Oct 8, 2018

APT report for 2018-10-07

TRANSNATIONAL / UNKNOWN

  1. Burgerville discloses year-long data breach, courtesy of FIN7 cybergang
  2. Burgerville Hacked By Fin7 Group Losing Customers’ Card Data

CHINA

Nothing to report

INDIA

Nothing to report

NORTH KOREA

  1. Security Affairs newsletter Round 183 – News of the week

PAKISTAN

Nothing to report

VIETNAM

Nothing to report

IRAN

Nothing to report

LEBANON

Nothing to report

PALESTINE

Nothing to report

SAUDI ARABIA

Nothing to report

UNITED ARAB EMIRATES

Nothing to report

RUSSIA

  1. APT28 group return to covert intelligence gathering ops in Europe and South America.

UKRAINE

Nothing to report

Platform report for 2018-10-07

WINDOWS

  1. Security Affairs newsletter Round 183 – News of the week
  2. D-Link fixed several flaws in Central WiFiManager access point management tool

LINUX

Nothing to report

UNIX

Nothing to report

ANDROID

Nothing to report

IOS

  1. Security Affairs newsletter Round 183 – News of the week

MACOS

Nothing to report

Threat report for 2018-10-07

DATA BREACH

  1. Week in review: Facebook data breach fallout, BEC-as-a-Service, true password behaviors
  2. New details and images leak of Google's upcoming Pixel Slate tablet
  3. Burgerville discloses year-long data breach, courtesy of FIN7 cybergang

DENIAL-OF-SERVICE

Nothing to report

MALVERTISING

Nothing to report

PHISHING

  1. Week in review: Facebook data breach fallout, BEC-as-a-Service, true password behaviors
  2. This #whitepaper by @IRONSCALES explores how modern phishing techniques, such as #BEC, #ransomware, spear-phishing & #APTs are meticulously designed to
  3. Dan Nadir, vice president of digital risk @proofpoint quoted - Tips for Better #Passwords.

WEB DEFACEMENT

Nothing to report

MALWARE

  1. How a #cryptocurrency mining #malware infects systems
  2. This #whitepaper by @IRONSCALES explores how modern phishing techniques, such as #BEC, #ransomware, spear-phishing & #APTs are meticulously designed to
  3. Can monitoring help defend against #Sanny #malware update?
  4. The MITRE ATT&CK Framework: Command and Control

EXPLOIT

  1. APT Actors Exploiting Global MSPs: DHS Security Alert
  2. Vulnerability Scanning vs. Penetration Testing: What's the Difference?
  3. Penetration Testing Mail Server with Email Spoofing – Exploiting Open Relay configured Public Mail Servers
  4. Sony Bravia Smart TV Contains Multiple Critical Vulnerabilities That Allows Attacker Exploit Remotely Without Authentication

VULNERABILITY

  1. Vulnerability Scanning vs. Penetration Testing: What's the Difference?
  2. SAP bug beatdowns, Apple gets nasty with Mac repairs, Struts woe, and more from infosec
  3. D-Link fixed several flaws in Central WiFiManager access point management tool
  4. Sony Bravia Smart TV Contains Multiple Critical Vulnerabilities That Allows Attacker Exploit Remotely Without Authentication
  5. Cisco updates address 36 vulnerabilities, three critical
  6. Cisco Patched Two Critical Vulnerabilities in Digital Network Architecture Center

Region brief for 2018-10-07

ASIA

  1. Security Affairs newsletter Round 183 – News of the week
  2. SAP bug beatdowns, Apple gets nasty with Mac repairs, Struts woe, and more from infosec

OCEANIA

Nothing to report

NORTH AMERICA

  1. APT Actors Exploiting Global MSPs: DHS Security Alert
  2. Week in review: Facebook data breach fallout, BEC-as-a-Service, true password behaviors
  3. APT28 group return to covert intelligence gathering ops in Europe and South America.
  4. Security Affairs newsletter Round 183 – News of the week
  5. SAP bug beatdowns, Apple gets nasty with Mac repairs, Struts woe, and more from infosec
  6. Burgerville Hacked By Fin7 Group Losing Customers’ Card Data

SOUTH AMERICA

Nothing to report

EUROPE

  1. Security Affairs newsletter Round 183 – News of the week

AFRICA

Nothing to report

Sector brief for 2018-10-07

HEALTHCARE

  1. APT Actors Exploiting Global MSPs: DHS Security Alert

TRANSPORT

Nothing to report

BANKING & FINANCE

  1. Security Affairs newsletter Round 183 – News of the week

INFORMATION & TELECOMMUNICATION

  1. APT Actors Exploiting Global MSPs: DHS Security Alert
  2. Week in review: Facebook data breach fallout, BEC-as-a-Service, true password behaviors
  3. New details and images leak of Google's upcoming Pixel Slate tablet
  4. Security Affairs newsletter Round 183 – News of the week
  5. This #whitepaper by @IRONSCALES explores how modern phishing techniques, such as #BEC, #ransomware, spear-phishing & #APTs are meticulously designed to

FOOD

Nothing to report

WATER

Nothing to report

ENERGY

  1. APT Actors Exploiting Global MSPs: DHS Security Alert

GOVERNMENT & PUBLIC SERVICE

  1. APT28 group return to covert intelligence gathering ops in Europe and South America.

Daily brief for 2018-10-07

ASIA

  1. Security Affairs newsletter Round 183 – News of the week
  2. SAP bug beatdowns, Apple gets nasty with Mac repairs, Struts woe, and more from infosec

