Threat report for 2018-09-24

DATA BREACH

1. Experts uncovered a new Adwind campaign aimed at Linux, Windows, and macOS systems
2. New Adwind Campaign Targets Linux, Windows, and macOS
3. Survey: Nearly one-third of breached companies reported job losses after data breach
4. 4 Things To Do To Get Your Smartphone Compromised
5. [SingCERT] Alert on Microsoft JET Database Engine Vulnerabilities CVE-2018-8392 and CVE-2018-8393
6. Freelance workers targeted in new malware campaign
7. Bug Exposed Direct Messages of Millions of Twitter Users
8. A bug in Twitter Account Activity API exposed users messages to wrong developers
9. Do you know who the biggest threat actors are? Check out this paper that shares our perspective on the key takeaways from the 2018 Verizon Data Breach Investigations Report. Get your copy here:   #DBIR #
10. Hackers Compromised Thousands of WordPress Sites and Redirects to Tech Support Scams

DENIAL-OF-SERVICE

11. It’s an active buyer’s market for DDoS-as-a-Service - NETSCOUT
12. Tricky DoS Attack Crashes Mozilla Firefox
13. Virobot Ransomware Logs Keystrokes and Adds PC to Spam Botnet
14. Credential Stuffing Attacks Are Reaching DDoS Proportions
15. Viborot ransomware comes with a botnet

MALVERTISING

Nothing to report

PHISHING

16. Microsoft goes password-free for Azure AD sign-in
17. Cisco: We’ve killed another critical hard-coded root password bug, patch urgently
18. Yubico's latest authentication keys get the jump on a 'passwordless' future
19. US ISP RCN stores customer passwords in cleartext
20. Zoho Suspended by Domain Registrar Over Phishy Emails
21. [SingCERT] Alert on Cisco Video Surveillance Manager Default Password Vulnerability CVE-2018-15427
22. Breaking Chrome / Google account auto login (and tracking)
23. Microsoft Deletes Passwords for Azure Active Directory Applications
24. Cisco: We've killed another critical hard-coded root password bug, patch urgently
25. Cisco Removes Default Password From Video Surveillance Manager
26. Western Digital resolves year-old password bypass bug in My Cloud NAS devices
27. Pervasive email #security threats have dampened adoption of #cloud-based productivity tools: #survey   #BarracudaNetworks #phishing #Office365 #fraud #AI #

WEB DEFACEMENT

Nothing to report

MALWARE

28. Hackers Use Cloud Hosting Services To Deliver Malware That Steals Cryptocurrency Wallet Details
29. Pennsylvania Senate Democrats paid $700,000 to recover from ransomware attack
30. Adwind RAT Scurries By AV Software With New DDE Variant
31. Join our LIVE Webcast with @SCMagazine on 9/25: #Cryptomining: The Next #Malware Attack >>> register now   <<<
32. Scottish Brewery Recovered from Ransomware Attack
33. Cybercriminals Target Kodi Media Player for Malware Distribution
34. Scottish Brewery Recovered from Ransomware Attack  …
35. Zoho Suspended by Domain Registrar Over Phishy Emails
36. Operator of hackers' favorite malware scanning service gets 14 years in prison
37. Black Rose Lucy Android malware mimics user's on-screen click
38. Adwind RAT Scurries By AV Software With New DDE Variant
39. Hacker Sentenced for Running “Scan4you” Malware Scanning Service
40. Blocking ransomware for free with honeypots
41. Unraveling Emotet's Latest Macro Obfuscation
42. Adwind Trojan circumvents antivirus software to infect your PC
43. #SecurityNews: Over 90% of US retail domains analyzed recently were found to be non-compliant with #PCI DSS. The sector also performed worst out of the 18 appraised. Read more about this here:   #compliance #cyberattack #
44. Researchers warn of iTranslator man-in-the-middle malware
45. Virobot Ransomware Logs Keystrokes and Adds PC to Spam Botnet
46. Pennsylvania Senate Democrats paid $700,000 to recover from ransomware attack
47. Ransomware, Fileless Attacks and Cold Boot the Current Trend
48. Virobot Malware Emerges
49. Freelance workers targeted in new malware campaign
50. Viborot ransomware comes with a botnet
51. Scottish brewery ransomware attack leverages job opening
52. Arran Brewery Hits Massive Ransomware Attack – Warned Other Companies to Stay Safe
53. Thousands of WordPress sites are infected with the malicious code

EXPLOIT

Nothing to report

VULNERABILITY

54. macOS Mojave Privacy Bypass Flaw Allows Access to Protected Files
55. Cisco: We’ve killed another critical hard-coded root password bug, patch urgently
56. U.S. General Service Administration Launches Bug Bounty Program
57. Cisco patches 'critical' credential bug in video surveillance software
58. [SingCERT] Alert on Cisco Video Surveillance Manager Default Password Vulnerability CVE-2018-15427
59. Apple MacOS Mojave zero-day privacy bypass vulnerability revealed
60. The MyCloud Auth Vulnerability Fixed by Western Digital with a Hotfix
61. [SingCERT] Alert on Microsoft JET Database Engine Vulnerabilities CVE-2018-8392 and CVE-2018-8393
62. Cisco Patches Critical Flaw in Cisco Video Surveillance Manager (VSM) Software
63. New Bug Crashes Mozilla Firefox on Windows, Linux, and Mac Systems
64. Cisco Patched Critical Vulnerability With Video Surveillance Manager Appliance
65. [SingCERT] Alert on Critical Out-Of-Band Adobe Acrobat Vulnerability (CVE-2018-12848)
66. Critical flaw affects Cisco Video Surveillance Manager
67. macOS Mojave Privacy Bypass Flaw Allows Access to Protected Files
68. Cisco: We've killed another critical hard-coded root password bug, patch urgently
69. Report: Microsoft misses disclosure deadline to patch RCE bug in JET
70. Western Digital resolves year-old password bypass bug in My Cloud NAS devices
71. Cisco Patched Critical Vulnerability In Its Video Surveillance Manager Software
72. Bug Exposed Direct Messages of Millions of Twitter Users
73. A bug in Twitter Account Activity API exposed users messages to wrong developers

