaponized Adobe Reader

POLITICS

141. Hacking Week Call for Pitches: Who Is the Weakest Link In Cybersecurity?
142. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
143. A week in security (September 24 – 30)
144. Facebook: How to minimize the risk of vulnerabilities
145. Hackers Are Selling Botnets and Stolen ‘Fortnite’ Accounts Over Instagram
146. Malwarebytes is a champion of National Cybersecurity Awareness Month
147. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
148. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system

APT report for 2018-09-30

TRANSNATIONAL / UNKNOWN

1. The British Airways #databreach may be the handiwork of hacking group #Magecart, according to researchers. By @MaddieBacon11

CHINA

Nothing to report

INDIA

Nothing to report

NORTH KOREA

2. A security researcher developed a proof-of-concept attack on #Firefox called Browser Reaper that can crash or freeze the browser, but

PAKISTAN

Nothing to report

VIETNAM

Nothing to report

IRAN

Nothing to report

LEBANON

Nothing to report

PALESTINE

Nothing to report

SAUDI ARABIA

Nothing to report

UNITED ARAB EMIRATES

Nothing to report

RUSSIA

3. Security Affairs newsletter Round 182 – News of the week

UKRAINE

Nothing to report

Platform report for 2018-09-30

WINDOWS

1. Telegram Leaks Public & Private IP Address While Making Calls
2. Cryptomining Malware Grows by 86% in Q2: McAfee Report
3. Security Affairs newsletter Round 182 – News of the week
4. Telegram exposes the IP address during a user call by default
5. Xbash Malware Combines Many Malicious Functions in Worm
6. Cisco Multiple Security Vulnerabilities Alert
7. USBStealer – Password Hacking Tool For Windows Machine Applications to Perform Windows Penetration Testing

LINUX

8. Mutagen Astronomy – Linux Vulnerability Hits CentOS, Debian, and Red Hat Distros
9. Security Affairs newsletter Round 182 – News of the week
10. Telegram exposes the IP address during a user call by default
11. Xbash Malware Combines Many Malicious Functions in Worm

UNIX

Nothing to report

ANDROID

12. #Android #Trojan: How is data being stolen from #messagingapps?
13. Cryptomining Malware Grows by 86% in Q2: McAfee Report
14. Security Affairs newsletter Round 182 – News of the week
15. Telegram exposes the IP address during a user call by default

IOS

16. Security Affairs newsletter Round 182 – News of the week
17. Telegram exposes the IP address during a user call by default
18. Cisco Multiple Security Vulnerabilities Alert

MACOS

19. Security Affairs newsletter Round 182 – News of the week
20. Mojave Flaws Allow An Attacker To Bypass Full Disk Access Requirement
21. Zero-Day MacOS Mojave Privacy Bypass Bug Exposes Protected Files

Threat report for 2018-09-30

DATA BREACH

1. Experts comment on Facebook’s 50 million user credential leak
2. 40 million more likely affected by massive Facebook data leak - Bitdefender
3. Project Insecurity (@insecurity) researchers discovered certain #livechatsoftware that were leaking personal details of employee at several high-profile sites. Discover how
4. Telegram Leaks Public & Private IP Address While Making Calls
5. The United Nations (@UN) accidentally exposed sensitive information on public @trello boards, in the Jira app, and in #GoogleDocs and
6. 3 GOP senators doxed during Kavanaugh hearing
7. Uber has agreed to pay more than $140 Million for a data breach settlement

DENIAL-OF-SERVICE

Nothing to report

MALVERTISING

Nothing to report

PHISHING

8. Chegg forces password reset on 40 million users
9. Hackers are Selling Social Media Logins & Financial Details On Dark Web starting from £2
10. USBStealer – Password Hacking Tool For Windows Machine Applications to Perform Windows Penetration Testing

