APT report for 2018-10-19

TRANSNATIONAL / UNKNOWN

Nil

CHINA

1. Secret Comment Crew Code Spotted in New Attack
2. #GroupIB is a platinum sponsor @Gartner_inc Security & Risk Management Summit (Dubai, UAE, 22-23 October 2018) Visit us at Stand
3. Attackers behind Operation Oceansalt reuse code from Chinese Comment Crew
4. Latest Hacking News Podcast
5. APT Group Uses Datper Malware To Launch Cyber Attack on Asia Countries by Executing Shell Commands
6. Authorities seize properties of creators of “Infamous” cheat code, for GTA V

INDIA

Nil

NORTH KOREA

7. "World-renowned cybersecurity unit #GroupIB is prepping to release its annual report on trends in hi-tech cybercrime...Group-IB expects the number of

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

8. GreyEnergy
9. GreyEnergy threat group detected attacking high-value targets
10. .@ESET researchers claim the #GreyEnergy group has taken up the mantle of ICS-targeting #BlackEnergy, but @MalwareJake said the evidence wasn't
11. .@ESET researchers claim a new threat group called #GreyEnergy is the successor to #BlackEnergy, but experts are unsure if the
12. Week in security with Tony Anscombe

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-10-19

WINDOWS

1. This Week in Security News: Apex One™ Release and Java Usage Tracker Flaws
2. SettingContent-ms can be Abused to Drop Complex DeepLink and Icon-based Payload
3. Inside Safari Extensions | Malware’s Golden Key to User Data

LINUX

4. VestaCP users warned about possible server compromise

UNIX

Nil

ANDROID

5. Authorities seize properties of creators of “Infamous” cheat code, for GTA V

IOS

Nil

MACOS

6. Inside Safari Extensions | Malware’s Golden Key to User Data

Threat report for 2018-10-19

DATA BREACH & DATA LOSS

1. AWS FreeRTOS Bugs Allow Compromise of IoT Devices
2. Campaign 2018: Artificial intelligence is automating attacks on political campaigns
3. Chinese Hackers Use 'Datper' Trojan in Recent Campaign
4. A Pentagon #DataBreach exposed data on at least 30,000 individuals, but other details about the incident are still scarce. By
5. Campaign 2018: Artificial Intelligence Is Automating Attacks On Political Campaigns
6. New RTF-based Campaign Distributing Agent Tesla and Loki Malware
7. Did you know? Corporate email accounts can be compromised for as little as $150. Read more key findings from our
8. US Voter Leak Hits Tea Party Organization
9. VestaCP users warned about possible server compromise
10. jQuery File Upload Plugin Vulnerable for 8 Years and Only Hackers Knew
11. Recent phishing campaign against the Office of the First Deputy Prime Minister - Kingdom of Bahrain. Targeting Aysha Bukhelli, spoofed
12. Campaign launched to protect ethical hackers in the Americas
13. The blogging site Tumblr has disclosed and fixed a security flaw that could have exposed sensitive account information.
14. Facepunch 2016 breach exposed 343,000 users
15. Today we're explaining #Canada's Data Breach Regulations on the #blog. Jet on over to find out if your organization complies
16. ADHA's non-process for releasing My Health Record data revealed
17. MikroTik routers targeted by cryptomining campaign | Avast
18. Vulnerability in Tumblr could have compromise users’ account data
19. Poor security practices and access to hacking services are making it easy for #cybercriminals to compromise business email, research reveals:

DENIAL-OF-SERVICE

20. New DDoS Malware Infects Open-Source Web Hosting Software
21. Lawfare editor on persistent DDoS attack: 'We wish they'd knock it off'
22. DDoS Attack Prevention Method on Your Enterprise’s Systems – A Detailed Report

MALVERTISING

Nil

PHISHING

23. Password and credit card-stealing Azorult malware adds new tricks
24. AISA 2018: Hunting for phishing kits
25. Hackers launched #phishing attacks against @netflix users via malicious sites with TLS certificates. Learn how hackers mimic popular websites to
26. Recent phishing campaign against the Office of the First Deputy Prime Minister - Kingdom of Bahrain. Targeting Aysha Bukhelli, spoofed
27. #HurricaneMichael #phishing schemes leverage Azure blob storage to rake in credentials. http://ow.ly/J6m850js1sk via the @threatinsight research team.

