APT report for 2018-10-14

TRANSNATIONAL / UNKNOWN

1. DDoS Attacks Hit Games Like Assassin’s Creed and Final Fantasy XIV
2. Security Affairs newsletter Round 184 – News of the week

CHINA

Nil

INDIA

Nil

NORTH KOREA

Nil

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

3. Security Affairs newsletter Round 184 – News of the week

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-10-14

WINDOWS

1. Microsoft fixed the Zero-Day for JET flaw, but the fix is incomplete
2. Microsoft patch for JET flaw zero-day is ‘incomplete,’ Windows still vulnerable
3. Expert released PoC Code Microsoft Edge Remote Code Execution flaw
4. Exploiting Windows Using Microsoft Office DDE Exploit (MACROLESS)

LINUX

Nil

UNIX

Nil

ANDROID

5. .@ThreatFabric researchers uncovered a #malware that uses overlay techniques to avoid detection. Learn from @lewisnic how this new #Androidmalware --

IOS

Nil

MACOS

Nil

Threat report for 2018-10-14

DATA BREACH & DATA LOSS

1. My Health Record privacy amendments 'woefully inadequate': Labor
2. #NetSpectre exploits speculative execution to leak data remotely via side-channel attacks. Learn how this #SecurityVulnerability affects the #cloud from expert
3. Web Hosting Provider Suffers Data Breach Second Time in a Year
4. Find out how #TLBleed abuses @Intel's HTT chip feature to leak data via TLB
5. Microsoft still has not completely solved the Microsoft JET database engine vulnerability
6. See how SearchLight identifies when your data is exposed, your brand is abused, or your company is mentioned on the
7. Pentagon Discloses Data Breach, More Than 30,000 Workers Have Affected
8. A @Google security audit uncovered a glitch in #GooglePlus that exposed data from nearly 500,000 accounts, causing the company to
9. PHASE 4 – INFORMATION GATHERING AND PLANNING Meet Eric, a control systems engineer working for a third-party integrator. He’s guy who uploaded

DENIAL-OF-SERVICE

10. DDoS Attacks Hit Games Like Assassin’s Creed and Final Fantasy XIV

MALVERTISING

Nil

PHISHING

Nil

WEB DEFACEMENT

Nil

BOTNET

Nil

RANSOMWARE

11. New @ESET research finds APT group dubbed #TeleBots was behind #Industroyer #malware attacks, #NotPetya #ransomware outbreaks, and a recent Exaramel

CRYPTOMINING & CRYPTOCURRENCIES

12. Fake Flash Updates pushing Malware to Inject XMRig Cryptocurrency Miners

MALWARE

13. Week in review: Enterprise cybersecurity PKIs, keeping your cloud malware-free
14. New @ESET research finds APT group dubbed #TeleBots was behind #Industroyer #malware attacks, #NotPetya #ransomware outbreaks, and a recent Exaramel
15. .@ThreatFabric researchers uncovered a #malware that uses overlay techniques to avoid detection. Learn from @lewisnic how this new #Androidmalware --
16. At the 2018 @RSAConference, researchers discussed the rise of stegware -- #malware that uses #steganography techniques to avoid detection. Learn
17. How a remote access #Trojan checks for
18. Fake Flash Updates pushing Malware to Inject XMRig Cryptocurrency Miners

EXPLOIT

19. Expert released PoC Code Microsoft Edge Remote Code Execution flaw
20. Exploiting Windows Using Microsoft Office DDE Exploit (MACROLESS)

VULNERABILITY

21. Microsoft fixed the Zero-Day for JET flaw, but the fix is incomplete
22. A2SV – SSL Vulnerability Analysis Tool
23. Microsoft patch for JET flaw zero-day is ‘incomplete,’ Windows still vulnerable
24. Microsoft still has not completely solved the Microsoft JET database engine vulnerability
25. Expert released PoC Code Microsoft Edge Remote Code Execution flaw

Region brief for 2018-10-14

ASIA

Nil

OCEANIA

1. My Health Record privacy amendments 'woefully inadequate': Labor

NORTH AMERICA

2. Security Affairs newsletter Round 184 – News of the week
3. Expert released PoC Code Microsoft Edge Remote Code Execution flaw
4. Pentagon Discloses Data Breach, More Than 30,000 Workers Have Affected

SOUTH AMERICA

Nil

EUROPE

5. Week in review: Enterprise cybersecurity PKIs, keeping your cloud malware-free
6. Web Hosting Provider Suffers Data Breach Second Time in a Year
7. A @Google security audit uncovered a glitch in #GooglePlus that exposed data from nearly 500,000 accounts, causing the company to

AFRICA

8. Web Hosting Provider Suffers Data Breach Second Time in a Year

Sector brief for 2018-10-14

HEALTHCARE

Nil

TRANSPORT

Nil

BANKING & FINANCE

1. Web Hosting Provider Suffers Data Breach Second Time in a Year
2. Security Affairs newsletter Round 184 – News of the week
3. Pentagon Discloses Data Breach, More Than 30,000 Workers Have Affected