WORLD

  1. APT Actors Exploiting Global MSPs: DHS Security Alert
  2. Week in review: Facebook data breach fallout, BEC-as-a-Service, true password behaviors
  3. APT28 group return to covert intelligence gathering ops in Europe and South America.
  4. Security Affairs newsletter Round 183 – News of the week
  5. SAP bug beatdowns, Apple gets nasty with Mac repairs, Struts woe, and more from infosec
  6. Burgerville Hacked By Fin7 Group Losing Customers’ Card Data

ATTACKS

  1. Week in review: Facebook data breach fallout, BEC-as-a-Service, true password behaviors
  2. New details and images leak of Google's upcoming Pixel Slate tablet
  3. This #whitepaper by @IRONSCALES explores how modern phishing techniques, such as #BEC, #ransomware, spear-phishing & #APTs are meticulously designed to
  4. Dan Nadir, vice president of digital risk @proofpoint quoted - Tips for Better #Passwords.
  5. Burgerville discloses year-long data breach, courtesy of FIN7 cybergang

THREATS

  1. APT Actors Exploiting Global MSPs: DHS Security Alert
  2. Vulnerability Scanning vs. Penetration Testing: What's the Difference?
  3. How a #cryptocurrency mining #malware infects systems
  4. This #whitepaper by @IRONSCALES explores how modern phishing techniques, such as #BEC, #ransomware, spear-phishing & #APTs are meticulously designed to
  5. Penetration Testing Mail Server with Email Spoofing – Exploiting Open Relay configured Public Mail Servers
  6. SAP bug beatdowns, Apple gets nasty with Mac repairs, Struts woe, and more from infosec
  7. D-Link fixed several flaws in Central WiFiManager access point management tool
  8. Can monitoring help defend against #Sanny #malware update?
  9. Sony Bravia Smart TV Contains Multiple Critical Vulnerabilities That Allows Attacker Exploit Remotely Without Authentication
  10. Cisco updates address 36 vulnerabilities, three critical
  11. Cisco Patched Two Critical Vulnerabilities in Digital Network Architecture Center
  12. The MITRE ATT&CK Framework: Command and Control

CRIME

  1. APT Actors Exploiting Global MSPs: DHS Security Alert
  2. Week in review: Facebook data breach fallout, BEC-as-a-Service, true password behaviors
  3. Security Affairs newsletter Round 183 – News of the week
  4. This #whitepaper by @IRONSCALES explores how modern phishing techniques, such as #BEC, #ransomware, spear-phishing & #APTs are meticulously designed to

POLITICS

  1. APT Actors Exploiting Global MSPs: DHS Security Alert
  2. APT28 group return to covert intelligence gathering ops in Europe and South America.
  3. Security Affairs newsletter Round 183 – News of the week

Oct 7, 2018

APT report for 2018-10-06

TRANSNATIONAL / UNKNOWN

  1. Burgerville discloses year-long data breach, courtesy of FIN7 cybergang

CHINA

Nothing to report

INDIA

Nothing to report

NORTH KOREA

  1. News of the Week: October 6, 2018

PAKISTAN

Nothing to report

VIETNAM

Nothing to report

IRAN

Nothing to report

LEBANON

Nothing to report

PALESTINE

Nothing to report

SAUDI ARABIA

Nothing to report

UNITED ARAB EMIRATES

Nothing to report

RUSSIA

  1. APT28 turns away from election hacking and back to cyberespionage
  2. Dutch and British Governments Slam Russia for Cyberattacks
  3. Feds Indict 7 Russians for Hacking and Disinformation

UKRAINE

Nothing to report

Platform report for 2018-10-06

WINDOWS

Nothing to report

LINUX

  1. GitHub fixes a remote code security vulnerability that affects Linux system

UNIX

Nothing to report

ANDROID

  1. Android SMS Worm, plus setting up a Mac for kids
  2. .@ThreatFabric researchers uncovered a #malware that uses overlay techniques to avoid detection. Learn from @lewisnic how this new #Androidmalware --
  3. Researchers at @Trustlook Labs found an #Android #Trojan that copies and steals data from mobile #messagingapps. Discover how this is

IOS

Nothing to report

MACOS

Nothing to report

Threat report for 2018-10-06

DATA BREACH

  1. SQL Injection Exposed Data From Canadian ISP – Altima Telecom
  2. China’s Alleged Hidden Chip for Espionage Exposed
  3. Washington D.C. Man Faces Up to 20 Years in Jail for US Senators Doxing Charges
  4. $12 Billion Lost Because of E-mail Account Compromise Incidents in Five Years
  5. Democratic congressional intern arrested for doxing GOP senators during Kavanaugh hearing
  6. Project Insecurity (@insecurity) researchers recently found #livechatsoftware leaking personal employee data. Learn what #data was leaked and how attackers can
  7. Burgerville discloses year-long data breach, courtesy of FIN7 cybergang
  8. Hackers Offering Less than $150 to Hack Corporate Email Accounts – 12.5 Million Email Archive Files are Exposed

DENIAL-OF-SERVICE

  1. California bill bans bots during elections

MALVERTISING

Nothing to report

PHISHING

  1. California prohibits use of weak default passwords

WEB DEFACEMENT

Nothing to report

MALWARE

  1. Android SMS Worm, plus setting up a Mac for kids
  2. .@ThreatFabric researchers uncovered a #malware that uses overlay techniques to avoid detection. Learn from @lewisnic how this new #Androidmalware --
  3. At the 2018 @RSAConference, researchers discussed the rise of stegware -- #malware that uses #steganography techniques to avoid detection. Learn
  4. Betabot trojan packed with anti-malware evasion tools
  5. Malicious remote admin tool seemingly linked to KONNI malware, North Korea
  6. How a remote access #Trojan checks for
  7. Report: Chinese Spy Chip Backdoored US Defense, Tech Firms
  8. More Than 50 Malicious Apps With Over 350,000 Installs Found On Google Play
  9. Researchers at @Trustlook Labs found an #Android #Trojan that copies and steals data from mobile #messagingapps. Discover how this is
  10. How to protect public SSH servers from
  11. Researchers at @TrendMicro found a new strain of #malware -- dubbed #FacexWorm -- that targets users through a malicious #ChromeExtension.

