APT report for 2018-09-27

TRANSNATIONAL / UNKNOWN

1. Threat-group Magecart - More Victims
2. Europol Highlights Continued Threats, but Magecart Demands Focus on Web Security

CHINA

3. APT10 Targeting Japanese Corporations Using Updated TTPs

INDIA

Nothing to report

NORTH KOREA

Nothing to report

PAKISTAN

Nothing to report

VIETNAM

Nothing to report

IRAN

Nothing to report

LEBANON

Nothing to report

PALESTINE

Nothing to report

SAUDI ARABIA

Nothing to report

UNITED ARAB EMIRATES

Nothing to report

RUSSIA

4. APT Group Uses Dangerous LoJax Malware That Can Survive After OS Re-installation and Hard Disk Replacement
5. Russians' stealthy 'LoJax' malware can infect on the firmware level
6. Seven additional modules make Fancy Bear’s VPNFilter malware even more versatile
7. Russian Cyberspies Use UEFI Rootkit in Attacks
8. Russian Sednit APT used the first UEFI rootkit of ever in attacks in the wild
9. LoJax: First-ever UEFI rootkit detected in a cyberattack
10. Cybersecurity Researchers Spotted First-Ever UEFI Rootkit in the Wild
11. Fancy Bear LoJax campaign reveals first documented use of UEFI rootkit in the wild
12. Seven additional modules make Fancy Bear's VPNFilter malware even more versatile
13. APT28 Uses LoJax, First UEFI Rootkit Seen in the Wild
14. VPNFilter Router Malware Adds 7 New Network Exploitation Modules
15. “Disturbing plans” in China revealed by a former Google employee

UKRAINE

Nothing to report

Platform report for 2018-09-27

WINDOWS

1. The PowerShell Boogeyman: How to Defend Against Malicious PowerShell Attacks
2. Out of sight but not invisible: Defeating fileless malware with behavior monitoring, AMSI, and next-gen AV
3. Is There Such a Thing as a Malicious PowerShell Command?

LINUX

4. Local-Privilege Escalation Flaw in Linux Kernel Allows Root Access
5. Cisco unearths 13 'High Impact' IOS vulnerabilities you need to patch now
6. Mutagen Astronomy Linux Kernel vulnerability affects Red Hat, CentOS, and Debian distros

UNIX

Nothing to report

ANDROID

7. Hide and Seek (HNS) IoT Botnet targets Android devices with ADB option enabled
8. Android password managers not as secure as desktop counterparts
9. Hide and seek Iot botnet updates include new Android ADB exploit
10. Hide and seek Iot botnet updates include new Android ADB exploit

IOS

11. Cisco unearths 13 'High Impact' IOS vulnerabilities you need to patch now

MACOS

12. ex-NSA Hacker Discloses macOS Mojave 10.14 Zero-Day Vulnerability

Threat report for 2018-09-27

DATA BREACH

1. Twitter Bug May Have Exposed Millions of DMs
2. GDPR: Data Breach Class Action Lawsuits Come to Europe
3. Fancy Bear LoJax campaign reveals first documented use of UEFI rootkit in the wild
4. SheIn Data Breach Exposed Personal Details 6.4 Million Customers To Hackers
5. United Nations data found exposed on web: researcher
6. New GootKit Campaigns Target European Banks with Reconnaissance Attacks
7. Uber to Pay $148 Million as a Settlement for Data Breach Cover
8. Uber fined $148m for data breach cover-up
9. You should prepare for the next mega data breach
10. Uber agrees to pay $148 million in massive 2016 data breach settlement
11. Endace launches petabyte network recording appliance

DENIAL-OF-SERVICE

12. Hide and Seek (HNS) IoT Botnet targets Android devices with ADB option enabled
13. Hide and seek Iot botnet updates include new Android ADB exploit
14. New "Torii" Botnet's Sophisticated Techniques Set It Apart From Mirai
15. DDoS attack on education vendor hinders access to districts’ online portals
16. New Torii Botnet uncovered, more sophisticated than Mirai | Avast
17. Hide and seek Iot botnet updates include new Android ADB exploit
18. New "Torii" Botnet's Sophisticated Techniques Set It Apart From Mirai

MALVERTISING

Nothing to report

PHISHING

19. Android password managers not as secure as desktop counterparts
20. Boffins bypass password protection with pilfering by phony programs
21. Are long passphrases the answer to password problems?
22. Chrome 70 will resolve cookies and login privacy issues

