APT report for 2018-10-31

TRANSNATIONAL / UNKNOWN

1. URLZone Distributed Via Cutwail Spam Using Steganography
2. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros

CHINA

Nil

INDIA

Nil

NORTH KOREA

Nil

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

3. Promethium/StrongPity Malware

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

4. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-10-31

WINDOWS

1. 2018’s Most Prevalent Ransomware – We Took it for a Ride
2. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros
3. Businesses unprepared for Windows 10 migration, fear vulnerability to cyber threats
4. DDoS Attacks in Q3 2018
5. Windows 10 Universal Windows Platform Vulnerability
6. Webroot Unveils Nastiest Malware of 2018
7. OIG’s Take On Healthcare.gov Patient Record Breach
8. Microsoft continues to push the KB4464455 patch for fixing ZIP bug

LINUX

9. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros
10. DDoS Attacks in Q3 2018
11. Canonical Releases Ubuntu 16.04 LTS Kernel Patch, Fixed 4 Security Vulnerabilities
12. A DHCPv6 package could compromise a vulnerable Linux system

UNIX

13. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros

ANDROID

14. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros

IOS

15. Apple Fixes Multiple macOS, iOS Bugs Including a Quirky FaceTime Vulnerability
16. Security Code AutoFill Flaw Exposes iOS, macOS Users to Banking Fraud Attacks
17. Apple Patches Passcode Bypass, FaceTime Flaws in iOS
18. Apple Patches Critical Flaws in iOS 12.1, macOS 10.14.1 Updates
19. Apple Released Security Updates for iOS, watchOS, Safari , tvOS, iTunes & Fixed Several Vulnerabilities

MACOS

20. Apple Fixes Multiple macOS, iOS Bugs Including a Quirky FaceTime Vulnerability
21. Security Code AutoFill Flaw Exposes iOS, macOS Users to Banking Fraud Attacks
22. Apple Patches Passcode Bypass, FaceTime Flaws in iOS
23. Apple Patches Critical Flaws in iOS 12.1, macOS 10.14.1 Updates
24. 5 Types of Malware Currently Affecting macOS

Threat report for 2018-10-31

DATA BREACH & DATA LOSS

1. 85 Millions of voter records available for sale ahead of the 2018 US Midterm Elections
2. More Information about July 2018’s Singapore SingHealth Data Breach Revealed
3. Software bugs could compromise midterm votes in Texas
4. Eurostar Resets Users' Passwords After Potential Data Breach
5. Why data security is a priority for political campaigns
6. The Radisson Hotel Group has suffered a data breach
7. Social Security Numbers, PII Stolen in NorthBay Healthcare Data Breach
8. Healthcare.gov website suffers data breach affecting 75,000 enrollees
9. Tomorrowland festival goers affected by data breach
10. Chinese Intel Agents Indicted for 5-Year IP Theft Campaign
11. Emotet malware gang is mass-harvesting millions of emails in mysterious campaign
12. Nigerian Airline Arik Air May Have Leaked Customer Data
13. Cyber Attacks Up Prior To Midterms, 81.5 Million Voter Records Threatened
14. Average data breach fines have doubled as ICO hints at higher fines
15. Australian companies failing to slow the tide of data breaches: OAIC
16. Assault and battery: Malvertising campaign checks user device' charge as anti-detection technique
17. Live Webinar | Identity Proofing in the Era of Data Breaches and Social Networking
18. Come fermare i data breach con i servizi di Detection&Response #MDR: il caso di un'importante media company finlandese
19. Fresh SamSam Ransomware Campaign Across the U.S
20. Nigerian airline Arik Air may have leaked customer data
21. Emotet malware gang is mass-harvesting millions of emails in mysterious campaign
22. SamSam Ransomware Campaigns Highly Active in 2018 and Heavily Targets Organizations
23. A Report on Data Breaches in Australia
24. A DHCPv6 package could compromise a vulnerable Linux system
25. OIG’s Take On Healthcare.gov Patient Record Breach
26. Exploit Chain Modified to Slip Antivirus Detection in a New Malware Campaign

DENIAL-OF-SERVICE

27. DDoS Attacks in Q3 2018

MALVERTISING

28. Assault and battery: Malvertising campaign checks user device' charge as anti-detection technique

PHISHING

29. Re: The Zombie Phish
30. Ramped-up phishing attacks target universities around the world
31. “Brazilian Election” Themed Phish Target Users with South American-Targeted Malware, Astaroth Trojan
32. [Infographic] 5 Ways #Cybercriminals Can Access Your Emails Without #Phishing:

WEB DEFACEMENT

Nil

BOTNET

33. Re: The Zombie Phish
34. Google aims to stop the tide of bots with reCAPTCHA v3
35. Pervasive Emotet Botnet Now Steals Emails
36. NTT Security targets botnet infrastructure
37. Satori Botnet's Alleged Developer Rearrested
38. #Mirai author fined $8.6million, gets 6 months house arrest