INFORMATION & TELECOMMUNICATION

4. Security Affairs newsletter Round 184 – News of the week
5. Expert released PoC Code Microsoft Edge Remote Code Execution flaw
6. See how SearchLight identifies when your data is exposed, your brand is abused, or your company is mentioned on the
7. PHASE 4 – INFORMATION GATHERING AND PLANNING Meet Eric, a control systems engineer working for a third-party integrator. He’s guy who uploaded

FOOD

Nil

WATER

Nil

ENERGY

8. Week in review: Enterprise cybersecurity PKIs, keeping your cloud malware-free

GOVERNMENT & PUBLIC SERVICE

Nil

Daily brief for 2018-10-14

ASIA

Nil

WORLD

1. My Health Record privacy amendments 'woefully inadequate': Labor
2. Week in review: Enterprise cybersecurity PKIs, keeping your cloud malware-free
3. Web Hosting Provider Suffers Data Breach Second Time in a Year
4. Security Affairs newsletter Round 184 – News of the week
5. Expert released PoC Code Microsoft Edge Remote Code Execution flaw
6. Pentagon Discloses Data Breach, More Than 30,000 Workers Have Affected
7. A @Google security audit uncovered a glitch in #GooglePlus that exposed data from nearly 500,000 accounts, causing the company to

ATTACKS

8. My Health Record privacy amendments 'woefully inadequate': Labor
9. #NetSpectre exploits speculative execution to leak data remotely via side-channel attacks. Learn how this #SecurityVulnerability affects the #cloud from expert
10. Web Hosting Provider Suffers Data Breach Second Time in a Year
11. Find out how #TLBleed abuses @Intel's HTT chip feature to leak data via TLB
12. Microsoft still has not completely solved the Microsoft JET database engine vulnerability
13. See how SearchLight identifies when your data is exposed, your brand is abused, or your company is mentioned on the
14. Pentagon Discloses Data Breach, More Than 30,000 Workers Have Affected
15. A @Google security audit uncovered a glitch in #GooglePlus that exposed data from nearly 500,000 accounts, causing the company to
16. PHASE 4 – INFORMATION GATHERING AND PLANNING Meet Eric, a control systems engineer working for a third-party integrator. He’s guy who uploaded

THREATS

17. Microsoft fixed the Zero-Day for JET flaw, but the fix is incomplete
18. Week in review: Enterprise cybersecurity PKIs, keeping your cloud malware-free
19. A2SV – SSL Vulnerability Analysis Tool
20. New @ESET research finds APT group dubbed #TeleBots was behind #Industroyer #malware attacks, #NotPetya #ransomware outbreaks, and a recent Exaramel
21. .@ThreatFabric researchers uncovered a #malware that uses overlay techniques to avoid detection. Learn from @lewisnic how this new #Androidmalware --
22. Microsoft patch for JET flaw zero-day is ‘incomplete,’ Windows still vulnerable
23. At the 2018 @RSAConference, researchers discussed the rise of stegware -- #malware that uses #steganography techniques to avoid detection. Learn
24. Microsoft still has not completely solved the Microsoft JET database engine vulnerability
25. Expert released PoC Code Microsoft Edge Remote Code Execution flaw
26. How a remote access #Trojan checks for
27. Fake Flash Updates pushing Malware to Inject XMRig Cryptocurrency Miners

CRIME

28. Security Affairs newsletter Round 184 – News of the week
29. Expert released PoC Code Microsoft Edge Remote Code Execution flaw

POLITICS

30. Security Affairs newsletter Round 184 – News of the week
31. Pentagon Discloses Data Breach, More Than 30,000 Workers Have Affected

APT report for 2018-10-13

TRANSNATIONAL / UNKNOWN

Nil

CHINA

Nil

INDIA

Nil

NORTH KOREA

Nil

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

1. Security researchers found that Industroyer and NotPetya belong to the Russian hacker group

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-10-13

WINDOWS

1. Microsoft Fix for Windows JET Database Bug Not Perfect, Micropatch Available

LINUX

Nil

UNIX

Nil

ANDROID

2. GPlayed – New Malware Posed as Google Play App to Spy & Steal Data From Your Entire Android Phone

IOS

Nil

MACOS

Nil

Threat report for 2018-10-13

DATA BREACH & DATA LOSS

1. Pentagon Defense Department travel records data breach
2. A combination of #SecurityFlaws and inadequate back-end development of the @Google Firebase database led to #DataLeaks and #SecurityVulnerabilities including HospitalGown.
3. 'Only' 30 million accounts were compromised in Facebook hack
4. Researchers @proofpoint have been tracking a downloader dubbed #AdvisorsBot as a first-stage payload in campaigns since May 2018.
5. Facebook Clarifies Extent of Data Breach
6. An Assessment of Google's Data Leak
7. ArangoDB v3.3.18 releases: native multi-model database
8. Facebook Now Revealed Hackers Stolen 29 Million Facebook Users Personal Data
9. Microsoft Fix for Windows JET Database Bug Not Perfect, Micropatch Available
10. Breach of Pentagon travel records exposes defense personnel PII

