APT report for 2018-10-13

TRANSNATIONAL / UNKNOWN

Nil

CHINA

Nil

INDIA

Nil

NORTH KOREA

Nil

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

1. Security researchers found that Industroyer and NotPetya belong to the Russian hacker group

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-10-13

WINDOWS

1. Microsoft Fix for Windows JET Database Bug Not Perfect, Micropatch Available

LINUX

Nil

UNIX

Nil

ANDROID

2. GPlayed – New Malware Posed as Google Play App to Spy & Steal Data From Your Entire Android Phone

IOS

Nil

MACOS

Nil

Threat report for 2018-10-13

DATA BREACH & DATA LOSS

1. Pentagon Defense Department travel records data breach
2. A combination of #SecurityFlaws and inadequate back-end development of the @Google Firebase database led to #DataLeaks and #SecurityVulnerabilities including HospitalGown.
3. 'Only' 30 million accounts were compromised in Facebook hack
4. Researchers @proofpoint have been tracking a downloader dubbed #AdvisorsBot as a first-stage payload in campaigns since May 2018.
5. Facebook Clarifies Extent of Data Breach
6. An Assessment of Google's Data Leak
7. ArangoDB v3.3.18 releases: native multi-model database
8. Facebook Now Revealed Hackers Stolen 29 Million Facebook Users Personal Data
9. Microsoft Fix for Windows JET Database Bug Not Perfect, Micropatch Available
10. Breach of Pentagon travel records exposes defense personnel PII

DENIAL-OF-SERVICE

Nil

MALVERTISING

Nil

PHISHING

11. Hackers launched @netflix #phishing attacks by obtaining TLS certificates. Learn how hackers mimic popular websites to spoof users and steal
12. This skyscraper reminds me of those really long ANSI art BBS login screens. Cc: @sixteencolors @blocktronics @velikani

WEB DEFACEMENT

Nil

BOTNET

Nil

RANSOMWARE

13. [SingCERT] Updated Advisory on Ransomware
14. APT group called #TeleBots linked to #Industroyer #malware and #NotPetya #ransomware, according to @ESET researchers. By @MaddieBacon11

CRYPTOMINING & CRYPTOCURRENCIES

15. Criminals' Cryptocurrency Addiction Continues
16. .@alienvault researchers recently discovered #MassMiner, a #cryptocurrency mining #malware that has the ability to infect systems across the web. Discover
17. Cryptocurrency Miners trick the user through Fake Flash Updates
18. Blockchain and Healthcare in Today’s World

MALWARE

19. GPlayed – New Malware Posed as Google Play App to Spy & Steal Data From Your Entire Android Phone
20. Researchers @proofpoint have been tracking a downloader dubbed #AdvisorsBot as a first-stage payload in campaigns since May 2018.
21. .@alienvault researchers recently discovered #MassMiner, a #cryptocurrency mining #malware that has the ability to infect systems across the web. Discover
22. Hackers use Googlebot in mining malware attacks
23. Researchers at @TrendMicro found a new strain of #malware -- dubbed #FacexWorm -- that targets users through a malicious #ChromeExtension.
24. APT group called #TeleBots linked to #Industroyer #malware and #NotPetya #ransomware, according to @ESET researchers. By @MaddieBacon11

EXPLOIT

Nil

VULNERABILITY

25. Now this might be going out on a limb, but here's how a branch.io bug left '685 million' netizens open to website hacks
26. Review Shows Glaring Flaws In Xiongmai IoT Devices
27. Microsoft JET vulnerability still open to attacks, despite recent patch
28. DOM-based XSS Vulnerability Affected 685 Million Users of Tinder, Shopify, Western Union, and Imgur
29. A patched #MikroTik router vulnerability amps up severity rating as @TenableSecurity researchers find new potential exploits with more critical consequences.
30. Microsoft Fix for Windows JET Database Bug Not Perfect, Micropatch Available
31. Vulnerabilities affect Shopify, Tinder and many other sites

Region brief for 2018-10-13

ASIA

1. Review Shows Glaring Flaws In Xiongmai IoT Devices

OCEANIA

2. Security researchers found that Industroyer and NotPetya belong to the Russian hacker group

NORTH AMERICA

3. Pentagon Defense Department travel records data breach

SOUTH AMERICA

Nil

EUROPE

4. Security researchers found that Industroyer and NotPetya belong to the Russian hacker group

AFRICA

Nil

Sector brief for 2018-10-13

HEALTHCARE

1. Blockchain and Healthcare in Today’s World

TRANSPORT

Nil

BANKING & FINANCE

2. Pentagon Defense Department travel records data breach
3. Cryptocurrency Miners trick the user through Fake Flash Updates
4. Hackers use Googlebot in mining malware attacks

INFORMATION & TELECOMMUNICATION

5. This skyscraper reminds me of those really long ANSI art BBS login screens. Cc: @sixteencolors @blocktronics @velikani
6. 'Only' 30 million accounts were compromised in Facebook hack
7. Facebook Clarifies Extent of Data Breach
8. Facebook Now Revealed Hackers Stolen 29 Million Facebook Users Personal Data