Region brief for 2018-09-24

ASIA

1. Experts uncovered a new Adwind campaign aimed at Linux, Windows, and macOS systems
2. Adwind RAT Scurries By AV Software With New DDE Variant

OCEANIA

Nothing to report

NORTH AMERICA

3. Pennsylvania Senate Democrats paid $700,000 to recover from ransomware attack
4. macOS Mojave Privacy Bypass Flaw Allows Access to Protected Files
5. Yubico's latest authentication keys get the jump on a 'passwordless' future
6. U.S. General Service Administration Launches Bug Bounty Program
7. US ISP RCN stores customer passwords in cleartext
8. Operator of hackers' favorite malware scanning service gets 14 years in prison
9. Hacker Sentenced for Running “Scan4you” Malware Scanning Service
10. Unraveling Emotet's Latest Macro Obfuscation
11. #SecurityNews: Over 90% of US retail domains analyzed recently were found to be non-compliant with #PCI DSS. The sector also performed worst out of the 18 appraised. Read more about this here:   #compliance #cyberattack #
12. Ransomware, Fileless Attacks and Cold Boot the Current Trend

SOUTH AMERICA

Nothing to report

EUROPE

13. Experts uncovered a new Adwind campaign aimed at Linux, Windows, and macOS systems
14. Scottish Brewery Recovered from Ransomware Attack
15. Yubico's latest authentication keys get the jump on a 'passwordless' future
16. Scottish Brewery Recovered from Ransomware Attack  …
17. Cybersecurity Has Become a Major Liability for Online Retailers
18. Operator of hackers' favorite malware scanning service gets 14 years in prison
19. Black Rose Lucy Android malware mimics user's on-screen click
20. Adwind RAT Scurries By AV Software With New DDE Variant
21. Hacker Sentenced for Running “Scan4you” Malware Scanning Service
22. Virobot Malware Emerges
23. Scottish brewery ransomware attack leverages job opening
24. Arran Brewery Hits Massive Ransomware Attack – Warned Other Companies to Stay Safe

AFRICA

Nothing to report

Sector brief for 2018-09-24

HEALTHCARE

1. Ransomware, Fileless Attacks and Cold Boot the Current Trend

TRANSPORT

Nothing to report

BANKING & FINANCE

2. Pennsylvania Senate Democrats paid $700,000 to recover from ransomware attack
3. Cybersecurity Has Become a Major Liability for Online Retailers
4. Unraveling Emotet's Latest Macro Obfuscation

INFORMATION & TELECOMMUNICATION

5. US ISP RCN stores customer passwords in cleartext

FOOD

Nothing to report

WATER

Nothing to report

ENERGY

Nothing to report

GOVERNMENT & PUBLIC SERVICE

Nothing to report

Daily brief for 2018-09-24

ASIA

1. Experts uncovered a new Adwind campaign aimed at Linux, Windows, and macOS systems
2. Adwind RAT Scurries By AV Software With New DDE Variant

WORLD

3. Pennsylvania Senate Democrats paid $700,000 to recover from ransomware attack
4. macOS Mojave Privacy Bypass Flaw Allows Access to Protected Files
5. Experts uncovered a new Adwind campaign aimed at Linux, Windows, and macOS systems
6. Scottish Brewery Recovered from Ransomware Attack
7. Yubico's latest authentication keys get the jump on a 'passwordless' future
8. Scottish Brewery Recovered from Ransomware Attack  …
9. U.S. General Service Administration Launches Bug Bounty Program
10. Cybersecurity Has Become a Major Liability for Online Retailers
11. US ISP RCN stores customer passwords in cleartext
12. Operator of hackers' favorite malware scanning service gets 14 years in prison
13. Black Rose Lucy Android malware mimics user's on-screen click
14. Adwind RAT Scurries By AV Software With New DDE Variant
15. Hacker Sentenced for Running “Scan4you” Malware Scanning Service
16. Unraveling Emotet's Latest Macro Obfuscation
17. #SecurityNews: Over 90% of US retail domains analyzed recently were found to be non-compliant with #PCI DSS. The sector also performed worst out of the 18 appraised. Read more about this here:   #compliance #cyberattack #
18. Ransomware, Fileless Attacks and Cold Boot the Current Trend
19. Virobot Malware Emerges
20. Scottish brewery ransomware attack leverages job opening
21. Arran Brewery Hits Massive Ransomware Attack – Warned Other Companies to Stay Safe