EXPLOIT

  1. SQL Injection Exposed Data From Canadian ISP – Altima Telecom
  2. Hackers exploit vulnerability in Bitcoin code

VULNERABILITY

  1. Sony Bravia Smart TVs affected by a critical vulnerability
  2. Sony Smart TV Bug Allows Remote Access, Root Privileges
  3. How #Shodan helps identify #ICSsecurity vulnerabilities
  4. Git Project Patches Remote Code Execution Vulnerability in Git
  5. The weekend starts here... right after you've installed these critical Cisco bug patches
  6. GitHub fixes a remote code security vulnerability that affects Linux system
  7. Cisco updates address 36 vulnerabilities, three critical
  8. Hackers exploit vulnerability in Bitcoin code
  9. Vulnerability Scanning vs. Penetration Testing: What's the Difference?
  10. TP-Link router vulnerable to remote takeover flaw

Region brief for 2018-10-06

ASIA

  1. China’s Alleged Hidden Chip for Espionage Exposed
  2. Report: Chinese Spy Chip Backdoored US Defense, Tech Firms

OCEANIA

Nothing to report

NORTH AMERICA

  1. SQL Injection Exposed Data From Canadian ISP – Altima Telecom
  2. China’s Alleged Hidden Chip for Espionage Exposed
  3. Washington D.C. Man Faces Up to 20 Years in Jail for US Senators Doxing Charges
  4. Sony Bravia Smart TVs affected by a critical vulnerability
  5. News of the Week: October 6, 2018
  6. Feds Indict 7 Russians for Hacking and Disinformation
  7. Report: Chinese Spy Chip Backdoored US Defense, Tech Firms

SOUTH AMERICA

Nothing to report

EUROPE

  1. News of the Week: October 6, 2018
  2. Dutch and British Governments Slam Russia for Cyberattacks
  3. Feds Indict 7 Russians for Hacking and Disinformation

AFRICA

Nothing to report

Sector brief for 2018-10-06

HEALTHCARE

Nothing to report

TRANSPORT

Nothing to report

BANKING & FINANCE

  1. China’s Alleged Hidden Chip for Espionage Exposed
  2. Washington D.C. Man Faces Up to 20 Years in Jail for US Senators Doxing Charges
  3. $12 Billion Lost Because of E-mail Account Compromise Incidents in Five Years
  4. GitHub fixes a remote code security vulnerability that affects Linux system
  5. Hackers Offering Less than $150 to Hack Corporate Email Accounts – 12.5 Million Email Archive Files are Exposed
  6. Hackers exploit vulnerability in Bitcoin code

INFORMATION & TELECOMMUNICATION

  1. SQL Injection Exposed Data From Canadian ISP – Altima Telecom
  2. China’s Alleged Hidden Chip for Espionage Exposed
  3. .@ThreatFabric researchers uncovered a #malware that uses overlay techniques to avoid detection. Learn from @lewisnic how this new #Androidmalware --
  4. Git Project Patches Remote Code Execution Vulnerability in Git
  5. GitHub fixes a remote code security vulnerability that affects Linux system
  6. More Than 50 Malicious Apps With Over 350,000 Installs Found On Google Play
  7. California prohibits use of weak default passwords

FOOD

Nothing to report

WATER

Nothing to report

ENERGY

Nothing to report

GOVERNMENT & PUBLIC SERVICE

  1. APT28 turns away from election hacking and back to cyberespionage

Daily brief for 2018-10-06

ASIA

  1. China’s Alleged Hidden Chip for Espionage Exposed
  2. Report: Chinese Spy Chip Backdoored US Defense, Tech Firms

WORLD

  1. SQL Injection Exposed Data From Canadian ISP – Altima Telecom
  2. China’s Alleged Hidden Chip for Espionage Exposed
  3. Washington D.C. Man Faces Up to 20 Years in Jail for US Senators Doxing Charges
  4. Sony Bravia Smart TVs affected by a critical vulnerability
  5. News of the Week: October 6, 2018
  6. Dutch and British Governments Slam Russia for Cyberattacks
  7. Feds Indict 7 Russians for Hacking and Disinformation
  8. Report: Chinese Spy Chip Backdoored US Defense, Tech Firms

ATTACKS

  1. SQL Injection Exposed Data From Canadian ISP – Altima Telecom
  2. China’s Alleged Hidden Chip for Espionage Exposed
  3. Washington D.C. Man Faces Up to 20 Years in Jail for US Senators Doxing Charges
  4. $12 Billion Lost Because of E-mail Account Compromise Incidents in Five Years
  5. Democratic congressional intern arrested for doxing GOP senators during Kavanaugh hearing
  6. California bill bans bots during elections
  7. Project Insecurity (@insecurity) researchers recently found #livechatsoftware leaking personal employee data. Learn what #data was leaked and how attackers can
  8. Burgerville discloses year-long data breach, courtesy of FIN7 cybergang
  9. Hackers Offering Less than $150 to Hack Corporate Email Accounts – 12.5 Million Email Archive Files are Exposed
  10. California prohibits use of weak default passwords

