APT report for 2018-10-15

TRANSNATIONAL / UNKNOWN

1. New Gallmaker APT group eschews malware in cyber espionage campaigns
2. A week in security (October 8 – 14)
3. Gallmaker - Threat Group Targeting Governments and Militaries
4. Gallmaker threat group evades detection by living off the land
5. Stopping Hidden Threats: How to Defend Against Fileless Attacks

CHINA

Nil

INDIA

Nil

NORTH KOREA

6. Nintendo Switch Diablo III bundle launches November 2

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

7. TeleBots APT Group - Links to Industroyer, NotPetya and BlackEnergy
8. Russia-linked BlackEnergy backed new cyber attacks on Ukraine’s state bodies
9. Octopus-infested seas of Central Asia

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-10-15

WINDOWS

1. Flash Updater Adds Cryptocurrency Miner
2. New Gallmaker APT group eschews malware in cyber espionage campaigns
3. Fake Adobe update really *does* update Flash (while also installing cryptominer)
4. September 2018’s Most Wanted Malware: Cryptomining Attacks Against Apple Devices On The Rise
5. Fake Adobe update really *does* update Flash (while also installing cryptominer)
6. Octopus-infested seas of Central Asia

LINUX

Nil

UNIX

Nil

ANDROID

7. September 2018’s Most Wanted Malware: Cryptomining Attacks Against Apple Devices On The Rise
8. Octopus-infested seas of Central Asia
9. #Nymaim and #BankBot #Anubis PL campaign hxxp://przelewy24[.]ml/ hxxp://faktura24[.]cf/ SHA256: 4cb0b471a2132a747abf78214fbdbf0e8d7f44857996117bdbb266d42a277970 C2: bilagoong[.]tk @ThreatFabric @virqdroid @LukasStefanko
10. Android Apps Pretend to Mine Unmineable CryptoCurrencies to Just Show Ads
11. Google to Encrypt Android Cloud Backups With Your Lock Screen Password

IOS

12. 400 Percent Increase in Cryptocurrency Mining Attacks Against iOS Devices
13. Apple VoiceOver iOS Vulnerability Permits Hacker Access To User Photos
14. iPhone a Growing Target of Crypto-Mining Attacks
15. Apple VoiceOver iOS vulnerability permits hacker access to user photos
16. September 2018’s Most Wanted Malware: Cryptomining Attacks Against Apple Devices On The Rise

MACOS

Nil

Threat report for 2018-10-15

DATA BREACH & DATA LOSS

1. Facebook Hack Update – 30 Million Affected; More Details Exposed; No ID Protection
2. Malware Campaign Distributes Data Stealer Trojan/RAT, Circumvents Anti-Malware
3. Up to 35 Million 2018 Voter Records For Sale on Hacking Forum
4. US voter records from 19 states sold on hacking forum
5. Tens of Millions of U.S. Voter Records for Sale
6. Pentagon Defense Department travel records data breach
7. Did Jamal Khashoggi’s Apple Watch record his murder at Saudi consulate? Probably not
8. New Gallmaker APT group eschews malware in cyber espionage campaigns
9. Microsoft Incompletely Patches JET Database Vulnerability
10. Old dog, new tricks – Analysing new RTF-based campaign distributing Agent Tesla, Loki with PyREbox
11. Millions of Voter Records Found for Sale on the Dark Web
12. Pentagon reveals cyber breach of travel records
13. Pentagon Employee Data Breach, An Eye-Opener
14. Facebook opens up about data breach details
15. Facebook data breach: Victims will not be offered free identity theft protection
16. A flaw in @Google Firebase #DatabaseSecurity allowed hackers to bypass security and leak data. Learn more about this #SecurityFlaw and
17. Iceland hit by Biggest Cyber Attack on Record
18. Scottish Ambulance Service Exposed Employees’ Data Online
19. Pentagon Staff Hit by Major Data Breach
20. FitMetrix data exposed on unprotected Elasticsearch servers
21. Pentagon Data Breach Exposes up to 30,000 Travel Records
22. Iceland's largest phishing campaign imitated police
23. #Nymaim and #BankBot #Anubis PL campaign hxxp://przelewy24[.]ml/ hxxp://faktura24[.]cf/ SHA256: 4cb0b471a2132a747abf78214fbdbf0e8d7f44857996117bdbb266d42a277970 C2: bilagoong[.]tk @ThreatFabric @virqdroid @LukasStefanko
24. Old dog, new tricks - Analysing new RTF-based campaign distributing Agent Tesla, Loki with PyREbox
25. A Russian cyber vigilante is patching outdated MikroTik routers exposed online
26. FitMetrix Unprotected Passwordless Database Exposed Millions of User​ Data
27. Stringent password rules lower risk of personal data breaches
28. Branch.io Flaws Exposed Tinder, Shopify, Yelp Users to XSS Attacks

DENIAL-OF-SERVICE

Nil

MALVERTISING

Nil

PHISHING

29. Create an email phishing test to minimize attack vectors
30. Learn how we are using #MachineLearning to detect mobile #phishing attacks with @thepacketrat and @dyngnosis: https://okt.to/W29vsS @PhishingAi @arstechnica
31. Learn how hackers launched #phishing attacks against @netflix users with expert Michael Cobb of @thehairyITdog
32. Hackers could use emoji domains to spread phishing attacks
33. Iceland's largest phishing campaign imitated police
34. Stringent password rules lower risk of personal data breaches
35. According to #GroupIB experts, online market for counterfeit goods in Russia has reached $1,5 billion, while the number of phishing
36. Google to Encrypt Android Cloud Backups With Your Lock Screen Password