WEB DEFACEMENT

Nothing to report

MALWARE

23. APT Group Uses Dangerous LoJax Malware That Can Survive After OS Re-installation and Hard Disk Replacement
24. Russians' stealthy 'LoJax' malware can infect on the firmware level
25. CCSP Exam Details and Process
26. CCSP: Overview of Domains
27. Ransomware Attack Hits Port of San Diego
28. The PowerShell Boogeyman: How to Defend Against Malicious PowerShell Attacks
29. Chronicle Unveils VirusTotal Enterprise
30. Crooks turn to Delphi packers to evade malware detection
31. Chronicle announces VirusTotal Enterprise with greater search and analysis capabilities
32. Out of sight but not invisible: Defeating fileless malware with behavior monitoring, AMSI, and next-gen AV
33. Alphabet launches VirusTotal Enterprise
34. Is There Such a Thing as a Malicious PowerShell Command?
35. New KONNI Malware attacking Eurasia and Southeast Asia
36. New KONNI Malware attacking Eurasia and Southeast Asia
37. Pirated Game of Thrones episodes most popular TV bait for malware
38. Seven additional modules make Fancy Bear’s VPNFilter malware even more versatile
39. Russian Cyberspies Use UEFI Rootkit in Attacks
40. Dirhunt – Search and Analyze Target Domain Directories
41. Port of San Diego Affected by a Ransomware Attack
42. Phorpiex worm pivots to infect the enterprise with GandCrab ransomware
43. Crooks turn to Delphi packers to evade malware detection
44. Russian Sednit APT used the first UEFI rootkit of ever in attacks in the wild
45. LoJax: First-ever UEFI rootkit detected in a cyberattack
46. DanaBot trojan sets sights on Europe, new features
47. SC Media September Product Reviews: Threat Intelligence DomainTools Iris Investigation Platform l
48. #Malware classifcation, which encompasses both the identification and attribution of code, has the power to unlock many clues that aid
49. New VirusTotal Enterprise Offers Private Graphs, Faster Searches
50. Alphabet's Chronicle Releases VirusTotal Enterprise
51. Malware steals personal information from 6.4M SheIn customers
52. Malware hits fashion giant SHEIN; 6.42 million online shoppers affected
53. Cybersecurity Researchers Spotted First-Ever UEFI Rootkit in the Wild
54. Emergence of new ransomware variants feature names of popular politicians
55. Now that Office 365 has become one of Microsoft's fastest-growing revenue streams, it has become a primary target for #ransomware.
56. Fancy Bear LoJax campaign reveals first documented use of UEFI rootkit in the wild
57. Researchers find vulnerability in Apple's MDM DEP process
58. Seven additional modules make Fancy Bear's VPNFilter malware even more versatile
59. Cloudflare Becomes a Registrar, Sells Domains At Cost
60. APT28 Uses LoJax, First UEFI Rootkit Seen in the Wild
61. Alphabet's Chronicle Security Business Launches VirusTotal Enterprise
62. VPNFilter Router Malware Adds 7 New Network Exploitation Modules
63. Malware in the Cloud: What You Need to Know
64. Discover how Tripwire Malware Detection... - Protects against zero-day exploits and other known threats. - Offers an enterprise view of suspicious malware objects across all monitored systems. - Protects from repeat #malware attacks. Learn more here:
65. Malware in the Cloud: What You Need to Know

EXPLOIT

66. Hide and seek Iot botnet updates include new Android ADB exploit
67. Hide and seek Iot botnet updates include new Android ADB exploit
68. VPNFilter Router Malware Adds 7 New Network Exploitation Modules
69. Discover how Tripwire Malware Detection... - Protects against zero-day exploits and other known threats. - Offers an enterprise view of suspicious malware objects across all monitored systems. - Protects from repeat #malware attacks. Learn more here:

VULNERABILITY

70. Local-Privilege Escalation Flaw in Linux Kernel Allows Root Access
71. DEF CON report finds decade-old flaw in widely used ballot-counting machine
72. Twitter fixes API bug that shared data with wrong developers
73. How to Keep Up Security in a Bug-Infested World
74. Twitter Bug May Have Exposed Millions of DMs
75. Developers focus on wrong open source software vulnerabilities, research says
76. Security Flaw Found in Apple Mobile Device Enrollment Program
77. Cisco Releases Alerts for 14 High Severity Bugs
78. Apple DEP vulnerability lets attackers access orgs’ resources, info
79. Cisco unearths 13 'High Impact' IOS vulnerabilities you need to patch now
80. How automakers are tackling connected vehicle vulnerability management
81. Tripwire Patch Priority Index for September 2018
82. Researchers find vulnerability in Apple's MDM DEP process
83. GNOME 3.30.1 released: bugfixes
84. Norwegian state discusses vulnerabilities with IT sector
85. Mutagen Astronomy Linux Kernel vulnerability affects Red Hat, CentOS, and Debian distros
86. KDE Plasma 5.12.7 LTS releases: fix bugs
87. Discover how Tripwire Malware Detection... - Protects against zero-day exploits and other known threats. - Offers an enterprise view of suspicious malware objects across all monitored systems. - Protects from repeat #malware attacks. Learn more here:
88. ex-NSA Hacker Discloses macOS Mojave 10.14 Zero-Day Vulnerability

Region brief for 2018-09-27

ASIA

1. APT10 Targeting Japanese Corporations Using Updated TTPs
2. New Torii Botnet uncovered, more sophisticated than Mirai | Avast
3. “Disturbing plans” in China revealed by a former Google employee

OCEANIA

Nothing to report

NORTH AMERICA

4. DEF CON report finds decade-old flaw in widely used ballot-counting machine
5. GDPR: Data Breach Class Action Lawsuits Come to Europe
6. SheIn Data Breach Exposed Personal Details 6.4 Million Customers To Hackers
7. You should prepare for the next mega data breach
8. Uber agrees to pay $148 million in massive 2016 data breach settlement
9. “Disturbing plans” in China revealed by a former Google employee

SOUTH AMERICA

Nothing to report

EUROPE

10. Russians' stealthy 'LoJax' malware can infect on the firmware level
11. Russian Cyberspies Use UEFI Rootkit in Attacks
12. Threat-group Magecart - More Victims
13. Russian Sednit APT used the first UEFI rootkit of ever in attacks in the wild
14. Norwegian state discusses vulnerabilities with IT sector
15. Seven additional modules make Fancy Bear's VPNFilter malware even more versatile
16. VPNFilter Router Malware Adds 7 New Network Exploitation Modules