WEB DEFACEMENT

Nil

BOTNET

28. Ok now, which one of you is running this Twitter botnet of fake infosec professionals?

RANSOMWARE

29. City Pays $2,000 in Computer Ransomware Attack
30. Water Utility ONWASA Hit by Ransomware Attack
31. Madison County Computer Systems Face a Ransomware Attack
32. The Week in Ransomware - October 19th 2018 - GandCrab, Birbware, and More
33. Top 4 tips to avoid getting hit by ransomware
34. Onslow County Utility Hit with Ransomware Attack

CRYPTOMINING & CRYPTOCURRENCIES

35. Report: Cryptocurrency Exchanges Lost $882 Million to Hackers
36. MikroTik routers targeted by cryptomining campaign | Avast
37. Fraudster Targets Cryptocurrency Wallets with a Variety of Info Stealers

MALWARE

38. Small or Big Business, Malware Hits Everyone
39. Kaspersky says it detected infections with DarkPulsar, alleged NSA malware
40. Chinese Hackers Use 'Datper' Trojan in Recent Campaign
41. Password and credit card-stealing Azorult malware adds new tricks
42. SettingContent-ms can be Abused to Drop Complex DeepLink and Icon-based Payload
43. New DDoS Malware Infects Open-Source Web Hosting Software
44. America’s First: US Leads in Global Malware C2 Distribution
45. New RTF-based Campaign Distributing Agent Tesla and Loki Malware
46. Hackers launched #phishing attacks against @netflix users via malicious sites with TLS certificates. Learn how hackers mimic popular websites to
47. The Golden Age of Malware
48. LuminosityLink RAT author sentenced to 30 years in prison
49. Inside Safari Extensions | Malware’s Golden Key to User Data
50. .@TrendMicro researchers discovered a malicious #ChromeExtension spreading #malware. Learn more with expert @lewisnic.
51. ADHA's non-process for releasing My Health Record data revealed
52. APT Group Uses Datper Malware To Launch Cyber Attack on Asia Countries by Executing Shell Commands
53. Canberra competence shines in day of PM domain lapses and tortured analogies

EXPLOIT

54. NSA-Linked 'DarkPulsar' Exploit Tool Detailed

VULNERABILITY

55. libssh Vulnerability: Is WatchGuard Affected?
56. 0-Day in jQuery Plugin Impacts Thousands of Applications
57. Fixing a CSRF Vulnerability
58. This Week in Security News: Apex One™ Release and Java Usage Tracker Flaws
59. AWS FreeRTOS Bugs Allow Compromise of IoT Devices
60. Drupal dev team fixed Remote Code Execution flaws in the popular CMS
61. Flaw in Libssh Grants Admin Control to Servers
62. FreeRTOS Vulnerabilities Expose Many Systems to Attacks
63. Linksys E Series Vulnerabilities
64. Google warns Apple: Missing bugs in your security bulletins are 'disincentive to patch'
65. jQuery Zero-Day Was Exploited For At Least Three Years
66. A Serious Security Flaw Found in LibSSH
67. In this week's Risk & Repeat podcast, editors discuss the #GAOreport on vulnerabilities and weaknesses in military weapons systems and
68. Splunk addressed several vulnerabilities in Enterprise and Light products
69. Serious D-Link router security flaws may never be patched
70. Scams and flaws: Why we get duped
71. Remote Code Execution Flaws Patched in Drupal
72. Tumblr bug bounty program detects flaw, no user info lost
73. .@Google Firebase's lack of #DatabaseSecurity and inadequate #BackendDevelopment led to #DataLeaks and vulnerabilities, including HospitalGown. Learn more about this
74. The blogging site Tumblr has disclosed and fixed a security flaw that could have exposed sensitive account information.
75. Critical Flaw Found in Streaming Library Used by VLC and Other Media Players
76. Drupal Remote Code Execution Vulnerability Alert
77. Business emails could represent a major security flaw for UK companies, after it was revealed millions of account details are
78. Splunk Patches Several Flaws in Enterprise, Light Products
79. Vulnerability in Tumblr could have compromise users’ account data
80. Three critical vulnerabilities can be chained to take full control of D-Link routers
81. Zero-day in popular jQuery plugin actively exploited for at least three years
82. Tumblr serious vulnerability can reveal everyone information
83. Critical Flaws Found in Amazon FreeRTOS IoT Operating System

Region brief for 2018-10-19

ASIA

1. Kaspersky says it detected infections with DarkPulsar, alleged NSA malware
2. The Week in Ransomware - October 19th 2018 - GandCrab, Birbware, and More
3. Chinese Hackers Use 'Datper' Trojan in Recent Campaign
4. Recent phishing campaign against the Office of the First Deputy Prime Minister - Kingdom of Bahrain. Targeting Aysha Bukhelli, spoofed
5. Secret Comment Crew Code Spotted in New Attack
6. Attackers behind Operation Oceansalt reuse code from Chinese Comment Crew
7. APT Group Uses Datper Malware To Launch Cyber Attack on Asia Countries by Executing Shell Commands

OCEANIA

8. AISA 2018: Hunting for phishing kits
9. ADHA's non-process for releasing My Health Record data revealed
10. Authorities seize properties of creators of “Infamous” cheat code, for GTA V
11. Canberra competence shines in day of PM domain lapses and tortured analogies