RANSOMWARE

39. SamSam Ransomware Goes on a Tear
40. 2018’s Most Prevalent Ransomware – We Took it for a Ride
41. Kraken Ransomware Upgrades Distribution with RaaS Model
42. GandCrab ransomware crew loses $1M after Bitdefender releases free decrypter
43. Kraken Cryptor ransomware merges with Fallout exploit kit, fees slashed to gain followers
44. Kraken Ransomware Now Being Distributed by Fallout Exploit Kit
45. Fresh SamSam Ransomware Campaign Across the U.S
46. SamSam Ransomware Campaigns Highly Active in 2018 and Heavily Targets Organizations

CRYPTOMINING & CRYPTOCURRENCIES

47. Kraken Ransomware Upgrades Distribution with RaaS Model
48. Kraken Cryptor ransomware merges with Fallout exploit kit, fees slashed to gain followers
49. Kraken Ransomware Now Being Distributed by Fallout Exploit Kit
50. It's a front? Mac cryptocurrency ticker actually installs backdoors
51. All You Need to Know About Blockchain Testing

MALWARE

52. Was the Triton Malware Attack Russian in Origin?
53. Emotet malware gang is mass-harvesting millions of emails in mysterious campaign
54. Promethium/StrongPity Malware
55. “Brazilian Election” Themed Phish Target Users with South American-Targeted Malware, Astaroth Trojan
56. "The presence of the insecure remote access software on systems used for election management raised concerns that malicious #ThreatActors --
57. Double-Gun Trojan which uses game plug-in to spread, is updated to V4.0 and looking for trouble
58. Emotet Trojan Begins Stealing Victim's Email Using New Module
59. Emotet trojan starts stealing full emails from infected machines
60. Recently found GPlayed trojan spinoff analysed
61. Federal employee infects gov't network with Russian malware through adult video websites
62. Emotet malware gang is mass-harvesting millions of emails in mysterious campaign
63. What do you think the combination of the #TrickBot banking Trojan to #IcedID means for the future of banking #Trojans?
64. 12 malicious libraries found in Python PyPI
65. 5 Types of Malware Currently Affecting macOS
66. Webroot Unveils Nastiest Malware of 2018
67. Exploit Chain Modified to Slip Antivirus Detection in a New Malware Campaign

EXPLOIT

68. Kraken Cryptor ransomware merges with Fallout exploit kit, fees slashed to gain followers
69. Kraken Ransomware Now Being Distributed by Fallout Exploit Kit
70. Exploit Chain Modified to Slip Antivirus Detection in a New Malware Campaign

VULNERABILITY

71. Software bugs could compromise midterm votes in Texas
72. Yi Technology Home Cameras Exploitable Using Multiple Vulnerabilities
73. Prioritizing the fundamentals of coordinated vulnerability disclosure
74. Vulnerability Spotlight: Multiple Vulnerabilities in Yi Technology Home Camera
75. Apple Patches Multiple Major Security Flaws
76. Actively Exploited High Impact DoS Vulnerability Found in Cisco ASA and FTD
77. Apple Fixes Multiple macOS, iOS Bugs Including a Quirky FaceTime Vulnerability
78. Many States Reject DHS Offer to Check Election Systems for Flaws, Saying They’re Safe from Hackers
79. Security Code AutoFill Flaw Exposes iOS, macOS Users to Banking Fraud Attacks
80. Whiteboard Wednesday: Common Vulnerabilities as Personified by Halloween Costumes
81. Vulnerability Spotlight: Multiple Vulnerabilities in Yi Technology Home Camera
82. Several vulnerabilities were found in controllers made by @Universal_Robot. Discover what these #robot controllers are used for and how
83. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros
84. Apple Patches Passcode Bypass, FaceTime Flaws in iOS
85. Businesses unprepared for Windows 10 migration, fear vulnerability to cyber threats
86. Apple Patches Critical Flaws in iOS 12.1, macOS 10.14.1 Updates
87. Canonical Releases Ubuntu 16.04 LTS Kernel Patch, Fixed 4 Security Vulnerabilities
88. CVE-2018-18649: Gitlab Wiki API Remote Code Execution Vulnerability Alert
89. Apple Released Security Updates for iOS, watchOS, Safari , tvOS, iTunes & Fixed Several Vulnerabilities
90. Windows 10 Universal Windows Platform Vulnerability
91. Microsoft continues to push the KB4464455 patch for fixing ZIP bug

Region brief for 2018-10-31

ASIA

1. More Information about July 2018’s Singapore SingHealth Data Breach Revealed
2. Was the Triton Malware Attack Russian in Origin?
3. Chinese Intel Agents Indicted for 5-Year IP Theft Campaign
4. Many States Reject DHS Offer to Check Election Systems for Flaws, Saying They’re Safe from Hackers
5. Ramped-up phishing attacks target universities around the world
6. NTT Security targets botnet infrastructure
7. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros
8. Fresh SamSam Ransomware Campaign Across the U.S
9. DDoS Attacks in Q3 2018
10. Microsoft continues to push the KB4464455 patch for fixing ZIP bug

