APT report for 2018-11-01

TRANSNATIONAL / UNKNOWN

1. 0x20k of Ghost Squad Hackers Releases ODay Exploit Targeting Apache Hadoop
2. British Airways data breach bigger than originally thought
3. CBS News: A Look Behind the Magecart Assault on E-commerce

CHINA

4. DOJ indictment spotlights China’s civilian intel agency – and its hacker recruits
5. Comodo launches Dome Shield Platinum to secure and control Internet access

INDIA

Nil

NORTH KOREA

Nil

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

6. CSM-ACE 2018: FireEye Interview – ASEAN Countries Need to Place Greater Focus on Resourcing Their Cyber Defences

SERBIA

Nil

UKRAINE

7. New Techniques to Uncover and Attribute Cobalt Gang Commodity Builders and Infrastructure Revealed

Platform report for 2018-11-01

WINDOWS

1. Trickbot Malware Now Also Steals Passwords From Apps, Web Browsers
2. Emotet Malware, the Most Probable Malware of the Year
3. More Typo-Squatting Malware Found on PyPI
4. Windows Defender Bug Needs a Restart, Not Shutdown, To Enable Sandbox
5. Healthcare Industry Continues To Be the Favourite for Ransomware
6. Trickbot Shows Off New Trick: Password Grabber Module
7. SamSam Attackers Have Hit 67 Ransomware Targets
8. Talos Vulnerability Deep Dive - TALOS-2018-0636 / CVE-2018-3971 Sophos HitmanPro.Alert vulnerability
9. Perl-Based Shellbot Looks to Target Organizations via C&C

LINUX

10. Open Letter to Francisco Partners: Continued Misuse of NSO Group’s Pegasus Technology
11. DOJ indictment spotlights China’s civilian intel agency – and its hacker recruits
12. 0x20k of Ghost Squad Hackers Releases ODay Exploit Targeting Apache Hadoop
13. Perl-Based Shellbot Looks to Target Organizations via C&C

UNIX

Nil

ANDROID

14. Government employee who used to watch porn at work alleged guilty of infecting with malware a network
15. Perl-Based Shellbot Looks to Target Organizations via C&C

IOS

Nil

MACOS

Nil

Threat report for 2018-11-01

DATA BREACH & DATA LOSS

1. Australian defence contractor Austal hit by data breach
2. Radisson discloses data breach impacting rewards customers
3. 22,000 Records Exposed by JoomlArt in Jira Ticket
4. ‘Aaron Smith’ Sextortion scam campaigns hit tens of thousands of individuals
5. New Bluetooth Vulnerabilities Exposed in Aruba, Cisco, Meraki Access Points
6. Customer Information Stolen in Radisson Hotel Group Data Breach
7. British Airways data breach bigger than originally thought
8. Where Is the Consumer Outrage about Data Breaches?
9. Eurostar Resets Passwords of Customers After Data Breach
10. Radisson Hotel Group suffers data breach, customer info leaked
11. Radisson Rewards Program Targeted in Data Breach
12. "If the schemas prove not to be compatible, a backup of the previous version of a database must be used
13. Emotet Malware – Mass-Harvesting millions of Emails in secret Campaign
14. Last year the @USAgov required agencies to implement #DMARC records and policies by October 2018. Learn just how hard DMARC
15. New Ramnit Campaign Spreads Azorult Malware
16. #NetSpectre leaks data remotely via side-channel attacks. Learn from expert Michael Cobb of @thehairyITdog why data from #microprocessors is not
17. Phishing Attacks Breach 20,000 Patient Records of Catawba Valley Medical Center
18. Radisson Hotel Group Data Breach Exposed Customer’s Personal Data
19. Beware !! Square & PayPal Mobile Point of Sales (POS) Devices Are Extremely Vulnerable to Credit/Debit Card Data Theft