WEB DEFACEMENT

Nil

BOTNET

Nil

RANSOMWARE

37. Small businesses repeatedly falling victim to ransomware - Kaspersky
38. Ransomware hits computer networks of North Carolina water utility
39. Un nouveau rapport montre que les attaques par ransomware ont diminué au premier semestre 2018. Les pirates se tournent vers

CRYPTOMINING & CRYPTOCURRENCIES

40. 400 Percent Increase in Cryptocurrency Mining Attacks Against iOS Devices
41. Flash Updater Adds Cryptocurrency Miner
42. iPhone a Growing Target of Crypto-Mining Attacks
43. Economist Nouriel Roubini: Blockchain and bitcoin are the world’s biggest scams
44. Fake Adobe update really *does* update Flash (while also installing cryptominer)
45. Cryptomining Malware Infects Computers via Fake Adobe Updates
46. September 2018’s Most Wanted Malware: Cryptomining Attacks Against Apple Devices On The Rise
47. Fake Adobe update really *does* update Flash (while also installing cryptominer)
48. 'Flash update' scam serves up legit software, but with a side of cryptominer
49. How a #cryptocurrency mining #malware infects systems
50. What are blockchain’s smart contracts? And how to secure them
51. Android Apps Pretend to Mine Unmineable CryptoCurrencies to Just Show Ads
52. SpankChain hacker steals the virtual currency and returns stolen ethereum

MALWARE

53. Malware Campaign Distributes Data Stealer Trojan/RAT, Circumvents Anti-Malware
54. New Gallmaker APT group eschews malware in cyber espionage campaigns
55. Octopus Trojan exploits Telegram ban fears to snag diplomatic targets across Asia
56. At the 2018 @RSAConference, researchers discussed the rise of stegware -- #malware that uses #steganography techniques to avoid detection. Learn
57. Cryptomining Malware Infects Computers via Fake Adobe Updates
58. September 2018’s Most Wanted Malware: Cryptomining Attacks Against Apple Devices On The Rise
59. #Mobile #malware is on the rise. With mobile devices, hackers are able to access data far more sensitive than what
60. .@TrendMicro researchers discovered #FacexWorm, a #malware that uses a #ChromeExtension and @Facebook Messenger to spread. Learn which users are at
61. How does the MnuBot banking Trojan use unusual C&C servers?
62. How a #cryptocurrency mining #malware infects systems
63. @ThreatFabric Gaetan van Diemen showed us the actual situation and future predictions of Mobile Banking Malware. Thx for that awesome
64. Godzilla Loader and the Long Tail of Malware
65. Sony PS4 encounters malicious code attack and receives malicious messages

EXPLOIT

66. New Technique Recycles Exploit Chain to Keep Antivirus Silent

VULNERABILITY

67. FDA Warns of Flaws in Medtronic Programmers
68. Microsoft Incompletely Patches JET Database Vulnerability
69. Apple VoiceOver iOS Vulnerability Permits Hacker Access To User Photos
70. .@TenableSecurity research finds new exploits of an already patched #MikroTik router vulnerability that could enable hackers to launch remote code
71. Sony working on a fix for bug that's crashing PlayStation 4 consoles
72. Apple VoiceOver iOS vulnerability permits hacker access to user photos
73. Multiple Vulnerabilities Discovered in PHP Lead to Arbitrary Code Execution, DoS
74. Details of Vulnerability in Google PDFium’s JBIG2 Revealed
75. A flaw in @Google Firebase #DatabaseSecurity allowed hackers to bypass security and leak data. Learn more about this #SecurityFlaw and
76. Branch.io Flaws may have affected as many as 685 million individuals
77. Branch.io Flaws Exposed Tinder, Shopify, Yelp Users to XSS Attacks

Region brief for 2018-10-15

ASIA

1. Did Jamal Khashoggi’s Apple Watch record his murder at Saudi consulate? Probably not
2. Octopus-infested seas of Central Asia

OCEANIA

Nil

NORTH AMERICA

3. US voter records from 19 states sold on hacking forum
4. Tens of Millions of U.S. Voter Records for Sale
5. Pentagon Defense Department travel records data breach
6. FDA Warns of Flaws in Medtronic Programmers
7. Millions of Voter Records Found for Sale on the Dark Web
8. Pentagon Employee Data Breach, An Eye-Opener
9. Economist Nouriel Roubini: Blockchain and bitcoin are the world’s biggest scams
10. September 2018’s Most Wanted Malware: Cryptomining Attacks Against Apple Devices On The Rise
11. Pentagon Staff Hit by Major Data Breach
12. Pentagon Data Breach Exposes up to 30,000 Travel Records
13. Old dog, new tricks - Analysing new RTF-based campaign distributing Agent Tesla, Loki with PyREbox
14. @ThreatFabric Gaetan van Diemen showed us the actual situation and future predictions of Mobile Banking Malware. Thx for that awesome
15. Branch.io Flaws may have affected as many as 685 million individuals
16. Stopping Hidden Threats: How to Defend Against Fileless Attacks
17. SpankChain hacker steals the virtual currency and returns stolen ethereum