OCEANIA

11. Ramped-up phishing attacks target universities around the world
12. Australian companies failing to slow the tide of data breaches: OAIC
13. Fresh SamSam Ransomware Campaign Across the U.S
14. DDoS Attacks in Q3 2018
15. A Report on Data Breaches in Australia

NORTH AMERICA

16. 85 Millions of voter records available for sale ahead of the 2018 US Midterm Elections
17. Prioritizing the fundamentals of coordinated vulnerability disclosure
18. 2018’s Most Prevalent Ransomware – We Took it for a Ride
19. Many States Reject DHS Offer to Check Election Systems for Flaws, Saying They’re Safe from Hackers
20. Ramped-up phishing attacks target universities around the world
21. Whiteboard Wednesday: Common Vulnerabilities as Personified by Halloween Costumes
22. Vulnerability Spotlight: Multiple Vulnerabilities in Yi Technology Home Camera
23. “Brazilian Election” Themed Phish Target Users with South American-Targeted Malware, Astaroth Trojan
24. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros
25. Fresh SamSam Ransomware Campaign Across the U.S
26. Federal employee infects gov't network with Russian malware through adult video websites
27. DDoS Attacks in Q3 2018
28. OIG’s Take On Healthcare.gov Patient Record Breach

SOUTH AMERICA

29. Ramped-up phishing attacks target universities around the world
30. “Brazilian Election” Themed Phish Target Users with South American-Targeted Malware, Astaroth Trojan
31. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros

EUROPE

32. Eurostar Resets Users' Passwords After Potential Data Breach
33. 2018’s Most Prevalent Ransomware – We Took it for a Ride
34. Was the Triton Malware Attack Russian in Origin?
35. Many States Reject DHS Offer to Check Election Systems for Flaws, Saying They’re Safe from Hackers
36. Ramped-up phishing attacks target universities around the world
37. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros
38. Recently found GPlayed trojan spinoff analysed
39. Fresh SamSam Ransomware Campaign Across the U.S
40. Federal employee infects gov't network with Russian malware through adult video websites
41. Businesses unprepared for Windows 10 migration, fear vulnerability to cyber threats
42. DDoS Attacks in Q3 2018
43. 12 malicious libraries found in Python PyPI

AFRICA

44. Ramped-up phishing attacks target universities around the world
45. Nigerian Airline Arik Air May Have Leaked Customer Data
46. Nigerian airline Arik Air may have leaked customer data
47. DDoS Attacks in Q3 2018

Sector brief for 2018-10-31

HEALTHCARE

1. More Information about July 2018’s Singapore SingHealth Data Breach Revealed
2. Social Security Numbers, PII Stolen in NorthBay Healthcare Data Breach
3. Healthcare.gov website suffers data breach affecting 75,000 enrollees
4. Australian companies failing to slow the tide of data breaches: OAIC
5. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros
6. Fresh SamSam Ransomware Campaign Across the U.S
7. SamSam Ransomware Campaigns Highly Active in 2018 and Heavily Targets Organizations
8. OIG’s Take On Healthcare.gov Patient Record Breach

TRANSPORT

9. Chinese Intel Agents Indicted for 5-Year IP Theft Campaign
10. Webroot Unveils Nastiest Malware of 2018

BANKING & FINANCE

11. The Radisson Hotel Group has suffered a data breach
12. 2018’s Most Prevalent Ransomware – We Took it for a Ride
13. Tomorrowland festival goers affected by data breach
14. Emotet malware gang is mass-harvesting millions of emails in mysterious campaign
15. Kraken Ransomware Upgrades Distribution with RaaS Model
16. Security Code AutoFill Flaw Exposes iOS, macOS Users to Banking Fraud Attacks
17. Ramped-up phishing attacks target universities around the world
18. Emotet Trojan Begins Stealing Victim's Email Using New Module
19. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros
20. Recently found GPlayed trojan spinoff analysed
21. DDoS Attacks in Q3 2018
22. What do you think the combination of the #TrickBot banking Trojan to #IcedID means for the future of banking #Trojans?
23. Webroot Unveils Nastiest Malware of 2018
24. OIG’s Take On Healthcare.gov Patient Record Breach

INFORMATION & TELECOMMUNICATION

25. 85 Millions of voter records available for sale ahead of the 2018 US Midterm Elections
26. 2018’s Most Prevalent Ransomware – We Took it for a Ride
27. “Brazilian Election” Themed Phish Target Users with South American-Targeted Malware, Astaroth Trojan
28. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros
29. DDoS Attacks in Q3 2018