WEB DEFACEMENT

Nothing to report

MALWARE

11. GANDCRAB 5.0.1 Ransom Virus – How to Remove It and Restore Data
12. Week in review: First-ever UEFI rootkit, Apple DEP vulnerability, new tactics subvert traditional security measures
13. Apple DEP Authentication Flaw Leaves Devices Vulnerable To Malicious MDM Enrolling
14. Telegram Leaks Public & Private IP Address While Making Calls
15. #Android #Trojan: How is data being stolen from #messagingapps?
16. Docs reveal how Fruitfly Mac spyware initially spread
17. Cryptomining Malware Grows by 86% in Q2: McAfee Report
18. Facebook monetizes 2FA, Singapore monetizes hacker, and ransomware creeps monetize US Democrats
19. Security roundup: Facebook, ransomware, UEFI rootkit, Berners-Lee’s plan for new internet
20. Telegram exposes the IP address during a user call by default
21. #GoScanSSH: How does this #malware work and differ from others?
22. Xbash Malware Combines Many Malicious Functions in Worm
23. Discover how the #VPNFilter #malware works and affects users
24. Alphabet's Chronicle has given #VirusTotal a makeover. Find out what's in the new VirusTotal Enterprise offering. By @RobWright22
25. Improving core processes with next-generation mobile productivity solutions can bring power and cost efficiency gains. However, we must not lose
26. Malware in the Cloud: What You Need to Know
27. Beware !! USB Devices & Removable Media are Used to Inject Cryptocurrency Mining Malware

EXPLOIT

28. Facebook Ad Targeting Exploits Users’ 2FA Phone Numbers
29. FBI IC3 warns of cyber attacks exploiting Remote Desktop Protocol (RDP)

VULNERABILITY

30. Mutagen Astronomy – Linux Vulnerability Hits CentOS, Debian, and Red Hat Distros
31. Facebook Says Three Different Bugs Are Responsible For The Massive Account Hacks
32. Week in review: First-ever UEFI rootkit, Apple DEP vulnerability, new tactics subvert traditional security measures
33. Estonia sues Gemalto for 152M euros over flaws in citizen ID cards issued by the company
34. Apple DEP Authentication Flaw Leaves Devices Vulnerable To Malicious MDM Enrolling
35. #Cisco patches yet another hardcoded credentials flaw, this time in its video surveillance manager appliance; the latest vulnerability is at
36. Mojave Flaws Allow An Attacker To Bypass Full Disk Access Requirement
37. Election equipment vendors come under fire for #votingmachine security in the latest #DEFCON report, which details flaws -- one from
38. Cisco Multiple Security Vulnerabilities Alert
39. Zero-Day MacOS Mojave Privacy Bypass Bug Exposes Protected Files
40. A Top Facebook Bug Bounty Hunter Shares Their Insights on the Facebook Breach

Region brief for 2018-09-30

ASIA

1. Cryptomining Malware Grows by 86% in Q2: McAfee Report
2. Facebook monetizes 2FA, Singapore monetizes hacker, and ransomware creeps monetize US Democrats

OCEANIA

Nothing to report

NORTH AMERICA

3. Facebook monetizes 2FA, Singapore monetizes hacker, and ransomware creeps monetize US Democrats
4. Telegram exposes the IP address during a user call by default

SOUTH AMERICA

Nothing to report

EUROPE

5. Estonia sues Gemalto for 152M euros over flaws in citizen ID cards issued by the company
6. Cryptomining Malware Grows by 86% in Q2: McAfee Report
7. Security Affairs newsletter Round 182 – News of the week
8. The British Airways #databreach may be the handiwork of hacking group #Magecart, according to researchers. By @MaddieBacon11

AFRICA

Nothing to report

Sector brief for 2018-09-30

HEALTHCARE

Nothing to report

TRANSPORT

1. Security Affairs newsletter Round 182 – News of the week

BANKING & FINANCE

2. Security Affairs newsletter Round 182 – News of the week
3. Hackers are Selling Social Media Logins & Financial Details On Dark Web starting from £2

INFORMATION & TELECOMMUNICATION

Nothing to report

FOOD

Nothing to report

WATER

Nothing to report

ENERGY

Nothing to report

GOVERNMENT & PUBLIC SERVICE

4. Election equipment vendors come under fire for #votingmachine security in the latest #DEFCON report, which details flaws -- one from

Daily brief for 2018-09-30

ASIA

1. Cryptomining Malware Grows by 86% in Q2: McAfee Report
2. Facebook monetizes 2FA, Singapore monetizes hacker, and ransomware creeps monetize US Democrats