SOUTH AMERICA

18. A Russian cyber vigilante is patching outdated MikroTik routers exposed online

EUROPE

19. New Gallmaker APT group eschews malware in cyber espionage campaigns
20. TeleBots APT Group - Links to Industroyer, NotPetya and BlackEnergy
21. Iceland hit by Biggest Cyber Attack on Record
22. Scottish Ambulance Service Exposed Employees’ Data Online
23. Russia-linked BlackEnergy backed new cyber attacks on Ukraine’s state bodies
24. Un nouveau rapport montre que les attaques par ransomware ont diminué au premier semestre 2018. Les pirates se tournent vers
25. Octopus-infested seas of Central Asia
26. Iceland's largest phishing campaign imitated police
27. A Russian cyber vigilante is patching outdated MikroTik routers exposed online
28. According to #GroupIB experts, online market for counterfeit goods in Russia has reached $1,5 billion, while the number of phishing

AFRICA

Nil

Sector brief for 2018-10-15

HEALTHCARE

1. A week in security (October 8 – 14)

TRANSPORT

Nil

BANKING & FINANCE

2. Pentagon Defense Department travel records data breach
3. A week in security (October 8 – 14)
4. Pentagon Employee Data Breach, An Eye-Opener
5. Economist Nouriel Roubini: Blockchain and bitcoin are the world’s biggest scams
6. September 2018’s Most Wanted Malware: Cryptomining Attacks Against Apple Devices On The Rise
7. Pentagon Staff Hit by Major Data Breach
8. FitMetrix data exposed on unprotected Elasticsearch servers
9. How does the MnuBot banking Trojan use unusual C&C servers?
10. @ThreatFabric Gaetan van Diemen showed us the actual situation and future predictions of Mobile Banking Malware. Thx for that awesome
11. Stopping Hidden Threats: How to Defend Against Fileless Attacks
12. SpankChain hacker steals the virtual currency and returns stolen ethereum

INFORMATION & TELECOMMUNICATION

13. Ransomware hits computer networks of North Carolina water utility
14. Facebook Hack Update – 30 Million Affected; More Details Exposed; No ID Protection
15. A week in security (October 8 – 14)
16. Learn how we are using #MachineLearning to detect mobile #phishing attacks with @thepacketrat and @dyngnosis: https://okt.to/W29vsS @PhishingAi @arstechnica
17. Facebook opens up about data breach details
18. Facebook data breach: Victims will not be offered free identity theft protection
19. #Mobile #malware is on the rise. With mobile devices, hackers are able to access data far more sensitive than what
20. Un nouveau rapport montre que les attaques par ransomware ont diminué au premier semestre 2018. Les pirates se tournent vers
21. .@TrendMicro researchers discovered #FacexWorm, a #malware that uses a #ChromeExtension and @Facebook Messenger to spread. Learn which users are at
22. @ThreatFabric Gaetan van Diemen showed us the actual situation and future predictions of Mobile Banking Malware. Thx for that awesome
23. Stringent password rules lower risk of personal data breaches
24. According to #GroupIB experts, online market for counterfeit goods in Russia has reached $1,5 billion, while the number of phishing

FOOD

Nil

WATER

25. Ransomware hits computer networks of North Carolina water utility

ENERGY

26. TeleBots APT Group - Links to Industroyer, NotPetya and BlackEnergy

GOVERNMENT & PUBLIC SERVICE

27. Tens of Millions of U.S. Voter Records for Sale
28. A week in security (October 8 – 14)

Daily brief for 2018-10-15

ASIA

1. Did Jamal Khashoggi’s Apple Watch record his murder at Saudi consulate? Probably not
2. Octopus-infested seas of Central Asia

WORLD

3. US voter records from 19 states sold on hacking forum
4. Tens of Millions of U.S. Voter Records for Sale
5. Pentagon Defense Department travel records data breach
6. FDA Warns of Flaws in Medtronic Programmers
7. New Gallmaker APT group eschews malware in cyber espionage campaigns
8. Millions of Voter Records Found for Sale on the Dark Web
9. Pentagon Employee Data Breach, An Eye-Opener
10. Economist Nouriel Roubini: Blockchain and bitcoin are the world’s biggest scams
11. TeleBots APT Group - Links to Industroyer, NotPetya and BlackEnergy
12. September 2018’s Most Wanted Malware: Cryptomining Attacks Against Apple Devices On The Rise
13. Iceland hit by Biggest Cyber Attack on Record
14. Scottish Ambulance Service Exposed Employees’ Data Online
15. Pentagon Staff Hit by Major Data Breach
16. Russia-linked BlackEnergy backed new cyber attacks on Ukraine’s state bodies
17. Pentagon Data Breach Exposes up to 30,000 Travel Records
18. Un nouveau rapport montre que les attaques par ransomware ont diminué au premier semestre 2018. Les pirates se tournent vers
19. Octopus-infested seas of Central Asia
20. Iceland's largest phishing campaign imitated police
21. Old dog, new tricks - Analysing new RTF-based campaign distributing Agent Tesla, Loki with PyREbox
22. @ThreatFabric Gaetan van Diemen showed us the actual situation and future predictions of Mobile Banking Malware. Thx for that awesome
23. Branch.io Flaws may have affected as many as 685 million individuals
24. A Russian cyber vigilante is patching outdated MikroTik routers exposed online
25. According to #GroupIB experts, online market for counterfeit goods in Russia has reached $1,5 billion, while the number of phishing
26. Stopping Hidden Threats: How to Defend Against Fileless Attacks
27. SpankChain hacker steals the virtual currency and returns stolen ethereum