AFRICA

Nothing to report

Sector brief for 2018-09-27

HEALTHCARE

Nothing to report

TRANSPORT

Nothing to report

BANKING & FINANCE

1. Threat-group Magecart - More Victims
2. New GootKit Campaigns Target European Banks with Reconnaissance Attacks

INFORMATION & TELECOMMUNICATION

Nothing to report

FOOD

Nothing to report

WATER

Nothing to report

ENERGY

Nothing to report

GOVERNMENT & PUBLIC SERVICE

3. DEF CON report finds decade-old flaw in widely used ballot-counting machine

Daily brief for 2018-09-27

ASIA

1. APT10 Targeting Japanese Corporations Using Updated TTPs
2. New Torii Botnet uncovered, more sophisticated than Mirai | Avast
3. “Disturbing plans” in China revealed by a former Google employee

WORLD

4. Russians' stealthy 'LoJax' malware can infect on the firmware level
5. DEF CON report finds decade-old flaw in widely used ballot-counting machine
6. Russian Cyberspies Use UEFI Rootkit in Attacks
7. Threat-group Magecart - More Victims
8. Russian Sednit APT used the first UEFI rootkit of ever in attacks in the wild
9. GDPR: Data Breach Class Action Lawsuits Come to Europe
10. SheIn Data Breach Exposed Personal Details 6.4 Million Customers To Hackers
11. Norwegian state discusses vulnerabilities with IT sector
12. Seven additional modules make Fancy Bear's VPNFilter malware even more versatile
13. You should prepare for the next mega data breach
14. Uber agrees to pay $148 million in massive 2016 data breach settlement
15. VPNFilter Router Malware Adds 7 New Network Exploitation Modules
16. “Disturbing plans” in China revealed by a former Google employee

ATTACKS

17. Hide and Seek (HNS) IoT Botnet targets Android devices with ADB option enabled
18. Android password managers not as secure as desktop counterparts
19. Hide and seek Iot botnet updates include new Android ADB exploit
20. Twitter Bug May Have Exposed Millions of DMs
21. New "Torii" Botnet's Sophisticated Techniques Set It Apart From Mirai
22. DDoS attack on education vendor hinders access to districts’ online portals
23. Boffins bypass password protection with pilfering by phony programs
24. GDPR: Data Breach Class Action Lawsuits Come to Europe
25. Fancy Bear LoJax campaign reveals first documented use of UEFI rootkit in the wild
26. New Torii Botnet uncovered, more sophisticated than Mirai | Avast
27. SheIn Data Breach Exposed Personal Details 6.4 Million Customers To Hackers
28. Hide and seek Iot botnet updates include new Android ADB exploit
29. United Nations data found exposed on web: researcher
30. New GootKit Campaigns Target European Banks with Reconnaissance Attacks
31. Uber to Pay $148 Million as a Settlement for Data Breach Cover
32. Uber fined $148m for data breach cover-up
33. New "Torii" Botnet's Sophisticated Techniques Set It Apart From Mirai
34. You should prepare for the next mega data breach
35. Uber agrees to pay $148 million in massive 2016 data breach settlement
36. Are long passphrases the answer to password problems?
37. Chrome 70 will resolve cookies and login privacy issues
38. Endace launches petabyte network recording appliance

THREATS

39. APT Group Uses Dangerous LoJax Malware That Can Survive After OS Re-installation and Hard Disk Replacement
40. Russians' stealthy 'LoJax' malware can infect on the firmware level
41. CCSP Exam Details and Process
42. CCSP: Overview of Domains
43. Ransomware Attack Hits Port of San Diego
44. The PowerShell Boogeyman: How to Defend Against Malicious PowerShell Attacks
45. Chronicle Unveils VirusTotal Enterprise
46. Crooks turn to Delphi packers to evade malware detection
47. Chronicle announces VirusTotal Enterprise with greater search and analysis capabilities
48. Out of sight but not invisible: Defeating fileless malware with behavior monitoring, AMSI, and next-gen AV
49. Local-Privilege Escalation Flaw in Linux Kernel Allows Root Access
50. Alphabet launches VirusTotal Enterprise
51. DEF CON report finds decade-old flaw in widely used ballot-counting machine
52. Twitter fixes API bug that shared data with wrong developers
53. Is There Such a Thing as a Malicious PowerShell Command?
54. New KONNI Malware attacking Eurasia and Southeast Asia
55. New KONNI Malware attacking Eurasia and Southeast Asia
56. How to Keep Up Security in a Bug-Infested World
57. Pirated Game of Thrones episodes most popular TV bait for malware
58. Seven additional modules make Fancy Bear’s VPNFilter malware even more versatile
59. Hide and seek Iot botnet updates include new Android ADB exploit
60. Twitter Bug May Have Exposed Millions of DMs
61. Russian Cyberspies Use UEFI Rootkit in Attacks
62. Dirhunt – Search and Analyze Target Domain Directories
63. Port of San Diego Affected by a Ransomware Attack
64. Developers focus on wrong open source software vulnerabilities, research says
65. Phorpiex worm pivots to infect the enterprise with GandCrab ransomware
66. Security Flaw Found in Apple Mobile Device Enrollment Program
67. Crooks turn to Delphi packers to evade malware detection
68. Russian Sednit APT used the first UEFI rootkit of ever in attacks in the wild
69. LoJax: First-ever UEFI rootkit detected in a cyberattack
70. DanaBot trojan sets sights on Europe, new features
71. SC Media September Product Reviews: Threat Intelligence DomainTools Iris Investigation Platform l
72. #Malware classifcation, which encompasses both the identification and attribution of code, has the power to unlock many clues that aid
73. New VirusTotal Enterprise Offers Private Graphs, Faster Searches
74. Alphabet's Chronicle Releases VirusTotal Enterprise
75. Cisco Releases Alerts for 14 High Severity Bugs
76. Apple DEP vulnerability lets attackers access orgs’ resources, info
77. Cisco unearths 13 'High Impact' IOS vulnerabilities you need to patch now
78. Malware steals personal information from 6.4M SheIn customers
79. How automakers are tackling connected vehicle vulnerability management
80. Malware hits fashion giant SHEIN; 6.42 million online shoppers affected
81. Cybersecurity Researchers Spotted First-Ever UEFI Rootkit in the Wild
82. Emergence of new ransomware variants feature names of popular politicians
83. Now that Office 365 has become one of Microsoft's fastest-growing revenue streams, it has become a primary target for #ransomware.
84. Fancy Bear LoJax campaign reveals first documented use of UEFI rootkit in the wild
85. Tripwire Patch Priority Index for September 2018
86. Researchers find vulnerability in Apple's MDM DEP process
87. GNOME 3.30.1 released: bugfixes
88. Norwegian state discusses vulnerabilities with IT sector
89. Seven additional modules make Fancy Bear's VPNFilter malware even more versatile
90. Hide and seek Iot botnet updates include new Android ADB exploit
91. Cloudflare Becomes a Registrar, Sells Domains At Cost
92. APT28 Uses LoJax, First UEFI Rootkit Seen in the Wild
93. Mutagen Astronomy Linux Kernel vulnerability affects Red Hat, CentOS, and Debian distros
94. Alphabet's Chronicle Security Business Launches VirusTotal Enterprise
95. VPNFilter Router Malware Adds 7 New Network Exploitation Modules
96. Malware in the Cloud: What You Need to Know
97. KDE Plasma 5.12.7 LTS releases: fix bugs
98. Discover how Tripwire Malware Detection... - Protects against zero-day exploits and other known threats. - Offers an enterprise view of suspicious malware objects across all monitored systems. - Protects from repeat #malware attacks. Learn more here:
99. Malware in the Cloud: What You Need to Know
100. ex-NSA Hacker Discloses macOS Mojave 10.14 Zero-Day Vulnerability