THREATS

  1. SQL Injection Exposed Data From Canadian ISP – Altima Telecom
  2. Sony Bravia Smart TVs affected by a critical vulnerability
  3. Android SMS Worm, plus setting up a Mac for kids
  4. .@ThreatFabric researchers uncovered a #malware that uses overlay techniques to avoid detection. Learn from @lewisnic how this new #Androidmalware --
  5. At the 2018 @RSAConference, researchers discussed the rise of stegware -- #malware that uses #steganography techniques to avoid detection. Learn
  6. Sony Smart TV Bug Allows Remote Access, Root Privileges
  7. How #Shodan helps identify #ICSsecurity vulnerabilities
  8. Git Project Patches Remote Code Execution Vulnerability in Git
  9. Betabot trojan packed with anti-malware evasion tools
  10. Malicious remote admin tool seemingly linked to KONNI malware, North Korea
  11. How a remote access #Trojan checks for
  12. The weekend starts here... right after you've installed these critical Cisco bug patches
  13. Report: Chinese Spy Chip Backdoored US Defense, Tech Firms
  14. GitHub fixes a remote code security vulnerability that affects Linux system
  15. More Than 50 Malicious Apps With Over 350,000 Installs Found On Google Play
  16. Researchers at @Trustlook Labs found an #Android #Trojan that copies and steals data from mobile #messagingapps. Discover how this is
  17. How to protect public SSH servers from
  18. Cisco updates address 36 vulnerabilities, three critical
  19. Hackers exploit vulnerability in Bitcoin code
  20. Vulnerability Scanning vs. Penetration Testing: What's the Difference?
  21. TP-Link router vulnerable to remote takeover flaw
  22. Researchers at @TrendMicro found a new strain of #malware -- dubbed #FacexWorm -- that targets users through a malicious #ChromeExtension.

CRIME

  1. China’s Alleged Hidden Chip for Espionage Exposed
  2. Washington D.C. Man Faces Up to 20 Years in Jail for US Senators Doxing Charges
  3. $12 Billion Lost Because of E-mail Account Compromise Incidents in Five Years
  4. Feds Indict 7 Russians for Hacking and Disinformation
  5. Hackers Offering Less than $150 to Hack Corporate Email Accounts – 12.5 Million Email Archive Files are Exposed
  6. Hackers exploit vulnerability in Bitcoin code

POLITICS

  1. China’s Alleged Hidden Chip for Espionage Exposed
  2. APT28 turns away from election hacking and back to cyberespionage
  3. Feds Indict 7 Russians for Hacking and Disinformation
  4. Report: Chinese Spy Chip Backdoored US Defense, Tech Firms

Oct 6, 2018

APT report for 2018-10-05

TRANSNATIONAL / UNKNOWN

  1. Fin7 Hackers Breached US Chain Burgerville
  2. Fin7 Hackers Breached US Chain Burgerville

CHINA

  1. DHS issued an alert on attacks aimed at Managed Service Providers

INDIA

Nothing to report

NORTH KOREA

  1. Detecting Credit Card Skimmers
  2. North Korean hacking operation behind SWIFT attacks

PAKISTAN

Nothing to report

VIETNAM

Nothing to report

IRAN

Nothing to report

LEBANON

Nothing to report

PALESTINE

Nothing to report

SAUDI ARABIA

Nothing to report

UNITED ARAB EMIRATES

Nothing to report

RUSSIA

  1. Russian State-Sponsored Operations Begin to Overlap: Kaspersky
  2. Uncle Sam Charges Seven Russians With Fancy Bear Hack Sprees
  3. The fur is not gonna fly: Uncle Sam charges seven Russians with Fancy Bear hack sprees
  4. VP Mike Pence slams Google over Chinese search engine project
  5. Russia's elite hacking unit has been silent, but busy
  6. Lojax, the new threat developed by Fancy Bear

UKRAINE

Nothing to report

Platform report for 2018-10-05

WINDOWS

  1. VMware Releases Patches for Critical A/W Console Auth Bypass Vulnerability
  2. AirNaine Uses New ARS RAT Strain Named ZeroEvil Against Canadian Businesses
  3. Missing Files, Bugs Reported After Windows 10 October 2018 Update
  4. DanaBot Banking Trojan’s Journey to North America
  5. Lojax, the new threat developed by Fancy Bear
  6. CMake 3.12.3 releases: managing the build process of software

LINUX

  1. DanaBot Banking Trojan’s Journey to North America
  2. Lojax, the new threat developed by Fancy Bear

UNIX

Nothing to report

ANDROID

  1. Unit 42 Vulnerability Research October 2018 Disclosures – Adobe
  2. Unit 42 Vulnerability Research October 2018 Disclosures – Adobe
  3. VMware Releases Patches for Critical A/W Console Auth Bypass Vulnerability
  4. Roaming Mantis Hacking Group Inject Web Crypto Mining for iOS Devices via Malicious Content Delivery System

IOS

  1. VMware Releases Patches for Critical A/W Console Auth Bypass Vulnerability
  2. Roaming Mantis Hacking Group Inject Web Crypto Mining for iOS Devices via Malicious Content Delivery System

MACOS

  1. VMware Releases Patches for Critical A/W Console Auth Bypass Vulnerability
  2. DanaBot Banking Trojan’s Journey to North America
  3. Lojax, the new threat developed by Fancy Bear

Threat report for 2018-10-05

DATA BREACH

  1. Sales intel firm Apollo data breach exposed more than 200 million contact records
  2. Fortnite gamers targeted by data theft malware
  3. Apollo hackers steal info from database of 200M contact
  4. Security researchers @proofpoint recently uncovered new #DanaBot campaigns.
  5. GhostDNS hijacking campaign steps up attacks on Brazilians; 100K+ devices compromised
  6. Smart TV kit featuring Google Home Mini and third-gen Chromecast leaks
  7. UK pins 'reckless campaign of cyber attacks' on Russian military intelligence
  8. Experts warns of a new extortion campaign based on the Breach Compilation archive
  9. Cryptomining malware steals Fortnite gamers' Bitcoins and personal data
  10. Intel, AMD both claim server speed records
  11. Samsung predicts a return to record profits in Q3
  12. New research reveals the DanaBot banking Trojan is now targeting banks in the United States as well. The campaign attempts to