ATTACKS

28. Create an email phishing test to minimize attack vectors
29. Facebook Hack Update – 30 Million Affected; More Details Exposed; No ID Protection
30. Malware Campaign Distributes Data Stealer Trojan/RAT, Circumvents Anti-Malware
31. Up to 35 Million 2018 Voter Records For Sale on Hacking Forum
32. US voter records from 19 states sold on hacking forum
33. Tens of Millions of U.S. Voter Records for Sale
34. Pentagon Defense Department travel records data breach
35. Did Jamal Khashoggi’s Apple Watch record his murder at Saudi consulate? Probably not
36. New Gallmaker APT group eschews malware in cyber espionage campaigns
37. Microsoft Incompletely Patches JET Database Vulnerability
38. Old dog, new tricks – Analysing new RTF-based campaign distributing Agent Tesla, Loki with PyREbox
39. Millions of Voter Records Found for Sale on the Dark Web
40. Learn how we are using #MachineLearning to detect mobile #phishing attacks with @thepacketrat and @dyngnosis: https://okt.to/W29vsS @PhishingAi @arstechnica
41. Learn how hackers launched #phishing attacks against @netflix users with expert Michael Cobb of @thehairyITdog
42. Hackers could use emoji domains to spread phishing attacks
43. Pentagon reveals cyber breach of travel records
44. Pentagon Employee Data Breach, An Eye-Opener
45. Facebook opens up about data breach details
46. Facebook data breach: Victims will not be offered free identity theft protection
47. A flaw in @Google Firebase #DatabaseSecurity allowed hackers to bypass security and leak data. Learn more about this #SecurityFlaw and
48. Iceland hit by Biggest Cyber Attack on Record
49. Scottish Ambulance Service Exposed Employees’ Data Online
50. Pentagon Staff Hit by Major Data Breach
51. FitMetrix data exposed on unprotected Elasticsearch servers
52. Pentagon Data Breach Exposes up to 30,000 Travel Records
53. Iceland's largest phishing campaign imitated police
54. #Nymaim and #BankBot #Anubis PL campaign hxxp://przelewy24[.]ml/ hxxp://faktura24[.]cf/ SHA256: 4cb0b471a2132a747abf78214fbdbf0e8d7f44857996117bdbb266d42a277970 C2: bilagoong[.]tk @ThreatFabric @virqdroid @LukasStefanko
55. Old dog, new tricks - Analysing new RTF-based campaign distributing Agent Tesla, Loki with PyREbox
56. A Russian cyber vigilante is patching outdated MikroTik routers exposed online
57. FitMetrix Unprotected Passwordless Database Exposed Millions of User​ Data
58. Stringent password rules lower risk of personal data breaches
59. Branch.io Flaws Exposed Tinder, Shopify, Yelp Users to XSS Attacks
60. According to #GroupIB experts, online market for counterfeit goods in Russia has reached $1,5 billion, while the number of phishing
61. Google to Encrypt Android Cloud Backups With Your Lock Screen Password

THREATS

62. Small businesses repeatedly falling victim to ransomware - Kaspersky
63. 400 Percent Increase in Cryptocurrency Mining Attacks Against iOS Devices
64. Flash Updater Adds Cryptocurrency Miner
65. Ransomware hits computer networks of North Carolina water utility
66. Malware Campaign Distributes Data Stealer Trojan/RAT, Circumvents Anti-Malware
67. FDA Warns of Flaws in Medtronic Programmers
68. New Gallmaker APT group eschews malware in cyber espionage campaigns
69. Microsoft Incompletely Patches JET Database Vulnerability
70. Apple VoiceOver iOS Vulnerability Permits Hacker Access To User Photos
71. .@TenableSecurity research finds new exploits of an already patched #MikroTik router vulnerability that could enable hackers to launch remote code
72. iPhone a Growing Target of Crypto-Mining Attacks
73. Octopus Trojan exploits Telegram ban fears to snag diplomatic targets across Asia
74. Sony working on a fix for bug that's crashing PlayStation 4 consoles
75. Economist Nouriel Roubini: Blockchain and bitcoin are the world’s biggest scams
76. At the 2018 @RSAConference, researchers discussed the rise of stegware -- #malware that uses #steganography techniques to avoid detection. Learn
77. Fake Adobe update really *does* update Flash (while also installing cryptominer)
78. Apple VoiceOver iOS vulnerability permits hacker access to user photos
79. Cryptomining Malware Infects Computers via Fake Adobe Updates
80. September 2018’s Most Wanted Malware: Cryptomining Attacks Against Apple Devices On The Rise
81. Fake Adobe update really *does* update Flash (while also installing cryptominer)
82. Multiple Vulnerabilities Discovered in PHP Lead to Arbitrary Code Execution, DoS
83. Details of Vulnerability in Google PDFium’s JBIG2 Revealed
84. A flaw in @Google Firebase #DatabaseSecurity allowed hackers to bypass security and leak data. Learn more about this #SecurityFlaw and
85. #Mobile #malware is on the rise. With mobile devices, hackers are able to access data far more sensitive than what
86. Un nouveau rapport montre que les attaques par ransomware ont diminué au premier semestre 2018. Les pirates se tournent vers
87. .@TrendMicro researchers discovered #FacexWorm, a #malware that uses a #ChromeExtension and @Facebook Messenger to spread. Learn which users are at
88. 'Flash update' scam serves up legit software, but with a side of cryptominer
89. How does the MnuBot banking Trojan use unusual C&C servers?
90. How a #cryptocurrency mining #malware infects systems
91. @ThreatFabric Gaetan van Diemen showed us the actual situation and future predictions of Mobile Banking Malware. Thx for that awesome
92. Branch.io Flaws may have affected as many as 685 million individuals
93. Godzilla Loader and the Long Tail of Malware
94. Branch.io Flaws Exposed Tinder, Shopify, Yelp Users to XSS Attacks
95. What are blockchain’s smart contracts? And how to secure them
96. Android Apps Pretend to Mine Unmineable CryptoCurrencies to Just Show Ads
97. SpankChain hacker steals the virtual currency and returns stolen ethereum
98. Sony PS4 encounters malicious code attack and receives malicious messages