FOOD

Nil

WATER

Nil

ENERGY

30. Prioritizing the fundamentals of coordinated vulnerability disclosure
31. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros

GOVERNMENT & PUBLIC SERVICE

32. 85 Millions of voter records available for sale ahead of the 2018 US Midterm Elections
33. More Information about July 2018’s Singapore SingHealth Data Breach Revealed
34. Software bugs could compromise midterm votes in Texas
35. Why data security is a priority for political campaigns
36. Prioritizing the fundamentals of coordinated vulnerability disclosure
37. 2018’s Most Prevalent Ransomware – We Took it for a Ride
38. Tomorrowland festival goers affected by data breach
39. Many States Reject DHS Offer to Check Election Systems for Flaws, Saying They’re Safe from Hackers
40. “Brazilian Election” Themed Phish Target Users with South American-Targeted Malware, Astaroth Trojan
41. "The presence of the insecure remote access software on systems used for election management raised concerns that malicious #ThreatActors --
42. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros
43. Fresh SamSam Ransomware Campaign Across the U.S
44. All You Need to Know About Blockchain Testing
45. DDoS Attacks in Q3 2018
46. SamSam Ransomware Campaigns Highly Active in 2018 and Heavily Targets Organizations

Daily brief for 2018-10-31

ASIA

1. More Information about July 2018’s Singapore SingHealth Data Breach Revealed
2. Was the Triton Malware Attack Russian in Origin?
3. Chinese Intel Agents Indicted for 5-Year IP Theft Campaign
4. Many States Reject DHS Offer to Check Election Systems for Flaws, Saying They’re Safe from Hackers
5. Ramped-up phishing attacks target universities around the world
6. NTT Security targets botnet infrastructure
7. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros
8. Fresh SamSam Ransomware Campaign Across the U.S
9. DDoS Attacks in Q3 2018
10. Microsoft continues to push the KB4464455 patch for fixing ZIP bug

WORLD

11. 85 Millions of voter records available for sale ahead of the 2018 US Midterm Elections
12. Eurostar Resets Users' Passwords After Potential Data Breach
13. Prioritizing the fundamentals of coordinated vulnerability disclosure
14. 2018’s Most Prevalent Ransomware – We Took it for a Ride
15. Was the Triton Malware Attack Russian in Origin?
16. Many States Reject DHS Offer to Check Election Systems for Flaws, Saying They’re Safe from Hackers
17. Ramped-up phishing attacks target universities around the world
18. Nigerian Airline Arik Air May Have Leaked Customer Data
19. Whiteboard Wednesday: Common Vulnerabilities as Personified by Halloween Costumes
20. Vulnerability Spotlight: Multiple Vulnerabilities in Yi Technology Home Camera
21. “Brazilian Election” Themed Phish Target Users with South American-Targeted Malware, Astaroth Trojan
22. Australian companies failing to slow the tide of data breaches: OAIC
23. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros
24. Recently found GPlayed trojan spinoff analysed
25. Fresh SamSam Ransomware Campaign Across the U.S
26. Nigerian airline Arik Air may have leaked customer data
27. Federal employee infects gov't network with Russian malware through adult video websites
28. Businesses unprepared for Windows 10 migration, fear vulnerability to cyber threats
29. DDoS Attacks in Q3 2018
30. A Report on Data Breaches in Australia
31. 12 malicious libraries found in Python PyPI
32. OIG’s Take On Healthcare.gov Patient Record Breach

ATTACKS

33. 85 Millions of voter records available for sale ahead of the 2018 US Midterm Elections
34. More Information about July 2018’s Singapore SingHealth Data Breach Revealed
35. Software bugs could compromise midterm votes in Texas
36. Eurostar Resets Users' Passwords After Potential Data Breach
37. Why data security is a priority for political campaigns
38. The Radisson Hotel Group has suffered a data breach
39. Social Security Numbers, PII Stolen in NorthBay Healthcare Data Breach
40. Healthcare.gov website suffers data breach affecting 75,000 enrollees
41. Tomorrowland festival goers affected by data breach
42. Chinese Intel Agents Indicted for 5-Year IP Theft Campaign
43. Emotet malware gang is mass-harvesting millions of emails in mysterious campaign
44. Re: The Zombie Phish
45. Ramped-up phishing attacks target universities around the world
46. Nigerian Airline Arik Air May Have Leaked Customer Data
47. Cyber Attacks Up Prior To Midterms, 81.5 Million Voter Records Threatened
48. “Brazilian Election” Themed Phish Target Users with South American-Targeted Malware, Astaroth Trojan
49. Average data breach fines have doubled as ICO hints at higher fines
50. Australian companies failing to slow the tide of data breaches: OAIC
51. Assault and battery: Malvertising campaign checks user device' charge as anti-detection technique
52. Live Webinar | Identity Proofing in the Era of Data Breaches and Social Networking
53. Come fermare i data breach con i servizi di Detection&Response #MDR: il caso di un'importante media company finlandese
54. Fresh SamSam Ransomware Campaign Across the U.S
55. Nigerian airline Arik Air may have leaked customer data
56. Emotet malware gang is mass-harvesting millions of emails in mysterious campaign
57. SamSam Ransomware Campaigns Highly Active in 2018 and Heavily Targets Organizations
58. [Infographic] 5 Ways #Cybercriminals Can Access Your Emails Without #Phishing:
59. A Report on Data Breaches in Australia
60. A DHCPv6 package could compromise a vulnerable Linux system
61. OIG’s Take On Healthcare.gov Patient Record Breach
62. Exploit Chain Modified to Slip Antivirus Detection in a New Malware Campaign