FOOD

Nil

WATER

Nil

ENERGY

Nil

GOVERNMENT & PUBLIC SERVICE

Nil

Daily brief for 2018-10-13

ASIA

1. Review Shows Glaring Flaws In Xiongmai IoT Devices

WORLD

2. Pentagon Defense Department travel records data breach
3. Security researchers found that Industroyer and NotPetya belong to the Russian hacker group

ATTACKS

4. Pentagon Defense Department travel records data breach
5. Hackers launched @netflix #phishing attacks by obtaining TLS certificates. Learn how hackers mimic popular websites to spoof users and steal
6. This skyscraper reminds me of those really long ANSI art BBS login screens. Cc: @sixteencolors @blocktronics @velikani
7. A combination of #SecurityFlaws and inadequate back-end development of the @Google Firebase database led to #DataLeaks and #SecurityVulnerabilities including HospitalGown.
8. 'Only' 30 million accounts were compromised in Facebook hack
9. Researchers @proofpoint have been tracking a downloader dubbed #AdvisorsBot as a first-stage payload in campaigns since May 2018.
10. Facebook Clarifies Extent of Data Breach
11. An Assessment of Google's Data Leak
12. ArangoDB v3.3.18 releases: native multi-model database
13. Facebook Now Revealed Hackers Stolen 29 Million Facebook Users Personal Data
14. Microsoft Fix for Windows JET Database Bug Not Perfect, Micropatch Available
15. Breach of Pentagon travel records exposes defense personnel PII

THREATS

16. GPlayed – New Malware Posed as Google Play App to Spy & Steal Data From Your Entire Android Phone
17. [SingCERT] Updated Advisory on Ransomware
18. Researchers @proofpoint have been tracking a downloader dubbed #AdvisorsBot as a first-stage payload in campaigns since May 2018.
19. Now this might be going out on a limb, but here's how a branch.io bug left '685 million' netizens open to website hacks
20. Review Shows Glaring Flaws In Xiongmai IoT Devices
21. Criminals' Cryptocurrency Addiction Continues
22. .@alienvault researchers recently discovered #MassMiner, a #cryptocurrency mining #malware that has the ability to infect systems across the web. Discover
23. Cryptocurrency Miners trick the user through Fake Flash Updates
24. Microsoft JET vulnerability still open to attacks, despite recent patch
25. DOM-based XSS Vulnerability Affected 685 Million Users of Tinder, Shopify, Western Union, and Imgur
26. A patched #MikroTik router vulnerability amps up severity rating as @TenableSecurity researchers find new potential exploits with more critical consequences.
27. Blockchain and Healthcare in Today’s World
28. Microsoft Fix for Windows JET Database Bug Not Perfect, Micropatch Available
29. Hackers use Googlebot in mining malware attacks
30. Vulnerabilities affect Shopify, Tinder and many other sites
31. Researchers at @TrendMicro found a new strain of #malware -- dubbed #FacexWorm -- that targets users through a malicious #ChromeExtension.
32. APT group called #TeleBots linked to #Industroyer #malware and #NotPetya #ransomware, according to @ESET researchers. By @MaddieBacon11

CRIME

33. ArangoDB v3.3.18 releases: native multi-model database
34. Facebook Now Revealed Hackers Stolen 29 Million Facebook Users Personal Data

POLITICS

35. Pentagon Defense Department travel records data breach
36. GPlayed – New Malware Posed as Google Play App to Spy & Steal Data From Your Entire Android Phone
37. Security researchers found that Industroyer and NotPetya belong to the Russian hacker group

APT report for 2018-10-12

TRANSNATIONAL / UNKNOWN

1. Cyber News Rundown: Windows 10 Update Deletes Files
2. No Cookies for CartThief, a New Magecart Variant
3. Payment skimmers sneaking on to websites via third party code
4. Gallmaker Hacking Group Attack Government, Military, and Defense Sectors Using Publicly Available Hacking Tools

CHINA

5. Five Eyes Intelligence agencies warn of popular hacking tools

INDIA

Nil

NORTH KOREA

6. Threat Brief: FASTCash ATM Cash Out Tactics

PAKISTAN

Nil

VIETNAM

Nil

IRAN

7. MuddyWater APT Latest Activity

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

Nil

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-10-12

WINDOWS

1. Windows 10 October 2018 Update: Release – Halt – Bug Identified – Fix!
2. Cyber News Rundown: Windows 10 Update Deletes Files
3. Five Eyes Intelligence agencies warn of popular hacking tools
4. PoC exploit for Windows Shell RCE released
5. Call of Duty: Black Ops 4 welcomes launch with new Blackout and Zombies trailers
6. Cryptomining software is hidden as Flash update

LINUX

7. Five Eyes Intelligence agencies warn of popular hacking tools

UNIX

Nil

ANDROID

8. Five Eyes Intelligence agencies warn of popular hacking tools
9. .@ThreatFabric researchers uncovered an #Android malware, #MysteryBot, which uses overlay attacks to avoid detection. Learn how this #malware affects @Google's
10. 360 Total Security has intercepted more than 50,000 Clipboard Wallet Hijacker attacks, helping users recover over 40 million
11. This Trojan masquerades as Google Play to hide on your phone in plain sight
12. Fortnite for Android Released, But Make Sure You Don't Download Malware