DENIAL-OF-SERVICE

20. Cisco ups the ante for 400G Ethernet with big-bandwidth data-center switches

MALVERTISING

21. Bad ads: Publishers look to stop malvertising for good

PHISHING

22. How phishing is evolving to outpace awareness
23. Going with what works: The state of phishing
24. October may be over – but phishing attacks never stop. Here’s how to make security awareness successful all year round.
25. Trickbot Shows Off New Trick: Password Grabber Module
26. Expert Insights Names Barracuda’s AI powered Sentinel Top Phishing protection product
27. Phishing Attacks Breach 20,000 Patient Records of Catawba Valley Medical Center

WEB DEFACEMENT

Nil

BOTNET

28. Experts presented BOTCHAIN, the first fully functional Botnet built upon the Bitcoin Protocol
29. Defending your pumpkin from tracker zombies
30. Necurs Botnet Distributing Sextortion Email Scams
31. The Russian built #VPNFilter #botnet was taken down by the @FBI after over 500,000 routers were infected. However, VPNFilter is

RANSOMWARE

32. Ransomware and Back-Up Plans
33. Healthcare Industry Continues To Be the Favourite for Ransomware
34. SamSam Attackers Have Hit 67 Ransomware Targets
35. Nice work if you can get it: GandCrab ransomware nets millions even though it has been broken
36. Crypto-Locking Kraken Ransomware Looms Larger

CRYPTOMINING & CRYPTOCURRENCIES

37. Experts presented BOTCHAIN, the first fully functional Botnet built upon the Bitcoin Protocol
38. UK considers banning cryptocurrencies for their lack of “intrinsic value”
39. Crypto-Locking Kraken Ransomware Looms Larger
40. Crypto Micropayments: an Exciting Future for Blockchain Transactions

MALWARE

41. 2018’s worst malware revealed in report
42. Trickbot Malware Now Also Steals Passwords From Apps, Web Browsers
43. Emotet Malware, the Most Probable Malware of the Year
44. USB Drives Deliver Dangerous Malware to Industrial Facilities: Honeywell
45. More Typo-Squatting Malware Found on PyPI
46. Employee used US government network for adult websites, infected infrastructure with Russian malware
47. Government employee who used to watch porn at work alleged guilty of infecting with malware a network
48. Malware Analysis for Blue Teams
49. Emotet Malware – Mass-Harvesting millions of Emails in secret Campaign
50. Hackers Drops New Emotet Malware to Perform Mass Email Exfiltration From Victims Email Client
51. New Ramnit Campaign Spreads Azorult Malware
52. Perl-Based Shellbot Looks to Target Organizations via C&C
53. IKARUS Security Software partners with PolySwarm to advance early malware detection
54. Pdgmail – Forensic Tool to Analysis Process Memory Dump

EXPLOIT

55. PoC Exploit Compromises Microsoft Live Accounts via Subdomain Hijacking
56. 0x20k of Ghost Squad Hackers Releases ODay Exploit Targeting Apache Hadoop
57. Hackers Exploit Cisco Zero Day Vulnerability in Wild Resulting in DoS Condition

