Daily brief for 2018-09-09

Asia

1. Domestic Kitten – An Iranian surveillance operation under the radar since 2016

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-09-08

Asia

1. Apple removed the popular app Adware Doctor because steals user browsing history
2. US Department of Justice accuses North Korea of spying on Sony

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. USB drives shipped with Schneider Solar products are infected with malware
2. Data theft in British Airways; over 300k users affected
3. US Department of Justice accuses North Korea of spying on Sony

Politics

1. Nothing to report

Daily brief for 2018-09-07

Asia

1. Researchers Discover New "Fallout" Exploit Kit
2. Industry Reactions to U.S. Charging North Korean Hacker: Feedback Friday
3. Apple Removes Top Security App For Stealing Data and Sending it to China
4. Palestinian, Middle East Targets Hit with New Surveillance Attacks
5. Stolen Data from Chinese Hotel Chain and Other Illicit Products Sold in Deep Web Forum
6. No.1 Adware Removal Tool On Apple App Store Caught Spying On Mac Users
7. Top MacOS App Exfiltrates Browser Histories Behind Users’ Backs
8. US charges North Korea agent over Sony Pictures hack and WannaCry
9. Opsec Mistakes Allowed U.S. to Link North Korean Man to Hacks
10. U.S. Charges North Korean Spy Over WannaCry and Sony Pictures Hack

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Georgia Extradites Russian Data Theft Suspect to US
2. Phishing scams pick up the phone and MikroTik routers watch and listen | Avast
3. BA Scrambles to Address Theft of Passenger Bank Details
4. Teenage hacker admits making hoax bomb threats against schools and airlines
5. USB Drives shipped with Schneider Solar Products were infected with malware
6. British Airways Website and App Compromised
7. British Airways Hacked – 380,000 Payment Cards Compromised

Politics

1. Nothing to report

Daily brief for 2018-09-06

Asia

1. U.S. Ties Lazarus to North Korea and Major Hacking Conspiracy
2. U.S. Charges North Korean Over Lazarus Group Hacks
3. U.S. charges North Korean hacker over Sony, WannaCry incidents
4. Fallout Exploit Kit Used in Malvertising Campaign to Deliver GandCrab Ransomware
5. New OilRig APT campaign leverages a new variant of the OopsIE Trojan
6. Experts ask Google for clarifications about backdoor in Titan Security Key

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. British Airways hacked, attackers stole details of 380,000 customers
2. British Airways Hacked With Details of 380,000 Cards Stolen
3. U.S. charges North Korean hacker over Sony, WannaCry incidents
4. Silence, a new group of hackers with alleged links to the cybersecurity industry
5. CroniX CryptoMiner Kills Rivals to Reign Supreme

Politics

1. Nothing to report

Daily brief for 2018-09-05

Asia

1. OilRig Sends an OopsIE to Mideast Government Targets
2. CrowdStrike uncovered a new campaign of GOBLIN PANDA APT aimed at Vietnam
3. Iranian Hackers Improve Recently Used Cyber Weapon
4. Web-based Threats-2018 Q2: U.S. Remains in Malicious Web Addresses, China Falls from to
5. DHS supply chain and CDM bills pass the House

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Active Campaign Exploits Critical Apache Struts 2 Flaw in the Wild
2. Ran Levi interviews Graham Cluley on the Malicious Life podcast
3. NSA official: Foreign hackers have ‘pummeled’ U.S. by stealing IP
4. X-Force IRIS Identifies FIN6 Activity on POS Networks
5. CamuBot banking malware is able to bypass biometric authentication
6. Payment card data stealing malware campaign affects dozens of websites each day
7. White-Hats Go Rogue, Attack Financial Institutions

Politics

1. Nothing to report

Daily brief for 2018-09-04

Asia

1. A well-known hacking group is getting better at evading detection
2. Russia’s Vulnerability Database Focuses Inward
3. Thousands of MikroTik Routers Hacked to Eavesdrop On Network Traffic

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Attackers Employ Social Engineering to Distribute New Banking Trojan
2. Credit card gobbling malware found piggybacking on ecommerce sites
3. New Banking Trojan Poses As A Security Module
4. CamuBot: New Financial Malware Targets Brazilian Banking Customers
5. ‘CamuBot’ Banking Malware Ups the Trojan Game with Biometric Bypass
6. SIM Hijacking Explained

Politics

1. Nothing to report

Daily brief for 2018-09-03

Asia

1. [SingCERT] Alert on Privilege Escalation Vulnerability in ANTlabs Internet Gateway Products
2. APT10 Under Close Scrutiny as Potentially Linked to Chinese Ministry of State Security
3. TrendMicro links Urpage hacking crew to other threat actors

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Banking Trojans and Shady Apps Galore In Google Play

Politics

1. Nothing to report

Daily brief for 2018-09-02

Asia

1. Security Affairs newsletter Round 178 – News of the week

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Security Affairs newsletter Round 178 – News of the week
2. MagentoCore skimmer already infected 7,339 Magento stores

Politics

1. Nothing to report

Daily brief for 2018-09-01

Asia

1. CrowdStrike verifies portions of report linking APT10 activity to Chinese government actors
2. Over 80% of app users in China have suffered the leaking of their data

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Cobalt cybercrime gang targets Russian and Romanian banks