CRIME

101. Russians' stealthy 'LoJax' malware can infect on the firmware level
102. Threat-group Magecart - More Victims
103. New GootKit Campaigns Target European Banks with Reconnaissance Attacks

POLITICS

104. DEF CON report finds decade-old flaw in widely used ballot-counting machine
105. Russian Cyberspies Use UEFI Rootkit in Attacks
106. APT10 Targeting Japanese Corporations Using Updated TTPs
107. APT28 Uses LoJax, First UEFI Rootkit Seen in the Wild

APT report for 2018-09-26

TRANSNATIONAL / UNKNOWN

1. Source Defense raises $10 million for website supply chain solution
2. Malware steals passwords from 6.4 million SHEIN customers
3. Magecart Attacks Grow Rampant in September

CHINA

Nothing to report

INDIA

Nothing to report

NORTH KOREA

Nothing to report

PAKISTAN

Nothing to report

VIETNAM

Nothing to report

IRAN

Nothing to report

LEBANON

Nothing to report

PALESTINE

Nothing to report

SAUDI ARABIA

Nothing to report

UNITED ARAB EMIRATES

Nothing to report

RUSSIA

4. Windows 10 October 2018 Update is RTM: Clues Leads to Final Build 17763
5. Will Microsoft release Windows 10 October Update on October 2?

UKRAINE

Nothing to report

Platform report for 2018-09-26

WINDOWS

1. New Linux Kernel “Mutagen Astronomy” Flaw Impacts Red Hat, CentOS, Debian Distributions.
2. Windows 10 October 2018 Update is RTM: Clues Leads to Final Build 17763
3. Microsoft is killing passwords one announcement at a time
4. WTB: Adwind Trojan Circumvents Antivirus Software To Infect Your PC
5. Variant of patched IE vulnerability spotted in wild
6. Alert: A remote code execution vulnerability is discovered in Microsoft Windows Jet database engine
7. New Adwind RAT Attack Linux, Windows and Mac via DDE Code Injection Technique by Evading Antivirus Software
8. Crooks leverages Kodi Media Player add-ons for malware distribution
9. Will Microsoft release Windows 10 October Update on October 2?

LINUX

10. Vulnerability in Cisco routers could allow DoS attacks
11. New Linux Kernel “Mutagen Astronomy” Flaw Impacts Red Hat, CentOS, Debian Distributions.
12. Cisco: Linux kernel FragmentSmack bug now affects 88 of our products
13. WTB: Adwind Trojan Circumvents Antivirus Software To Infect Your PC
14. Linux Kernel Vulnerability Affects Red Hat, CentOS, Debian
15. New Adwind RAT Attack Linux, Windows and Mac via DDE Code Injection Technique by Evading Antivirus Software
16. Crooks leverages Kodi Media Player add-ons for malware distribution
17. New Linux Kernel Bug Affects Red Hat, CentOS, and Debian Distributions
18. New security vulnerabilities (CVE-2018-14634) affects CentOS and Red Hat Linux

UNIX

Nothing to report

ANDROID

19. Hide and Seek (HNS) IoT Botnet targets Android devices with ADB option enabled
20. Android password managers can be tricked into believing that evil apps are good
21. Trojanized App In Google Play Steals Bank Customers' Euros
22. Password managers can be tricked into believing that malicious Android apps are legitimate
23. Android Banking Trojan Found On Google Play with 10,000 Installs Steals User’s Banking Credentials
24. Android spyware in development plunders WhatsApp data, private conversations
25. Hide and Seek Botnet Adds Infection Vector for Android Devices
26. Hide and Seek IoT Botnet Learns New Tricks: Uses ADB over Internet to Exploit Thousands of Android Devices
27. 25 Malicious apps that Downloaded More Than 120,000 Times Contains Hidden Cryptomining Script