DENIAL-OF-SERVICE

  1. Hacked #Fortnite accounts and rent-a-botnet being pushed on Instagram

MALVERTISING

Nothing to report

PHISHING

  1. Facebook Found “No Evidence” Of Facebook Login Exploited To Access Linked Apps
  2. Remove Ursnif Trojan (Purolator Phishing) Scam
  3. California Is Making It Illegal for Devices to Have Shitty Default Passwords
  4. Report: The bigger the company, the messier the password practices
  5. The most commonly used passwords in the world are... 1. 123456 2. password 3. 123456789 4. 12345678 5. 12345 6. qwerty
  6. Can the @Microsoft Authenticator really replace passwords in the enterprise? Microsoft says the answer is yes and proclaimed the password
  7. Weak Passwords Banned In California From 2020
  8. New IoT legislation bans shared default passwords
  9. US users open 30% of phishing emails with 12% of those clicking on infected links or attachments. Prepare for 2019's
  10. Credential-Phishing Attempts Highest on Tuesdays
  11. Credential-Phishing Attempts Highest on Tuesdays
  12. If you're thinking passwords, check out #CyberSauna episode #13: A Hacker's Take on Cracking & Protecting Your Creds
  13. FYI: "password" is the 2nd most popular password in the world. Can you guess the first?
  14. Facebook Logins Available on the Dark Web for $2.60
  15. Passware Kit: Forensic software recovers passwords for Bitcoin wallets

WEB DEFACEMENT

Nothing to report

MALWARE

  1. Ransomware Recovery at the Taxpayers’ Expense
  2. Virus Bulletin 2018: Saudi Dissident Spyware Attack Belies Bigger Threat
  3. Fortnite gamers targeted by data theft malware
  4. Remove Ursnif Trojan (Purolator Phishing) Scam
  5. Trojans go after MS Office vulnerabilities and China hacks US hardware
  6. .@alienvault researchers recently discovered #MassMiner, a #cryptocurrency mining #malware that has the ability to infect systems across the web. Discover
  7. Virus Bulletin 2018: Exposing the Social Media Fraud Ecosystem
  8. AirNaine Uses New ARS RAT Strain Named ZeroEvil Against Canadian Businesses
  9. Danabot Banking Malware Targets U.S. Organizations
  10. The Virus Bulletin conference returns home: VB2019 to take place in London
  11. Fileless malware: part deux
  12. Cisco Discovered Multiple Vulnerabilities In Atlantis Word Processor
  13. Hackers fly under the radar for two years after infecting chiropractic clinic with malware
  14. DanaBot Banking Trojan’s Journey to North America
  15. Virus Bulletin 2018: Supply chain hacking grows up
  16. The Kronos banking trojan is back from the malware dustbin. After years of lying dormant, hackers have reworked the underlying
  17. Cisco Talos spotted 18 vulnerabilities in Foxit PDF Reader, 8 in Atlantis World Processor
  18. Cryptomining malware steals Fortnite gamers' Bitcoins and personal data
  19. How does FacexWorm malware use Facebook Messenger to spread?
  20. Malicious remote admin tool seemingly linked to KONNI malware, North Korea
  21. New research reveals the DanaBot banking Trojan is now targeting banks in the United States as well. The campaign attempts to
  22. .@FireEye researches discovered that the group behind #Sanny #malware attacks has made delivery method changes that put users at risk.
  23. Fake News Domains Spoof UK News Sites
  24. Roaming Mantis Hacking Group Inject Web Crypto Mining for iOS Devices via Malicious Content Delivery System
  25. Top 5 Viruses of All Time by Security Expert Mikko Hyppönen
  26. CMake 3.12.3 releases: managing the build process of software

EXPLOIT

  1. Facebook Found “No Evidence” Of Facebook Login Exploited To Access Linked Apps
  2. Advanced Persistent Threat Activity Exploiting Managed Service Providers

VULNERABILITY

  1. Adobe October Patch Update Fixed 86 Different Security Vulnerabilities
  2. Sony Smart TV Bug Allows Remote Access, Root Privileges
  3. Unit 42 Vulnerability Research October 2018 Disclosures – Adobe
  4. Unit 42 Vulnerability Research October 2018 Disclosures – Adobe
  5. D-Link Patches RCE Bugs in Wireless Access Point Gear
  6. VMware Releases Patches for Critical A/W Console Auth Bypass Vulnerability
  7. 150 Bugs Found in the Hack the Marine Corps Challenge
  8. Trojans go after MS Office vulnerabilities and China hacks US hardware
  9. 150 Bugs Found in the Hack the Marine Corps Challenge
  10. Most Home Routers Are Full of Vulnerabilities
  11. Vulnerability Scanning vs. Penetration Testing: What's the Difference?
  12. Adobe update cleans up 86 bugs in Acrobat and Reader, many critical
  13. Missing Files, Bugs Reported After Windows 10 October 2018 Update
  14. Cisco Discovered Multiple Vulnerabilities In Atlantis Word Processor
  15. Mozilla Resolves Critical Code Execution Flaw In Thunderbird
  16. Cisco patches critical flaws in DNA Center and Prime Infrastructure
  17. Marine Corps bug bounty program finds 150 vulnerabilities
  18. Mozilla resolves critical code execution flaw in Thunderbird email client
  19. Cisco Talos spotted 18 vulnerabilities in Foxit PDF Reader, 8 in Atlantis World Processor
  20. D-Link Patches Code Execution, XSS Flaws in Management Tool
  21. Cisco updates address 36 vulnerabilities, three critical
  22. Vulnerability Scanning vs. Penetration Testing: What's the Difference?
  23. #PulseNet: How does an improper #authentication flaw affect it?
  24. Cisco Released Security Updates & Fixed 37 Vulnerabilities that Affected Cisco Products
  25. Mozilla Patches Critical Vulnerability in Thunderbird 60.2.1