WORLD

3. Estonia sues Gemalto for 152M euros over flaws in citizen ID cards issued by the company
4. Cryptomining Malware Grows by 86% in Q2: McAfee Report
5. Security Affairs newsletter Round 182 – News of the week
6. The British Airways #databreach may be the handiwork of hacking group #Magecart, according to researchers. By @MaddieBacon11
7. Facebook monetizes 2FA, Singapore monetizes hacker, and ransomware creeps monetize US Democrats
8. Telegram exposes the IP address during a user call by default

ATTACKS

9. Experts comment on Facebook’s 50 million user credential leak
10. 40 million more likely affected by massive Facebook data leak - Bitdefender
11. Project Insecurity (@insecurity) researchers discovered certain #livechatsoftware that were leaking personal details of employee at several high-profile sites. Discover how
12. Telegram Leaks Public & Private IP Address While Making Calls
13. The United Nations (@UN) accidentally exposed sensitive information on public @trello boards, in the Jira app, and in #GoogleDocs and
14. Chegg forces password reset on 40 million users
15. Hackers are Selling Social Media Logins & Financial Details On Dark Web starting from £2
16. 3 GOP senators doxed during Kavanaugh hearing
17. Uber has agreed to pay more than $140 Million for a data breach settlement
18. USBStealer – Password Hacking Tool For Windows Machine Applications to Perform Windows Penetration Testing

THREATS

19. Mutagen Astronomy – Linux Vulnerability Hits CentOS, Debian, and Red Hat Distros
20. GANDCRAB 5.0.1 Ransom Virus – How to Remove It and Restore Data
21. Facebook Says Three Different Bugs Are Responsible For The Massive Account Hacks
22. Week in review: First-ever UEFI rootkit, Apple DEP vulnerability, new tactics subvert traditional security measures
23. Estonia sues Gemalto for 152M euros over flaws in citizen ID cards issued by the company
24. Facebook Ad Targeting Exploits Users’ 2FA Phone Numbers
25. Apple DEP Authentication Flaw Leaves Devices Vulnerable To Malicious MDM Enrolling
26. Telegram Leaks Public & Private IP Address While Making Calls
27. #Android #Trojan: How is data being stolen from #messagingapps?
28. Docs reveal how Fruitfly Mac spyware initially spread
29. Cryptomining Malware Grows by 86% in Q2: McAfee Report
30. #Cisco patches yet another hardcoded credentials flaw, this time in its video surveillance manager appliance; the latest vulnerability is at
31. Facebook monetizes 2FA, Singapore monetizes hacker, and ransomware creeps monetize US Democrats
32. Security roundup: Facebook, ransomware, UEFI rootkit, Berners-Lee’s plan for new internet
33. Telegram exposes the IP address during a user call by default
34. #GoScanSSH: How does this #malware work and differ from others?
35. Xbash Malware Combines Many Malicious Functions in Worm
36. Discover how the #VPNFilter #malware works and affects users
37. Mojave Flaws Allow An Attacker To Bypass Full Disk Access Requirement
38. FBI IC3 warns of cyber attacks exploiting Remote Desktop Protocol (RDP)
39. Alphabet's Chronicle has given #VirusTotal a makeover. Find out what's in the new VirusTotal Enterprise offering. By @RobWright22
40. Improving core processes with next-generation mobile productivity solutions can bring power and cost efficiency gains. However, we must not lose
41. Malware in the Cloud: What You Need to Know
42. Beware !! USB Devices & Removable Media are Used to Inject Cryptocurrency Mining Malware
43. Election equipment vendors come under fire for #votingmachine security in the latest #DEFCON report, which details flaws -- one from
44. Cisco Multiple Security Vulnerabilities Alert
45. Zero-Day MacOS Mojave Privacy Bypass Bug Exposes Protected Files
46. A Top Facebook Bug Bounty Hunter Shares Their Insights on the Facebook Breach