THREATS

63. Software bugs could compromise midterm votes in Texas
64. Yi Technology Home Cameras Exploitable Using Multiple Vulnerabilities
65. Prioritizing the fundamentals of coordinated vulnerability disclosure
66. Vulnerability Spotlight: Multiple Vulnerabilities in Yi Technology Home Camera
67. SamSam Ransomware Goes on a Tear
68. Apple Patches Multiple Major Security Flaws
69. 2018’s Most Prevalent Ransomware – We Took it for a Ride
70. Actively Exploited High Impact DoS Vulnerability Found in Cisco ASA and FTD
71. Was the Triton Malware Attack Russian in Origin?
72. Apple Fixes Multiple macOS, iOS Bugs Including a Quirky FaceTime Vulnerability
73. Emotet malware gang is mass-harvesting millions of emails in mysterious campaign
74. Many States Reject DHS Offer to Check Election Systems for Flaws, Saying They’re Safe from Hackers
75. Kraken Ransomware Upgrades Distribution with RaaS Model
76. Security Code AutoFill Flaw Exposes iOS, macOS Users to Banking Fraud Attacks
77. GandCrab ransomware crew loses $1M after Bitdefender releases free decrypter
78. Whiteboard Wednesday: Common Vulnerabilities as Personified by Halloween Costumes
79. Vulnerability Spotlight: Multiple Vulnerabilities in Yi Technology Home Camera
80. Promethium/StrongPity Malware
81. “Brazilian Election” Themed Phish Target Users with South American-Targeted Malware, Astaroth Trojan
82. "The presence of the insecure remote access software on systems used for election management raised concerns that malicious #ThreatActors --
83. Double-Gun Trojan which uses game plug-in to spread, is updated to V4.0 and looking for trouble
84. Kraken Cryptor ransomware merges with Fallout exploit kit, fees slashed to gain followers
85. Emotet Trojan Begins Stealing Victim's Email Using New Module
86. Kraken Ransomware Now Being Distributed by Fallout Exploit Kit
87. Several vulnerabilities were found in controllers made by @Universal_Robot. Discover what these #robot controllers are used for and how
88. It's a front? Mac cryptocurrency ticker actually installs backdoors
89. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros
90. Emotet trojan starts stealing full emails from infected machines
91. Recently found GPlayed trojan spinoff analysed
92. Fresh SamSam Ransomware Campaign Across the U.S
93. Apple Patches Passcode Bypass, FaceTime Flaws in iOS
94. Federal employee infects gov't network with Russian malware through adult video websites
95. All You Need to Know About Blockchain Testing
96. Businesses unprepared for Windows 10 migration, fear vulnerability to cyber threats
97. Apple Patches Critical Flaws in iOS 12.1, macOS 10.14.1 Updates
98. Canonical Releases Ubuntu 16.04 LTS Kernel Patch, Fixed 4 Security Vulnerabilities
99. Emotet malware gang is mass-harvesting millions of emails in mysterious campaign
100. CVE-2018-18649: Gitlab Wiki API Remote Code Execution Vulnerability Alert
101. SamSam Ransomware Campaigns Highly Active in 2018 and Heavily Targets Organizations
102. What do you think the combination of the #TrickBot banking Trojan to #IcedID means for the future of banking #Trojans?
103. Apple Released Security Updates for iOS, watchOS, Safari , tvOS, iTunes & Fixed Several Vulnerabilities
104. Windows 10 Universal Windows Platform Vulnerability
105. 12 malicious libraries found in Python PyPI
106. 5 Types of Malware Currently Affecting macOS
107. Webroot Unveils Nastiest Malware of 2018
108. Microsoft continues to push the KB4464455 patch for fixing ZIP bug
109. Exploit Chain Modified to Slip Antivirus Detection in a New Malware Campaign

CRIME

110. 85 Millions of voter records available for sale ahead of the 2018 US Midterm Elections
111. The Radisson Hotel Group has suffered a data breach
112. Social Security Numbers, PII Stolen in NorthBay Healthcare Data Breach
113. Tomorrowland festival goers affected by data breach
114. Chinese Intel Agents Indicted for 5-Year IP Theft Campaign
115. Re: The Zombie Phish
116. “Brazilian Election” Themed Phish Target Users with South American-Targeted Malware, Astaroth Trojan
117. NTT Security targets botnet infrastructure
118. Fresh SamSam Ransomware Campaign Across the U.S
119. All You Need to Know About Blockchain Testing
120. DDoS Attacks in Q3 2018