IOS

28. CVE-2018-0150: Cisco IOS XE Software Static Credential Vulnerability

MACOS

29. WTB: Adwind Trojan Circumvents Antivirus Software To Infect Your PC
30. Apple pushes out Mojave 10.14, patches numerous vulnerabilities
31. New Adwind RAT Attack Linux, Windows and Mac via DDE Code Injection Technique by Evading Antivirus Software

Threat report for 2018-09-26

DATA BREACH

1. Uber Agrees to $148M Settlement With States Over Data Breach
2. Uber to pay $148 million to states for 2016 data breach
3. Firefox Notifies Users of Compromised Accounts
4. Uber to pay $148 million in settlment over 2016 data breach and cover-up
5. Ex-NSA employee sentenced to 5.5 years in prison for leaking confidential data
6. United Nations data found exposed on web: researcher
7. United Nations data found exposed on web: researcher
8. Former NSA TAO hacker sentenced to 66 months in prison over Kaspersky Leak
9. SHEIN Data Breach Impacts Over 6.4 Million Customers
10. SMBs face costs of up to $2.5 million after a data breach
11. United Nations data found exposed on web: researcher
12. Millions of Twitter DMs may have been exposed by year-long bug
13. Firefox Monitor tells you whether your email was compromised in a data breach
14. Alert: A remote code execution vulnerability is discovered in Microsoft Windows Jet database engine
15. United Nations Mistakenly Exposed Sensitive Data to The Public
16. oPatch community released micro patches for Microsoft JET Database Zero-Day
17. Malware campaign attacks freelancers

DENIAL-OF-SERVICE

18. Hide and Seek (HNS) IoT Botnet targets Android devices with ADB option enabled
19. Bitcoin Core Team fixes a critical DDoS flaw in wallet software
20. Bad bots are stealing data and ruining the customer experience
21. DDoS Attack on German Energy Company RWE
22. DDoS Attack on German Energy Company RWE
23. Bots at the Gate: A Human Rights Analysis of Automated Decision Making in Canada’s Immigration and Refugee System
24. Vulnerability in Cisco routers could allow DoS attacks
25. DDoS attack on education vendor hinders access to districts’ online portals
26. Microsoft Adds New Tools to Azure DDoS Protection
27. Viro Botnet Ransomware
28. Infinite Campus DDoS attack impedes access to student data
29. Hide and Seek Botnet Adds Infection Vector for Android Devices
30. Hide and Seek IoT Botnet Learns New Tricks: Uses ADB over Internet to Exploit Thousands of Android Devices
31. Bitcoin Core Team Releases Critical Security Update to Fix DDoS Attack Vulnerability

MALVERTISING

Nothing to report

PHISHING

32. Chegg to reset passwords for 40 million users after April 2018 hack
33. Android password managers can be tricked into believing that evil apps are good
34. User login notifications
35. Beware of payroll-themed phishing. Here’s one example.
36. SHEIN breach exposes emails, encrypted passwords of 6.42M customers
37. Counter Phishing Attacks with These Five Tricks
38. Password managers can be tricked into believing that malicious Android apps are legitimate
39. Cisco patches critical default password vulnerability
40. 11:30 AM ET today: @AlexanderGTster and @illena_a from @SCmagazine share the scoop on #spearphishing and how you can go beyond the obvious defenses to protect users from email attacks.
41. Password Tips from a Pen Tester: Are 12-Character Passwords Really Stronger, or Just a Dime a Dozen?
42. #SecurityNews: Popular news aggregation site #NewsNow has been notifying its users of a potential password #breach after it found evidence of an #intrusion. Read more about this #databreach here:
43. Looking for a enterprise grade password vault solution but MUST be hosted onsite
44. #SecurityNews: New #Ofcom rules "could help tackle #vishing" (voice #phishing) scams. They come into force on Oct 1st and will ban phone companies for charging for the Caller ID service that helps users screen their calls. Read more abut this here:
45. 156 million #phishing emails are sent out every day and email users receive up to 20 phishing emails each month. Learn more about modern phishing techniques and how to address them in the @ironscales #whitepaper.
46. Microsoft is killing passwords one announcement at a time
47. Aggregate this: NewsNow has spilt a bunch of 'encrypted' passwords
48. NewsNow Ditches Passwords After Possible Breach
49. Malware steals passwords from SHEIN, 6.4 million customers impacted
50. Malware steals passwords from 6.4 million SHEIN customers
51. Backlash sees change in Chrome login and Google account behaviour
52. Chrome 70 Lets you Control Automatic Login and Deletes Google Cookies

WEB DEFACEMENT

Nothing to report

MALWARE

53. Cisco's probe of VPNFilter router malware uncovers several new hacking techniques
54. VPNFilter Malware Adds Seven New Tools For Exploiting Network Devices
55. Fraudulent shopping domain certificate issuance outstrips legitimate businesses
56. Businesses in Arkansas Hit with Ransomware
57. Malware in the Cloud: What You Need to Know
58. Businesses in Arkansas Hit with Ransomware
59. Air Gapped PCs are Still at Risk. The Rise of USB-based Crytojacking Malware
60. Crooks turn to Delphi packers to evade malware detection
61. USB malware and cryptominers are threat to emerging markets
62. DanaBot trojan sets sights on Europe, new features
63. Trojanized App In Google Play Steals Bank Customers' Euros
64. Password managers can be tricked into believing that malicious Android apps are legitimate
65. Crooks turn to Delphi packers to evade malware detection
66. Viro Botnet Ransomware
67. Freelancers baited with job offers to download malicious macros
68. Android Banking Trojan Found On Google Play with 10,000 Installs Steals User’s Banking Credentials
69. Domain flub leaves 30 million customers high and dry
70. USB malware and cryptominers are threat to emerging markets
71. WTB: Adwind Trojan Circumvents Antivirus Software To Infect Your PC
72. Android spyware in development plunders WhatsApp data, private conversations
73. The MITRE ATT&CK Framework: Exfiltration
74. Malware steals passwords from SHEIN, 6.4 million customers impacted
75. VPNFilter III: More Tools for the Swiss Army Knife of Malware
76. New Adwind RAT Attack Linux, Windows and Mac via DDE Code Injection Technique by Evading Antivirus Software
77. Malware steals passwords from 6.4 million SHEIN customers
78. Crooks leverages Kodi Media Player add-ons for malware distribution
79. Malware in the Cloud: What You Need to Know
80. Cryptocurrency mining malware increases 86%
81. 25 Malicious apps that Downloaded More Than 120,000 Times Contains Hidden Cryptomining Script
82. Malware campaign attacks freelancers
83. GandCrab v5 Ransomware Utilizing the ALPC Task Scheduler Exploit