CRIME

47. Estonia sues Gemalto for 152M euros over flaws in citizen ID cards issued by the company
48. Cryptomining Malware Grows by 86% in Q2: McAfee Report
49. Security Affairs newsletter Round 182 – News of the week
50. Xbash Malware Combines Many Malicious Functions in Worm
51. Beware !! USB Devices & Removable Media are Used to Inject Cryptocurrency Mining Malware

POLITICS

52. Election equipment vendors come under fire for #votingmachine security in the latest #DEFCON report, which details flaws -- one from

APT report for 2018-09-29

TRANSNATIONAL / UNKNOWN

Nothing to report

CHINA

1. Long Term Security Attitudes and Practices Study
2. CLOUDFLARE announces a domain name registration service, Cloudflare Registrar

INDIA

Nothing to report

NORTH KOREA

Nothing to report

PAKISTAN

Nothing to report

VIETNAM

Nothing to report

IRAN

Nothing to report

LEBANON

Nothing to report

PALESTINE

Nothing to report

SAUDI ARABIA

Nothing to report

UNITED ARAB EMIRATES

Nothing to report

RUSSIA

3. Seven additional modules make Fancy Bear’s VPNFilter malware even more versatile

UKRAINE

Nothing to report

Platform report for 2018-09-29

WINDOWS

1. Trustwave expert found 2 credential leak issues in Windows PureVPN Client

LINUX

2. Linux Kernel Bug Surfaces, Allowing Root Access
3. Google Project Zero Disclosed PoC & Exploit for Serious Linux Kernel Vulnerability

UNIX

Nothing to report

ANDROID

4. Hide and seek Iot botnet updates include new Android ADB exploit
5. Android password managers not as secure as desktop counterparts
6. Beware!! New Android Malware That Can Read Your WhatsApp Messages & Take Screen Shots

IOS

Nothing to report

MACOS

Nothing to report

Threat report for 2018-09-29

DATA BREACH

1. Telegram fixes IP address leak in desktop client
2. UK Conservative Party conference app leaks MPs' personal details
3. Telegram Leaks IP Addresses by Default When Initiating Calls
4. Trustwave expert found 2 credential leak issues in Windows PureVPN Client
5. Facebook Discloses Data Breach, 50 Million Accounts Affected
6. Facebook data breach: 50 million users affected
7. The @UN accidentally exposed credentials on public @trello boards. Plus, #Uber is set to pay $148 million settlement following its
8. #Facebook Discloses Data Breach, 50 Million User Accounts Affected https://tripwire.me/2NQrPfW via@ritzsanti

DENIAL-OF-SERVICE

9. Torii botnet, probably the most sophisticated IoT botnet of ever
10. Torii malware could be gateway to more sophisticated IoT botnet attacks
11. Hide and seek Iot botnet updates include new Android ADB exploit

MALVERTISING

Nothing to report

PHISHING

12. Chegg Forces Password Reset On 40 Million Users
13. Can the @Microsoft Authenticator really replace passwords in the enterprise? Microsoft says the answer is yes and proclaimed the password
14. Android password managers not as secure as desktop counterparts

WEB DEFACEMENT

Nothing to report

MALWARE

15. Telegram fixes IP address leak in desktop client
16. Telegram Leaks IP Addresses by Default When Initiating Calls
17. Malicious Hackers Increasing the Exploitation of RDP Protocol to Hack the Targeted Victims
18. Defeating Polymorphic Malware with Cognitive Intelligence. Part 2: Command Line Argument Clustering
19. Pirated Game of Thrones episodes most popular TV bait for malware
20. Seven additional modules make Fancy Bear’s VPNFilter malware even more versatile
21. Can monitoring help defend against #Sanny #malware update?
22. Torii malware could be gateway to more sophisticated IoT botnet attacks
23. VirusTotal slips on biz suit, says Google's daddy will help the search for nasties
24. Ransomware Crypto-Locks Port of San Diego IT Systems
25. Port of San Diego Suffers Ransomware Attack
26. Beware!! New Android Malware That Can Read Your WhatsApp Messages & Take Screen Shots
27. Malware in the Cloud: What You Need to Know
28. Pirated episodes of Game of Thrones, the most popular malware bait
29. CLOUDFLARE announces a domain name registration service, Cloudflare Registrar
30. Port of San Diego Suffers Ransomware Attack
31. Alphabet's @chroniclesec unveiled #VirusTotal Enterprise, a new version of the file scanning service designed specifically for enterprise customers. By @RobWright22