Politics

1. Nothing to report

Daily brief for 2018-08-31

Asia

1. Who is Mr An, and was he working for APT10?
2. Hacker sells data of 130M Chinese hotel costumers in dark web

World

1. Who is Mr An, and was he working for APT10?

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Banking trojans, not , are the biggest threat to the enterprise now.   via @TechRepublic
2. Air Canada admits app data breach included customers’ passport details
3. Hacker sells data of 130M Chinese hotel costumers in dark web
4. Over 20k stolen passports of Air Canada users
5. DDoS attack at Spain’s central bank

Politics

1. Nothing to report

Daily brief for 2018-08-30

Asia

1. Two Birds, One STONE PANDA
2. China Probes Suspected Customer Data Leak at Accor Partner

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. New Threat Actor ‘Rocke’: A Rising Monero Cryptomining Menace
2. MagentoCore Malware Found on 7,339 Magento Stores
3. Only 54% of companies know where their data is
4. Air Canada data breach – 20,000 users of its mobile app affected
5. Anonymous Catalonia Claims DDoS Attack On Bank of Spain Website
6. Rocke: The Champion of Monero Miners
7. Data breach in cryptocurrency investment platform

Politics

1. Nothing to report

Daily brief for 2018-08-29

Asia

1. Meet CrowdStrike’s Adversary of the Month for August: GOBLIN PANDA
2. FBI: No Evidence Clinton Server Hacked Despite Trump Tweet
3. Data of 130 Million hotel chain guests offered for 8 BTC on Dark Web
4. How the 13 million dollar robbery occurred in Cosmos Bank

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Data of 130 Million hotel chain guests offered for 8 BTC on Dark Web
2. Avoid malicious websites by learning to surf safely
3. How the 13 million dollar robbery occurred in Cosmos Bank

Politics

1. Nothing to report

Daily brief for 2018-08-28

Asia

1. Data of 130 Million Chinese Hotel Chain Guests Sold on Dark Web Forum
2. Iran-linked COBALT DICKENS group targets universities in new phishing campaign
3. Security firm attributes Cosmos Bank cyberheist to Lazarus APT
4. Google shuts down nation-state activity, thwarts phishing, names Iran

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Data of 130 Million Chinese Hotel Chain Guests Sold on Dark Web Forum
2. The rise of mobile banker Asacub
3. Security firm attributes Cosmos Bank cyberheist to Lazarus APT

Politics

1. Nothing to report

Daily brief for 2018-08-27

Asia

1. Technical Analysis and Solution | Apache Struts 2 Remote Code Execution Vulnerability (S2-057)
2. North Korean Hacking Group Steals $13.5 Million From Indian Bank
3. North Korea-linked Hackers Stole $13.5 Million From Cosmos Bank: Report
4. Critical Apache Struts flaw just waiting to be exploited; PoC reported in the wild

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. North Korean Hacking Group Steals $13.5 Million From Indian Bank
2. North Korea-linked Hackers Stole $13.5 Million From Cosmos Bank: Report
3. Into a Dark Realm: The Shifting Ways of Geodo Malware
4. 2.3 Million T-Mobile Customers Exposed Following Data Breach
5. Remote Access Phone Scams Bilk Australians of AU$4.4 Million Stolen So Far in 2018

Politics

1. Nothing to report

Daily brief for 2018-08-26

Asia

1. Security Affairs newsletter Round 177 – News of the week

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Personal details of 37,000 Eir customers exposed after the theft of a laptop

Politics

1. Nothing to report

Daily brief for 2018-08-25

Asia

1. Lazarus Group launches Mac malware for the first time

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. The restaurant chain Cheddar’s Scratch Kitchen has suffered a payment card breach
2. Hack on T-Mobile: Data theft of 2 million customers
3. $1M USD per minute is lost due to cybercrime

Politics

1. Nothing to report

Daily brief for 2018-08-24

Asia

1. Cobalt Dickens threat group looks to be similar to indicted hackers
2. Ryuk ransomware attacks business networks

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Ryuk ransomware attacks business networks
2. Animoto alerts on possible data breach
3. Necurs botnet abuses Microsoft Publisher file format to deliver FlawedAmmyy RAT to bank employees

Politics

1. Nothing to report

Daily brief for 2018-08-23

Asia

1. North Korean Hackers Hit Cryptocurrency Exchange with macOS Malware
2. Google removes dozens of YouTube channels linked to 'influence operation'

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Nothing to report

Politics

1. Nothing to report

Daily brief for 2018-08-22

Asia

1. IQY and PowerShell Abused by Spam Campaign to Infect Users in Japan with BEBLOH and URSNIF

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. UPDATE: Necurs Botnet Banks on a Second Bite of the Apple with New Malware Delivery Method
2. IQY and PowerShell Abused by Spam Campaign to Infect Users in Japan with BEBLOH and URSNIF
3. BackSwap Malware Now Targets Six Banks in Spain

Politics

1. Nothing to report

Daily brief for 2018-08-21

Asia

1. Google’s Dragonfly: A Bellwether for Human Rights in the Digital Age
2. Supply Chain Attack Operation Red Signature Targets South Korean Organizations

World

1. Nothing to report

Attacks

1. Nothing to report

Threats

1. Nothing to report

Crime

1. Supply Chain Attack Operation Red Signature Targets South Korean Organizations
2. Latin America Served with 'Dark Tequila' Banking Malware
3. Dark Tequila Añejo
4. Rapid7 Quarterly Threat Report: 2018 Q2
5. Dark Tequila Banking Malware Uncovered After 5 Years of Activity

Politics

1. Nothing to report