ATTACKS

22. Microsoft goes password-free for Azure AD sign-in
23. Cisco: We’ve killed another critical hard-coded root password bug, patch urgently
24. Experts uncovered a new Adwind campaign aimed at Linux, Windows, and macOS systems
25. Yubico's latest authentication keys get the jump on a 'passwordless' future
26. New Adwind Campaign Targets Linux, Windows, and macOS
27. US ISP RCN stores customer passwords in cleartext
28. Zoho Suspended by Domain Registrar Over Phishy Emails
29. [SingCERT] Alert on Cisco Video Surveillance Manager Default Password Vulnerability CVE-2018-15427
30. Survey: Nearly one-third of breached companies reported job losses after data breach
31. Breaking Chrome / Google account auto login (and tracking)
32. 4 Things To Do To Get Your Smartphone Compromised
33. Microsoft Deletes Passwords for Azure Active Directory Applications
34. [SingCERT] Alert on Microsoft JET Database Engine Vulnerabilities CVE-2018-8392 and CVE-2018-8393
35. It’s an active buyer’s market for DDoS-as-a-Service - NETSCOUT
36. Tricky DoS Attack Crashes Mozilla Firefox
37. Virobot Ransomware Logs Keystrokes and Adds PC to Spam Botnet
38. Cisco: We've killed another critical hard-coded root password bug, patch urgently
39. Cisco Removes Default Password From Video Surveillance Manager
40. Credential Stuffing Attacks Are Reaching DDoS Proportions
41. Freelance workers targeted in new malware campaign
42. Viborot ransomware comes with a botnet
43. Western Digital resolves year-old password bypass bug in My Cloud NAS devices
44. Bug Exposed Direct Messages of Millions of Twitter Users
45. A bug in Twitter Account Activity API exposed users messages to wrong developers
46. Do you know who the biggest threat actors are? Check out this paper that shares our perspective on the key takeaways from the 2018 Verizon Data Breach Investigations Report. Get your copy here:   #DBIR #
47. Pervasive email #security threats have dampened adoption of #cloud-based productivity tools: #survey   #BarracudaNetworks #phishing #Office365 #fraud #AI #
48. Hackers Compromised Thousands of WordPress Sites and Redirects to Tech Support Scams

THREATS

49. Hackers Use Cloud Hosting Services To Deliver Malware That Steals Cryptocurrency Wallet Details
50. Pennsylvania Senate Democrats paid $700,000 to recover from ransomware attack
51. macOS Mojave Privacy Bypass Flaw Allows Access to Protected Files
52. Adwind RAT Scurries By AV Software With New DDE Variant
53. Cisco: We’ve killed another critical hard-coded root password bug, patch urgently
54. Join our LIVE Webcast with @SCMagazine on 9/25: #Cryptomining: The Next #Malware Attack >>> register now   <<<
55. Scottish Brewery Recovered from Ransomware Attack
56. Cybercriminals Target Kodi Media Player for Malware Distribution
57. Scottish Brewery Recovered from Ransomware Attack  …
58. U.S. General Service Administration Launches Bug Bounty Program
59. Zoho Suspended by Domain Registrar Over Phishy Emails
60. Operator of hackers' favorite malware scanning service gets 14 years in prison
61. Cisco patches 'critical' credential bug in video surveillance software
62. Black Rose Lucy Android malware mimics user's on-screen click
63. Adwind RAT Scurries By AV Software With New DDE Variant
64. [SingCERT] Alert on Cisco Video Surveillance Manager Default Password Vulnerability CVE-2018-15427
65. Hacker Sentenced for Running “Scan4you” Malware Scanning Service
66. Apple MacOS Mojave zero-day privacy bypass vulnerability revealed
67. The MyCloud Auth Vulnerability Fixed by Western Digital with a Hotfix
68. Blocking ransomware for free with honeypots
69. Unraveling Emotet's Latest Macro Obfuscation
70. [SingCERT] Alert on Microsoft JET Database Engine Vulnerabilities CVE-2018-8392 and CVE-2018-8393
71. Adwind Trojan circumvents antivirus software to infect your PC
72. Cisco Patches Critical Flaw in Cisco Video Surveillance Manager (VSM) Software
73. #SecurityNews: Over 90% of US retail domains analyzed recently were found to be non-compliant with #PCI DSS. The sector also performed worst out of the 18 appraised. Read more about this here:   #compliance #cyberattack #
74. Researchers warn of iTranslator man-in-the-middle malware
75. New Bug Crashes Mozilla Firefox on Windows, Linux, and Mac Systems
76. Virobot Ransomware Logs Keystrokes and Adds PC to Spam Botnet
77. Cisco Patched Critical Vulnerability With Video Surveillance Manager Appliance
78. [SingCERT] Alert on Critical Out-Of-Band Adobe Acrobat Vulnerability (CVE-2018-12848)
79. Critical flaw affects Cisco Video Surveillance Manager
80. Pennsylvania Senate Democrats paid $700,000 to recover from ransomware attack
81. Ransomware, Fileless Attacks and Cold Boot the Current Trend
82. macOS Mojave Privacy Bypass Flaw Allows Access to Protected Files
83. Cisco: We've killed another critical hard-coded root password bug, patch urgently
84. Virobot Malware Emerges
85. Report: Microsoft misses disclosure deadline to patch RCE bug in JET
86. Freelance workers targeted in new malware campaign
87. Viborot ransomware comes with a botnet
88. Scottish brewery ransomware attack leverages job opening
89. Arran Brewery Hits Massive Ransomware Attack – Warned Other Companies to Stay Safe
90. Western Digital resolves year-old password bypass bug in My Cloud NAS devices
91. Cisco Patched Critical Vulnerability In Its Video Surveillance Manager Software
92. Bug Exposed Direct Messages of Millions of Twitter Users
93. A bug in Twitter Account Activity API exposed users messages to wrong developers
94. Thousands of WordPress sites are infected with the malicious code