VULNERABILITY

58. Yi IoT Home Camera Riddled with Code-Execution Vulnerabilities
59. BLEEDINGBIT Bluetooth flaws in TI chips expose enterprises to remote attacks
60. New Bluetooth Vulnerabilities Exposed in Aruba, Cisco, Meraki Access Points
61. Windows Defender Bug Needs a Restart, Not Shutdown, To Enable Sandbox
62. Bluetooth Chip Flaws Expose Enterprises to Remote Attacks
63. Two Zero-Day Bugs Open Millions of Wireless Access Points to Attack
64. Cisco says a flaw in its Adaptive Security Appliance allows remote attacks
65. Talos Vulnerability Deep Dive – TALOS-2018-0636 / CVE-2018-3971 Sophos HitmanPro.Alert vulnerability
66. Security researchers find flaws in chips used in hospitals, factories and stores
67. Bleedingbit: Critical vulnerabilities in BLE chips expose millions of access points to attack
68. Bleedingbit zero-day chip flaws may expose majority of enterprises to remote code execution attacks
69. Cisco Zero-Day Exploited In The Wild To Crash And Reload Devices
70. Zero-Day RCE Vulnerabilities Expose Millions of BLE-Enabled Devices to Attacks
71. Hackers Exploit Cisco Zero Day Vulnerability in Wild Resulting in DoS Condition
72. New BLEEDINGBIT Vulnerabilities Affect Widely-Used Bluetooth Chips
73. Two New Bluetooth Chip Flaws Expose Millions of Devices to Remote Attacks
74. .@Siemens disclosed six SICLOCK flaws that were found within its central plant clocks. Discover why three flaws have been rated
75. Our fabulous @5ean5ullivan explains to @CyberSauna listeners how the multiple vulnerabilities in the US electoral system may be^H^H^H^H^H^Hare being exploited.
76. Bleedingbit Bluetooth Vulnerabilities Expose WiFi APs to Risk
77. Talos Vulnerability Deep Dive - TALOS-2018-0636 / CVE-2018-3971 Sophos HitmanPro.Alert vulnerability
78. Cisco Warns of Zero-Day Vulnerability in Security Appliances
79. Cisco zero-day exploited in the wild to crash and reload devices

Region brief for 2018-11-01

ASIA

1. ‘Aaron Smith’ Sextortion scam campaigns hit tens of thousands of individuals
2. Open Letter to Francisco Partners: Continued Misuse of NSO Group’s Pegasus Technology
3. DOJ indictment spotlights China’s civilian intel agency – and its hacker recruits
4. Trickbot Shows Off New Trick: Password Grabber Module
5. SamSam Attackers Have Hit 67 Ransomware Targets
6. Perl-Based Shellbot Looks to Target Organizations via C&C
7. CSM-ACE 2018: FireEye Interview – ASEAN Countries Need to Place Greater Focus on Resourcing Their Cyber Defences

OCEANIA

8. Australian defence contractor Austal hit by data breach
9. Trickbot Shows Off New Trick: Password Grabber Module
10. SamSam Attackers Have Hit 67 Ransomware Targets

NORTH AMERICA

11. Australian defence contractor Austal hit by data breach
12. BLEEDINGBIT Bluetooth flaws in TI chips expose enterprises to remote attacks
13. Emotet Malware, the Most Probable Malware of the Year
14. Open Letter to Francisco Partners: Continued Misuse of NSO Group’s Pegasus Technology
15. New Bluetooth Vulnerabilities Exposed in Aruba, Cisco, Meraki Access Points
16. DOJ indictment spotlights China’s civilian intel agency – and its hacker recruits
17. Bleedingbit: Critical vulnerabilities in BLE chips expose millions of access points to attack
18. Healthcare Industry Continues To Be the Favourite for Ransomware
19. Employee used US government network for adult websites, infected infrastructure with Russian malware
20. CBS News: A Look Behind the Magecart Assault on E-commerce
21. UK considers banning cryptocurrencies for their lack of “intrinsic value”
22. Government employee who used to watch porn at work alleged guilty of infecting with malware a network
23. Trickbot Shows Off New Trick: Password Grabber Module
24. SamSam Attackers Have Hit 67 Ransomware Targets
25. Our fabulous @5ean5ullivan explains to @CyberSauna listeners how the multiple vulnerabilities in the US electoral system may be^H^H^H^H^H^Hare being exploited.
26. Hackers Drops New Emotet Malware to Perform Mass Email Exfiltration From Victims Email Client
27. Talos Vulnerability Deep Dive - TALOS-2018-0636 / CVE-2018-3971 Sophos HitmanPro.Alert vulnerability
28. Perl-Based Shellbot Looks to Target Organizations via C&C
29. Beware !! Square & PayPal Mobile Point of Sales (POS) Devices Are Extremely Vulnerable to Credit/Debit Card Data Theft