POLITICS

121. 85 Millions of voter records available for sale ahead of the 2018 US Midterm Elections
122. More Information about July 2018’s Singapore SingHealth Data Breach Revealed
123. Many States Reject DHS Offer to Check Election Systems for Flaws, Saying They’re Safe from Hackers
124. “Brazilian Election” Themed Phish Target Users with South American-Targeted Malware, Astaroth Trojan
125. "The presence of the insecure remote access software on systems used for election management raised concerns that malicious #ThreatActors --

APT report for 2018-10-30

TRANSNATIONAL / UNKNOWN

1. Treat or Trick? Six Dangerous Digital Threats Dressed up As Irresistible Treats

CHINA

2. MadoMiner Part 2 - Mask

INDIA

Nil

NORTH KOREA

Nil

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

Nil

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-10-30

WINDOWS

1. Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims
2. Kraken Cryptor Ransomware Gains Popularity Among Cybercriminals
3. Apple Fixes Creepy FaceTime Vulnerability, Crash Bug in macOS, and More
4. Zero-day Windows Deletebug: How to squash this ‘low-quality' pest
5. Ransomware Threat Continues: How Infections Take Place
6. Windows Zero-Day Vulnerability Disclosed
7. Treat or Trick? Six Dangerous Digital Threats Dressed up As Irresistible Treats
8. The analysis of the attack which uses Excel 4.0 macro to avoid antivirus software detection
9. MadoMiner Part 2 - Mask
10. Windows 10 Bug Let UWP Apps Access All Files Without Users' Consent
11. Feature to attach video to Word files could be used to send malicious code

LINUX

12. CVE-2018-15688: systemd remote code execution vulnerability affects Linux machines
13. An Update on the jQuery-File-Upload Vulnerability
14. Libssh Vulnerability Leaves Servers Open to Unauthorized Access
15. Demonbot targets cloud servers for DDoS attacks
16. New Botnet That Targets Cloud Servers for DDoS Attacks
17. Multiple Linux distributions affected by new vulnerability

UNIX

18. Multiple Linux distributions affected by new vulnerability

ANDROID

19. Malicious Apps Removed From Google Play Store
20. Treat or Trick? Six Dangerous Digital Threats Dressed up As Irresistible Treats
21. Cell Phone Security and Heads of State
22. Prominent #malspam #Nymaim campaign with #BankBot #Anubis for Android UA. APK's dropped from hxxp://pobierz48[.]tk/ SHA256: e0d17f4ff0196c6527f8aa47b3ef220d0f4e712805f99d38a0804f3ea9506ece @ThreatFabric @virqdroid @LukasStefanko @
23. Another #BianLian Android banking #Trojan in #GooglePlay showing his other face by dropping #RedAlert v2.1 CC @Bank_Security @

IOS

24. Apple Fixes Creepy FaceTime Vulnerability, Crash Bug in macOS, and More
25. Cell Phone Security and Heads of State

MACOS

26. Apple Fixes Creepy FaceTime Vulnerability, Crash Bug in macOS, and More
27. macOS Cryptomining Malware on the Rise

Threat report for 2018-10-30

DATA BREACH & DATA LOSS

1. How database hacks could impact elections and voters' fears
2. Girl Scouts data breach exposed personal information of 2,800 members
3. How database hacks could impact elections and voters' fears
4. Parties Seek to Settle Yahoo Data Breach Class Action for $50M
5. Center for Internet Security looks to expand threat sharing program to political campaigns
6. Internet-Exposed HMIs Put Energy, Water Facilities at Risk: Report
7. New SamSam ransomware campaign aims at targets across the US
8. An Update on the jQuery-File-Upload Vulnerability
9. Millions of Voter Records Up for Sale Ahead of the US Midterm Elections
10. Prominent #malspam #Nymaim campaign with #BankBot #Anubis for Android UA. APK's dropped from hxxp://pobierz48[.]tk/ SHA256: e0d17f4ff0196c6527f8aa47b3ef220d0f4e712805f99d38a0804f3ea9506ece @ThreatFabric @virqdroid @LukasStefanko @
11. Disrupting the Flow: Exposed and Vulnerable Water and Energy Infrastructures
12. Thousands of critical energy and water systems exposed online for anyone to exploit
13. If it's only able to leak data at 15 bits per hour, is #NetSpectre a serious threat? Learn more about
14. An email hack affecting the Girl Scouts of Orange County, Calif. may have compromised the personal data of 2,800 members
15. La tua azienda è davvero preparata in caso di data breach?
16. By me @Forbes: 81.5M Voter Records For Sale On Dark Web Ahead Of Midterm Elections
17. Compression File Formats of the past Come Haunting in Spam Campaigns
18. Biggest data breach penalties for 2018
19. New McAfee Report Reveals Data in the Cloud More Exposed Than Organizations Think