CRIME

95. Pennsylvania Senate Democrats paid $700,000 to recover from ransomware attack
96. Join our LIVE Webcast with @SCMagazine on 9/25: #Cryptomining: The Next #Malware Attack >>> register now   <<<
97. Cybercriminals Target Kodi Media Player for Malware Distribution
98. Cybersecurity Has Become a Major Liability for Online Retailers
99. Operator of hackers' favorite malware scanning service gets 14 years in prison
100. Hacker Sentenced for Running “Scan4you” Malware Scanning Service
101. Unraveling Emotet's Latest Macro Obfuscation
102. Ransomware, Fileless Attacks and Cold Boot the Current Trend
103. Arran Brewery Hits Massive Ransomware Attack – Warned Other Companies to Stay Safe

POLITICS

104. macOS Mojave Privacy Bypass Flaw Allows Access to Protected Files

Region brief for 2018-09-23

ASIA

1. Second Quarter Threat Report 2018: Nasty Malware Trend, Growing not Shrinking

OCEANIA

2. DanaBot Banking Trojan Emerges Again With New Features Steals Banking Credentials

NORTH AMERICA

Nothing to report

SOUTH AMERICA

Nothing to report

EUROPE

3. Security Affairs newsletter Round 181 – News of the week
4. DanaBot Banking Trojan Emerges Again With New Features Steals Banking Credentials
5. Brewery became victim of targeted ransomware attack via job vacancy ad
6. Hacker behind the “Scan4you” Malware Scanning Service Sentenced 14 Years in Jail

AFRICA

Nothing to report

Sector brief for 2018-09-23

HEALTHCARE

Nothing to report

TRANSPORT

1. Security Affairs newsletter Round 181 – News of the week

BANKING & FINANCE

2. DanaBot Banking Trojan Emerges Again With New Features Steals Banking Credentials
3. Brewery became victim of targeted ransomware attack via job vacancy ad

INFORMATION & TELECOMMUNICATION

4. Tor Browser 8.0.1 released: fix security bugs

FOOD

Nothing to report

WATER

Nothing to report

ENERGY

Nothing to report

GOVERNMENT & PUBLIC SERVICE

Nothing to report

Threat report for 2018-09-22

DATA BREACH

1. Adams County clerk resigns over role in data breach
2. Twitter API Bug Might Have Exposed Your Direct Messages To The Wrong Developers
3. Pegasus spyware spotted in 45 countries, many with questionable human rights records
4. Hackers Compromised Japanese Zaif Exchange and Stole Cryptocurrencies worth $60 Million
5. It’s not enough to cast a wide cybersecurity net and hope you catch the adversaries trying to compromise your data. Learn how using the MITRE ATT&CK Matrix with CIS Controls and Tripwire mapping can secure your business, today!   #security #
6. Google publicly disclosed the Microsoft Jet database engine zero-day RCE vulnerability
7. MariaDB announces acquisition of distributed database Clustrix
8. Twitter: Don't panic, but we may have leaked your DMs to rando devs
9. Business Email Compromises Fuel Procurement Fraud
10. Twitter API Flaw Exposed Users Messages to Wrong Developers For Over a Year
11. Thousands of compromised websites on sale in black market
12. Data theft in US State Department email system
13. Thousands of Compromised WordPress Sites Redirect to Tech Support Scams

DENIAL-OF-SERVICE

14. The makers of the Mirai IoT-hijacking botnet are sentenced   #extortion
15. Researchers Discovered New Virobot Ransomware with Botnet Capabilities
16. Learn how Russian #BOTs weaponized Twitter to influence and disinform people in the @SafeGuard_Cyber #whitepaper.
17. Defending Against Next-Generation DDoS Attacks
18. Ngrok Mining Botnet
19. Hackers Spreading New Virobot Ransomware with Powerful Botnet & Keylogging Capabilities

MALVERTISING

Nothing to report

PHISHING

20. MagBO Black Market Hacking Site, Caught Selling 3,000 Website Login Credentials
21. The Common Factors in Phishing

WEB DEFACEMENT

Nothing to report

MALWARE

22. Report: Cryptomining malware detections up more than 459 percent since 2017
23. Pegasus spyware spotted in 45 countries, many with questionable human rights records
24. Romanian Citizen Admits Guilt in Police Department Ransomware Attack   #digitalattack
25. Operator of Scan4You Malware-Scanning sentenced to 14 Years in prison
26. Researchers Discovered New Virobot Ransomware with Botnet Capabilities
27. DanaBot banking Trojan evolves and now targets European countries
28. Scottish brewery recovers from ransomware attack
29. Scotland's Arran Brewery Slammed by Dharma Bip Ransomware
30. Hackers Spreading New Virobot Ransomware with Powerful Botnet & Keylogging Capabilities
31. Operator of VirusTotal Like Malware-Scanning Service Jailed for 14 Years
32. Romanian Citizen Admits Guilt in Police Department Ransomware Attack   #malware
33. New Ransomware Virus?