EXPLOIT

32. Malicious Hackers Increasing the Exploitation of RDP Protocol to Hack the Targeted Victims
33. Hide and seek Iot botnet updates include new Android ADB exploit
34. Google Project Zero Disclosed PoC & Exploit for Serious Linux Kernel Vulnerability
35. Hackers Exploited Facebook Zero-Day Flaw & Stolen 50 Million Accounts Access Tokens
36. Tripwire Patch Priority Index for September 2018

VULNERABILITY

37. Linux Kernel Bug Surfaces, Allowing Root Access
38. Google Project Zero Disclosed PoC & Exploit for Serious Linux Kernel Vulnerability
39. How a vulnerability in #strongSwan caused a buffer underflow
40. Vulnerability discovered in WiFi routers
41. Hackers Exploited Facebook Zero-Day Flaw & Stolen 50 Million Accounts Access Tokens

Region brief for 2018-09-29

ASIA

1. India’s Banking Cybersecurity Woes

OCEANIA

Nothing to report

NORTH AMERICA

2. Long Term Security Attitudes and Practices Study
3. CLOUDFLARE announces a domain name registration service, Cloudflare Registrar

SOUTH AMERICA

Nothing to report

EUROPE

4. Torii botnet, probably the most sophisticated IoT botnet of ever
5. UK Conservative Party conference app leaks MPs' personal details

AFRICA

Nothing to report

Sector brief for 2018-09-29

HEALTHCARE

Nothing to report

TRANSPORT

1. India’s Banking Cybersecurity Woes
2. Ransomware Crypto-Locks Port of San Diego IT Systems
3. Port of San Diego Suffers Ransomware Attack
4. Port of San Diego Suffers Ransomware Attack

BANKING & FINANCE

5. India’s Banking Cybersecurity Woes
6. Vulnerability discovered in WiFi routers

INFORMATION & TELECOMMUNICATION

Nothing to report

FOOD

Nothing to report

WATER

Nothing to report

ENERGY

Nothing to report

GOVERNMENT & PUBLIC SERVICE

Nothing to report

Daily brief for 2018-09-29

ASIA

1. India’s Banking Cybersecurity Woes

WORLD

2. Long Term Security Attitudes and Practices Study
3. Torii botnet, probably the most sophisticated IoT botnet of ever
4. UK Conservative Party conference app leaks MPs' personal details
5. CLOUDFLARE announces a domain name registration service, Cloudflare Registrar

ATTACKS

6. Telegram fixes IP address leak in desktop client
7. Torii botnet, probably the most sophisticated IoT botnet of ever
8. UK Conservative Party conference app leaks MPs' personal details
9. Chegg Forces Password Reset On 40 Million Users
10. Telegram Leaks IP Addresses by Default When Initiating Calls
11. Can the @Microsoft Authenticator really replace passwords in the enterprise? Microsoft says the answer is yes and proclaimed the password
12. Trustwave expert found 2 credential leak issues in Windows PureVPN Client
13. Torii malware could be gateway to more sophisticated IoT botnet attacks
14. Hide and seek Iot botnet updates include new Android ADB exploit
15. Android password managers not as secure as desktop counterparts
16. Facebook Discloses Data Breach, 50 Million Accounts Affected
17. Facebook data breach: 50 million users affected
18. The @UN accidentally exposed credentials on public @trello boards. Plus, #Uber is set to pay $148 million settlement following its
19. #Facebook Discloses Data Breach, 50 Million User Accounts Affected https://tripwire.me/2NQrPfW via@ritzsanti