DENIAL-OF-SERVICE

20. Judge Ordered Man to Pay $8 Million for Launching a DDoS Attack Against Rutgers
21. Demonbot targets cloud servers for DDoS attacks
22. New Botnet That Targets Cloud Servers for DDoS Attacks
23. Anonymous knocks out Gabon government sites with DoS attack
24. Prominent #malspam #Nymaim campaign with #BankBot #Anubis for Android UA. APK's dropped from hxxp://pobierz48[.]tk/ SHA256: e0d17f4ff0196c6527f8aa47b3ef220d0f4e712805f99d38a0804f3ea9506ece @ThreatFabric @virqdroid @LukasStefanko @

MALVERTISING

Nil

PHISHING

25. 4 tips to keep safe when phishing for treats this Halloween
26. AI-Facilitated Product Aims to Stop Spear-Phishing Attacks
27. INKY emerges from stealth with email spoofing, phishing protection service
28. Is it a Phish? Halloween Edition
29. There are plenty of different types of phishing attacks, but they all rely on the same basic mechanism: exploiting human
30. Report on Phishing Attack Shows Microsoft, Paypal as well as Netflix as the Top Targets
31. Cofense Triggers its Increased Phishing Defense Services

WEB DEFACEMENT

Nil

BOTNET

32. Bushido Botnet Offered as MaaS
33. New Botnet That Targets Cloud Servers for DDoS Attacks
34. The author of the Mirai botnet gets six months of house arrest
35. The Russian built #VPNFilter #botnet was previously taken down after 500,000 routers were infected. However, recently it attempted a comeback.
36. Recently discovered DemonBot Botnet targets Hadoop servers

RANSOMWARE

37. Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims
38. Kraken Cryptor Ransomware Gains Popularity Among Cybercriminals
39. SamSam ransomware group has hit 67 organizations in 2018, researchers say
40. Ransomware Threat Continues: How Infections Take Place
41. New SamSam ransomware campaign aims at targets across the US
42. GandCrab: The Most Popular Multi-Million Dollar Ransomware of the Year
43. SamSam: Targeted Ransomware Attacks Continue
44. Threat Report: Jaff Ransomware Causes Havoc
45. CommonRansom Ransomware Demands RDP Access to Decrypt Files

CRYPTOMINING & CRYPTOCURRENCIES

46. Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims
47. Kraken Cryptor Ransomware Gains Popularity Among Cybercriminals
48. Bitcoin Dealer Who Operated Unlicensed Bitcoin Exchange Faces Five Years in Jail
49. Kraken Resurfaces From the Deep Web
50. macOS Cryptomining Malware on the Rise
51. 3 Reasons Enterprises Are Moving to Decentralized Blockchain Applications
52. Widely Used Cryptocurrency App Launching 2 Different Powerful Backdoor on Mac Users

MALWARE

53. Malware Targeting Smartphones via Three DSP Providers
54. GPlayed Trojan's Baby Brother Is After Your Bank Account
55. macOS Cryptomining Malware on the Rise
56. Malware Infection at USGS Traced to Employee’s Habit of Viewing Adult Content
57. Malicious Apps Removed From Google Play Store
58. .@FireEye security researchers claimed the Russian government was 'most likely' behind the #Triton #Malware attack on an industrial control system
59. Employee Watched Porn at Work via 9000 Web pages Drops Malware on U.S Government Network
60. A fed visited 9,000 porn sites, infecting government networks with Russian malware
61. GPlayed Trojan's baby brother is after your bank account
62. Nastiest malware of 2018: Top attack payloads wreaking havoc
63. Snakes in the grass! Malicious code slithers into Python PyPI repository
64. The analysis of the attack which uses Excel 4.0 macro to avoid antivirus software detection
65. Prominent #malspam #Nymaim campaign with #BankBot #Anubis for Android UA. APK's dropped from hxxp://pobierz48[.]tk/ SHA256: e0d17f4ff0196c6527f8aa47b3ef220d0f4e712805f99d38a0804f3ea9506ece @ThreatFabric @virqdroid @LukasStefanko @
66. How to Be Protected from Malicious Message Crashing PS4 Console
67. Another #BianLian Android banking #Trojan in #GooglePlay showing his other face by dropping #RedAlert v2.1 CC @Bank_Security @
68. Widely Used Cryptocurrency App Launching 2 Different Powerful Backdoor on Mac Users
69. Attackers getting better at quickly generating countless versions of existing #malware #antivirus @MariaKorolov -
70. Malicious hackers and their interest in bypassing CAPTCHA
71. Feature to attach video to Word files could be used to send malicious code
72. Most Important Security Tools and Resources For Security Researcher and Malware Analyst
73. A good insight for Europeans on the process of the US mid-term elections and whether or it they are hackable