EXPLOIT

34. Learn how Russian #BOTs weaponized Twitter to influence and disinform people in the @SafeGuard_Cyber #whitepaper.

VULNERABILITY

35. Twitter API Bug Might Have Exposed Your Direct Messages To The Wrong Developers
36. Bitcoin Core Bug Could Crash The Entire Bitcoin Network
37. The makers of the Mirai IoT-hijacking botnet are sentenced   #extortion
38. Bug in Apple Store Allowed more than 500 iPhones For Just 0.03 USD
39. Researchers Publicly Disclosed a Unpatched Zero-Day Flaw Affecting All Version of Windows
40. Is Your Security Dashboard Ready for the Cloud?   #vulnerabilities
41. Google publicly disclosed the Microsoft Jet database engine zero-day RCE vulnerability
42. Google’s Vulnerability Scanning for Their Cloud Infrastructure in Beta
43. EE’s 4G WiFi Modem Privilege Escalation Vulnerability Allows Let Attacker Bypass & Gain Windows Access
44. Twitter API Flaw Exposed Users Messages to Wrong Developers For Over a Year
45. Is Your Security Dashboard Ready for the Cloud?   #DevOps

Region brief for 2018-09-22

ASIA

1. Bug in Apple Store Allowed more than 500 iPhones For Just 0.03 USD
2. Hackers Compromised Japanese Zaif Exchange and Stole Cryptocurrencies worth $60 Million

OCEANIA

Nothing to report

NORTH AMERICA

3. Researchers Discovered New Virobot Ransomware with Botnet Capabilities
4. Hackers Spreading New Virobot Ransomware with Powerful Botnet & Keylogging Capabilities
5. Data theft in US State Department email system

SOUTH AMERICA

Nothing to report

EUROPE

6. MagBO Black Market Hacking Site, Caught Selling 3,000 Website Login Credentials
7. Romanian Citizen Admits Guilt in Police Department Ransomware Attack   #digitalattack
8. Operator of Scan4You Malware-Scanning sentenced to 14 Years in prison
9. DanaBot banking Trojan evolves and now targets European countries
10. Learn how Russian #BOTs weaponized Twitter to influence and disinform people in the @SafeGuard_Cyber #whitepaper.
11. EE’s 4G WiFi Modem Privilege Escalation Vulnerability Allows Let Attacker Bypass & Gain Windows Access
12. Operator of VirusTotal Like Malware-Scanning Service Jailed for 14 Years
13. Thousands of compromised websites on sale in black market
14. Romanian Citizen Admits Guilt in Police Department Ransomware Attack   #malware

AFRICA

15. DanaBot banking Trojan evolves and now targets European countries

Sector brief for 2018-09-22

HEALTHCARE

Nothing to report

TRANSPORT

Nothing to report

BANKING & FINANCE

1. MagBO Black Market Hacking Site, Caught Selling 3,000 Website Login Credentials
2. Bitcoin Core Bug Could Crash The Entire Bitcoin Network
3. Bug in Apple Store Allowed more than 500 iPhones For Just 0.03 USD
4. DanaBot banking Trojan evolves and now targets European countries

INFORMATION & TELECOMMUNICATION

5. EE’s 4G WiFi Modem Privilege Escalation Vulnerability Allows Let Attacker Bypass & Gain Windows Access

FOOD

Nothing to report

WATER

Nothing to report

ENERGY

Nothing to report

GOVERNMENT & PUBLIC SERVICE

Nothing to report

Daily brief for 2018-09-22

ASIA

1. Bug in Apple Store Allowed more than 500 iPhones For Just 0.03 USD
2. Hackers Compromised Japanese Zaif Exchange and Stole Cryptocurrencies worth $60 Million

WORLD

3. MagBO Black Market Hacking Site, Caught Selling 3,000 Website Login Credentials
4. Romanian Citizen Admits Guilt in Police Department Ransomware Attack   #digitalattack
5. Operator of Scan4You Malware-Scanning sentenced to 14 Years in prison
6. Researchers Discovered New Virobot Ransomware with Botnet Capabilities
7. DanaBot banking Trojan evolves and now targets European countries
8. Learn how Russian #BOTs weaponized Twitter to influence and disinform people in the @SafeGuard_Cyber #whitepaper.
9. Hackers Spreading New Virobot Ransomware with Powerful Botnet & Keylogging Capabilities
10. EE’s 4G WiFi Modem Privilege Escalation Vulnerability Allows Let Attacker Bypass & Gain Windows Access
11. Operator of VirusTotal Like Malware-Scanning Service Jailed for 14 Years
12. Thousands of compromised websites on sale in black market
13. Data theft in US State Department email system
14. Romanian Citizen Admits Guilt in Police Department Ransomware Attack   #malware