THREATS

20. Telegram fixes IP address leak in desktop client
21. Linux Kernel Bug Surfaces, Allowing Root Access
22. Telegram Leaks IP Addresses by Default When Initiating Calls
23. Malicious Hackers Increasing the Exploitation of RDP Protocol to Hack the Targeted Victims
24. Defeating Polymorphic Malware with Cognitive Intelligence. Part 2: Command Line Argument Clustering
25. Pirated Game of Thrones episodes most popular TV bait for malware
26. Seven additional modules make Fancy Bear’s VPNFilter malware even more versatile
27. Can monitoring help defend against #Sanny #malware update?
28. Torii malware could be gateway to more sophisticated IoT botnet attacks
29. VirusTotal slips on biz suit, says Google's daddy will help the search for nasties
30. Ransomware Crypto-Locks Port of San Diego IT Systems
31. Hide and seek Iot botnet updates include new Android ADB exploit
32. Google Project Zero Disclosed PoC & Exploit for Serious Linux Kernel Vulnerability
33. Port of San Diego Suffers Ransomware Attack
34. How a vulnerability in #strongSwan caused a buffer underflow
35. Beware!! New Android Malware That Can Read Your WhatsApp Messages & Take Screen Shots
36. Malware in the Cloud: What You Need to Know
37. Vulnerability discovered in WiFi routers
38. Pirated episodes of Game of Thrones, the most popular malware bait
39. CLOUDFLARE announces a domain name registration service, Cloudflare Registrar
40. Hackers Exploited Facebook Zero-Day Flaw & Stolen 50 Million Accounts Access Tokens
41. Tripwire Patch Priority Index for September 2018
42. Port of San Diego Suffers Ransomware Attack
43. Alphabet's @chroniclesec unveiled #VirusTotal Enterprise, a new version of the file scanning service designed specifically for enterprise customers. By @RobWright22

CRIME

44. India’s Banking Cybersecurity Woes
45. Ransomware Crypto-Locks Port of San Diego IT Systems
46. Vulnerability discovered in WiFi routers

POLITICS

Nothing to report

APT report for 2018-09-28

TRANSNATIONAL / UNKNOWN

1. Magecart campaign remains active

CHINA

Nothing to report

INDIA

Nothing to report

NORTH KOREA

Nothing to report

PAKISTAN

Nothing to report

VIETNAM

Nothing to report

IRAN

Nothing to report

LEBANON

Nothing to report

PALESTINE

Nothing to report

SAUDI ARABIA

Nothing to report

UNITED ARAB EMIRATES

Nothing to report

RUSSIA

2. Russian Sednit APT used the first UEFI rootkit of ever in attacks in the wild
3. Fancy Bear’s Lojax is First UEFI Rootkit in the Wild
4. Fancy Bear Attacks Governments Using LoJax UEFI Rootkit
5. Fancy Bear still Putin out new modules for VPNFilter malware
6. Google first confirmed the existence of the Dragonfly program for returning to China

UKRAINE

Nothing to report

Platform report for 2018-09-28

WINDOWS

1. Vulnerabilities in PureVPN Client Leak User Credentials
2. Fancy Bear’s Lojax is First UEFI Rootkit in the Wild
3. Windows 10 security: Here's how we're hitting back at fileless malware, says Microsoft
4. Microsoft is trying to kill passwords in Azure AD application

LINUX

5. Another Linux Kernel Bug Surfaces, Allowing Root Access
6. 'Mutagen Astronomy' Linux kernel vulnerability sighted
7. CVE-2018-1718 -Google Project Zero reports a new Linux Kernel flaw
8. Google Project Zero Discloses New Linux Kernel Flaw
9. Google Hacker Discloses New Linux Kernel Vulnerability and PoC Exploit

UNIX

Nothing to report

ANDROID

10. Another Linux Kernel Bug Surfaces, Allowing Root Access
11. 7 new modules for VPNFilter malware, Hide & Seek botnet targets Android, and house oversight takes on AI | Avast
12. Android App Verification Issues Pave Way For Phishing Attacks
13. QRecorder app in the Play Store was hiding a Banking Trojan that targets European banks
14. Hide 'N Seek IoT Botnet Now Targets Android Devices
15. Android password managers vulnerable to phishing apps
16. Android password managers not as secure as desktop counterparts
17. CVE-2018-1718 -Google Project Zero reports a new Linux Kernel flaw
18. Google Play Store Swarmed with Malware
19. Google first confirmed the existence of the Dragonfly program for returning to China

IOS

Nothing to report

MACOS

Nothing to report