CRIME

99. Online ads: a potential way in for XSS attacks
100. Facebook data breach: Victims will not be offered free identity theft protection
101. September 2018’s Most Wanted Malware: Cryptomining Attacks Against Apple Devices On The Rise
102. Octopus-infested seas of Central Asia
103. Iceland's largest phishing campaign imitated police
104. 'Flash update' scam serves up legit software, but with a side of cryptominer
105. Old dog, new tricks - Analysing new RTF-based campaign distributing Agent Tesla, Loki with PyREbox
106. A Russian cyber vigilante is patching outdated MikroTik routers exposed online
107. SpankChain hacker steals the virtual currency and returns stolen ethereum

POLITICS

108. Pentagon Defense Department travel records data breach
109. New Gallmaker APT group eschews malware in cyber espionage campaigns
110. A week in security (October 8 – 14)
111. Gallmaker - Threat Group Targeting Governments and Militaries
112. Octopus-infested seas of Central Asia
113. Old dog, new tricks - Analysing new RTF-based campaign distributing Agent Tesla, Loki with PyREbox
114. A Russian cyber vigilante is patching outdated MikroTik routers exposed online

APT report for 2018-10-14

TRANSNATIONAL / UNKNOWN

1. DDoS Attacks Hit Games Like Assassin’s Creed and Final Fantasy XIV
2. Security Affairs newsletter Round 184 – News of the week

CHINA

Nil

INDIA

Nil

NORTH KOREA

Nil

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

3. Security Affairs newsletter Round 184 – News of the week

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-10-14

WINDOWS

1. Microsoft fixed the Zero-Day for JET flaw, but the fix is incomplete
2. Microsoft patch for JET flaw zero-day is ‘incomplete,’ Windows still vulnerable
3. Expert released PoC Code Microsoft Edge Remote Code Execution flaw
4. Exploiting Windows Using Microsoft Office DDE Exploit (MACROLESS)

LINUX

Nil

UNIX

Nil

ANDROID

5. .@ThreatFabric researchers uncovered a #malware that uses overlay techniques to avoid detection. Learn from @lewisnic how this new #Androidmalware --

IOS

Nil

MACOS

Nil

Threat report for 2018-10-14

DATA BREACH & DATA LOSS

1. My Health Record privacy amendments 'woefully inadequate': Labor
2. #NetSpectre exploits speculative execution to leak data remotely via side-channel attacks. Learn how this #SecurityVulnerability affects the #cloud from expert
3. Web Hosting Provider Suffers Data Breach Second Time in a Year
4. Find out how #TLBleed abuses @Intel's HTT chip feature to leak data via TLB
5. Microsoft still has not completely solved the Microsoft JET database engine vulnerability
6. See how SearchLight identifies when your data is exposed, your brand is abused, or your company is mentioned on the
7. Pentagon Discloses Data Breach, More Than 30,000 Workers Have Affected
8. A @Google security audit uncovered a glitch in #GooglePlus that exposed data from nearly 500,000 accounts, causing the company to
9. PHASE 4 – INFORMATION GATHERING AND PLANNING Meet Eric, a control systems engineer working for a third-party integrator. He’s guy who uploaded

DENIAL-OF-SERVICE

10. DDoS Attacks Hit Games Like Assassin’s Creed and Final Fantasy XIV

MALVERTISING

Nil

PHISHING

Nil

WEB DEFACEMENT

Nil

BOTNET

Nil

RANSOMWARE

11. New @ESET research finds APT group dubbed #TeleBots was behind #Industroyer #malware attacks, #NotPetya #ransomware outbreaks, and a recent Exaramel

CRYPTOMINING & CRYPTOCURRENCIES

12. Fake Flash Updates pushing Malware to Inject XMRig Cryptocurrency Miners

MALWARE

13. Week in review: Enterprise cybersecurity PKIs, keeping your cloud malware-free
14. New @ESET research finds APT group dubbed #TeleBots was behind #Industroyer #malware attacks, #NotPetya #ransomware outbreaks, and a recent Exaramel
15. .@ThreatFabric researchers uncovered a #malware that uses overlay techniques to avoid detection. Learn from @lewisnic how this new #Androidmalware --
16. At the 2018 @RSAConference, researchers discussed the rise of stegware -- #malware that uses #steganography techniques to avoid detection. Learn
17. How a remote access #Trojan checks for
18. Fake Flash Updates pushing Malware to Inject XMRig Cryptocurrency Miners