IOS

Nil

MACOS

13. Five Eyes Intelligence agencies warn of popular hacking tools
14. Vulnerability allows hijacking of software installed in macOS

Threat report for 2018-10-12

DATA BREACH & DATA LOSS

1. Facebook Data Breach Update: attackers accessed data of 29 Million users
2. Pentagon Reveals Cyber Breach of Travel Records
3. NEW BETABOT CAMPAIGN UNDER THE MICROSCOPE
4. Detecting Malicious Campaigns with Machine Learning
5. Fitmetrix fitness software company may have exposed millions of customer records
6. Fake browser update seeks to compromise more MikroTik routers
7. Phishing Campaign uses Hijacked Emails to Deliver URSNIF by Replying to Ongoing Threads
8. #TLBleed abuses @Intel's HTT chip feature to leak data and obtain sensitive memory information. Learn more about this new side-channel
9. Mindbody’s FitMetrix leaked millions of Users’ Personal Details
10. Is Google Sync a Vector for Data Breaches?
11. Facebook Revises Data Breach Impact Downward, Provides New Details
12. How #livechatsoftware leak personal #employeedata?
13. ​Labor seeks updated My Health Record legislation to prevent privatisation

DENIAL-OF-SERVICE

14. 'The Nuke Loop' is Fallout 76's endgame, lead designer explains
15. UK's NCSC to monitor internet routing to stop DDoS and hijacks

MALVERTISING

Nil

PHISHING

16. Threat Announcement: Phishing Sites Detected on Emoji Domains
17. Phishing Campaign uses Hijacked Emails to Deliver URSNIF by Replying to Ongoing Threads
18. An Examination of a Phishing Kit Dubbed Luis
19. Do you know the top myths and facts of #mobile #phishing? If not, don't worry, we've compiled a list of
20. Largest Cyber Attack Against Iceland Driven by Complex Phishing Scheme
21. Spring Security With Radius Login

WEB DEFACEMENT

Nil

BOTNET

22. Call of Duty: Black Ops 4 welcomes launch with new Blackout and Zombies trailers

RANSOMWARE

23. The Week in Ransomware - October 12th 2018 - NotPetya, GandCrab, and More
24. New @ESET research finds APT group dubbed #TeleBots was behind #Industroyer #malware attacks, #NotPetya #ransomware outbreaks, and a recent Exaramel
25. GandCrab ransomware operators team up with crypter service
26. GandCrab Ransomware Partners With Crypter Service
27. This is how much the WannaCry ransomware attack cost the NHS

CRYPTOMINING & CRYPTOCURRENCIES

28. Almost 12K MikroTik Routers Are Hunting Around for Cryptojacking Opportunities
29. Three Industries That Blockchain Will Impact the Most
30. Obfuscated JavaScript Cryptominer
31. In 2008, @nokia dominated the mobile phone universe. Four years later, the company was on the verge of extinction. Discover
32. 360 Total Security has intercepted more than 50,000 Clipboard Wallet Hijacker attacks, helping users recover over 40 million
33. Cryptomining software is hidden as Flash update

MALWARE

34. Detecting Malicious Campaigns with Machine Learning
35. Fake Adobe Flash Updates Hide Malicious Crypto Miners
36. .@ThreatFabric researchers uncovered an #Android malware, #MysteryBot, which uses overlay attacks to avoid detection. Learn how this #malware affects @Google's
37. New @ESET research finds APT group dubbed #TeleBots was behind #Industroyer #malware attacks, #NotPetya #ransomware outbreaks, and a recent Exaramel
38. Researchers at the 2018 @RSAConference discussed #stegware: @malware that uses #steganography. Discover how this works with expert @lewisnic.
39. Hackers targeting Drupal vulnerabilities to install the Shellbot Backdoor
40. Researchers at Cisco Talos (@TalosSecurity) recently discovered #GravityRAT, a remote access #Trojan. Discover how this RAT can check for
41. GPlayed trojan seeks to play users out of their data
42. This Trojan masquerades as Google Play to hide on your phone in plain sight
43. Marion County Jail’s Reporting System Fall Prey to Virus Attack
44. Some 10% of user-reported emails malicious
45. ThreatFabric on stage @bsidesdelft talking about the evolution of
46. Fortnite for Android Released, But Make Sure You Don't Download Malware