DENIAL-OF-SERVICE

Nil

MALVERTISING

Nil

PHISHING

11. Hackers launched @netflix #phishing attacks by obtaining TLS certificates. Learn how hackers mimic popular websites to spoof users and steal
12. This skyscraper reminds me of those really long ANSI art BBS login screens. Cc: @sixteencolors @blocktronics @velikani

WEB DEFACEMENT

Nil

BOTNET

Nil

RANSOMWARE

13. [SingCERT] Updated Advisory on Ransomware
14. APT group called #TeleBots linked to #Industroyer #malware and #NotPetya #ransomware, according to @ESET researchers. By @MaddieBacon11

CRYPTOMINING & CRYPTOCURRENCIES

15. Criminals' Cryptocurrency Addiction Continues
16. .@alienvault researchers recently discovered #MassMiner, a #cryptocurrency mining #malware that has the ability to infect systems across the web. Discover
17. Cryptocurrency Miners trick the user through Fake Flash Updates
18. Blockchain and Healthcare in Today’s World

MALWARE

19. GPlayed – New Malware Posed as Google Play App to Spy & Steal Data From Your Entire Android Phone
20. Researchers @proofpoint have been tracking a downloader dubbed #AdvisorsBot as a first-stage payload in campaigns since May 2018.
21. .@alienvault researchers recently discovered #MassMiner, a #cryptocurrency mining #malware that has the ability to infect systems across the web. Discover
22. Hackers use Googlebot in mining malware attacks
23. Researchers at @TrendMicro found a new strain of #malware -- dubbed #FacexWorm -- that targets users through a malicious #ChromeExtension.
24. APT group called #TeleBots linked to #Industroyer #malware and #NotPetya #ransomware, according to @ESET researchers. By @MaddieBacon11

EXPLOIT

Nil

VULNERABILITY

25. Now this might be going out on a limb, but here's how a branch.io bug left '685 million' netizens open to website hacks
26. Review Shows Glaring Flaws In Xiongmai IoT Devices
27. Microsoft JET vulnerability still open to attacks, despite recent patch
28. DOM-based XSS Vulnerability Affected 685 Million Users of Tinder, Shopify, Western Union, and Imgur
29. A patched #MikroTik router vulnerability amps up severity rating as @TenableSecurity researchers find new potential exploits with more critical consequences.
30. Microsoft Fix for Windows JET Database Bug Not Perfect, Micropatch Available
31. Vulnerabilities affect Shopify, Tinder and many other sites

Region brief for 2018-10-13

ASIA

1. Review Shows Glaring Flaws In Xiongmai IoT Devices

OCEANIA

2. Security researchers found that Industroyer and NotPetya belong to the Russian hacker group

NORTH AMERICA

3. Pentagon Defense Department travel records data breach

SOUTH AMERICA

Nil

EUROPE

4. Security researchers found that Industroyer and NotPetya belong to the Russian hacker group

AFRICA

Nil

Sector brief for 2018-10-13

HEALTHCARE

1. Blockchain and Healthcare in Today’s World

TRANSPORT

Nil

BANKING & FINANCE

2. Pentagon Defense Department travel records data breach
3. Cryptocurrency Miners trick the user through Fake Flash Updates
4. Hackers use Googlebot in mining malware attacks

INFORMATION & TELECOMMUNICATION

5. This skyscraper reminds me of those really long ANSI art BBS login screens. Cc: @sixteencolors @blocktronics @velikani
6. 'Only' 30 million accounts were compromised in Facebook hack
7. Facebook Clarifies Extent of Data Breach
8. Facebook Now Revealed Hackers Stolen 29 Million Facebook Users Personal Data

FOOD

Nil

WATER

Nil

ENERGY

Nil

GOVERNMENT & PUBLIC SERVICE

Nil

Daily brief for 2018-10-13

ASIA

1. Review Shows Glaring Flaws In Xiongmai IoT Devices

WORLD

2. Pentagon Defense Department travel records data breach
3. Security researchers found that Industroyer and NotPetya belong to the Russian hacker group

ATTACKS

4. Pentagon Defense Department travel records data breach
5. Hackers launched @netflix #phishing attacks by obtaining TLS certificates. Learn how hackers mimic popular websites to spoof users and steal
6. This skyscraper reminds me of those really long ANSI art BBS login screens. Cc: @sixteencolors @blocktronics @velikani
7. A combination of #SecurityFlaws and inadequate back-end development of the @Google Firebase database led to #DataLeaks and #SecurityVulnerabilities including HospitalGown.
8. 'Only' 30 million accounts were compromised in Facebook hack
9. Researchers @proofpoint have been tracking a downloader dubbed #AdvisorsBot as a first-stage payload in campaigns since May 2018.
10. Facebook Clarifies Extent of Data Breach
11. An Assessment of Google's Data Leak
12. ArangoDB v3.3.18 releases: native multi-model database
13. Facebook Now Revealed Hackers Stolen 29 Million Facebook Users Personal Data
14. Microsoft Fix for Windows JET Database Bug Not Perfect, Micropatch Available
15. Breach of Pentagon travel records exposes defense personnel PII