Region brief for 2018-10-05

ASIA

  1. Virus Bulletin 2018: Saudi Dissident Spyware Attack Belies Bigger Threat
  2. Trojans go after MS Office vulnerabilities and China hacks US hardware
  3. The Kronos banking trojan is back from the malware dustbin. After years of lying dormant, hackers have reworked the underlying
  4. DHS issued an alert on attacks aimed at Managed Service Providers
  5. VP Mike Pence slams Google over Chinese search engine project
  6. North Korean hacking operation behind SWIFT attacks

OCEANIA

  1. Trojans go after MS Office vulnerabilities and China hacks US hardware
  2. Danabot Banking Malware Targets U.S. Organizations
  3. DanaBot Banking Trojan’s Journey to North America

NORTH AMERICA

  1. Virus Bulletin 2018: Saudi Dissident Spyware Attack Belies Bigger Threat
  2. Trojans go after MS Office vulnerabilities and China hacks US hardware
  3. California Is Making It Illegal for Devices to Have Shitty Default Passwords
  4. AirNaine Uses New ARS RAT Strain Named ZeroEvil Against Canadian Businesses
  5. Danabot Banking Malware Targets U.S. Organizations
  6. Uncle Sam Charges Seven Russians With Fancy Bear Hack Sprees
  7. DanaBot Banking Trojan’s Journey to North America
  8. The fur is not gonna fly: Uncle Sam charges seven Russians with Fancy Bear hack sprees
  9. US users open 30% of phishing emails with 12% of those clicking on infected links or attachments. Prepare for 2019's
  10. DHS issued an alert on attacks aimed at Managed Service Providers
  11. New research reveals the DanaBot banking Trojan is now targeting banks in the United States as well. The campaign attempts to
  12. Fin7 Hackers Breached US Chain Burgerville
  13. Fin7 Hackers Breached US Chain Burgerville

SOUTH AMERICA

Nothing to report

EUROPE

  1. Russian State-Sponsored Operations Begin to Overlap: Kaspersky
  2. Danabot Banking Malware Targets U.S. Organizations
  3. The Virus Bulletin conference returns home: VB2019 to take place in London
  4. DanaBot Banking Trojan’s Journey to North America
  5. The Kronos banking trojan is back from the malware dustbin. After years of lying dormant, hackers have reworked the underlying
  6. The fur is not gonna fly: Uncle Sam charges seven Russians with Fancy Bear hack sprees
  7. UK pins 'reckless campaign of cyber attacks' on Russian military intelligence
  8. Experts warns of a new extortion campaign based on the Breach Compilation archive
  9. Facebook Logins Available on the Dark Web for $2.60
  10. DHS issued an alert on attacks aimed at Managed Service Providers
  11. Fake News Domains Spoof UK News Sites
  12. Russia's elite hacking unit has been silent, but busy

AFRICA

Nothing to report

Sector brief for 2018-10-05

HEALTHCARE

  1. Hackers fly under the radar for two years after infecting chiropractic clinic with malware
  2. DHS issued an alert on attacks aimed at Managed Service Providers

TRANSPORT

Nothing to report

BANKING & FINANCE

  1. Sales intel firm Apollo data breach exposed more than 200 million contact records
  2. Remove Ursnif Trojan (Purolator Phishing) Scam
  3. Trojans go after MS Office vulnerabilities and China hacks US hardware
  4. California Is Making It Illegal for Devices to Have Shitty Default Passwords
  5. Danabot Banking Malware Targets U.S. Organizations
  6. Report: The bigger the company, the messier the password practices
  7. Hackers fly under the radar for two years after infecting chiropractic clinic with malware
  8. DanaBot Banking Trojan’s Journey to North America
  9. The Kronos banking trojan is back from the malware dustbin. After years of lying dormant, hackers have reworked the underlying
  10. Detecting Credit Card Skimmers
  11. Experts warns of a new extortion campaign based on the Breach Compilation archive
  12. Facebook Logins Available on the Dark Web for $2.60
  13. New research reveals the DanaBot banking Trojan is now targeting banks in the United States as well. The campaign attempts to
  14. Passware Kit: Forensic software recovers passwords for Bitcoin wallets
  15. North Korean hacking operation behind SWIFT attacks

INFORMATION & TELECOMMUNICATION

  1. Sales intel firm Apollo data breach exposed more than 200 million contact records
  2. Unit 42 Vulnerability Research October 2018 Disclosures – Adobe
  3. Unit 42 Vulnerability Research October 2018 Disclosures – Adobe
  4. Facebook Found “No Evidence” Of Facebook Login Exploited To Access Linked Apps
  5. 150 Bugs Found in the Hack the Marine Corps Challenge
  6. 150 Bugs Found in the Hack the Marine Corps Challenge
  7. Virus Bulletin 2018: Exposing the Social Media Fraud Ecosystem
  8. California Is Making It Illegal for Devices to Have Shitty Default Passwords
  9. Fileless malware: part deux
  10. Can the @Microsoft Authenticator really replace passwords in the enterprise? Microsoft says the answer is yes and proclaimed the password
  11. Smart TV kit featuring Google Home Mini and third-gen Chromecast leaks
  12. Hacked #Fortnite accounts and rent-a-botnet being pushed on Instagram
  13. US users open 30% of phishing emails with 12% of those clicking on infected links or attachments. Prepare for 2019's
  14. Credential-Phishing Attempts Highest on Tuesdays
  15. Credential-Phishing Attempts Highest on Tuesdays
  16. If you're thinking passwords, check out #CyberSauna episode #13: A Hacker's Take on Cracking & Protecting Your Creds
  17. How does FacexWorm malware use Facebook Messenger to spread?
  18. FYI: "password" is the 2nd most popular password in the world. Can you guess the first?
  19. Facebook Logins Available on the Dark Web for $2.60
  20. VP Mike Pence slams Google over Chinese search engine project
  21. Fake News Domains Spoof UK News Sites
  22. Fin7 Hackers Breached US Chain Burgerville
  23. Fin7 Hackers Breached US Chain Burgerville
  24. Roaming Mantis Hacking Group Inject Web Crypto Mining for iOS Devices via Malicious Content Delivery System
  25. CMake 3.12.3 releases: managing the build process of software