EXPLOIT

74. Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims
75. Thousands of critical energy and water systems exposed online for anyone to exploit

VULNERABILITY

76. Apple Fixes Creepy FaceTime Vulnerability, Crash Bug in macOS, and More
77. Talos Vulnerability Discovery Year in Review – 2018
78. CVE-2018-15688: systemd remote code execution vulnerability affects Linux machines
79. A #RemoteCodeExecution flaw in @Cisco Webex -- called WebExec -- could be an easy vector for insider attacks, and the
80. Zero-day Windows Deletebug: How to squash this ‘low-quality' pest
81. Microsoft Office Vulnerability Found, Check Point Research To The Rescue
82. An Update on the jQuery-File-Upload Vulnerability
83. Libssh Vulnerability Leaves Servers Open to Unauthorized Access
84. Windows Zero-Day Vulnerability Disclosed
85. .@Siemens SICLOCK central plant clocks were recently found to be affected by several vulnerabilities, some of which have been rated
86. Talos Vulnerability Discovery Year in Review - 2018
87. 92% of External Web Apps Have Exploitable Security Flaws or Weaknesses: Report
88. Windows 10 Bug Let UWP Apps Access All Files Without Users' Consent
89. Unpatched MS Word Flaw Could Allow Hackers to Infect Your Computer
90. Multiple Linux distributions affected by new vulnerability
91. Spring Framework 5.1.2 releases: bugs fix

Region brief for 2018-10-30

ASIA

1. Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims
2. Kraken Cryptor Ransomware Gains Popularity Among Cybercriminals
3. Parties Seek to Settle Yahoo Data Breach Class Action for $50M
4. macOS Cryptomining Malware on the Rise
5. Ransomware Threat Continues: How Infections Take Place
6. .@FireEye security researchers claimed the Russian government was 'most likely' behind the #Triton #Malware attack on an industrial control system
7. Cell Phone Security and Heads of State
8. Disrupting the Flow: Exposed and Vulnerable Water and Energy Infrastructures

OCEANIA

Nil

NORTH AMERICA

9. Kraken Cryptor Ransomware Gains Popularity Among Cybercriminals
10. Girl Scouts data breach exposed personal information of 2,800 members
11. SamSam ransomware group has hit 67 organizations in 2018, researchers say
12. Parties Seek to Settle Yahoo Data Breach Class Action for $50M
13. Bitcoin Dealer Who Operated Unlicensed Bitcoin Exchange Faces Five Years in Jail
14. Malware Targeting Smartphones via Three DSP Providers
15. macOS Cryptomining Malware on the Rise
16. Malware Infection at USGS Traced to Employee’s Habit of Viewing Adult Content
17. Ransomware Threat Continues: How Infections Take Place
18. New SamSam ransomware campaign aims at targets across the US
19. Employee Watched Porn at Work via 9000 Web pages Drops Malware on U.S Government Network
20. Treat or Trick? Six Dangerous Digital Threats Dressed up As Irresistible Treats
21. SamSam: Targeted Ransomware Attacks Continue
22. Is it a Phish? Halloween Edition
23. Threat Report: Jaff Ransomware Causes Havoc
24. Cell Phone Security and Heads of State
25. Millions of Voter Records Up for Sale Ahead of the US Midterm Elections
26. There are plenty of different types of phishing attacks, but they all rely on the same basic mechanism: exploiting human
27. 92% of External Web Apps Have Exploitable Security Flaws or Weaknesses: Report
28. Disrupting the Flow: Exposed and Vulnerable Water and Energy Infrastructures
29. The author of the Mirai botnet gets six months of house arrest
30. A good insight for Europeans on the process of the US mid-term elections and whether or it they are hackable

SOUTH AMERICA

31. Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims
32. Kraken Cryptor Ransomware Gains Popularity Among Cybercriminals
33. Ransomware Threat Continues: How Infections Take Place

EUROPE

34. Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims
35. Kraken Cryptor Ransomware Gains Popularity Among Cybercriminals
36. .@FireEye security researchers claimed the Russian government was 'most likely' behind the #Triton #Malware attack on an industrial control system
37. Treat or Trick? Six Dangerous Digital Threats Dressed up As Irresistible Treats
38. A fed visited 9,000 porn sites, infecting government networks with Russian malware
39. Threat Report: Jaff Ransomware Causes Havoc
40. Cell Phone Security and Heads of State
41. Disrupting the Flow: Exposed and Vulnerable Water and Energy Infrastructures
42. The author of the Mirai botnet gets six months of house arrest
43. The Russian built #VPNFilter #botnet was previously taken down after 500,000 routers were infected. However, recently it attempted a comeback.

AFRICA

44. Cell Phone Security and Heads of State
45. Anonymous knocks out Gabon government sites with DoS attack