NORTH AMERICA

12. Small or Big Business, Malware Hits Everyone
13. America’s First: US Leads in Global Malware C2 Distribution
14. In this week's Risk & Repeat podcast, editors discuss the #GAOreport on vulnerabilities and weaknesses in military weapons systems and
15. US Voter Leak Hits Tea Party Organization
16. Secret Comment Crew Code Spotted in New Attack
17. #GroupIB is a platinum sponsor @Gartner_inc Security & Risk Management Summit (Dubai, UAE, 22-23 October 2018) Visit us at Stand
18. Attackers behind Operation Oceansalt reuse code from Chinese Comment Crew
19. Today we're explaining #Canada's Data Breach Regulations on the #blog. Jet on over to find out if your organization complies
20. Inside Safari Extensions | Malware’s Golden Key to User Data
21. Lawfare editor on persistent DDoS attack: 'We wish they'd knock it off'

SOUTH AMERICA

Nil

EUROPE

22. Small or Big Business, Malware Hits Everyone
23. This Week in Security News: Apex One™ Release and Java Usage Tracker Flaws
24. Kaspersky says it detected infections with DarkPulsar, alleged NSA malware
25. GreyEnergy
26. Onslow County Utility Hit with Ransomware Attack
27. Report: Cryptocurrency Exchanges Lost $882 Million to Hackers
28. Business emails could represent a major security flaw for UK companies, after it was revealed millions of account details are
29. Three critical vulnerabilities can be chained to take full control of D-Link routers
30. Lawfare editor on persistent DDoS attack: 'We wish they'd knock it off'

AFRICA

31. Lawfare editor on persistent DDoS attack: 'We wish they'd knock it off'

Sector brief for 2018-10-19

HEALTHCARE

1. Small or Big Business, Malware Hits Everyone
2. This Week in Security News: Apex One™ Release and Java Usage Tracker Flaws
3. Secret Comment Crew Code Spotted in New Attack

TRANSPORT

4. Kaspersky says it detected infections with DarkPulsar, alleged NSA malware

BANKING & FINANCE

5. Small or Big Business, Malware Hits Everyone
6. City Pays $2,000 in Computer Ransomware Attack
7. Madison County Computer Systems Face a Ransomware Attack
8. Password and credit card-stealing Azorult malware adds new tricks
9. SettingContent-ms can be Abused to Drop Complex DeepLink and Icon-based Payload
10. AISA 2018: Hunting for phishing kits
11. US Voter Leak Hits Tea Party Organization
12. Secret Comment Crew Code Spotted in New Attack
13. Inside Safari Extensions | Malware’s Golden Key to User Data
14. Critical Flaws Found in Amazon FreeRTOS IoT Operating System

INFORMATION & TELECOMMUNICATION

15. Fixing a CSRF Vulnerability
16. This Week in Security News: Apex One™ Release and Java Usage Tracker Flaws
17. Flaw in Libssh Grants Admin Control to Servers
18. Did you know? Corporate email accounts can be compromised for as little as $150. Read more key findings from our
19. Recent phishing campaign against the Office of the First Deputy Prime Minister - Kingdom of Bahrain. Targeting Aysha Bukhelli, spoofed
20. #HurricaneMichael #phishing schemes leverage Azure blob storage to rake in credentials. http://ow.ly/J6m850js1sk via the @threatinsight research team.
21. Tumblr bug bounty program detects flaw, no user info lost
22. The blogging site Tumblr has disclosed and fixed a security flaw that could have exposed sensitive account information.
23. #GroupIB is a platinum sponsor @Gartner_inc Security & Risk Management Summit (Dubai, UAE, 22-23 October 2018) Visit us at Stand
24. Ok now, which one of you is running this Twitter botnet of fake infosec professionals?
25. Attackers behind Operation Oceansalt reuse code from Chinese Comment Crew
26. Today we're explaining #Canada's Data Breach Regulations on the #blog. Jet on over to find out if your organization complies
27. Inside Safari Extensions | Malware’s Golden Key to User Data
28. Vulnerability in Tumblr could have compromise users’ account data
29. Tumblr serious vulnerability can reveal everyone information
30. Poor security practices and access to hacking services are making it easy for #cybercriminals to compromise business email, research reveals:

FOOD

Nil

WATER

31. Lawfare editor on persistent DDoS attack: 'We wish they'd knock it off'

ENERGY

32. Kaspersky says it detected infections with DarkPulsar, alleged NSA malware
33. GreyEnergy
34. Onslow County Utility Hit with Ransomware Attack

GOVERNMENT & PUBLIC SERVICE

35. Small or Big Business, Malware Hits Everyone
36. Madison County Computer Systems Face a Ransomware Attack
37. In this week's Risk & Repeat podcast, editors discuss the #GAOreport on vulnerabilities and weaknesses in military weapons systems and
38. US Voter Leak Hits Tea Party Organization
39. Recent phishing campaign against the Office of the First Deputy Prime Minister - Kingdom of Bahrain. Targeting Aysha Bukhelli, spoofed
40. Attackers behind Operation Oceansalt reuse code from Chinese Comment Crew
41. Authorities seize properties of creators of “Infamous” cheat code, for GTA V