FOOD

Nothing to report

WATER

Nothing to report

ENERGY

  1. DHS issued an alert on attacks aimed at Managed Service Providers

GOVERNMENT & PUBLIC SERVICE

Nothing to report

Daily brief for 2018-10-05

ASIA

  1. Virus Bulletin 2018: Saudi Dissident Spyware Attack Belies Bigger Threat
  2. Trojans go after MS Office vulnerabilities and China hacks US hardware
  3. The Kronos banking trojan is back from the malware dustbin. After years of lying dormant, hackers have reworked the underlying
  4. DHS issued an alert on attacks aimed at Managed Service Providers
  5. VP Mike Pence slams Google over Chinese search engine project
  6. North Korean hacking operation behind SWIFT attacks

WORLD

  1. Virus Bulletin 2018: Saudi Dissident Spyware Attack Belies Bigger Threat
  2. Trojans go after MS Office vulnerabilities and China hacks US hardware
  3. Russian State-Sponsored Operations Begin to Overlap: Kaspersky
  4. California Is Making It Illegal for Devices to Have Shitty Default Passwords
  5. AirNaine Uses New ARS RAT Strain Named ZeroEvil Against Canadian Businesses
  6. Danabot Banking Malware Targets U.S. Organizations
  7. The Virus Bulletin conference returns home: VB2019 to take place in London
  8. Uncle Sam Charges Seven Russians With Fancy Bear Hack Sprees
  9. DanaBot Banking Trojan’s Journey to North America
  10. The Kronos banking trojan is back from the malware dustbin. After years of lying dormant, hackers have reworked the underlying
  11. The fur is not gonna fly: Uncle Sam charges seven Russians with Fancy Bear hack sprees
  12. UK pins 'reckless campaign of cyber attacks' on Russian military intelligence
  13. Experts warns of a new extortion campaign based on the Breach Compilation archive
  14. US users open 30% of phishing emails with 12% of those clicking on infected links or attachments. Prepare for 2019's
  15. Facebook Logins Available on the Dark Web for $2.60
  16. DHS issued an alert on attacks aimed at Managed Service Providers
  17. New research reveals the DanaBot banking Trojan is now targeting banks in the United States as well. The campaign attempts to
  18. Fake News Domains Spoof UK News Sites
  19. Russia's elite hacking unit has been silent, but busy
  20. Fin7 Hackers Breached US Chain Burgerville
  21. Fin7 Hackers Breached US Chain Burgerville

ATTACKS

  1. Sales intel firm Apollo data breach exposed more than 200 million contact records
  2. Facebook Found “No Evidence” Of Facebook Login Exploited To Access Linked Apps
  3. Fortnite gamers targeted by data theft malware
  4. Remove Ursnif Trojan (Purolator Phishing) Scam
  5. California Is Making It Illegal for Devices to Have Shitty Default Passwords
  6. Report: The bigger the company, the messier the password practices
  7. The most commonly used passwords in the world are... 1. 123456 2. password 3. 123456789 4. 12345678 5. 12345 6. qwerty
  8. Apollo hackers steal info from database of 200M contact
  9. Can the @Microsoft Authenticator really replace passwords in the enterprise? Microsoft says the answer is yes and proclaimed the password
  10. Security researchers @proofpoint recently uncovered new #DanaBot campaigns.
  11. Weak Passwords Banned In California From 2020
  12. New IoT legislation bans shared default passwords
  13. GhostDNS hijacking campaign steps up attacks on Brazilians; 100K+ devices compromised
  14. Smart TV kit featuring Google Home Mini and third-gen Chromecast leaks
  15. Hacked #Fortnite accounts and rent-a-botnet being pushed on Instagram
  16. UK pins 'reckless campaign of cyber attacks' on Russian military intelligence
  17. Experts warns of a new extortion campaign based on the Breach Compilation archive
  18. US users open 30% of phishing emails with 12% of those clicking on infected links or attachments. Prepare for 2019's
  19. Credential-Phishing Attempts Highest on Tuesdays
  20. Cryptomining malware steals Fortnite gamers' Bitcoins and personal data
  21. Credential-Phishing Attempts Highest on Tuesdays
  22. If you're thinking passwords, check out #CyberSauna episode #13: A Hacker's Take on Cracking & Protecting Your Creds
  23. Intel, AMD both claim server speed records
  24. FYI: "password" is the 2nd most popular password in the world. Can you guess the first?
  25. Facebook Logins Available on the Dark Web for $2.60
  26. Samsung predicts a return to record profits in Q3
  27. New research reveals the DanaBot banking Trojan is now targeting banks in the United States as well. The campaign attempts to
  28. Passware Kit: Forensic software recovers passwords for Bitcoin wallets