EXPLOIT

19. Expert released PoC Code Microsoft Edge Remote Code Execution flaw
20. Exploiting Windows Using Microsoft Office DDE Exploit (MACROLESS)

VULNERABILITY

21. Microsoft fixed the Zero-Day for JET flaw, but the fix is incomplete
22. A2SV – SSL Vulnerability Analysis Tool
23. Microsoft patch for JET flaw zero-day is ‘incomplete,’ Windows still vulnerable
24. Microsoft still has not completely solved the Microsoft JET database engine vulnerability
25. Expert released PoC Code Microsoft Edge Remote Code Execution flaw

Region brief for 2018-10-14

ASIA

Nil

OCEANIA

1. My Health Record privacy amendments 'woefully inadequate': Labor

NORTH AMERICA

2. Security Affairs newsletter Round 184 – News of the week
3. Expert released PoC Code Microsoft Edge Remote Code Execution flaw
4. Pentagon Discloses Data Breach, More Than 30,000 Workers Have Affected

SOUTH AMERICA

Nil

EUROPE

5. Week in review: Enterprise cybersecurity PKIs, keeping your cloud malware-free
6. Web Hosting Provider Suffers Data Breach Second Time in a Year
7. A @Google security audit uncovered a glitch in #GooglePlus that exposed data from nearly 500,000 accounts, causing the company to

AFRICA

8. Web Hosting Provider Suffers Data Breach Second Time in a Year

Sector brief for 2018-10-14

HEALTHCARE

Nil

TRANSPORT

Nil

BANKING & FINANCE

1. Web Hosting Provider Suffers Data Breach Second Time in a Year
2. Security Affairs newsletter Round 184 – News of the week
3. Pentagon Discloses Data Breach, More Than 30,000 Workers Have Affected

INFORMATION & TELECOMMUNICATION

4. Security Affairs newsletter Round 184 – News of the week
5. Expert released PoC Code Microsoft Edge Remote Code Execution flaw
6. See how SearchLight identifies when your data is exposed, your brand is abused, or your company is mentioned on the
7. PHASE 4 – INFORMATION GATHERING AND PLANNING Meet Eric, a control systems engineer working for a third-party integrator. He’s guy who uploaded

FOOD

Nil

WATER

Nil

ENERGY

8. Week in review: Enterprise cybersecurity PKIs, keeping your cloud malware-free

GOVERNMENT & PUBLIC SERVICE

Nil

Daily brief for 2018-10-14

ASIA

Nil

WORLD

1. My Health Record privacy amendments 'woefully inadequate': Labor
2. Week in review: Enterprise cybersecurity PKIs, keeping your cloud malware-free
3. Web Hosting Provider Suffers Data Breach Second Time in a Year
4. Security Affairs newsletter Round 184 – News of the week
5. Expert released PoC Code Microsoft Edge Remote Code Execution flaw
6. Pentagon Discloses Data Breach, More Than 30,000 Workers Have Affected
7. A @Google security audit uncovered a glitch in #GooglePlus that exposed data from nearly 500,000 accounts, causing the company to

ATTACKS

8. My Health Record privacy amendments 'woefully inadequate': Labor
9. #NetSpectre exploits speculative execution to leak data remotely via side-channel attacks. Learn how this #SecurityVulnerability affects the #cloud from expert
10. Web Hosting Provider Suffers Data Breach Second Time in a Year
11. Find out how #TLBleed abuses @Intel's HTT chip feature to leak data via TLB
12. Microsoft still has not completely solved the Microsoft JET database engine vulnerability
13. See how SearchLight identifies when your data is exposed, your brand is abused, or your company is mentioned on the
14. Pentagon Discloses Data Breach, More Than 30,000 Workers Have Affected
15. A @Google security audit uncovered a glitch in #GooglePlus that exposed data from nearly 500,000 accounts, causing the company to
16. PHASE 4 – INFORMATION GATHERING AND PLANNING Meet Eric, a control systems engineer working for a third-party integrator. He’s guy who uploaded

THREATS

17. Microsoft fixed the Zero-Day for JET flaw, but the fix is incomplete
18. Week in review: Enterprise cybersecurity PKIs, keeping your cloud malware-free
19. A2SV – SSL Vulnerability Analysis Tool
20. New @ESET research finds APT group dubbed #TeleBots was behind #Industroyer #malware attacks, #NotPetya #ransomware outbreaks, and a recent Exaramel
21. .@ThreatFabric researchers uncovered a #malware that uses overlay techniques to avoid detection. Learn from @lewisnic how this new #Androidmalware --
22. Microsoft patch for JET flaw zero-day is ‘incomplete,’ Windows still vulnerable
23. At the 2018 @RSAConference, researchers discussed the rise of stegware -- #malware that uses #steganography techniques to avoid detection. Learn
24. Microsoft still has not completely solved the Microsoft JET database engine vulnerability
25. Expert released PoC Code Microsoft Edge Remote Code Execution flaw
26. How a remote access #Trojan checks for
27. Fake Flash Updates pushing Malware to Inject XMRig Cryptocurrency Miners

CRIME

28. Security Affairs newsletter Round 184 – News of the week
29. Expert released PoC Code Microsoft Edge Remote Code Execution flaw