Daily brief for 2018-10-19

ASIA

1. Kaspersky says it detected infections with DarkPulsar, alleged NSA malware
2. The Week in Ransomware - October 19th 2018 - GandCrab, Birbware, and More
3. Chinese Hackers Use 'Datper' Trojan in Recent Campaign
4. Recent phishing campaign against the Office of the First Deputy Prime Minister - Kingdom of Bahrain. Targeting Aysha Bukhelli, spoofed
5. Secret Comment Crew Code Spotted in New Attack
6. Attackers behind Operation Oceansalt reuse code from Chinese Comment Crew
7. APT Group Uses Datper Malware To Launch Cyber Attack on Asia Countries by Executing Shell Commands

WORLD

8. Small or Big Business, Malware Hits Everyone
9. This Week in Security News: Apex One™ Release and Java Usage Tracker Flaws
10. Kaspersky says it detected infections with DarkPulsar, alleged NSA malware
11. GreyEnergy
12. Onslow County Utility Hit with Ransomware Attack
13. America’s First: US Leads in Global Malware C2 Distribution
14. AISA 2018: Hunting for phishing kits
15. In this week's Risk & Repeat podcast, editors discuss the #GAOreport on vulnerabilities and weaknesses in military weapons systems and
16. US Voter Leak Hits Tea Party Organization
17. Report: Cryptocurrency Exchanges Lost $882 Million to Hackers
18. Secret Comment Crew Code Spotted in New Attack
19. #GroupIB is a platinum sponsor @Gartner_inc Security & Risk Management Summit (Dubai, UAE, 22-23 October 2018) Visit us at Stand
20. Attackers behind Operation Oceansalt reuse code from Chinese Comment Crew
21. Today we're explaining #Canada's Data Breach Regulations on the #blog. Jet on over to find out if your organization complies
22. Inside Safari Extensions | Malware’s Golden Key to User Data
23. Business emails could represent a major security flaw for UK companies, after it was revealed millions of account details are
24. ADHA's non-process for releasing My Health Record data revealed
25. Three critical vulnerabilities can be chained to take full control of D-Link routers
26. Authorities seize properties of creators of “Infamous” cheat code, for GTA V
27. Canberra competence shines in day of PM domain lapses and tortured analogies
28. Lawfare editor on persistent DDoS attack: 'We wish they'd knock it off'

ATTACKS

29. AWS FreeRTOS Bugs Allow Compromise of IoT Devices
30. Campaign 2018: Artificial intelligence is automating attacks on political campaigns
31. Chinese Hackers Use 'Datper' Trojan in Recent Campaign
32. A Pentagon #DataBreach exposed data on at least 30,000 individuals, but other details about the incident are still scarce. By
33. Password and credit card-stealing Azorult malware adds new tricks
34. Campaign 2018: Artificial Intelligence Is Automating Attacks On Political Campaigns
35. New RTF-based Campaign Distributing Agent Tesla and Loki Malware
36. AISA 2018: Hunting for phishing kits
37. Did you know? Corporate email accounts can be compromised for as little as $150. Read more key findings from our
38. Hackers launched #phishing attacks against @netflix users via malicious sites with TLS certificates. Learn how hackers mimic popular websites to
39. US Voter Leak Hits Tea Party Organization
40. VestaCP users warned about possible server compromise
41. jQuery File Upload Plugin Vulnerable for 8 Years and Only Hackers Knew
42. Recent phishing campaign against the Office of the First Deputy Prime Minister - Kingdom of Bahrain. Targeting Aysha Bukhelli, spoofed
43. Campaign launched to protect ethical hackers in the Americas
44. #HurricaneMichael #phishing schemes leverage Azure blob storage to rake in credentials. http://ow.ly/J6m850js1sk via the @threatinsight research team.
45. The blogging site Tumblr has disclosed and fixed a security flaw that could have exposed sensitive account information.
46. Facepunch 2016 breach exposed 343,000 users
47. Today we're explaining #Canada's Data Breach Regulations on the #blog. Jet on over to find out if your organization complies
48. ADHA's non-process for releasing My Health Record data revealed
49. MikroTik routers targeted by cryptomining campaign | Avast
50. Vulnerability in Tumblr could have compromise users’ account data
51. Poor security practices and access to hacking services are making it easy for #cybercriminals to compromise business email, research reveals:

THREATS

52. libssh Vulnerability: Is WatchGuard Affected?
53. 0-Day in jQuery Plugin Impacts Thousands of Applications
54. Small or Big Business, Malware Hits Everyone
55. Fixing a CSRF Vulnerability
56. This Week in Security News: Apex One™ Release and Java Usage Tracker Flaws
57. AWS FreeRTOS Bugs Allow Compromise of IoT Devices
58. City Pays $2,000 in Computer Ransomware Attack
59. Drupal dev team fixed Remote Code Execution flaws in the popular CMS
60. Water Utility ONWASA Hit by Ransomware Attack
61. Madison County Computer Systems Face a Ransomware Attack
62. Kaspersky says it detected infections with DarkPulsar, alleged NSA malware
63. The Week in Ransomware - October 19th 2018 - GandCrab, Birbware, and More
64. Top 4 tips to avoid getting hit by ransomware
65. Flaw in Libssh Grants Admin Control to Servers
66. Chinese Hackers Use 'Datper' Trojan in Recent Campaign
67. FreeRTOS Vulnerabilities Expose Many Systems to Attacks
68. Linksys E Series Vulnerabilities
69. Password and credit card-stealing Azorult malware adds new tricks
70. SettingContent-ms can be Abused to Drop Complex DeepLink and Icon-based Payload
71. Google warns Apple: Missing bugs in your security bulletins are 'disincentive to patch'
72. Onslow County Utility Hit with Ransomware Attack
73. jQuery Zero-Day Was Exploited For At Least Three Years
74. New DDoS Malware Infects Open-Source Web Hosting Software
75. A Serious Security Flaw Found in LibSSH
76. America’s First: US Leads in Global Malware C2 Distribution
77. New RTF-based Campaign Distributing Agent Tesla and Loki Malware
78. In this week's Risk & Repeat podcast, editors discuss the #GAOreport on vulnerabilities and weaknesses in military weapons systems and
79. Splunk addressed several vulnerabilities in Enterprise and Light products
80. Hackers launched #phishing attacks against @netflix users via malicious sites with TLS certificates. Learn how hackers mimic popular websites to
81. Serious D-Link router security flaws may never be patched
82. Scams and flaws: Why we get duped
83. Report: Cryptocurrency Exchanges Lost $882 Million to Hackers
84. Remote Code Execution Flaws Patched in Drupal
85. The Golden Age of Malware
86. Tumblr bug bounty program detects flaw, no user info lost
87. LuminosityLink RAT author sentenced to 30 years in prison
88. .@Google Firebase's lack of #DatabaseSecurity and inadequate #BackendDevelopment led to #DataLeaks and vulnerabilities, including HospitalGown. Learn more about this
89. The blogging site Tumblr has disclosed and fixed a security flaw that could have exposed sensitive account information.
90. Critical Flaw Found in Streaming Library Used by VLC and Other Media Players
91. Drupal Remote Code Execution Vulnerability Alert
92. Inside Safari Extensions | Malware’s Golden Key to User Data
93. .@TrendMicro researchers discovered a malicious #ChromeExtension spreading #malware. Learn more with expert @lewisnic.
94. Business emails could represent a major security flaw for UK companies, after it was revealed millions of account details are
95. Splunk Patches Several Flaws in Enterprise, Light Products
96. ADHA's non-process for releasing My Health Record data revealed
97. MikroTik routers targeted by cryptomining campaign | Avast
98. APT Group Uses Datper Malware To Launch Cyber Attack on Asia Countries by Executing Shell Commands
99. Fraudster Targets Cryptocurrency Wallets with a Variety of Info Stealers
100. Vulnerability in Tumblr could have compromise users’ account data
101. Three critical vulnerabilities can be chained to take full control of D-Link routers
102. Zero-day in popular jQuery plugin actively exploited for at least three years
103. Tumblr serious vulnerability can reveal everyone information
104. Critical Flaws Found in Amazon FreeRTOS IoT Operating System
105. Canberra competence shines in day of PM domain lapses and tortured analogies

CRIME

106. NSA-Linked 'DarkPulsar' Exploit Tool Detailed
107. Small or Big Business, Malware Hits Everyone
108. Madison County Computer Systems Face a Ransomware Attack
109. America’s First: US Leads in Global Malware C2 Distribution
110. Did you know? Corporate email accounts can be compromised for as little as $150. Read more key findings from our
111. Scams and flaws: Why we get duped
112. #HurricaneMichael #phishing schemes leverage Azure blob storage to rake in credentials. http://ow.ly/J6m850js1sk via the @threatinsight research team.
113. Secret Comment Crew Code Spotted in New Attack
114. LuminosityLink RAT author sentenced to 30 years in prison
115. #GroupIB is a platinum sponsor @Gartner_inc Security & Risk Management Summit (Dubai, UAE, 22-23 October 2018) Visit us at Stand
116. "World-renowned cybersecurity unit #GroupIB is prepping to release its annual report on trends in hi-tech cybercrime...Group-IB expects the number of
117. Authorities seize properties of creators of “Infamous” cheat code, for GTA V

POLITICS

118. Chinese Hackers Use 'Datper' Trojan in Recent Campaign
119. GreyEnergy
120. US Voter Leak Hits Tea Party Organization
121. Secret Comment Crew Code Spotted in New Attack
122. LuminosityLink RAT author sentenced to 30 years in prison
123. Attackers behind Operation Oceansalt reuse code from Chinese Comment Crew
124. Latest Hacking News Podcast