EXPLOIT

47. PoC exploit for Windows Shell RCE released

VULNERABILITY

48. Windows 10 October 2018 Update: Release – Halt – Bug Identified – Fix!
49. FDA Issues Warning about Security Vulnerabilities in Pacemaker Programmers
50. Microsoft Zero-Day Patch for JET Bug Incomplete, Claims Firm
51. Proof-of-Concept Available for Edge Remote Code Execution Vulnerability
52. Facebook States 30 Million People Affected by Last Month's "View As" Bug
53. Learn how the #NetSpectre vulnerability affects the #cloud from expert Ed Moyle of @securitycurve.
54. What's keeping the #CISO up at night? The vulnerabilities caused by third-party vendors, finds @forrester research. 65% of organizations say
55. Micropatch Released to Correct Partially Fixed JET DB Engine RCE Vulnerability
56. FDA warns users of cyber vulnerability in pacemaker programmers
57. Ryan Kalember, Senior VP of #Cybersecurity Strategy at Proofpoint, discussing why humans are a company’s biggest cybersecurity vulnerability.
58. Sony Patched Three Critical Vulnerabilities In Smart TV Bravia
59. Hackers targeting Drupal vulnerabilities to install the Shellbot Backdoor
60. Now, watch this... Network time protocol bugs sting Juniper operating system
61. DOM-XSS Bug Affecting Tinder, Shopify, Yelp, and More
62. Facebook's WhatsApp says it has fixed a video call security bug that let hackers hijack accounts.
63. Vulnerability allows hijacking of software installed in macOS
64. Senator asked Google to explain why the revealing of the Google+ vulnerability was postponed
65. Proof-of-concept code published for Microsoft Edge remote code execution bug

Region brief for 2018-10-12

ASIA

1. Cyber News Rundown: Windows 10 Update Deletes Files
2. Threat Brief: FASTCash ATM Cash Out Tactics
3. Five Eyes Intelligence agencies warn of popular hacking tools
4. 360 Total Security has intercepted more than 50,000 Clipboard Wallet Hijacker attacks, helping users recover over 40 million

OCEANIA

5. Five Eyes Intelligence agencies warn of popular hacking tools
6. ​Labor seeks updated My Health Record legislation to prevent privatisation

NORTH AMERICA

7. Facebook Data Breach Update: attackers accessed data of 29 Million users
8. Pentagon Reveals Cyber Breach of Travel Records
9. FDA Issues Warning about Security Vulnerabilities in Pacemaker Programmers
10. Detecting Malicious Campaigns with Machine Learning
11. Fake browser update seeks to compromise more MikroTik routers
12. Five Eyes Intelligence agencies warn of popular hacking tools
13. 360 Total Security has intercepted more than 50,000 Clipboard Wallet Hijacker attacks, helping users recover over 40 million
14. DOM-XSS Bug Affecting Tinder, Shopify, Yelp, and More
15. Senator asked Google to explain why the revealing of the Google+ vulnerability was postponed

SOUTH AMERICA

Nil

EUROPE

16. Facebook Data Breach Update: attackers accessed data of 29 Million users
17. Almost 12K MikroTik Routers Are Hunting Around for Cryptojacking Opportunities
18. Cyber News Rundown: Windows 10 Update Deletes Files
19. Fake browser update seeks to compromise more MikroTik routers
20. An Examination of a Phishing Kit Dubbed Luis
21. Five Eyes Intelligence agencies warn of popular hacking tools
22. UK's NCSC to monitor internet routing to stop DDoS and hijacks
23. Largest Cyber Attack Against Iceland Driven by Complex Phishing Scheme

AFRICA

Nil

Sector brief for 2018-10-12

HEALTHCARE

1. FDA warns users of cyber vulnerability in pacemaker programmers

TRANSPORT

2. Five Eyes Intelligence agencies warn of popular hacking tools

BANKING & FINANCE

3. Pentagon Reveals Cyber Breach of Travel Records
4. No Cookies for CartThief, a New Magecart Variant
5. An Examination of a Phishing Kit Dubbed Luis
6. Mindbody’s FitMetrix leaked millions of Users’ Personal Details
7. Threat Brief: FASTCash ATM Cash Out Tactics
8. Five Eyes Intelligence agencies warn of popular hacking tools
9. Payment skimmers sneaking on to websites via third party code
10. 360 Total Security has intercepted more than 50,000 Clipboard Wallet Hijacker attacks, helping users recover over 40 million
11. This is how much the WannaCry ransomware attack cost the NHS
12. ThreatFabric on stage @bsidesdelft talking about the evolution of

INFORMATION & TELECOMMUNICATION

13. Facebook Data Breach Update: attackers accessed data of 29 Million users
14. Detecting Malicious Campaigns with Machine Learning
15. Almost 12K MikroTik Routers Are Hunting Around for Cryptojacking Opportunities
16. Cyber News Rundown: Windows 10 Update Deletes Files
17. Facebook States 30 Million People Affected by Last Month's "View As" Bug
18. Fake browser update seeks to compromise more MikroTik routers
19. An Examination of a Phishing Kit Dubbed Luis
20. Do you know the top myths and facts of #mobile #phishing? If not, don't worry, we've compiled a list of
21. Facebook Revises Data Breach Impact Downward, Provides New Details
22. Facebook's WhatsApp says it has fixed a video call security bug that let hackers hijack accounts.
23. ThreatFabric on stage @bsidesdelft talking about the evolution of

FOOD

Nil

WATER

Nil

ENERGY

Nil

GOVERNMENT & PUBLIC SERVICE

24. Facebook Data Breach Update: attackers accessed data of 29 Million users

Daily brief for 2018-10-12

ASIA

1. Cyber News Rundown: Windows 10 Update Deletes Files
2. Threat Brief: FASTCash ATM Cash Out Tactics
3. Five Eyes Intelligence agencies warn of popular hacking tools
4. 360 Total Security has intercepted more than 50,000 Clipboard Wallet Hijacker attacks, helping users recover over 40 million