SOUTH AMERICA

30. Perl-Based Shellbot Looks to Target Organizations via C&C

EUROPE

31. ‘Aaron Smith’ Sextortion scam campaigns hit tens of thousands of individuals
32. Experts presented BOTCHAIN, the first fully functional Botnet built upon the Bitcoin Protocol
33. DOJ indictment spotlights China’s civilian intel agency – and its hacker recruits
34. British Airways data breach bigger than originally thought
35. Eurostar Resets Passwords of Customers After Data Breach
36. Employee used US government network for adult websites, infected infrastructure with Russian malware
37. CBS News: A Look Behind the Magecart Assault on E-commerce
38. UK considers banning cryptocurrencies for their lack of “intrinsic value”
39. Trickbot Shows Off New Trick: Password Grabber Module
40. Radisson Rewards Program Targeted in Data Breach
41. SamSam Attackers Have Hit 67 Ransomware Targets
42. Perl-Based Shellbot Looks to Target Organizations via C&C
43. The Russian built #VPNFilter #botnet was taken down by the @FBI after over 500,000 routers were infected. However, VPNFilter is
44. CSM-ACE 2018: FireEye Interview – ASEAN Countries Need to Place Greater Focus on Resourcing Their Cyber Defences

AFRICA

Nil

Sector brief for 2018-11-01

HEALTHCARE

1. BLEEDINGBIT Bluetooth flaws in TI chips expose enterprises to remote attacks
2. Experts presented BOTCHAIN, the first fully functional Botnet built upon the Bitcoin Protocol
3. Security researchers find flaws in chips used in hospitals, factories and stores
4. Healthcare Industry Continues To Be the Favourite for Ransomware
5. SamSam Attackers Have Hit 67 Ransomware Targets
6. Phishing Attacks Breach 20,000 Patient Records of Catawba Valley Medical Center

TRANSPORT

7. DOJ indictment spotlights China’s civilian intel agency – and its hacker recruits
8. SamSam Attackers Have Hit 67 Ransomware Targets

BANKING & FINANCE

9. Radisson discloses data breach impacting rewards customers
10. Trickbot Malware Now Also Steals Passwords From Apps, Web Browsers
11. Emotet Malware, the Most Probable Malware of the Year
12. ‘Aaron Smith’ Sextortion scam campaigns hit tens of thousands of individuals
13. Customer Information Stolen in Radisson Hotel Group Data Breach
14. British Airways data breach bigger than originally thought
15. Healthcare Industry Continues To Be the Favourite for Ransomware
16. CBS News: A Look Behind the Magecart Assault on E-commerce
17. UK considers banning cryptocurrencies for their lack of “intrinsic value”
18. Trickbot Shows Off New Trick: Password Grabber Module
19. Nice work if you can get it: GandCrab ransomware nets millions even though it has been broken
20. Crypto Micropayments: an Exciting Future for Blockchain Transactions
21. Beware !! Square & PayPal Mobile Point of Sales (POS) Devices Are Extremely Vulnerable to Credit/Debit Card Data Theft

INFORMATION & TELECOMMUNICATION

22. Open Letter to Francisco Partners: Continued Misuse of NSO Group’s Pegasus Technology
23. 0x20k of Ghost Squad Hackers Releases ODay Exploit Targeting Apache Hadoop
24. Where Is the Consumer Outrage about Data Breaches?
25. Our fabulous @5ean5ullivan explains to @CyberSauna listeners how the multiple vulnerabilities in the US electoral system may be^H^H^H^H^H^Hare being exploited.
26. Talos Vulnerability Deep Dive - TALOS-2018-0636 / CVE-2018-3971 Sophos HitmanPro.Alert vulnerability
27. Perl-Based Shellbot Looks to Target Organizations via C&C
28. Comodo launches Dome Shield Platinum to secure and control Internet access
29. Pdgmail – Forensic Tool to Analysis Process Memory Dump