POLITICS

30. Security Affairs newsletter Round 184 – News of the week
31. Pentagon Discloses Data Breach, More Than 30,000 Workers Have Affected

APT report for 2018-10-13

TRANSNATIONAL / UNKNOWN

Nil

CHINA

Nil

INDIA

Nil

NORTH KOREA

Nil

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

1. Security researchers found that Industroyer and NotPetya belong to the Russian hacker group

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-10-13

WINDOWS

1. Microsoft Fix for Windows JET Database Bug Not Perfect, Micropatch Available

LINUX

Nil

UNIX

Nil

ANDROID

2. GPlayed – New Malware Posed as Google Play App to Spy & Steal Data From Your Entire Android Phone

IOS

Nil

MACOS

Nil

Threat report for 2018-10-13

DATA BREACH & DATA LOSS

1. Pentagon Defense Department travel records data breach
2. A combination of #SecurityFlaws and inadequate back-end development of the @Google Firebase database led to #DataLeaks and #SecurityVulnerabilities including HospitalGown.
3. 'Only' 30 million accounts were compromised in Facebook hack
4. Researchers @proofpoint have been tracking a downloader dubbed #AdvisorsBot as a first-stage payload in campaigns since May 2018.
5. Facebook Clarifies Extent of Data Breach
6. An Assessment of Google's Data Leak
7. ArangoDB v3.3.18 releases: native multi-model database
8. Facebook Now Revealed Hackers Stolen 29 Million Facebook Users Personal Data
9. Microsoft Fix for Windows JET Database Bug Not Perfect, Micropatch Available
10. Breach of Pentagon travel records exposes defense personnel PII

DENIAL-OF-SERVICE

Nil

MALVERTISING

Nil

PHISHING

11. Hackers launched @netflix #phishing attacks by obtaining TLS certificates. Learn how hackers mimic popular websites to spoof users and steal
12. This skyscraper reminds me of those really long ANSI art BBS login screens. Cc: @sixteencolors @blocktronics @velikani

WEB DEFACEMENT

Nil

BOTNET

Nil

RANSOMWARE

13. [SingCERT] Updated Advisory on Ransomware
14. APT group called #TeleBots linked to #Industroyer #malware and #NotPetya #ransomware, according to @ESET researchers. By @MaddieBacon11

CRYPTOMINING & CRYPTOCURRENCIES

15. Criminals' Cryptocurrency Addiction Continues
16. .@alienvault researchers recently discovered #MassMiner, a #cryptocurrency mining #malware that has the ability to infect systems across the web. Discover
17. Cryptocurrency Miners trick the user through Fake Flash Updates
18. Blockchain and Healthcare in Today’s World

MALWARE

19. GPlayed – New Malware Posed as Google Play App to Spy & Steal Data From Your Entire Android Phone
20. Researchers @proofpoint have been tracking a downloader dubbed #AdvisorsBot as a first-stage payload in campaigns since May 2018.
21. .@alienvault researchers recently discovered #MassMiner, a #cryptocurrency mining #malware that has the ability to infect systems across the web. Discover
22. Hackers use Googlebot in mining malware attacks
23. Researchers at @TrendMicro found a new strain of #malware -- dubbed #FacexWorm -- that targets users through a malicious #ChromeExtension.
24. APT group called #TeleBots linked to #Industroyer #malware and #NotPetya #ransomware, according to @ESET researchers. By @MaddieBacon11

EXPLOIT

Nil

VULNERABILITY

25. Now this might be going out on a limb, but here's how a branch.io bug left '685 million' netizens open to website hacks
26. Review Shows Glaring Flaws In Xiongmai IoT Devices
27. Microsoft JET vulnerability still open to attacks, despite recent patch
28. DOM-based XSS Vulnerability Affected 685 Million Users of Tinder, Shopify, Western Union, and Imgur
29. A patched #MikroTik router vulnerability amps up severity rating as @TenableSecurity researchers find new potential exploits with more critical consequences.
30. Microsoft Fix for Windows JET Database Bug Not Perfect, Micropatch Available
31. Vulnerabilities affect Shopify, Tinder and many other sites

Region brief for 2018-10-13

ASIA

1. Review Shows Glaring Flaws In Xiongmai IoT Devices

OCEANIA

2. Security researchers found that Industroyer and NotPetya belong to the Russian hacker group

NORTH AMERICA

3. Pentagon Defense Department travel records data breach

SOUTH AMERICA

Nil

EUROPE

4. Security researchers found that Industroyer and NotPetya belong to the Russian hacker group

AFRICA

Nil

Sector brief for 2018-10-13

HEALTHCARE

1. Blockchain and Healthcare in Today’s World

TRANSPORT

Nil

BANKING & FINANCE

2. Pentagon Defense Department travel records data breach
3. Cryptocurrency Miners trick the user through Fake Flash Updates
4. Hackers use Googlebot in mining malware attacks

INFORMATION & TELECOMMUNICATION

5. This skyscraper reminds me of those really long ANSI art BBS login screens. Cc: @sixteencolors @blocktronics @velikani
6. 'Only' 30 million accounts were compromised in Facebook hack
7. Facebook Clarifies Extent of Data Breach
8. Facebook Now Revealed Hackers Stolen 29 Million Facebook Users Personal Data