WORLD

5. Facebook Data Breach Update: attackers accessed data of 29 Million users
6. Pentagon Reveals Cyber Breach of Travel Records
7. FDA Issues Warning about Security Vulnerabilities in Pacemaker Programmers
8. Detecting Malicious Campaigns with Machine Learning
9. Almost 12K MikroTik Routers Are Hunting Around for Cryptojacking Opportunities
10. Cyber News Rundown: Windows 10 Update Deletes Files
11. Fake browser update seeks to compromise more MikroTik routers
12. An Examination of a Phishing Kit Dubbed Luis
13. Five Eyes Intelligence agencies warn of popular hacking tools
14. 360 Total Security has intercepted more than 50,000 Clipboard Wallet Hijacker attacks, helping users recover over 40 million
15. DOM-XSS Bug Affecting Tinder, Shopify, Yelp, and More
16. UK's NCSC to monitor internet routing to stop DDoS and hijacks
17. Largest Cyber Attack Against Iceland Driven by Complex Phishing Scheme
18. ​Labor seeks updated My Health Record legislation to prevent privatisation
19. Senator asked Google to explain why the revealing of the Google+ vulnerability was postponed

ATTACKS

20. Facebook Data Breach Update: attackers accessed data of 29 Million users
21. Pentagon Reveals Cyber Breach of Travel Records
22. NEW BETABOT CAMPAIGN UNDER THE MICROSCOPE
23. Detecting Malicious Campaigns with Machine Learning
24. Fitmetrix fitness software company may have exposed millions of customer records
25. Fake browser update seeks to compromise more MikroTik routers
26. Threat Announcement: Phishing Sites Detected on Emoji Domains
27. Phishing Campaign uses Hijacked Emails to Deliver URSNIF by Replying to Ongoing Threads
28. #TLBleed abuses @Intel's HTT chip feature to leak data and obtain sensitive memory information. Learn more about this new side-channel
29. An Examination of a Phishing Kit Dubbed Luis
30. Mindbody’s FitMetrix leaked millions of Users’ Personal Details
31. Is Google Sync a Vector for Data Breaches?
32. Do you know the top myths and facts of #mobile #phishing? If not, don't worry, we've compiled a list of
33. Facebook Revises Data Breach Impact Downward, Provides New Details
34. How #livechatsoftware leak personal #employeedata?
35. Largest Cyber Attack Against Iceland Driven by Complex Phishing Scheme
36. Spring Security With Radius Login
37. ​Labor seeks updated My Health Record legislation to prevent privatisation

THREATS

38. Windows 10 October 2018 Update: Release – Halt – Bug Identified – Fix!
39. FDA Issues Warning about Security Vulnerabilities in Pacemaker Programmers
40. Detecting Malicious Campaigns with Machine Learning
41. Almost 12K MikroTik Routers Are Hunting Around for Cryptojacking Opportunities
42. The Week in Ransomware - October 12th 2018 - NotPetya, GandCrab, and More
43. Microsoft Zero-Day Patch for JET Bug Incomplete, Claims Firm
44. Three Industries That Blockchain Will Impact the Most
45. Proof-of-Concept Available for Edge Remote Code Execution Vulnerability
46. Facebook States 30 Million People Affected by Last Month's "View As" Bug
47. Fake Adobe Flash Updates Hide Malicious Crypto Miners
48. Learn how the #NetSpectre vulnerability affects the #cloud from expert Ed Moyle of @securitycurve.
49. What's keeping the #CISO up at night? The vulnerabilities caused by third-party vendors, finds @forrester research. 65% of organizations say
50. Micropatch Released to Correct Partially Fixed JET DB Engine RCE Vulnerability
51. Obfuscated JavaScript Cryptominer
52. FDA warns users of cyber vulnerability in pacemaker programmers
53. In 2008, @nokia dominated the mobile phone universe. Four years later, the company was on the verge of extinction. Discover
54. .@ThreatFabric researchers uncovered an #Android malware, #MysteryBot, which uses overlay attacks to avoid detection. Learn how this #malware affects @Google's
55. New @ESET research finds APT group dubbed #TeleBots was behind #Industroyer #malware attacks, #NotPetya #ransomware outbreaks, and a recent Exaramel
56. Ryan Kalember, Senior VP of #Cybersecurity Strategy at Proofpoint, discussing why humans are a company’s biggest cybersecurity vulnerability.
57. Researchers at the 2018 @RSAConference discussed #stegware: @malware that uses #steganography. Discover how this works with expert @lewisnic.
58. Sony Patched Three Critical Vulnerabilities In Smart TV Bravia
59. Hackers targeting Drupal vulnerabilities to install the Shellbot Backdoor
60. 360 Total Security has intercepted more than 50,000 Clipboard Wallet Hijacker attacks, helping users recover over 40 million
61. GandCrab ransomware operators team up with crypter service
62. Now, watch this... Network time protocol bugs sting Juniper operating system
63. GandCrab Ransomware Partners With Crypter Service
64. This is how much the WannaCry ransomware attack cost the NHS
65. Researchers at Cisco Talos (@TalosSecurity) recently discovered #GravityRAT, a remote access #Trojan. Discover how this RAT can check for
66. GPlayed trojan seeks to play users out of their data
67. This Trojan masquerades as Google Play to hide on your phone in plain sight
68. DOM-XSS Bug Affecting Tinder, Shopify, Yelp, and More
69. Facebook's WhatsApp says it has fixed a video call security bug that let hackers hijack accounts.
70. Marion County Jail’s Reporting System Fall Prey to Virus Attack
71. Some 10% of user-reported emails malicious
72. Cryptomining software is hidden as Flash update
73. ThreatFabric on stage @bsidesdelft talking about the evolution of
74. Vulnerability allows hijacking of software installed in macOS
75. Fortnite for Android Released, But Make Sure You Don't Download Malware
76. Senator asked Google to explain why the revealing of the Google+ vulnerability was postponed
77. Proof-of-concept code published for Microsoft Edge remote code execution bug