FOOD

Nil

WATER

30. Malware Analysis for Blue Teams

ENERGY

31. BLEEDINGBIT Bluetooth flaws in TI chips expose enterprises to remote attacks
32. Bluetooth Chip Flaws Expose Enterprises to Remote Attacks
33. Bleedingbit: Critical vulnerabilities in BLE chips expose millions of access points to attack
34. Zero-Day RCE Vulnerabilities Expose Millions of BLE-Enabled Devices to Attacks
35. Two New Bluetooth Chip Flaws Expose Millions of Devices to Remote Attacks
36. CSM-ACE 2018: FireEye Interview – ASEAN Countries Need to Place Greater Focus on Resourcing Their Cyber Defences

GOVERNMENT & PUBLIC SERVICE

37. Emotet Malware, the Most Probable Malware of the Year
38. Open Letter to Francisco Partners: Continued Misuse of NSO Group’s Pegasus Technology
39. DOJ indictment spotlights China’s civilian intel agency – and its hacker recruits
40. Employee used US government network for adult websites, infected infrastructure with Russian malware
41. UK considers banning cryptocurrencies for their lack of “intrinsic value”
42. Government employee who used to watch porn at work alleged guilty of infecting with malware a network
43. SamSam Attackers Have Hit 67 Ransomware Targets
44. Our fabulous @5ean5ullivan explains to @CyberSauna listeners how the multiple vulnerabilities in the US electoral system may be^H^H^H^H^H^Hare being exploited.
45. Perl-Based Shellbot Looks to Target Organizations via C&C
46. CSM-ACE 2018: FireEye Interview – ASEAN Countries Need to Place Greater Focus on Resourcing Their Cyber Defences

Daily brief for 2018-11-01

ASIA

1. ‘Aaron Smith’ Sextortion scam campaigns hit tens of thousands of individuals
2. Open Letter to Francisco Partners: Continued Misuse of NSO Group’s Pegasus Technology
3. DOJ indictment spotlights China’s civilian intel agency – and its hacker recruits
4. Trickbot Shows Off New Trick: Password Grabber Module
5. SamSam Attackers Have Hit 67 Ransomware Targets
6. Perl-Based Shellbot Looks to Target Organizations via C&C
7. CSM-ACE 2018: FireEye Interview – ASEAN Countries Need to Place Greater Focus on Resourcing Their Cyber Defences

WORLD

8. Australian defence contractor Austal hit by data breach
9. BLEEDINGBIT Bluetooth flaws in TI chips expose enterprises to remote attacks
10. Emotet Malware, the Most Probable Malware of the Year
11. ‘Aaron Smith’ Sextortion scam campaigns hit tens of thousands of individuals
12. Open Letter to Francisco Partners: Continued Misuse of NSO Group’s Pegasus Technology
13. New Bluetooth Vulnerabilities Exposed in Aruba, Cisco, Meraki Access Points
14. Experts presented BOTCHAIN, the first fully functional Botnet built upon the Bitcoin Protocol
15. DOJ indictment spotlights China’s civilian intel agency – and its hacker recruits
16. Bleedingbit: Critical vulnerabilities in BLE chips expose millions of access points to attack
17. British Airways data breach bigger than originally thought
18. Eurostar Resets Passwords of Customers After Data Breach
19. Healthcare Industry Continues To Be the Favourite for Ransomware
20. Employee used US government network for adult websites, infected infrastructure with Russian malware
21. CBS News: A Look Behind the Magecart Assault on E-commerce
22. UK considers banning cryptocurrencies for their lack of “intrinsic value”
23. Government employee who used to watch porn at work alleged guilty of infecting with malware a network
24. Trickbot Shows Off New Trick: Password Grabber Module
25. Radisson Rewards Program Targeted in Data Breach
26. SamSam Attackers Have Hit 67 Ransomware Targets
27. Our fabulous @5ean5ullivan explains to @CyberSauna listeners how the multiple vulnerabilities in the US electoral system may be^H^H^H^H^H^Hare being exploited.
28. Hackers Drops New Emotet Malware to Perform Mass Email Exfiltration From Victims Email Client
29. Talos Vulnerability Deep Dive - TALOS-2018-0636 / CVE-2018-3971 Sophos HitmanPro.Alert vulnerability
30. Perl-Based Shellbot Looks to Target Organizations via C&C
31. The Russian built #VPNFilter #botnet was taken down by the @FBI after over 500,000 routers were infected. However, VPNFilter is
32. Beware !! Square & PayPal Mobile Point of Sales (POS) Devices Are Extremely Vulnerable to Credit/Debit Card Data Theft
33. CSM-ACE 2018: FireEye Interview – ASEAN Countries Need to Place Greater Focus on Resourcing Their Cyber Defences