THREATS

16. GPlayed – New Malware Posed as Google Play App to Spy & Steal Data From Your Entire Android Phone
17. [SingCERT] Updated Advisory on Ransomware
18. Researchers @proofpoint have been tracking a downloader dubbed #AdvisorsBot as a first-stage payload in campaigns since May 2018.
19. Now this might be going out on a limb, but here's how a branch.io bug left '685 million' netizens open to website hacks
20. Review Shows Glaring Flaws In Xiongmai IoT Devices
21. Criminals' Cryptocurrency Addiction Continues
22. .@alienvault researchers recently discovered #MassMiner, a #cryptocurrency mining #malware that has the ability to infect systems across the web. Discover
23. Cryptocurrency Miners trick the user through Fake Flash Updates
24. Microsoft JET vulnerability still open to attacks, despite recent patch
25. DOM-based XSS Vulnerability Affected 685 Million Users of Tinder, Shopify, Western Union, and Imgur
26. A patched #MikroTik router vulnerability amps up severity rating as @TenableSecurity researchers find new potential exploits with more critical consequences.
27. Blockchain and Healthcare in Today’s World
28. Microsoft Fix for Windows JET Database Bug Not Perfect, Micropatch Available
29. Hackers use Googlebot in mining malware attacks
30. Vulnerabilities affect Shopify, Tinder and many other sites
31. Researchers at @TrendMicro found a new strain of #malware -- dubbed #FacexWorm -- that targets users through a malicious #ChromeExtension.
32. APT group called #TeleBots linked to #Industroyer #malware and #NotPetya #ransomware, according to @ESET researchers. By @MaddieBacon11

CRIME

33. ArangoDB v3.3.18 releases: native multi-model database
34. Facebook Now Revealed Hackers Stolen 29 Million Facebook Users Personal Data

POLITICS

35. Pentagon Defense Department travel records data breach
36. GPlayed – New Malware Posed as Google Play App to Spy & Steal Data From Your Entire Android Phone
37. Security researchers found that Industroyer and NotPetya belong to the Russian hacker group

APT report for 2018-10-12

TRANSNATIONAL / UNKNOWN

1. Cyber News Rundown: Windows 10 Update Deletes Files
2. No Cookies for CartThief, a New Magecart Variant
3. Payment skimmers sneaking on to websites via third party code
4. Gallmaker Hacking Group Attack Government, Military, and Defense Sectors Using Publicly Available Hacking Tools

CHINA

5. Five Eyes Intelligence agencies warn of popular hacking tools

INDIA

Nil

NORTH KOREA

6. Threat Brief: FASTCash ATM Cash Out Tactics

PAKISTAN

Nil

VIETNAM

Nil

IRAN

7. MuddyWater APT Latest Activity

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

Nil

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-10-12

WINDOWS

1. Windows 10 October 2018 Update: Release – Halt – Bug Identified – Fix!
2. Cyber News Rundown: Windows 10 Update Deletes Files
3. Five Eyes Intelligence agencies warn of popular hacking tools
4. PoC exploit for Windows Shell RCE released
5. Call of Duty: Black Ops 4 welcomes launch with new Blackout and Zombies trailers
6. Cryptomining software is hidden as Flash update

LINUX

7. Five Eyes Intelligence agencies warn of popular hacking tools

UNIX

Nil

ANDROID

8. Five Eyes Intelligence agencies warn of popular hacking tools
9. .@ThreatFabric researchers uncovered an #Android malware, #MysteryBot, which uses overlay attacks to avoid detection. Learn how this #malware affects @Google's
10. 360 Total Security has intercepted more than 50,000 Clipboard Wallet Hijacker attacks, helping users recover over 40 million
11. This Trojan masquerades as Google Play to hide on your phone in plain sight
12. Fortnite for Android Released, But Make Sure You Don't Download Malware

IOS

Nil

MACOS

13. Five Eyes Intelligence agencies warn of popular hacking tools
14. Vulnerability allows hijacking of software installed in macOS

Threat report for 2018-10-12

DATA BREACH & DATA LOSS

1. Facebook Data Breach Update: attackers accessed data of 29 Million users
2. Pentagon Reveals Cyber Breach of Travel Records
3. NEW BETABOT CAMPAIGN UNDER THE MICROSCOPE
4. Detecting Malicious Campaigns with Machine Learning
5. Fitmetrix fitness software company may have exposed millions of customer records
6. Fake browser update seeks to compromise more MikroTik routers
7. Phishing Campaign uses Hijacked Emails to Deliver URSNIF by Replying to Ongoing Threads
8. #TLBleed abuses @Intel's HTT chip feature to leak data and obtain sensitive memory information. Learn more about this new side-channel
9. Mindbody’s FitMetrix leaked millions of Users’ Personal Details
10. Is Google Sync a Vector for Data Breaches?
11. Facebook Revises Data Breach Impact Downward, Provides New Details
12. How #livechatsoftware leak personal #employeedata?
13. ​Labor seeks updated My Health Record legislation to prevent privatisation