ATTACKS

15. Adams County clerk resigns over role in data breach
16. Twitter API Bug Might Have Exposed Your Direct Messages To The Wrong Developers
17. Pegasus spyware spotted in 45 countries, many with questionable human rights records
18. MagBO Black Market Hacking Site, Caught Selling 3,000 Website Login Credentials
19. The Common Factors in Phishing
20. The makers of the Mirai IoT-hijacking botnet are sentenced   #extortion
21. Researchers Discovered New Virobot Ransomware with Botnet Capabilities
22. Hackers Compromised Japanese Zaif Exchange and Stole Cryptocurrencies worth $60 Million
23. It’s not enough to cast a wide cybersecurity net and hope you catch the adversaries trying to compromise your data. Learn how using the MITRE ATT&CK Matrix with CIS Controls and Tripwire mapping can secure your business, today!   #security #
24. Learn how Russian #BOTs weaponized Twitter to influence and disinform people in the @SafeGuard_Cyber #whitepaper.
25. Google publicly disclosed the Microsoft Jet database engine zero-day RCE vulnerability
26. MariaDB announces acquisition of distributed database Clustrix
27. Twitter: Don't panic, but we may have leaked your DMs to rando devs
28. Business Email Compromises Fuel Procurement Fraud
29. Defending Against Next-Generation DDoS Attacks
30. Ngrok Mining Botnet
31. Hackers Spreading New Virobot Ransomware with Powerful Botnet & Keylogging Capabilities
32. Twitter API Flaw Exposed Users Messages to Wrong Developers For Over a Year
33. Thousands of compromised websites on sale in black market
34. Data theft in US State Department email system
35. Thousands of Compromised WordPress Sites Redirect to Tech Support Scams

THREATS

36. Report: Cryptomining malware detections up more than 459 percent since 2017
37. Twitter API Bug Might Have Exposed Your Direct Messages To The Wrong Developers
38. Pegasus spyware spotted in 45 countries, many with questionable human rights records
39. Bitcoin Core Bug Could Crash The Entire Bitcoin Network
40. Romanian Citizen Admits Guilt in Police Department Ransomware Attack   #digitalattack
41. Operator of Scan4You Malware-Scanning sentenced to 14 Years in prison
42. The makers of the Mirai IoT-hijacking botnet are sentenced   #extortion
43. Researchers Discovered New Virobot Ransomware with Botnet Capabilities
44. Bug in Apple Store Allowed more than 500 iPhones For Just 0.03 USD
45. Researchers Publicly Disclosed a Unpatched Zero-Day Flaw Affecting All Version of Windows
46. DanaBot banking Trojan evolves and now targets European countries
47. Learn how Russian #BOTs weaponized Twitter to influence and disinform people in the @SafeGuard_Cyber #whitepaper.
48. Is Your Security Dashboard Ready for the Cloud?   #vulnerabilities
49. Google publicly disclosed the Microsoft Jet database engine zero-day RCE vulnerability
50. Scottish brewery recovers from ransomware attack
51. Scotland's Arran Brewery Slammed by Dharma Bip Ransomware
52. Google’s Vulnerability Scanning for Their Cloud Infrastructure in Beta
53. Hackers Spreading New Virobot Ransomware with Powerful Botnet & Keylogging Capabilities
54. EE’s 4G WiFi Modem Privilege Escalation Vulnerability Allows Let Attacker Bypass & Gain Windows Access
55. Operator of VirusTotal Like Malware-Scanning Service Jailed for 14 Years
56. Twitter API Flaw Exposed Users Messages to Wrong Developers For Over a Year
57. Romanian Citizen Admits Guilt in Police Department Ransomware Attack   #malware
58. New Ransomware Virus?
59. Is Your Security Dashboard Ready for the Cloud?   #DevOps

CRIME

60. Report: Cryptomining malware detections up more than 459 percent since 2017
61. MagBO Black Market Hacking Site, Caught Selling 3,000 Website Login Credentials
62. Bitcoin Core Bug Could Crash The Entire Bitcoin Network
63. Operator of Scan4You Malware-Scanning sentenced to 14 Years in prison
64. The makers of the Mirai IoT-hijacking botnet are sentenced   #extortion
65. Bug in Apple Store Allowed more than 500 iPhones For Just 0.03 USD
66. DanaBot banking Trojan evolves and now targets European countries
67. Hackers Compromised Japanese Zaif Exchange and Stole Cryptocurrencies worth $60 Million
68. Scotland's Arran Brewery Slammed by Dharma Bip Ransomware
69. Operator of VirusTotal Like Malware-Scanning Service Jailed for 14 Years
70. Data theft in US State Department email system