APT report for 2018-10-18

TRANSNATIONAL / UNKNOWN

Nil

CHINA

1. New APT Could Signal Reemergence of Notorious Comment Crew
2. Tracking Tick Through Recent Campaigns Targeting East Asia
3. Cyber Espionage Campaign Reuses Code from China's APT1
4. Oceansalt cyberattack wave linked to defunct Chinese APT Comment Crew
5. Oceansalt Linked To Defunct Chinese APT Comment Crew
6. 'Operation Oceansalt' Reuses Code from Chinese Group APT1
7. Tracking Tick Through Recent Campaigns Targeting East Asia
8. Operation Oceansalt research reveals cyber-attacks targeting South Korea, USA and Canada
9. Oceansalt cyberattack wave linked to defunct Chinese APT Comment Crew
10. ‘Operation Oceansalt’ Delivers Wave After Wave
11. New Reconnaissance Tool Uses Code from Eight-Year-Old Comment Crew Implant

INDIA

12. New Pennsylvania Law Imposes Fine for Using Drones to Spy

NORTH KOREA

13. Group-IB: 14 cyber attacks on crypto exchanges resulted in a loss of $882 million
14. Hacking Attacks On Cryptocurrency Exchanges Resulted in a Loss of $882 Million
15. Targeted attacks on crypto exchanges resulted in a loss of $882 million

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

16. Threat Report: BlackEnergy APT Group Becomes GreyEnergy
17. GreyEnergy cyberespionage group targets Poland and Ukraine
18. GreyEnergy Spy APT Mounts Sophisticated Effort Against Critical Infrastructure
19. GreyEnergy Potential Successor of BlackEnergy
20. XBash Malware Security Advisory

SERBIA

Nil

UKRAINE

21. Group-IB: 14 cyber attacks on crypto exchanges resulted in a loss of $882 million

Platform report for 2018-10-18

WINDOWS

1. CVE-2018-8460: Exposing a Double Free in Internet Explorer for Code Execution
2. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
3. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
4. Tracking Tick Through Recent Campaigns Targeting East Asia
5. Ruby 2.4.5 released: 40 bug fixes
6. XBash Malware Security Advisory

LINUX

7. Open source web hosting software compromised with DDoS malware
8. Ruby 2.4.5 released: 40 bug fixes
9. XBash Malware Security Advisory
10. VestaCP compromised in a new supply-chain attack
11. VestaCP compromised in a new supply-chain attack

UNIX

Nil

ANDROID

12. GPlayed Trojan - .Net Playing with Google Market

IOS

13. Crypto Mining Malware Runs on iPhone
14. Cryptomining Malware Attacks On iPhones Grew By 400%

MACOS

15. Ruby 2.4.5 released: 40 bug fixes
16. XBash Malware Security Advisory

Threat report for 2018-10-18

DATA BREACH & DATA LOSS

1. 35 Million Records Of US Voters Data For Sale On The Dark Web
2. Thousands of Neoflam Clients Had Their Data Leaked After Buying Frying Pans
3. Tracking Tick Through Recent Campaigns Targeting East Asia
4. Cyber Espionage Campaign Reuses Code from China's APT1
5. The #NetSpectre vulnerability could enable a slow leak of data remotely via side channels. Expert Michael Cobb of @thehairyITdog explains
6. Tumblr Privacy Bug Could Have Exposed Sensitive Account Data
7. Apple to US users: Here's how you can now see what personal data we hold on you
8. Open source web hosting software compromised with DDoS malware
9. Anthem Settles with OCR for $16M for 2015 Data Breach
10. Card Factory Exposed Customers Photos Publicly Due To A Website Flaw
11. Hackers can use legitimate #AdminTools to compromise networks. Learn more about "living off the land" attacks from expert Michael Cobb
12. Tumblr patches bug that could have exposed user data
13. 12.5 Million Email Archives Exposed - Why would #cybercriminals go to a #darkweb market and pay for access when they
14. #NetSpectre exploits leak data remotely via side-channel attacks. Learn how to use #ThreatModeling to stop speculative execution from expert Ed
15. Tracking Tick Through Recent Campaigns Targeting East Asia
16. McAfee researchers uncover ‘significant’ espionage campaign
17. Apple to US users: Here's how you can now see what personal data we hold on you
18. Tumblr Fixes Security Bug that Leaked Private Account Info
19. Tumblr fixed a #vulnerability that could have exposed sensitive account #data, including usernames/passwords and individual IP addresses. But the company
20. The #TLBleed vulnerability uses @Intel's HTT chip feature to leak data. Learn about how hackers could use #malware to launch
21. VestaCP compromised in a new supply-chain attack
22. VestaCP compromised in a new supply-chain attack
23. Anthem to pay record £12M for 2015 data breach
24. Around 600 Computers of Anne Arundel County Public Library have been Exposed to Emotet Virus
25. In the wake of numerous high-profile data breaches and privacy incidents, consumers are more aware and concerned than ever about
26. Senate inquiry recommends locking down My Health Record by default
27. Tumblr Vulnerability Exposed User Account Information
28. The Equifax Hack Uploaded Files the Right Way
29. Bug Trio Affecting Eight D-Link Models Leads to Full Compromise
30. SEO pollution campaign affects web searches related to EU midterm elections

DENIAL-OF-SERVICE

31. Open source web hosting software compromised with DDoS malware
32. Who and Why Make DDoS Attacks on The Site of Colleges and Universities ?
33. A10 Networks provides cloud, Internet and gaming providers with 1 RU DDoS defense appliance

MALVERTISING

Nil

PHISHING

34. The libssh “login with no password” bug – what you need to know [VIDEO]

WEB DEFACEMENT

Nil

BOTNET

35. After an attempted comeback by the Russian built #VPNFilter #botnet, home #networkdevices are at risk. Learn how this #malware targets
36. How does the resurgent VPNFilter botnet target victims?