DENIAL-OF-SERVICE

14. 'The Nuke Loop' is Fallout 76's endgame, lead designer explains
15. UK's NCSC to monitor internet routing to stop DDoS and hijacks

MALVERTISING

Nil

PHISHING

16. Threat Announcement: Phishing Sites Detected on Emoji Domains
17. Phishing Campaign uses Hijacked Emails to Deliver URSNIF by Replying to Ongoing Threads
18. An Examination of a Phishing Kit Dubbed Luis
19. Do you know the top myths and facts of #mobile #phishing? If not, don't worry, we've compiled a list of
20. Largest Cyber Attack Against Iceland Driven by Complex Phishing Scheme
21. Spring Security With Radius Login

WEB DEFACEMENT

Nil

BOTNET

22. Call of Duty: Black Ops 4 welcomes launch with new Blackout and Zombies trailers

RANSOMWARE

23. The Week in Ransomware - October 12th 2018 - NotPetya, GandCrab, and More
24. New @ESET research finds APT group dubbed #TeleBots was behind #Industroyer #malware attacks, #NotPetya #ransomware outbreaks, and a recent Exaramel
25. GandCrab ransomware operators team up with crypter service
26. GandCrab Ransomware Partners With Crypter Service
27. This is how much the WannaCry ransomware attack cost the NHS

CRYPTOMINING & CRYPTOCURRENCIES

28. Almost 12K MikroTik Routers Are Hunting Around for Cryptojacking Opportunities
29. Three Industries That Blockchain Will Impact the Most
30. Obfuscated JavaScript Cryptominer
31. In 2008, @nokia dominated the mobile phone universe. Four years later, the company was on the verge of extinction. Discover
32. 360 Total Security has intercepted more than 50,000 Clipboard Wallet Hijacker attacks, helping users recover over 40 million
33. Cryptomining software is hidden as Flash update

MALWARE

34. Detecting Malicious Campaigns with Machine Learning
35. Fake Adobe Flash Updates Hide Malicious Crypto Miners
36. .@ThreatFabric researchers uncovered an #Android malware, #MysteryBot, which uses overlay attacks to avoid detection. Learn how this #malware affects @Google's
37. New @ESET research finds APT group dubbed #TeleBots was behind #Industroyer #malware attacks, #NotPetya #ransomware outbreaks, and a recent Exaramel
38. Researchers at the 2018 @RSAConference discussed #stegware: @malware that uses #steganography. Discover how this works with expert @lewisnic.
39. Hackers targeting Drupal vulnerabilities to install the Shellbot Backdoor
40. Researchers at Cisco Talos (@TalosSecurity) recently discovered #GravityRAT, a remote access #Trojan. Discover how this RAT can check for
41. GPlayed trojan seeks to play users out of their data
42. This Trojan masquerades as Google Play to hide on your phone in plain sight
43. Marion County Jail’s Reporting System Fall Prey to Virus Attack
44. Some 10% of user-reported emails malicious
45. ThreatFabric on stage @bsidesdelft talking about the evolution of
46. Fortnite for Android Released, But Make Sure You Don't Download Malware

EXPLOIT

47. PoC exploit for Windows Shell RCE released

VULNERABILITY

48. Windows 10 October 2018 Update: Release – Halt – Bug Identified – Fix!
49. FDA Issues Warning about Security Vulnerabilities in Pacemaker Programmers
50. Microsoft Zero-Day Patch for JET Bug Incomplete, Claims Firm
51. Proof-of-Concept Available for Edge Remote Code Execution Vulnerability
52. Facebook States 30 Million People Affected by Last Month's "View As" Bug
53. Learn how the #NetSpectre vulnerability affects the #cloud from expert Ed Moyle of @securitycurve.
54. What's keeping the #CISO up at night? The vulnerabilities caused by third-party vendors, finds @forrester research. 65% of organizations say
55. Micropatch Released to Correct Partially Fixed JET DB Engine RCE Vulnerability
56. FDA warns users of cyber vulnerability in pacemaker programmers
57. Ryan Kalember, Senior VP of #Cybersecurity Strategy at Proofpoint, discussing why humans are a company’s biggest cybersecurity vulnerability.
58. Sony Patched Three Critical Vulnerabilities In Smart TV Bravia
59. Hackers targeting Drupal vulnerabilities to install the Shellbot Backdoor
60. Now, watch this... Network time protocol bugs sting Juniper operating system
61. DOM-XSS Bug Affecting Tinder, Shopify, Yelp, and More
62. Facebook's WhatsApp says it has fixed a video call security bug that let hackers hijack accounts.
63. Vulnerability allows hijacking of software installed in macOS
64. Senator asked Google to explain why the revealing of the Google+ vulnerability was postponed
65. Proof-of-concept code published for Microsoft Edge remote code execution bug