CRIME

78. Facebook Data Breach Update: attackers accessed data of 29 Million users
79. Facebook States 30 Million People Affected by Last Month's "View As" Bug
80. Fake browser update seeks to compromise more MikroTik routers
81. Threat Brief: FASTCash ATM Cash Out Tactics
82. Hackers targeting Drupal vulnerabilities to install the Shellbot Backdoor
83. 360 Total Security has intercepted more than 50,000 Clipboard Wallet Hijacker attacks, helping users recover over 40 million
84. PoC exploit for Windows Shell RCE released
85. DOM-XSS Bug Affecting Tinder, Shopify, Yelp, and More
86. UK's NCSC to monitor internet routing to stop DDoS and hijacks
87. Largest Cyber Attack Against Iceland Driven by Complex Phishing Scheme

POLITICS

Nil

APT report for 2018-10-11

TRANSNATIONAL / UNKNOWN

1. Magecart Card-Stealing Gang Hits 'Shopper Approved' Plug-In
2. Microsoft October Patch Tuesday fixed Win32k privilege vulnerability that used in targeted attacks
3. New Gallmaker APT group eschews malware in cyber espionage campaigns

CHINA

4. Cybersecurity Authorities Issue Alert About Publicly Available Hacking Tools
5. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
6. Threats in the Netherlands

INDIA

7. The Reality of Self-Driving Cars and the Regulatory Hurdles

NORTH KOREA

8. Reaper Group Uses New Malware to Deploy RAT
9. Threats in the Netherlands

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

10. Threats in the Netherlands

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

11. Exaramel Malware Links Industroyer ICS malware and NotPetya wiper
12. Researchers link tools used in NotPetya and Ukraine grid hacks
13. What would happen if an attack interrupted a country’s power supply?
14. Threats in the Netherlands

SERBIA

Nil

UKRAINE

15. Threats in the Netherlands

Platform report for 2018-10-11

WINDOWS

1. Exaramel Malware Links Industroyer ICS malware and NotPetya wiper
2. Cybersecurity Authorities Issue Alert About Publicly Available Hacking Tools
3. PoC Code Available for Microsoft Edge Remote Code Execution Bug
4. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
5. Researchers link tools used in NotPetya and Ukraine grid hacks
6. Fake Flash Updaters Push Cryptocurrency Miners
7. Adobe patches critical flaws in many of its software offerings
8. Qihoo 360’s precise analysis of ransomware for September
9. Microsoft October Patch Tuesday fixed Win32k privilege vulnerability that used in targeted attacks
10. New Gallmaker APT group eschews malware in cyber espionage campaigns
11. GPlayed Trojan - .Net playing with Google Market
12. Avast 2019: Extends Artificial Intelligence Technology to Block Advanced Phishing Attacks for Enhanced Consumer Security
13. JSRAT – Secret Command and Control Channel Backdoor to Control Victims Machine Using JavaScript

LINUX

14. Exaramel Malware Links Industroyer ICS malware and NotPetya wiper
15. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
16. Adobe patches critical flaws in many of its software offerings
17. JSRAT – Secret Command and Control Channel Backdoor to Control Victims Machine Using JavaScript

UNIX

Nil

ANDROID

18. GPlayed Android Trojan Can Wipe Your Device, Steal Data, Make Calls, Send SMS
19. Adaptable, All-in-One Android Trojan Shows the Future of Malware
20. Talos: Android trojan resembling Play Store installs sophisticated spyware
21. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
22. GPlayed trojan – .Net playing with Google Market
23. New Android Trojan Gplayed Adapts to Attacker's Needs
24. All WhatsApp Users Must Update: Zero Day Bug Found in WhatsApp
25. GPlayed Trojan - .Net playing with Google Market
26. A simple videocall could compromise your WhatsApp account

IOS

27. Talos: Android trojan resembling Play Store installs sophisticated spyware
28. All WhatsApp Users Must Update: Zero Day Bug Found in WhatsApp
29. A simple videocall could compromise your WhatsApp account