RANSOMWARE

37. 7 best practices for negotiating ransomware payments

CRYPTOMINING & CRYPTOCURRENCIES

38. Fake Adobe Flash update hides cryptocurrency malware
39. Crooks are attempting to spread their cryptojacking malware to unsuspecting victims by disguising it as an update for Flash. The malicious
40. Top 10 Blockchain Development Companies
41. Crypto Mining Malware Runs on iPhone
42. Cryptocurrency Miners Hiding As Flash Updates
43. Cryptomining Malware Attacks On iPhones Grew By 400%
44. Hacking Attacks On Cryptocurrency Exchanges Resulted in a Loss of $882 Million
45. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
46. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
47. LuminosityLink spyware mastermind gets 30 months in the clink, forfeits $725k in Bitcoin
48. Researcher Livestreams 51% Attack on Altcoin Blockchain
49. Cryptojacking: A hidden cost for your company
50. Report: Cryptocurrency Exchanges Lost $882 Million to Hackers

MALWARE

51. Fake Adobe Flash update hides cryptocurrency malware
52. After an attempted comeback by the Russian built #VPNFilter #botnet, home #networkdevices are at risk. Learn how this #malware targets
53. Open source web hosting software compromised with DDoS malware
54. LuminosityLink Spyware Mastermind Gets 30 Months In The Clink
55. Crooks are attempting to spread their cryptojacking malware to unsuspecting victims by disguising it as an update for Flash. The malicious
56. Crypto Mining Malware Runs on iPhone
57. GPlayed Trojan - .Net Playing with Google Market
58. Cryptomining Malware Attacks On iPhones Grew By 400%
59. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
60. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
61. LuminosityLink spyware mastermind gets 30 months in the clink, forfeits $725k in Bitcoin
62. The #TLBleed vulnerability uses @Intel's HTT chip feature to leak data. Learn about how hackers could use #malware to launch
63. XBash Malware Security Advisory
64. The author of the LuminosityLink RAT sentenced to 30 Months in Prison
65. Stegware: How is #malware using #steganography techniques to avoid detection?
66. Around 600 Computers of Anne Arundel County Public Library have been Exposed to Emotet Virus
67. In order to distribute the attack payload, the code needs to be downloaded onto the PLCs & safety controllers. This

EXPLOIT

Nil

VULNERABILITY

68. GitHub now warns devs about bugs that led to Equifax breach
69. Flaws in telepresence robots allow hackers access to pictures, video feeds
70. Branch.io Flaws may have affected as many as 685 million individuals
71. Critical Remote Code Execution Vulnerabilities Patched by Drupal
72. Code Execution Vulnerability Patched in Library Used by VLC, Other Media Players
73. Flaws Open Telepresence Robots to Prying Eyes
74. [SingCERT] Alert on Multiple Security Vulnerabilities in Oracle's Enterprise Products
75. The #NetSpectre vulnerability could enable a slow leak of data remotely via side channels. Expert Michael Cobb of @thehairyITdog explains
76. A newly disclosed #libSSH vulnerability could allow an attacker #AdminAccess to a server with little effort. By @MT_Heller
77. Drupal addresses multiple critical flaws with latest release
78. Tumblr Privacy Bug Could Have Exposed Sensitive Account Data
79. CVE-2018-8460: Exposing a Double Free in Internet Explorer for Code Execution
80. Wapiti – The Black Box Vulnerability Scanner for Web Applications
81. Vulnerability Spotlight: Live Networks LIVE555 streaming media RTSPServer code execution vulnerability
82. The libssh “login with no password” bug – what you need to know [VIDEO]
83. Card Factory Exposed Customers Photos Publicly Due To A Website Flaw
84. How Shodan helps identify ICS cybersecurity vulnerabilities
85. Oracle extends its thanks to Qihoo 360 for fixing the vulnerabilities of Weblogic
86. Tumblr patches bug that could have exposed user data
87. [SingCERT] Alert on Linksys E Series Routers Vulnerabilities (CVE-2018-3953, CVE-2018-3954, and CVE-2018-3955)
88. Apache Access Vulnerability Could Affect Thousands of Applications
89. Last year, D-Link flubbed a router bug-fix, so it's back with total pwnage
90. Party like it's 1989... SVGA code bug haunts VMware's house, lets guests flee to host OS
91. Oracle Patches 301 Vulnerabilities in October Update
92. Tumblr Fixes Security Bug that Leaked Private Account Info
93. Ruby 2.4.5 released: 40 bug fixes
94. Tumblr fixed a #vulnerability that could have exposed sensitive account #data, including usernames/passwords and individual IP addresses. But the company
95. The #TLBleed vulnerability uses @Intel's HTT chip feature to leak data. Learn about how hackers could use #malware to launch
96. New libSSH vulnerability gives root access to servers
97. A 4-year-old #libSSH vulnerability can allow attackers to easily log in to servers with full administrative control, but it is
98. The implications of the NetSpectre vulnerability
99. #Shodan can be a helpful tool for security professionals to locate #ICSsecurity vulnerabilities. Expert Ernie Hayden explains how Shodan works
100. Oracle security updates contains 45 critical-rated vulnerability
101. A #libSSH vulnerability that went undisclosed for almost five years could allow an attacker easy #AdminAccess to servers, @0xAmit said
102. Vulnerability Spotlight: Live Networks LIVE555 streaming media RTSPServer code execution vulnerability
103. Chaining three critical vulnerabilities allows takeover of D-Link routers
104. Tumblr Fixes Critical Security Bug That Exposes User Account Details
105. Tumblr Vulnerability Exposed User Account Information
106. Bug Trio Affecting Eight D-Link Models Leads to Full Compromise