THREATS

  1. Adobe October Patch Update Fixed 86 Different Security Vulnerabilities
  2. Ransomware Recovery at the Taxpayers’ Expense
  3. Sony Smart TV Bug Allows Remote Access, Root Privileges
  4. Virus Bulletin 2018: Saudi Dissident Spyware Attack Belies Bigger Threat
  5. Unit 42 Vulnerability Research October 2018 Disclosures – Adobe
  6. Unit 42 Vulnerability Research October 2018 Disclosures – Adobe
  7. Facebook Found “No Evidence” Of Facebook Login Exploited To Access Linked Apps
  8. Fortnite gamers targeted by data theft malware
  9. D-Link Patches RCE Bugs in Wireless Access Point Gear
  10. VMware Releases Patches for Critical A/W Console Auth Bypass Vulnerability
  11. Remove Ursnif Trojan (Purolator Phishing) Scam
  12. 150 Bugs Found in the Hack the Marine Corps Challenge
  13. Trojans go after MS Office vulnerabilities and China hacks US hardware
  14. .@alienvault researchers recently discovered #MassMiner, a #cryptocurrency mining #malware that has the ability to infect systems across the web. Discover
  15. 150 Bugs Found in the Hack the Marine Corps Challenge
  16. Most Home Routers Are Full of Vulnerabilities
  17. Virus Bulletin 2018: Exposing the Social Media Fraud Ecosystem
  18. AirNaine Uses New ARS RAT Strain Named ZeroEvil Against Canadian Businesses
  19. Danabot Banking Malware Targets U.S. Organizations
  20. The Virus Bulletin conference returns home: VB2019 to take place in London
  21. Vulnerability Scanning vs. Penetration Testing: What's the Difference?
  22. Fileless malware: part deux
  23. Adobe update cleans up 86 bugs in Acrobat and Reader, many critical
  24. Missing Files, Bugs Reported After Windows 10 October 2018 Update
  25. Cisco Discovered Multiple Vulnerabilities In Atlantis Word Processor
  26. Advanced Persistent Threat Activity Exploiting Managed Service Providers
  27. Mozilla Resolves Critical Code Execution Flaw In Thunderbird
  28. Hackers fly under the radar for two years after infecting chiropractic clinic with malware
  29. DanaBot Banking Trojan’s Journey to North America
  30. Cisco patches critical flaws in DNA Center and Prime Infrastructure
  31. Virus Bulletin 2018: Supply chain hacking grows up
  32. Marine Corps bug bounty program finds 150 vulnerabilities
  33. The Kronos banking trojan is back from the malware dustbin. After years of lying dormant, hackers have reworked the underlying
  34. Mozilla resolves critical code execution flaw in Thunderbird email client
  35. Cisco Talos spotted 18 vulnerabilities in Foxit PDF Reader, 8 in Atlantis World Processor
  36. D-Link Patches Code Execution, XSS Flaws in Management Tool
  37. Cisco updates address 36 vulnerabilities, three critical
  38. Cryptomining malware steals Fortnite gamers' Bitcoins and personal data
  39. Vulnerability Scanning vs. Penetration Testing: What's the Difference?
  40. How does FacexWorm malware use Facebook Messenger to spread?
  41. Malicious remote admin tool seemingly linked to KONNI malware, North Korea
  42. #PulseNet: How does an improper #authentication flaw affect it?
  43. New research reveals the DanaBot banking Trojan is now targeting banks in the United States as well. The campaign attempts to
  44. .@FireEye researches discovered that the group behind #Sanny #malware attacks has made delivery method changes that put users at risk.
  45. Cisco Released Security Updates & Fixed 37 Vulnerabilities that Affected Cisco Products
  46. Fake News Domains Spoof UK News Sites
  47. Roaming Mantis Hacking Group Inject Web Crypto Mining for iOS Devices via Malicious Content Delivery System
  48. Top 5 Viruses of All Time by Security Expert Mikko Hyppönen
  49. CMake 3.12.3 releases: managing the build process of software
  50. Mozilla Patches Critical Vulnerability in Thunderbird 60.2.1

CRIME

  1. Fortnite gamers targeted by data theft malware
  2. Remove Ursnif Trojan (Purolator Phishing) Scam
  3. California Is Making It Illegal for Devices to Have Shitty Default Passwords
  4. AirNaine Uses New ARS RAT Strain Named ZeroEvil Against Canadian Businesses
  5. Danabot Banking Malware Targets U.S. Organizations
  6. Report: The bigger the company, the messier the password practices
  7. Hackers fly under the radar for two years after infecting chiropractic clinic with malware
  8. DanaBot Banking Trojan’s Journey to North America
  9. The Kronos banking trojan is back from the malware dustbin. After years of lying dormant, hackers have reworked the underlying
  10. Detecting Credit Card Skimmers
  11. The fur is not gonna fly: Uncle Sam charges seven Russians with Fancy Bear hack sprees
  12. Experts warns of a new extortion campaign based on the Breach Compilation archive
  13. Cryptomining malware steals Fortnite gamers' Bitcoins and personal data
  14. Facebook Logins Available on the Dark Web for $2.60
  15. DHS issued an alert on attacks aimed at Managed Service Providers
  16. New research reveals the DanaBot banking Trojan is now targeting banks in the United States as well. The campaign attempts to
  17. Roaming Mantis Hacking Group Inject Web Crypto Mining for iOS Devices via Malicious Content Delivery System
  18. Passware Kit: Forensic software recovers passwords for Bitcoin wallets
  19. North Korean hacking operation behind SWIFT attacks
  20. Lojax, the new threat developed by Fancy Bear

POLITICS

  1. Russian State-Sponsored Operations Begin to Overlap: Kaspersky
  2. Advanced Persistent Threat Activity Exploiting Managed Service Providers
  3. DHS issued an alert on attacks aimed at Managed Service Providers