ATTACKS

34. Australian defence contractor Austal hit by data breach
35. Radisson discloses data breach impacting rewards customers
36. 22,000 Records Exposed by JoomlArt in Jira Ticket
37. ‘Aaron Smith’ Sextortion scam campaigns hit tens of thousands of individuals
38. New Bluetooth Vulnerabilities Exposed in Aruba, Cisco, Meraki Access Points
39. How phishing is evolving to outpace awareness
40. Customer Information Stolen in Radisson Hotel Group Data Breach
41. Going with what works: The state of phishing
42. British Airways data breach bigger than originally thought
43. Where Is the Consumer Outrage about Data Breaches?
44. Eurostar Resets Passwords of Customers After Data Breach
45. Radisson Hotel Group suffers data breach, customer info leaked
46. October may be over – but phishing attacks never stop. Here’s how to make security awareness successful all year round.
47. Trickbot Shows Off New Trick: Password Grabber Module
48. Radisson Rewards Program Targeted in Data Breach
49. "If the schemas prove not to be compatible, a backup of the previous version of a database must be used
50. Bad ads: Publishers look to stop malvertising for good
51. Emotet Malware – Mass-Harvesting millions of Emails in secret Campaign
52. Last year the @USAgov required agencies to implement #DMARC records and policies by October 2018. Learn just how hard DMARC
53. Expert Insights Names Barracuda’s AI powered Sentinel Top Phishing protection product
54. New Ramnit Campaign Spreads Azorult Malware
55. #NetSpectre leaks data remotely via side-channel attacks. Learn from expert Michael Cobb of @thehairyITdog why data from #microprocessors is not
56. Phishing Attacks Breach 20,000 Patient Records of Catawba Valley Medical Center
57. Radisson Hotel Group Data Breach Exposed Customer’s Personal Data
58. Beware !! Square & PayPal Mobile Point of Sales (POS) Devices Are Extremely Vulnerable to Credit/Debit Card Data Theft