Region brief for 2018-10-12

ASIA

1. Cyber News Rundown: Windows 10 Update Deletes Files
2. Threat Brief: FASTCash ATM Cash Out Tactics
3. Five Eyes Intelligence agencies warn of popular hacking tools
4. 360 Total Security has intercepted more than 50,000 Clipboard Wallet Hijacker attacks, helping users recover over 40 million

OCEANIA

5. Five Eyes Intelligence agencies warn of popular hacking tools
6. ​Labor seeks updated My Health Record legislation to prevent privatisation

NORTH AMERICA

7. Facebook Data Breach Update: attackers accessed data of 29 Million users
8. Pentagon Reveals Cyber Breach of Travel Records
9. FDA Issues Warning about Security Vulnerabilities in Pacemaker Programmers
10. Detecting Malicious Campaigns with Machine Learning
11. Fake browser update seeks to compromise more MikroTik routers
12. Five Eyes Intelligence agencies warn of popular hacking tools
13. 360 Total Security has intercepted more than 50,000 Clipboard Wallet Hijacker attacks, helping users recover over 40 million
14. DOM-XSS Bug Affecting Tinder, Shopify, Yelp, and More
15. Senator asked Google to explain why the revealing of the Google+ vulnerability was postponed

SOUTH AMERICA

Nil

EUROPE

16. Facebook Data Breach Update: attackers accessed data of 29 Million users
17. Almost 12K MikroTik Routers Are Hunting Around for Cryptojacking Opportunities
18. Cyber News Rundown: Windows 10 Update Deletes Files
19. Fake browser update seeks to compromise more MikroTik routers
20. An Examination of a Phishing Kit Dubbed Luis
21. Five Eyes Intelligence agencies warn of popular hacking tools
22. UK's NCSC to monitor internet routing to stop DDoS and hijacks
23. Largest Cyber Attack Against Iceland Driven by Complex Phishing Scheme

AFRICA

Nil

Sector brief for 2018-10-12

HEALTHCARE

1. FDA warns users of cyber vulnerability in pacemaker programmers

TRANSPORT

2. Five Eyes Intelligence agencies warn of popular hacking tools

BANKING & FINANCE

3. Pentagon Reveals Cyber Breach of Travel Records
4. No Cookies for CartThief, a New Magecart Variant
5. An Examination of a Phishing Kit Dubbed Luis
6. Mindbody’s FitMetrix leaked millions of Users’ Personal Details
7. Threat Brief: FASTCash ATM Cash Out Tactics
8. Five Eyes Intelligence agencies warn of popular hacking tools
9. Payment skimmers sneaking on to websites via third party code
10. 360 Total Security has intercepted more than 50,000 Clipboard Wallet Hijacker attacks, helping users recover over 40 million
11. This is how much the WannaCry ransomware attack cost the NHS
12. ThreatFabric on stage @bsidesdelft talking about the evolution of

INFORMATION & TELECOMMUNICATION

13. Facebook Data Breach Update: attackers accessed data of 29 Million users
14. Detecting Malicious Campaigns with Machine Learning
15. Almost 12K MikroTik Routers Are Hunting Around for Cryptojacking Opportunities
16. Cyber News Rundown: Windows 10 Update Deletes Files
17. Facebook States 30 Million People Affected by Last Month's "View As" Bug
18. Fake browser update seeks to compromise more MikroTik routers
19. An Examination of a Phishing Kit Dubbed Luis
20. Do you know the top myths and facts of #mobile #phishing? If not, don't worry, we've compiled a list of
21. Facebook Revises Data Breach Impact Downward, Provides New Details
22. Facebook's WhatsApp says it has fixed a video call security bug that let hackers hijack accounts.
23. ThreatFabric on stage @bsidesdelft talking about the evolution of

FOOD

Nil

WATER

Nil

ENERGY

Nil

GOVERNMENT & PUBLIC SERVICE

24. Facebook Data Breach Update: attackers accessed data of 29 Million users

Daily brief for 2018-10-12

ASIA

1. Cyber News Rundown: Windows 10 Update Deletes Files
2. Threat Brief: FASTCash ATM Cash Out Tactics
3. Five Eyes Intelligence agencies warn of popular hacking tools
4. 360 Total Security has intercepted more than 50,000 Clipboard Wallet Hijacker attacks, helping users recover over 40 million