POLITICS

Nothing to report

Threat report for 2018-09-21

DATA BREACH

1. What Are Honeywords? Password Protection for Database Breaches
2. Snap! Microsoft database flaw, internet to split? Plus, asteroid probed
3. Twitter Flaw Exposed Direct Messages To External Developers
4. Twitter Flaw Exposed Direct Messages To External Developers
5. Twitter API bug leaked private data to other accounts
6. The @aberdeengroup analyzed the likelihood and business impact of #phishing attacks based on lost productivity of 1,000 users with a confirmed #databreach of between 100k - 1m records, for 10 different industries. Download the @cyreninc #whitepaper here
7. Independence Blue Cross Breach Exposed 17K Records
8. Independence Blue Cross Breach Exposed 17K Records  …
9. Newegg leaked credit card information for more than a month
10. ZDI Shares Details of Microsoft JET Database Zero-Day
11. Fully 61 percent of ASX100 exposed as email fraud gets personal
12. Pegasus spyware spotted in 45 countries, many with questionable human rights records
13. ICO to Fine Equifax £500,000 for 2017 Data Breach   via @DMBisson #GDPR #databreach
14. Adams County clerk resigns over role in data breach
15. SC Media September Product Reviews: Threat Intelligence Recorded Future l
16. 0Day Windows JET Database Vulnerability disclosed by Zero Day Initiative
17. Who ate all the PII? Not the blockchain, thankfully
18. Tick-tock, tick-tock. Oh, that's just the sound of compromised logins waiting to ruin your day
19. Equifax IT staff had to rerun hackers' database queries to work out what was nicked – audit
20. Veeam holds its hands up, admits database leak was plain 'complacency'
21. Back up a minute: Veeam database config snafu exposed millions of customer records
22. Law firm seeking leak victims to launch £500m suit at British Airways
23. #SecurityNews: The Information Commissioner’s Office (ICO) has fined #Equifax £500K after the 2017 #databreach. For the 2nd time the #ICO has issued a max fine after the credit agency exposed data on 15 million UK customers. Read more here:   #
24. SingHealth data breach reveals several 'inadequate' security measures
25. Cisco releases fixes for remote code execution flaws in Webex Network Recording Player
26. ICO Slaps Equifax with Maximum Fine for the 2017 Data Breach
27. Cisco fixes Remote Code Execution flaws in Webex Network Recording Player
28. MageCart Hacked Customers’ In NewEgg Credit Card Data Breach
29. ZDI Exposed Unpatched Microsoft RCE Zero-day Flaw in Public After it Crossed the 120 Days Deadline
30. ICO to Fine Equifax £500,000 for 2017 Data Breach   via @DMBisson #databreach #GDPR
31. Magecart’s Next Attack Resulted In ABS-CBN Data Breach
32. £500k fine for Equifax 2017 data breach

DENIAL-OF-SERVICE

33. New Virobot Ransomware and Botnet Emerges
34. New Virobot ransomware will also log keystrokes, add PC to a spam botnet
35. Apache Struts and SonicWall Targeted by Mirai and Gafgyt Botnets
36. Virobot Ransomware with Botnet Capability Breaks Through
37. No, the Mirai botnet masters aren't going to jail. Why? 'Cos they help Feds nab cyber-crims
38. ZombieBoy
39. The makers of the Mirai IoT-hijacking botnet are sentenced   via @gcluley #DDoS #FBI
40. Mirai Botnet Creators To Help Law Enforcement Agencies On Cybercrime Investigations
41. The makers of the Mirai IoT-hijacking botnet are sentenced   via @gcluley #botnets #Mirai

MALVERTISING

42. This blog post explores how #malvertising works and identifies key defense strategies for #businesses  … #malware #cyberattacks

DATA LEAK

Nothing to report

PHISHING

43. What Are Honeywords? Password Protection for Database Breaches
44. Spam or Phish? How to Tell the Difference Between a Marketing Email and a Malicious Spam Email
45. Phishing finance apps make way back into Google Play
46. The @aberdeengroup analyzed the likelihood and business impact of #phishing attacks based on lost productivity of 1,000 users with a confirmed #databreach of between 100k - 1m records, for 10 different industries. Download the @cyreninc #whitepaper here
47. Securing industrial IoT passwords: For Pete's sake, engineers, don't all jump in at once
48. Tick-tock, tick-tock. Oh, that's just the sound of compromised logins waiting to ruin your day
49. Solid password practice on Capital One's site? Don't bank on it
50. When is a patch not a patch? When it's for this McAfee password bug
51. Warning issued as Netflix subscribers hit by phishing attack
52. Security data reveals worldwide malicious login attempts are on the rise
53. AD FS 2016 Password Change from non workplace joined devices
54. The most used email subjects used in phishing attacks
55. AdGuard resets all user passwords after credential stuffing attack

WEB DEFACEMENT

Nothing to report

MALWARE

56. Brewery breach: Not even beer is safe from ransomware
57. The Week in Ransomware – September 21st 2018 – Beer, Airports, & Dharma
58. PMP®️ Domain Information & Overview
59. Gamma, Bkp, & Monro Dharma Ransomware Variants Released in One Week
60. Spam or Phish? How to Tell the Difference Between a Marketing Email and a Malicious Spam Email
61. Romanian Citizen Admits Guilt in Police Department Ransomware Attack   via @DMBisson #police #ransomware
62. Malware Disguised as Job Offers Distributed on Freelance Sites
63. Romanian Hacker Pleads Guilty for Role in Inauguration Surveillance Ransomware
64. Proofpoint: One month out from deadline, half of agency domains are #DMARC compliant   via CyberScoopNews #FinSec
65. Delphi Packer Looks for Human Behavior Before Deploying Payload
66. Delphi Packer Looks for Human Behavior Before Deploying Payload
67. The Week in Ransomware - September 21st 2018 - Beer, Airports, & Dharma
68. Operator of 'VirusTotal for criminals' gets 14-year prison sentence
69. Gamma, Bkp, & Monro Dharma Ransomware Variants Released in One Week
70. New Virobot Ransomware and Botnet Emerges
71. Staying King Krab: GandCrab Malware Keeps a Step Ahead of Network Defenses
72. Malware Disguised as Job Offers Distributed on Freelance Sites
73. New Virobot ransomware will also log keystrokes, add PC to a spam botnet
74. Security news: All-in-one malware out, GovPayNow drops the ball on security, and Newegg suffers a crack | Avast
75. Romanian Hacker Pleads Guilty for Role in Inauguration Surveillance Ransomware
76. Pegasus spyware spotted in 45 countries, many with questionable human rights records
77. Discover how Tripwire Malware Detection... - Protects against zero-day exploits and other known threats. - Offers an enterprise view of suspicious malware objects across all monitored systems. - Protects from repeat #malware attacks. Learn more here:
78. Legitimate RATs Pose Serious Risk to Industrial Systems
79. Crooks turn to Delphi packers to evade malware detection
80. This blog post explores how #malvertising works and identifies key defense strategies for #businesses  … #malware #cyberattacks
81. Malware Businesses Blending the Legitimate and the Illegitimate
82. Avoidable mistakes lead to iOS cryptomining attacks
83. Romanian Citizen Admits Guilt in Police Department Ransomware Attack   via @DMBisson #ransomware #police
84. Thousands of WordPress sites backdoored with malicious code
85. Virobot Ransomware with Botnet Capability Breaks Through
86. DMARC Fully Implemented on Two Thirds of U.S. Government Domains
87. Guilty: The Romanian ransomware mastermind who infected Trump inauguration CCTV cams
88. FDIC: Supervisory Approach to Payment Processing Relationships with Merchant Customers
89. MassMiner Malware Targeting Web Servers
90. Malware Analysis using Osquery Part 2
91. Off-the-shelf RATs Targeting Pakistan
92. Malware Analysis using Osquery Part 1
93. Malicious Documents from Lazarus Group Targeting South Korea
94. GZipDe: An Encrypted Downloader Serving Metasploit
95. Satan Ransomware Spawns New Methods to Spread
96. Woman Pleads Guilty to DC CCTV Ransomware Blitz
97. Woman Pleads Guilty to DC CCTV Ransomware Blitz  …
98. Report: Cryptomining malware detections up more than 459 percent since 2017
99. The most dangerous mobile spyware, Pegasus that has infected 45 countries
100. Security data reveals worldwide malicious login attempts are on the rise
101. Why voice fraud rates continue to rise with no signs of slowing down