THREATS

59. 2018’s worst malware revealed in report
60. Yi IoT Home Camera Riddled with Code-Execution Vulnerabilities
61. BLEEDINGBIT Bluetooth flaws in TI chips expose enterprises to remote attacks
62. Trickbot Malware Now Also Steals Passwords From Apps, Web Browsers
63. Emotet Malware, the Most Probable Malware of the Year
64. USB Drives Deliver Dangerous Malware to Industrial Facilities: Honeywell
65. New Bluetooth Vulnerabilities Exposed in Aruba, Cisco, Meraki Access Points
66. More Typo-Squatting Malware Found on PyPI
67. Experts presented BOTCHAIN, the first fully functional Botnet built upon the Bitcoin Protocol
68. Ransomware and Back-Up Plans
69. Windows Defender Bug Needs a Restart, Not Shutdown, To Enable Sandbox
70. Bluetooth Chip Flaws Expose Enterprises to Remote Attacks
71. Two Zero-Day Bugs Open Millions of Wireless Access Points to Attack
72. Cisco says a flaw in its Adaptive Security Appliance allows remote attacks
73. Talos Vulnerability Deep Dive – TALOS-2018-0636 / CVE-2018-3971 Sophos HitmanPro.Alert vulnerability
74. Security researchers find flaws in chips used in hospitals, factories and stores
75. Bleedingbit: Critical vulnerabilities in BLE chips expose millions of access points to attack
76. Bleedingbit zero-day chip flaws may expose majority of enterprises to remote code execution attacks
77. Cisco Zero-Day Exploited In The Wild To Crash And Reload Devices
78. Healthcare Industry Continues To Be the Favourite for Ransomware
79. Employee used US government network for adult websites, infected infrastructure with Russian malware
80. UK considers banning cryptocurrencies for their lack of “intrinsic value”
81. Government employee who used to watch porn at work alleged guilty of infecting with malware a network
82. Zero-Day RCE Vulnerabilities Expose Millions of BLE-Enabled Devices to Attacks
83. Hackers Exploit Cisco Zero Day Vulnerability in Wild Resulting in DoS Condition
84. New BLEEDINGBIT Vulnerabilities Affect Widely-Used Bluetooth Chips
85. Two New Bluetooth Chip Flaws Expose Millions of Devices to Remote Attacks
86. SamSam Attackers Have Hit 67 Ransomware Targets
87. .@Siemens disclosed six SICLOCK flaws that were found within its central plant clocks. Discover why three flaws have been rated
88. Nice work if you can get it: GandCrab ransomware nets millions even though it has been broken
89. Crypto-Locking Kraken Ransomware Looms Larger
90. Malware Analysis for Blue Teams
91. Our fabulous @5ean5ullivan explains to @CyberSauna listeners how the multiple vulnerabilities in the US electoral system may be^H^H^H^H^H^Hare being exploited.
92. Emotet Malware – Mass-Harvesting millions of Emails in secret Campaign
93. Crypto Micropayments: an Exciting Future for Blockchain Transactions
94. Bleedingbit Bluetooth Vulnerabilities Expose WiFi APs to Risk
95. Hackers Drops New Emotet Malware to Perform Mass Email Exfiltration From Victims Email Client
96. Talos Vulnerability Deep Dive - TALOS-2018-0636 / CVE-2018-3971 Sophos HitmanPro.Alert vulnerability
97. New Ramnit Campaign Spreads Azorult Malware
98. Perl-Based Shellbot Looks to Target Organizations via C&C
99. Cisco Warns of Zero-Day Vulnerability in Security Appliances
100. Cisco zero-day exploited in the wild to crash and reload devices
101. IKARUS Security Software partners with PolySwarm to advance early malware detection
102. Pdgmail – Forensic Tool to Analysis Process Memory Dump

CRIME

103. Emotet Malware, the Most Probable Malware of the Year
104. ‘Aaron Smith’ Sextortion scam campaigns hit tens of thousands of individuals
105. Experts presented BOTCHAIN, the first fully functional Botnet built upon the Bitcoin Protocol
106. DOJ indictment spotlights China’s civilian intel agency – and its hacker recruits
107. Customer Information Stolen in Radisson Hotel Group Data Breach
108. British Airways data breach bigger than originally thought
109. Where Is the Consumer Outrage about Data Breaches?
110. Radisson Hotel Group suffers data breach, customer info leaked
111. Healthcare Industry Continues To Be the Favourite for Ransomware
112. October may be over – but phishing attacks never stop. Here’s how to make security awareness successful all year round.
113. Government employee who used to watch porn at work alleged guilty of infecting with malware a network
114. Crypto Micropayments: an Exciting Future for Blockchain Transactions
115. Expert Insights Names Barracuda’s AI powered Sentinel Top Phishing protection product
116. Necurs Botnet Distributing Sextortion Email Scams
117. Beware !! Square & PayPal Mobile Point of Sales (POS) Devices Are Extremely Vulnerable to Credit/Debit Card Data Theft
118. CSM-ACE 2018: FireEye Interview – ASEAN Countries Need to Place Greater Focus on Resourcing Their Cyber Defences