WORLD

5. Facebook Data Breach Update: attackers accessed data of 29 Million users
6. Pentagon Reveals Cyber Breach of Travel Records
7. FDA Issues Warning about Security Vulnerabilities in Pacemaker Programmers
8. Detecting Malicious Campaigns with Machine Learning
9. Almost 12K MikroTik Routers Are Hunting Around for Cryptojacking Opportunities
10. Cyber News Rundown: Windows 10 Update Deletes Files
11. Fake browser update seeks to compromise more MikroTik routers
12. An Examination of a Phishing Kit Dubbed Luis
13. Five Eyes Intelligence agencies warn of popular hacking tools
14. 360 Total Security has intercepted more than 50,000 Clipboard Wallet Hijacker attacks, helping users recover over 40 million
15. DOM-XSS Bug Affecting Tinder, Shopify, Yelp, and More
16. UK's NCSC to monitor internet routing to stop DDoS and hijacks
17. Largest Cyber Attack Against Iceland Driven by Complex Phishing Scheme
18. ​Labor seeks updated My Health Record legislation to prevent privatisation
19. Senator asked Google to explain why the revealing of the Google+ vulnerability was postponed

ATTACKS

20. Facebook Data Breach Update: attackers accessed data of 29 Million users
21. Pentagon Reveals Cyber Breach of Travel Records
22. NEW BETABOT CAMPAIGN UNDER THE MICROSCOPE
23. Detecting Malicious Campaigns with Machine Learning
24. Fitmetrix fitness software company may have exposed millions of customer records
25. Fake browser update seeks to compromise more MikroTik routers
26. Threat Announcement: Phishing Sites Detected on Emoji Domains
27. Phishing Campaign uses Hijacked Emails to Deliver URSNIF by Replying to Ongoing Threads
28. #TLBleed abuses @Intel's HTT chip feature to leak data and obtain sensitive memory information. Learn more about this new side-channel
29. An Examination of a Phishing Kit Dubbed Luis
30. Mindbody’s FitMetrix leaked millions of Users’ Personal Details
31. Is Google Sync a Vector for Data Breaches?
32. Do you know the top myths and facts of #mobile #phishing? If not, don't worry, we've compiled a list of
33. Facebook Revises Data Breach Impact Downward, Provides New Details
34. How #livechatsoftware leak personal #employeedata?
35. Largest Cyber Attack Against Iceland Driven by Complex Phishing Scheme
36. Spring Security With Radius Login
37. ​Labor seeks updated My Health Record legislation to prevent privatisation

THREATS

38. Windows 10 October 2018 Update: Release – Halt – Bug Identified – Fix!
39. FDA Issues Warning about Security Vulnerabilities in Pacemaker Programmers
40. Detecting Malicious Campaigns with Machine Learning
41. Almost 12K MikroTik Routers Are Hunting Around for Cryptojacking Opportunities
42. The Week in Ransomware - October 12th 2018 - NotPetya, GandCrab, and More
43. Microsoft Zero-Day Patch for JET Bug Incomplete, Claims Firm
44. Three Industries That Blockchain Will Impact the Most
45. Proof-of-Concept Available for Edge Remote Code Execution Vulnerability
46. Facebook States 30 Million People Affected by Last Month's "View As" Bug
47. Fake Adobe Flash Updates Hide Malicious Crypto Miners
48. Learn how the #NetSpectre vulnerability affects the #cloud from expert Ed Moyle of @securitycurve.
49. What's keeping the #CISO up at night? The vulnerabilities caused by third-party vendors, finds @forrester research. 65% of organizations say
50. Micropatch Released to Correct Partially Fixed JET DB Engine RCE Vulnerability
51. Obfuscated JavaScript Cryptominer
52. FDA warns users of cyber vulnerability in pacemaker programmers
53. In 2008, @nokia dominated the mobile phone universe. Four years later, the company was on the verge of extinction. Discover
54. .@ThreatFabric researchers uncovered an #Android malware, #MysteryBot, which uses overlay attacks to avoid detection. Learn how this #malware affects @Google's
55. New @ESET research finds APT group dubbed #TeleBots was behind #Industroyer #malware attacks, #NotPetya #ransomware outbreaks, and a recent Exaramel
56. Ryan Kalember, Senior VP of #Cybersecurity Strategy at Proofpoint, discussing why humans are a company’s biggest cybersecurity vulnerability.
57. Researchers at the 2018 @RSAConference discussed #stegware: @malware that uses #steganography. Discover how this works with expert @lewisnic.
58. Sony Patched Three Critical Vulnerabilities In Smart TV Bravia
59. Hackers targeting Drupal vulnerabilities to install the Shellbot Backdoor
60. 360 Total Security has intercepted more than 50,000 Clipboard Wallet Hijacker attacks, helping users recover over 40 million
61. GandCrab ransomware operators team up with crypter service
62. Now, watch this... Network time protocol bugs sting Juniper operating system
63. GandCrab Ransomware Partners With Crypter Service
64. This is how much the WannaCry ransomware attack cost the NHS
65. Researchers at Cisco Talos (@TalosSecurity) recently discovered #GravityRAT, a remote access #Trojan. Discover how this RAT can check for
66. GPlayed trojan seeks to play users out of their data
67. This Trojan masquerades as Google Play to hide on your phone in plain sight
68. DOM-XSS Bug Affecting Tinder, Shopify, Yelp, and More
69. Facebook's WhatsApp says it has fixed a video call security bug that let hackers hijack accounts.
70. Marion County Jail’s Reporting System Fall Prey to Virus Attack
71. Some 10% of user-reported emails malicious
72. Cryptomining software is hidden as Flash update
73. ThreatFabric on stage @bsidesdelft talking about the evolution of
74. Vulnerability allows hijacking of software installed in macOS
75. Fortnite for Android Released, But Make Sure You Don't Download Malware
76. Senator asked Google to explain why the revealing of the Google+ vulnerability was postponed
77. Proof-of-concept code published for Microsoft Edge remote code execution bug