MACOS

30. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
31. Adobe patches critical flaws in many of its software offerings

Threat report for 2018-10-11

DATA BREACH & DATA LOSS

1. The BEC List: Helping Thwart Business Email Compromise through Collaboration
2. Personal data for coffee. What’s the risk? | Avast
3. The EU and the US have investigated on data breaches on the Google+
4. FitMetrix user data exposed via passwordless ElasticSearch server cluster
5. Apple has formed a partnership with lyrics database provider Genius
6. Defending Against Business Email Compromise Attacks
7. Heathrow Airport, the busiest airport in the United Kingdom, has been fined £120,000 (about $158,173) following a data breach caused
8. Palo Alto Networks Uncovers Flash Updater Cryptojacking Campaign
9. Gemalto reports that 4.6 billion record leaked in the first half of 2018
10. A new database with information on every shooting at a school in the last 50 years is now available publicly
11. New Gallmaker APT group eschews malware in cyber espionage campaigns
12. Ghostdns Attack Compromised Over 100K Routers
13. A simple videocall could compromise your WhatsApp account
14. Mingis on Tech: Data breaches and the rise of 'surveillance capitalism'
15. Mingis on Tech: Data breaches in a world of 'surveillance capitalism'

DENIAL-OF-SERVICE

Nil

MALVERTISING

Nil

PHISHING

16. California Bill Increases Default Password Security
17. Cofense Report Reveals 10 Percent of User-Reported Emails Across Key Industries are Malicious, Over Half Tied to Credential Phishing
18. Hackers launched #phishing attacks against @netflix users via malicious sites with TLS certificates. Learn how hackers mimic popular websites to
19. Avast 2019: Extends Artificial Intelligence Technology to Block Advanced Phishing Attacks for Enhanced Consumer Security
20. AVG 2019 now includes enhanced phishing threat detection

WEB DEFACEMENT

21. Italian Police Finally Identified 25-Year-old Italian Hacker who have Defaced NASA Websites

BOTNET

Nil

RANSOMWARE

22. Qihoo 360’s precise analysis of ransomware for September
23. Costly cryptojacking overtakes ransomware in the enterprise threat stakes

CRYPTOMINING & CRYPTOCURRENCIES

24. XMRig Cryptocurrency Miner Camouflages Itself as a Flash Updater
25. Cops Arrest Infamous SIM Swapper Who Stole Crypto Currency
26. Cops Arrest Infamous SIM Swapper Who Allegedly Stole $14 Million in Cryptocurrency
27. Cryptomining malware discovered masquerading as Flash updates
28. Fake Flash Updaters Push Cryptocurrency Miners
29. Hackers Abusing Legitimate Googlebot Services to Inject Cryptomining Malware
30. Researchers from @alienvault found a new #cryptocurrency mining malware -- dubbed #MassMiner -- that infects systems across the web. Learn
31. Crypto-mining malware poses as Flash updates
32. Dublin Information Sec: Protect your firm from 'Gold Rush' #cryptocurrency scammers: https://www.independent.ie/business/dublin-information-sec/dublin-information-sec-protect-your-firm-from-gold-rush-cryptocurrency-scammers-37286913.html … ( via @jimmychappell )

MALWARE

33. Exaramel Malware Links Industroyer ICS malware and NotPetya wiper
34. GPlayed Android Trojan Can Wipe Your Device, Steal Data, Make Calls, Send SMS
35. Hackers Exploit Drupalgeddon2 to Install Backdoor
36. Adaptable, All-in-One Android Trojan Shows the Future of Malware
37. Talos: Android trojan resembling Play Store installs sophisticated spyware
38. Most Malware Arrives Via Email
39. Fake Adobe Flash Updates Hide Malicious Crypto Miners
40. .@TrendMicro researchers discovered a malicious #ChromeExtension spreading #malware. Learn more with expert @lewisnic.
41. GPlayed trojan – .Net playing with Google Market
42. Cryptomining malware discovered masquerading as Flash updates
43. This cryptojacking mining malware pretends to be a Flash update
44. Hackers Abusing Legitimate Googlebot Services to Inject Cryptomining Malware
45. Reaper Group Uses New Malware to Deploy RAT
46. Cofense Report Reveals 10 Percent of User-Reported Emails Across Key Industries are Malicious, Over Half Tied to Credential Phishing
47. Exaramel Malware Reinforces Link Between Industroyer and NotPetya
48. New TeleBots backdoor: First evidence linking Industroyer to NotPetya
49. New TeleBots backdoor: First evidence linking Industroyer to NotPetya
50. New Android Trojan Gplayed Adapts to Attacker's Needs
51. Researchers from @alienvault found a new #cryptocurrency mining malware -- dubbed #MassMiner -- that infects systems across the web. Learn
52. Hackers launched #phishing attacks against @netflix users via malicious sites with TLS certificates. Learn how hackers mimic popular websites to
53. Crypto-mining malware poses as Flash updates
54. Who needs custom malware? 'Govt-backed' Gallmaker spy crew uses off-the-shelf wares
55. Worker perks flinger Sodexo pulls Engage website after malware smackdown
56. New Backdoor Ties NotPetya and Industroyer to TeleBots Group
57. .@FarsightSecInc's @paulvixie says his company's new research into domain name lifespans and causes of death shows the need for new
58. "Help! I have a #computer worm..oh wait is it a computer #virus?" These terms are often used interchangeably, but have
59. The attached file promptly infects Peter’s laptop with the RAT, remote access trojan. It only takes about an hour from
60. New Gallmaker APT group eschews malware in cyber espionage campaigns
61. GPlayed Trojan - .Net playing with Google Market
62. Canada-Based Restaurant Chain Hit with Malware Attack
63. Hackers Use Hijacked Email Address To Send Malware as a Reply to Existing Email Thread
64. JSRAT – Secret Command and Control Channel Backdoor to Control Victims Machine Using JavaScript
65. How to Defeat Malicious Everything as-a-Service