Region brief for 2018-10-18

ASIA

1. Threat Report: BlackEnergy APT Group Becomes GreyEnergy
2. GreyEnergy cyberespionage group targets Poland and Ukraine
3. Tracking Tick Through Recent Campaigns Targeting East Asia
4. Cyber Espionage Campaign Reuses Code from China's APT1
5. Oceansalt cyberattack wave linked to defunct Chinese APT Comment Crew
6. Oceansalt Linked To Defunct Chinese APT Comment Crew
7. Group-IB: 14 cyber attacks on crypto exchanges resulted in a loss of $882 million
8. Hacking Attacks On Cryptocurrency Exchanges Resulted in a Loss of $882 Million
9. 'Operation Oceansalt' Reuses Code from Chinese Group APT1
10. Oracle extends its thanks to Qihoo 360 for fixing the vulnerabilities of Weblogic
11. Tracking Tick Through Recent Campaigns Targeting East Asia
12. XBash Malware Security Advisory
13. Operation Oceansalt research reveals cyber-attacks targeting South Korea, USA and Canada
14. Targeted attacks on crypto exchanges resulted in a loss of $882 million
15. The Equifax Hack Uploaded Files the Right Way
16. Oceansalt cyberattack wave linked to defunct Chinese APT Comment Crew
17. ‘Operation Oceansalt’ Delivers Wave After Wave
18. New Reconnaissance Tool Uses Code from Eight-Year-Old Comment Crew Implant

OCEANIA

19. Threat Report: BlackEnergy APT Group Becomes GreyEnergy
20. Thousands of Neoflam Clients Had Their Data Leaked After Buying Frying Pans
21. The author of the LuminosityLink RAT sentenced to 30 Months in Prison
22. Senate inquiry recommends locking down My Health Record by default

NORTH AMERICA

23. Threat Report: BlackEnergy APT Group Becomes GreyEnergy
24. Branch.io Flaws may have affected as many as 685 million individuals
25. 35 Million Records Of US Voters Data For Sale On The Dark Web
26. Cyber Espionage Campaign Reuses Code from China's APT1
27. Apple to US users: Here's how you can now see what personal data we hold on you
28. CVE-2018-8460: Exposing a Double Free in Internet Explorer for Code Execution
29. New Pennsylvania Law Imposes Fine for Using Drones to Spy
30. Oceansalt cyberattack wave linked to defunct Chinese APT Comment Crew
31. Crypto Mining Malware Runs on iPhone
32. 'Operation Oceansalt' Reuses Code from Chinese Group APT1
33. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
34. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
35. Apple to US users: Here's how you can now see what personal data we hold on you
36. XBash Malware Security Advisory
37. Anthem to pay record £12M for 2015 data breach
38. The author of the LuminosityLink RAT sentenced to 30 Months in Prison
39. Operation Oceansalt research reveals cyber-attacks targeting South Korea, USA and Canada
40. ‘Operation Oceansalt’ Delivers Wave After Wave
41. SEO pollution campaign affects web searches related to EU midterm elections
42. New Reconnaissance Tool Uses Code from Eight-Year-Old Comment Crew Implant

SOUTH AMERICA

Nil

EUROPE

43. Threat Report: BlackEnergy APT Group Becomes GreyEnergy
44. GreyEnergy cyberespionage group targets Poland and Ukraine
45. After an attempted comeback by the Russian built #VPNFilter #botnet, home #networkdevices are at risk. Learn how this #malware targets
46. GreyEnergy Potential Successor of BlackEnergy
47. The author of the LuminosityLink RAT sentenced to 30 Months in Prison
48. Chaining three critical vulnerabilities allows takeover of D-Link routers

AFRICA

49. The author of the LuminosityLink RAT sentenced to 30 Months in Prison