CRIME

78. Facebook Data Breach Update: attackers accessed data of 29 Million users
79. Facebook States 30 Million People Affected by Last Month's "View As" Bug
80. Fake browser update seeks to compromise more MikroTik routers
81. Threat Brief: FASTCash ATM Cash Out Tactics
82. Hackers targeting Drupal vulnerabilities to install the Shellbot Backdoor
83. 360 Total Security has intercepted more than 50,000 Clipboard Wallet Hijacker attacks, helping users recover over 40 million
84. PoC exploit for Windows Shell RCE released
85. DOM-XSS Bug Affecting Tinder, Shopify, Yelp, and More
86. UK's NCSC to monitor internet routing to stop DDoS and hijacks
87. Largest Cyber Attack Against Iceland Driven by Complex Phishing Scheme

POLITICS

Nil

APT report for 2018-10-11

TRANSNATIONAL / UNKNOWN

1. Magecart Card-Stealing Gang Hits 'Shopper Approved' Plug-In
2. Microsoft October Patch Tuesday fixed Win32k privilege vulnerability that used in targeted attacks
3. New Gallmaker APT group eschews malware in cyber espionage campaigns

CHINA

4. Cybersecurity Authorities Issue Alert About Publicly Available Hacking Tools
5. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
6. Threats in the Netherlands

INDIA

7. The Reality of Self-Driving Cars and the Regulatory Hurdles

NORTH KOREA

8. Reaper Group Uses New Malware to Deploy RAT
9. Threats in the Netherlands

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

10. Threats in the Netherlands

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

11. Exaramel Malware Links Industroyer ICS malware and NotPetya wiper
12. Researchers link tools used in NotPetya and Ukraine grid hacks
13. What would happen if an attack interrupted a country’s power supply?
14. Threats in the Netherlands

SERBIA

Nil

UKRAINE

15. Threats in the Netherlands

Platform report for 2018-10-11

WINDOWS

1. Exaramel Malware Links Industroyer ICS malware and NotPetya wiper
2. Cybersecurity Authorities Issue Alert About Publicly Available Hacking Tools
3. PoC Code Available for Microsoft Edge Remote Code Execution Bug
4. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
5. Researchers link tools used in NotPetya and Ukraine grid hacks
6. Fake Flash Updaters Push Cryptocurrency Miners
7. Adobe patches critical flaws in many of its software offerings
8. Qihoo 360’s precise analysis of ransomware for September
9. Microsoft October Patch Tuesday fixed Win32k privilege vulnerability that used in targeted attacks
10. New Gallmaker APT group eschews malware in cyber espionage campaigns
11. GPlayed Trojan - .Net playing with Google Market
12. Avast 2019: Extends Artificial Intelligence Technology to Block Advanced Phishing Attacks for Enhanced Consumer Security
13. JSRAT – Secret Command and Control Channel Backdoor to Control Victims Machine Using JavaScript

LINUX

14. Exaramel Malware Links Industroyer ICS malware and NotPetya wiper
15. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
16. Adobe patches critical flaws in many of its software offerings
17. JSRAT – Secret Command and Control Channel Backdoor to Control Victims Machine Using JavaScript

UNIX

Nil

ANDROID

18. GPlayed Android Trojan Can Wipe Your Device, Steal Data, Make Calls, Send SMS
19. Adaptable, All-in-One Android Trojan Shows the Future of Malware
20. Talos: Android trojan resembling Play Store installs sophisticated spyware
21. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
22. GPlayed trojan – .Net playing with Google Market
23. New Android Trojan Gplayed Adapts to Attacker's Needs
24. All WhatsApp Users Must Update: Zero Day Bug Found in WhatsApp
25. GPlayed Trojan - .Net playing with Google Market
26. A simple videocall could compromise your WhatsApp account

IOS

27. Talos: Android trojan resembling Play Store installs sophisticated spyware
28. All WhatsApp Users Must Update: Zero Day Bug Found in WhatsApp
29. A simple videocall could compromise your WhatsApp account

MACOS

30. AA18-284A: Publicly Available Tools Seen in Cyber Incidents Worldwide
31. Adobe patches critical flaws in many of its software offerings