EXPLOIT

84. VPNFilter Malware Adds Seven New Tools For Exploiting Network Devices
85. NSA dev in the clink for 5.5 years after letting Kaspersky, allegedly Russia slurp US exploits
86. Rockwell Automation Buffer Overflow Vulnerability
87. Hide and Seek IoT Botnet Learns New Tricks: Uses ADB over Internet to Exploit Thousands of Android Devices
88. GandCrab v5 Ransomware Utilizing the ALPC Task Scheduler Exploit

VULNERABILITY

89. Bitcoin Core Team fixes a critical DDoS flaw in wallet software
90. Vulnerability in Cisco routers could allow DoS attacks
91. Cisco patches critical default password vulnerability
92. New Linux Kernel “Mutagen Astronomy” Flaw Impacts Red Hat, CentOS, Debian Distributions.
93. Twitter fixes API bug that shared data with wrong developers
94. Cisco: Linux kernel FragmentSmack bug now affects 88 of our products
95. Bug? Feature? Power users baffled as BitLocker update switch-off continues
96. Braking bad: Mitsubishi recalls 68k SUVs over buggy software
97. Linux Kernel Vulnerability Affects Red Hat, CentOS, Debian
98. Millions of Twitter DMs may have been exposed by year-long bug
99. Apple pushes out Mojave 10.14, patches numerous vulnerabilities
100. Variant of patched IE vulnerability spotted in wild
101. Alert: A remote code execution vulnerability is discovered in Microsoft Windows Jet database engine
102. Rockwell Automation Buffer Overflow Vulnerability
103. Crowdfense launches Vulnerability Research Hub for top security researchers
104. oPatch community released micro patches for Microsoft JET Database Zero-Day
105. New Linux Kernel Bug Affects Red Hat, CentOS, and Debian Distributions
106. Vulnerability affects Cisco Video Surveillance Manager
107. Bitcoin Core Team Releases Critical Security Update to Fix DDoS Attack Vulnerability
108. Snyk raises $22 million to address security vulnerabilities in open source code
109. New security vulnerabilities (CVE-2018-14634) affects CentOS and Red Hat Linux
110. CVE-2018-0150: Cisco IOS XE Software Static Credential Vulnerability

Region brief for 2018-09-26

ASIA

1. Source Defense raises $10 million for website supply chain solution
2. Former NSA TAO hacker sentenced to 66 months in prison over Kaspersky Leak
3. Braking bad: Mitsubishi recalls 68k SUVs over buggy software
4. WTB: Adwind Trojan Circumvents Antivirus Software To Infect Your PC

OCEANIA

Nothing to report

NORTH AMERICA

5. Uber to pay $148 million to states for 2016 data breach
6. Bots at the Gate: A Human Rights Analysis of Automated Decision Making in Canada’s Immigration and Refugee System
7. Former NSA TAO hacker sentenced to 66 months in prison over Kaspersky Leak
8. Viro Botnet Ransomware
9. NSA dev in the clink for 5.5 years after letting Kaspersky, allegedly Russia slurp US exploits
10. Braking bad: Mitsubishi recalls 68k SUVs over buggy software
11. Rockwell Automation Buffer Overflow Vulnerability
12. Snyk raises $22 million to address security vulnerabilities in open source code

SOUTH AMERICA

Nothing to report

EUROPE

13. DDoS Attack on German Energy Company RWE
14. DDoS Attack on German Energy Company RWE
15. Ex-NSA employee sentenced to 5.5 years in prison for leaking confidential data
16. Source Defense raises $10 million for website supply chain solution
17. NSA dev in the clink for 5.5 years after letting Kaspersky, allegedly Russia slurp US exploits
18. Aggregate this: NewsNow has spilt a bunch of 'encrypted' passwords
19. WTB: Adwind Trojan Circumvents Antivirus Software To Infect Your PC
20. VPNFilter III: More Tools for the Swiss Army Knife of Malware
21. Snyk raises $22 million to address security vulnerabilities in open source code

AFRICA

Nothing to report

Sector brief for 2018-09-26

HEALTHCARE

Nothing to report

TRANSPORT

Nothing to report

BANKING & FINANCE

1. Chegg to reset passwords for 40 million users after April 2018 hack
2. Beware of payroll-themed phishing. Here’s one example.
3. Source Defense raises $10 million for website supply chain solution
4. Trojanized App In Google Play Steals Bank Customers' Euros
5. Android Banking Trojan Found On Google Play with 10,000 Installs Steals User’s Banking Credentials
6. WTB: Adwind Trojan Circumvents Antivirus Software To Infect Your PC
7. Magecart Attacks Grow Rampant in September