EXPLOIT

102. Discover how Tripwire Malware Detection... - Protects against zero-day exploits and other known threats. - Offers an enterprise view of suspicious malware objects across all monitored systems. - Protects from repeat #malware attacks. Learn more here:
103. Docker fave Alpine Linux suffers bug miscreants can exploit to poison containers
104. New Hacker Exploits and How to Fight Them

VULNERABILITY

105. Western Digital Releases Hotfix for My Cloud Auth Bypass Vulnerability
106. Critical Vulnerability Found in Cisco Video Surveillance Manager
107. Critical Vulnerability Found in Cisco Video Surveillance Manager
108. Expert disclosed an unpatched zero-day flaw in all supported versions of Microsoft Windows
109. Snap! Microsoft database flaw, internet to split? Plus, asteroid probed
110. Bug allowing unlimited spiceups in "Answer Question" section
111. Optional Cumulative Update KB4457139 for Windows 7 Released With Bug Fixes
112. Twitter Flaw Exposed Direct Messages To External Developers
113. Twitter Flaw Exposed Direct Messages To External Developers
114. Twitter API bug leaked private data to other accounts
115. Western Digital Releases Hotfix for My Cloud Auth Bypass Vulnerability
116. Twitter notifies users about API bug that shared DMs with wrong devs
117. Optional Cumulative Update KB4457139 for Windows 7 Released With Bug Fixes
118. ZDI Shares Details of Microsoft JET Database Zero-Day
119. Flaw in Western Digital My Cloud exposes the content to hackers
120. Twitter Bug May Have Sent your Direct Messages to Twitter Developers As Well
121. Unpatched Microsoft Zero-Day in JET Allows Remote Code-Execution
122. Discover how Tripwire Malware Detection... - Protects against zero-day exploits and other known threats. - Offers an enterprise view of suspicious malware objects across all monitored systems. - Protects from repeat #malware attacks. Learn more here:
123. Bitcoin flaw could have allowed dreaded 51% takeover
124. 0Day Windows JET Database Vulnerability disclosed by Zero Day Initiative
125. Microsoft's Jet crash: Zero-day flaw drops after deadline passes
126. Patch for EE's 4G Wi-Fi mini modem nails local privilege escalation flaw
127. 'I am admin' bug turns WD's My Cloud boxes into Everyone's Cloud
128. Docker fave Alpine Linux suffers bug miscreants can exploit to poison containers
129. When is a patch not a patch? When it's for this McAfee password bug
130. More Details on an ActiveX Vulnerability Recently Used to Target Users in South Korea
131. Researcher Discloses New Zero-Day Affecting All Versions of Windows
132. Rockwell Automation Patches Severe Flaws in Communications Software
133. Cisco releases fixes for remote code execution flaws in Webex Network Recording Player
134. Google Cloud Service launches automatic scanning of container vulnerabilities to enhance cloud environment security
135. CVE-2018-14829: Rockwell Automation Stack Overflow High Risk Vulnerability
136. Adobe Addresses a Number of Critical Remote Execution Vulnerabilities
137. Trend Micro Zero Day team discloses unpatched Microsoft Jet RCE vulnerability
138. Singapore to offer bug bounty, set up Asean cybersecurity centre
139. Cisco fixes Remote Code Execution flaws in Webex Network Recording Player
140. ZDI Exposed Unpatched Microsoft RCE Zero-day Flaw in Public After it Crossed the 120 Days Deadline
141. iOS Webkit flaw found that forces iPhone restart
142. Flaw in 4GEE WiFi Modem Could Leave Your Computer Vulnerable
143. Authentication Bypass Vulnerability Disclosed in Western Digital My Cloud NAS Devices