EXPLOIT

66. Hackers Exploit Drupalgeddon2 to Install Backdoor
67. PoC Code Available for Microsoft Edge Remote Code Execution Bug

VULNERABILITY

68. Multiple Vulnerabilities Dicovered In RouterOS That Affected MikroTik Routers
69. Senate seeks internal memo on Google+ vulnerability
70. Slow disclosure of Google+ flaw draws attention of senators
71. PoC Code Available for Microsoft Edge Remote Code Execution Bug
72. .@Google Firebase's lack of #DatabaseSecurity and inadequate #BackendDevelopment led to #DataLeaks and vulnerabilities, including HospitalGown. Learn more about this
73. Network Time Protocol Bugs Sting Juniper Operating System
74. Juniper Networks provides dozens of fix for vulnerabilities in Junos OS
75. Audit Finds No Critical Flaws in Firefox Update System
76. [SingCERT] Alert on 12 Critical Microsoft Vulnerabilities for October 2018 Patch Tuesday
77. A patched #MikroTik router vulnerability amps up severity rating as @TenableSecurity researchers find new potential exploits with more critical consequences.
78. Juniper fixes 30+ vulnerabilities in its routing, switching devices
79. Adobe patches critical flaws in many of its software offerings
80. Update now! Microsoft fixes 49 bugs, 12 are critical
81. All WhatsApp Users Must Update: Zero Day Bug Found in WhatsApp
82. VMware issues advisory for a DoS vulnerability
83. .@TenableSecurity found new exploits of an already patched #MikroTik router vulnerability that could enable hackers to launch #RemoteCode execution attacks.
84. Juniper Patches Serious Flaws in Junos OS
85. Microsoft October Patch Tuesday fixed Win32k privilege vulnerability that used in targeted attacks
86. Four Critical Flaws Patched In Adobe Digital Edition

Region brief for 2018-10-11

ASIA

1. Cybersecurity Authorities Issue Alert About Publicly Available Hacking Tools
2. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
3. What would happen if an attack interrupted a country’s power supply?
4. Reaper Group Uses New Malware to Deploy RAT
5. Threats in the Netherlands

OCEANIA

6. Cybersecurity Authorities Issue Alert About Publicly Available Hacking Tools
7. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide

NORTH AMERICA

8. Cybersecurity Authorities Issue Alert About Publicly Available Hacking Tools
9. The Reality of Self-Driving Cars and the Regulatory Hurdles
10. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
11. The EU and the US have investigated on data breaches on the Google+
12. Researchers link tools used in NotPetya and Ukraine grid hacks
13. What would happen if an attack interrupted a country’s power supply?
14. Cops Arrest Infamous SIM Swapper Who Allegedly Stole $14 Million in Cryptocurrency
15. Microsoft October Patch Tuesday fixed Win32k privilege vulnerability that used in targeted attacks
16. Threats in the Netherlands
17. Italian Police Finally Identified 25-Year-old Italian Hacker who have Defaced NASA Websites
18. Canada-Based Restaurant Chain Hit with Malware Attack

SOUTH AMERICA

19. Ghostdns Attack Compromised Over 100K Routers

EUROPE

20. Exaramel Malware Links Industroyer ICS malware and NotPetya wiper
21. Cybersecurity Authorities Issue Alert About Publicly Available Hacking Tools
22. Adaptable, All-in-One Android Trojan Shows the Future of Malware
23. Talos: Android trojan resembling Play Store installs sophisticated spyware
24. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
25. Researchers link tools used in NotPetya and Ukraine grid hacks
26. What would happen if an attack interrupted a country’s power supply?
27. Reaper Group Uses New Malware to Deploy RAT
28. Worker perks flinger Sodexo pulls Engage website after malware smackdown
29. Defending Against Business Email Compromise Attacks
30. Heathrow Airport, the busiest airport in the United Kingdom, has been fined £120,000 (about $158,173) following a data breach caused
31. Threats in the Netherlands
32. New Gallmaker APT group eschews malware in cyber espionage campaigns
33. Italian Police Finally Identified 25-Year-old Italian Hacker who have Defaced NASA Websites
34. GPlayed Trojan - .Net playing with Google Market

AFRICA

Nil