INFORMATION & TELECOMMUNICATION

Nothing to report

FOOD

Nothing to report

WATER

Nothing to report

ENERGY

8. DDoS Attack on German Energy Company RWE
9. DDoS Attack on German Energy Company RWE
10. 25 Malicious apps that Downloaded More Than 120,000 Times Contains Hidden Cryptomining Script

GOVERNMENT & PUBLIC SERVICE

11. Beware of payroll-themed phishing. Here’s one example.

Daily brief for 2018-09-26

ASIA

1. Source Defense raises $10 million for website supply chain solution
2. Former NSA TAO hacker sentenced to 66 months in prison over Kaspersky Leak
3. Braking bad: Mitsubishi recalls 68k SUVs over buggy software
4. WTB: Adwind Trojan Circumvents Antivirus Software To Infect Your PC

WORLD

5. DDoS Attack on German Energy Company RWE
6. DDoS Attack on German Energy Company RWE
7. Uber to pay $148 million to states for 2016 data breach
8. Ex-NSA employee sentenced to 5.5 years in prison for leaking confidential data
9. Bots at the Gate: A Human Rights Analysis of Automated Decision Making in Canada’s Immigration and Refugee System
10. Source Defense raises $10 million for website supply chain solution
11. Former NSA TAO hacker sentenced to 66 months in prison over Kaspersky Leak
12. Viro Botnet Ransomware
13. NSA dev in the clink for 5.5 years after letting Kaspersky, allegedly Russia slurp US exploits
14. Aggregate this: NewsNow has spilt a bunch of 'encrypted' passwords
15. Braking bad: Mitsubishi recalls 68k SUVs over buggy software
16. WTB: Adwind Trojan Circumvents Antivirus Software To Infect Your PC
17. Rockwell Automation Buffer Overflow Vulnerability
18. VPNFilter III: More Tools for the Swiss Army Knife of Malware
19. Snyk raises $22 million to address security vulnerabilities in open source code

ATTACKS

20. Hide and Seek (HNS) IoT Botnet targets Android devices with ADB option enabled
21. Uber Agrees to $148M Settlement With States Over Data Breach
22. Bitcoin Core Team fixes a critical DDoS flaw in wallet software
23. Chegg to reset passwords for 40 million users after April 2018 hack
24. Bad bots are stealing data and ruining the customer experience
25. DDoS Attack on German Energy Company RWE
26. DDoS Attack on German Energy Company RWE
27. Uber to pay $148 million to states for 2016 data breach
28. Android password managers can be tricked into believing that evil apps are good
29. User login notifications
30. Firefox Notifies Users of Compromised Accounts
31. Uber to pay $148 million in settlment over 2016 data breach and cover-up
32. Ex-NSA employee sentenced to 5.5 years in prison for leaking confidential data
33. Beware of payroll-themed phishing. Here’s one example.
34. Bots at the Gate: A Human Rights Analysis of Automated Decision Making in Canada’s Immigration and Refugee System
35. United Nations data found exposed on web: researcher
36. SHEIN breach exposes emails, encrypted passwords of 6.42M customers
37. United Nations data found exposed on web: researcher
38. Counter Phishing Attacks with These Five Tricks
39. Vulnerability in Cisco routers could allow DoS attacks
40. Password managers can be tricked into believing that malicious Android apps are legitimate
41. Cisco patches critical default password vulnerability
42. 11:30 AM ET today: @AlexanderGTster and @illena_a from @SCmagazine share the scoop on #spearphishing and how you can go beyond the obvious defenses to protect users from email attacks.
43. DDoS attack on education vendor hinders access to districts’ online portals
44. Microsoft Adds New Tools to Azure DDoS Protection
45. Former NSA TAO hacker sentenced to 66 months in prison over Kaspersky Leak
46. Password Tips from a Pen Tester: Are 12-Character Passwords Really Stronger, or Just a Dime a Dozen?
47. #SecurityNews: Popular news aggregation site #NewsNow has been notifying its users of a potential password #breach after it found evidence of an #intrusion. Read more about this #databreach here:
48. SHEIN Data Breach Impacts Over 6.4 Million Customers
49. Viro Botnet Ransomware
50. Looking for a enterprise grade password vault solution but MUST be hosted onsite
51. #SecurityNews: New #Ofcom rules "could help tackle #vishing" (voice #phishing) scams. They come into force on Oct 1st and will ban phone companies for charging for the Caller ID service that helps users screen their calls. Read more abut this here:
52. SMBs face costs of up to $2.5 million after a data breach
53. 156 million #phishing emails are sent out every day and email users receive up to 20 phishing emails each month. Learn more about modern phishing techniques and how to address them in the @ironscales #whitepaper.
54. Microsoft is killing passwords one announcement at a time
55. United Nations data found exposed on web: researcher
56. Aggregate this: NewsNow has spilt a bunch of 'encrypted' passwords
57. Millions of Twitter DMs may have been exposed by year-long bug
58. NewsNow Ditches Passwords After Possible Breach
59. Firefox Monitor tells you whether your email was compromised in a data breach
60. Alert: A remote code execution vulnerability is discovered in Microsoft Windows Jet database engine
61. Malware steals passwords from SHEIN, 6.4 million customers impacted
62. Infinite Campus DDoS attack impedes access to student data
63. Hide and Seek Botnet Adds Infection Vector for Android Devices
64. United Nations Mistakenly Exposed Sensitive Data to The Public
65. Hide and Seek IoT Botnet Learns New Tricks: Uses ADB over Internet to Exploit Thousands of Android Devices
66. Malware steals passwords from 6.4 million SHEIN customers
67. Backlash sees change in Chrome login and Google account behaviour
68. oPatch community released micro patches for Microsoft JET Database Zero-Day
69. Malware campaign attacks freelancers
70. Bitcoin Core Team Releases Critical Security Update to Fix DDoS Attack Vulnerability
71. Chrome 70 Lets you Control Automatic Login and Deletes Google Cookies