FOOD

Nil

WATER

Nil

ENERGY

Nil

GOVERNMENT & PUBLIC SERVICE

Nil

Daily brief for 2018-10-13

ASIA

1. Review Shows Glaring Flaws In Xiongmai IoT Devices

WORLD

2. Pentagon Defense Department travel records data breach
3. Security researchers found that Industroyer and NotPetya belong to the Russian hacker group

ATTACKS

4. Pentagon Defense Department travel records data breach
5. Hackers launched @netflix #phishing attacks by obtaining TLS certificates. Learn how hackers mimic popular websites to spoof users and steal
6. This skyscraper reminds me of those really long ANSI art BBS login screens. Cc: @sixteencolors @blocktronics @velikani
7. A combination of #SecurityFlaws and inadequate back-end development of the @Google Firebase database led to #DataLeaks and #SecurityVulnerabilities including HospitalGown.
8. 'Only' 30 million accounts were compromised in Facebook hack
9. Researchers @proofpoint have been tracking a downloader dubbed #AdvisorsBot as a first-stage payload in campaigns since May 2018.
10. Facebook Clarifies Extent of Data Breach
11. An Assessment of Google's Data Leak
12. ArangoDB v3.3.18 releases: native multi-model database
13. Facebook Now Revealed Hackers Stolen 29 Million Facebook Users Personal Data
14. Microsoft Fix for Windows JET Database Bug Not Perfect, Micropatch Available
15. Breach of Pentagon travel records exposes defense personnel PII

THREATS

16. GPlayed – New Malware Posed as Google Play App to Spy & Steal Data From Your Entire Android Phone
17. [SingCERT] Updated Advisory on Ransomware
18. Researchers @proofpoint have been tracking a downloader dubbed #AdvisorsBot as a first-stage payload in campaigns since May 2018.
19. Now this might be going out on a limb, but here's how a branch.io bug left '685 million' netizens open to website hacks
20. Review Shows Glaring Flaws In Xiongmai IoT Devices
21. Criminals' Cryptocurrency Addiction Continues
22. .@alienvault researchers recently discovered #MassMiner, a #cryptocurrency mining #malware that has the ability to infect systems across the web. Discover
23. Cryptocurrency Miners trick the user through Fake Flash Updates
24. Microsoft JET vulnerability still open to attacks, despite recent patch
25. DOM-based XSS Vulnerability Affected 685 Million Users of Tinder, Shopify, Western Union, and Imgur
26. A patched #MikroTik router vulnerability amps up severity rating as @TenableSecurity researchers find new potential exploits with more critical consequences.
27. Blockchain and Healthcare in Today’s World
28. Microsoft Fix for Windows JET Database Bug Not Perfect, Micropatch Available
29. Hackers use Googlebot in mining malware attacks
30. Vulnerabilities affect Shopify, Tinder and many other sites
31. Researchers at @TrendMicro found a new strain of #malware -- dubbed #FacexWorm -- that targets users through a malicious #ChromeExtension.
32. APT group called #TeleBots linked to #Industroyer #malware and #NotPetya #ransomware, according to @ESET researchers. By @MaddieBacon11

CRIME

33. ArangoDB v3.3.18 releases: native multi-model database
34. Facebook Now Revealed Hackers Stolen 29 Million Facebook Users Personal Data

POLITICS

35. Pentagon Defense Department travel records data breach
36. GPlayed – New Malware Posed as Google Play App to Spy & Steal Data From Your Entire Android Phone
37. Security researchers found that Industroyer and NotPetya belong to the Russian hacker group

APT report for 2018-10-12

TRANSNATIONAL / UNKNOWN

1. Cyber News Rundown: Windows 10 Update Deletes Files
2. No Cookies for CartThief, a New Magecart Variant
3. Payment skimmers sneaking on to websites via third party code
4. Gallmaker Hacking Group Attack Government, Military, and Defense Sectors Using Publicly Available Hacking Tools

CHINA

5. Five Eyes Intelligence agencies warn of popular hacking tools

INDIA

Nil

NORTH KOREA

6. Threat Brief: FASTCash ATM Cash Out Tactics

PAKISTAN

Nil

VIETNAM

Nil

IRAN

7. MuddyWater APT Latest Activity

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

Nil

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-10-12

WINDOWS

1. Windows 10 October 2018 Update: Release – Halt – Bug Identified – Fix!
2. Cyber News Rundown: Windows 10 Update Deletes Files
3. Five Eyes Intelligence agencies warn of popular hacking tools
4. PoC exploit for Windows Shell RCE released
5. Call of Duty: Black Ops 4 welcomes launch with new Blackout and Zombies trailers
6. Cryptomining software is hidden as Flash update

LINUX

7. Five Eyes Intelligence agencies warn of popular hacking tools

UNIX

Nil

ANDROID

8. Five Eyes Intelligence agencies warn of popular hacking tools
9. .@ThreatFabric researchers uncovered an #Android malware, #MysteryBot, which uses overlay attacks to avoid detection. Learn how this #malware affects @Google's
10. 360 Total Security has intercepted more than 50,000 Clipboard Wallet Hijacker attacks, helping users recover over 40 million
11. This Trojan masquerades as Google Play to hide on your phone in plain sight
12. Fortnite for Android Released, But Make Sure You Don't Download Malware

IOS

Nil

MACOS

13. Five Eyes Intelligence agencies warn of popular hacking tools
14. Vulnerability allows hijacking of software installed in macOS