THREATS

72. Cisco's probe of VPNFilter router malware uncovers several new hacking techniques
73. VPNFilter Malware Adds Seven New Tools For Exploiting Network Devices
74. Fraudulent shopping domain certificate issuance outstrips legitimate businesses
75. Bitcoin Core Team fixes a critical DDoS flaw in wallet software
76. Businesses in Arkansas Hit with Ransomware
77. Malware in the Cloud: What You Need to Know
78. Businesses in Arkansas Hit with Ransomware
79. Air Gapped PCs are Still at Risk. The Rise of USB-based Crytojacking Malware
80. Crooks turn to Delphi packers to evade malware detection
81. USB malware and cryptominers are threat to emerging markets
82. DanaBot trojan sets sights on Europe, new features
83. Trojanized App In Google Play Steals Bank Customers' Euros
84. Vulnerability in Cisco routers could allow DoS attacks
85. Password managers can be tricked into believing that malicious Android apps are legitimate
86. Cisco patches critical default password vulnerability
87. New Linux Kernel “Mutagen Astronomy” Flaw Impacts Red Hat, CentOS, Debian Distributions.
88. Crooks turn to Delphi packers to evade malware detection
89. Twitter fixes API bug that shared data with wrong developers
90. Viro Botnet Ransomware
91. Freelancers baited with job offers to download malicious macros
92. Android Banking Trojan Found On Google Play with 10,000 Installs Steals User’s Banking Credentials
93. Domain flub leaves 30 million customers high and dry
94. Cisco: Linux kernel FragmentSmack bug now affects 88 of our products
95. USB malware and cryptominers are threat to emerging markets
96. Bug? Feature? Power users baffled as BitLocker update switch-off continues
97. NSA dev in the clink for 5.5 years after letting Kaspersky, allegedly Russia slurp US exploits
98. Braking bad: Mitsubishi recalls 68k SUVs over buggy software
99. WTB: Adwind Trojan Circumvents Antivirus Software To Infect Your PC
100. Linux Kernel Vulnerability Affects Red Hat, CentOS, Debian
101. Millions of Twitter DMs may have been exposed by year-long bug
102. Apple pushes out Mojave 10.14, patches numerous vulnerabilities
103. Android spyware in development plunders WhatsApp data, private conversations
104. Variant of patched IE vulnerability spotted in wild
105. Alert: A remote code execution vulnerability is discovered in Microsoft Windows Jet database engine
106. The MITRE ATT&CK Framework: Exfiltration
107. Malware steals passwords from SHEIN, 6.4 million customers impacted
108. Rockwell Automation Buffer Overflow Vulnerability
109. Hide and Seek IoT Botnet Learns New Tricks: Uses ADB over Internet to Exploit Thousands of Android Devices
110. VPNFilter III: More Tools for the Swiss Army Knife of Malware
111. New Adwind RAT Attack Linux, Windows and Mac via DDE Code Injection Technique by Evading Antivirus Software
112. Malware steals passwords from 6.4 million SHEIN customers
113. Crooks leverages Kodi Media Player add-ons for malware distribution
114. Malware in the Cloud: What You Need to Know
115. Crowdfense launches Vulnerability Research Hub for top security researchers
116. oPatch community released micro patches for Microsoft JET Database Zero-Day
117. Cryptocurrency mining malware increases 86%
118. New Linux Kernel Bug Affects Red Hat, CentOS, and Debian Distributions
119. 25 Malicious apps that Downloaded More Than 120,000 Times Contains Hidden Cryptomining Script
120. Vulnerability affects Cisco Video Surveillance Manager
121. Malware campaign attacks freelancers
122. GandCrab v5 Ransomware Utilizing the ALPC Task Scheduler Exploit
123. Bitcoin Core Team Releases Critical Security Update to Fix DDoS Attack Vulnerability
124. Snyk raises $22 million to address security vulnerabilities in open source code
125. New security vulnerabilities (CVE-2018-14634) affects CentOS and Red Hat Linux
126. CVE-2018-0150: Cisco IOS XE Software Static Credential Vulnerability

CRIME

127. Bitcoin Core Team fixes a critical DDoS flaw in wallet software
128. Ex-NSA employee sentenced to 5.5 years in prison for leaking confidential data
129. Source Defense raises $10 million for website supply chain solution
130. Trojanized App In Google Play Steals Bank Customers' Euros
131. Former NSA TAO hacker sentenced to 66 months in prison over Kaspersky Leak
132. SHEIN Data Breach Impacts Over 6.4 Million Customers
133. Android Banking Trojan Found On Google Play with 10,000 Installs Steals User’s Banking Credentials
134. WTB: Adwind Trojan Circumvents Antivirus Software To Infect Your PC
135. Crooks leverages Kodi Media Player add-ons for malware distribution
136. Cryptocurrency mining malware increases 86%
137. 25 Malicious apps that Downloaded More Than 120,000 Times Contains Hidden Cryptomining Script
138. Malware campaign attacks freelancers
139. Bitcoin Core Team Releases Critical Security Update to Fix DDoS Attack Vulnerability
140. Magecart Attacks Grow Rampant in September

POLITICS

141. Ex-NSA employee sentenced to 5.5 years in prison for leaking confidential data
142. Former NSA TAO hacker sentenced to 66 months in prison over Kaspersky Leak
143. United Nations Mistakenly Exposed Sensitive Data to The Public