POLITICS

119. Emotet Malware, the Most Probable Malware of the Year
120. Open Letter to Francisco Partners: Continued Misuse of NSO Group’s Pegasus Technology
121. Experts presented BOTCHAIN, the first fully functional Botnet built upon the Bitcoin Protocol
122. DOJ indictment spotlights China’s civilian intel agency – and its hacker recruits
123. SamSam Attackers Have Hit 67 Ransomware Targets
124. Our fabulous @5ean5ullivan explains to @CyberSauna listeners how the multiple vulnerabilities in the US electoral system may be^H^H^H^H^H^Hare being exploited.
125. Emotet Malware – Mass-Harvesting millions of Emails in secret Campaign
126. CSM-ACE 2018: FireEye Interview – ASEAN Countries Need to Place Greater Focus on Resourcing Their Cyber Defences

APT report for 2018-10-31

TRANSNATIONAL / UNKNOWN

1. URLZone Distributed Via Cutwail Spam Using Steganography
2. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros

CHINA

Nil

INDIA

Nil

NORTH KOREA

Nil

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

3. Promethium/StrongPity Malware

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

4. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-10-31

WINDOWS

1. 2018’s Most Prevalent Ransomware – We Took it for a Ride
2. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros
3. Businesses unprepared for Windows 10 migration, fear vulnerability to cyber threats
4. DDoS Attacks in Q3 2018
5. Windows 10 Universal Windows Platform Vulnerability
6. Webroot Unveils Nastiest Malware of 2018
7. OIG’s Take On Healthcare.gov Patient Record Breach
8. Microsoft continues to push the KB4464455 patch for fixing ZIP bug

LINUX

9. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros
10. DDoS Attacks in Q3 2018
11. Canonical Releases Ubuntu 16.04 LTS Kernel Patch, Fixed 4 Security Vulnerabilities
12. A DHCPv6 package could compromise a vulnerable Linux system

UNIX

13. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros

ANDROID

14. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros

IOS

15. Apple Fixes Multiple macOS, iOS Bugs Including a Quirky FaceTime Vulnerability
16. Security Code AutoFill Flaw Exposes iOS, macOS Users to Banking Fraud Attacks
17. Apple Patches Passcode Bypass, FaceTime Flaws in iOS
18. Apple Patches Critical Flaws in iOS 12.1, macOS 10.14.1 Updates
19. Apple Released Security Updates for iOS, watchOS, Safari , tvOS, iTunes & Fixed Several Vulnerabilities

MACOS

20. Apple Fixes Multiple macOS, iOS Bugs Including a Quirky FaceTime Vulnerability
21. Security Code AutoFill Flaw Exposes iOS, macOS Users to Banking Fraud Attacks
22. Apple Patches Passcode Bypass, FaceTime Flaws in iOS
23. Apple Patches Critical Flaws in iOS 12.1, macOS 10.14.1 Updates
24. 5 Types of Malware Currently Affecting macOS

Threat report for 2018-10-31

DATA BREACH & DATA LOSS

1. 85 Millions of voter records available for sale ahead of the 2018 US Midterm Elections
2. More Information about July 2018’s Singapore SingHealth Data Breach Revealed
3. Software bugs could compromise midterm votes in Texas
4. Eurostar Resets Users' Passwords After Potential Data Breach
5. Why data security is a priority for political campaigns
6. The Radisson Hotel Group has suffered a data breach
7. Social Security Numbers, PII Stolen in NorthBay Healthcare Data Breach
8. Healthcare.gov website suffers data breach affecting 75,000 enrollees
9. Tomorrowland festival goers affected by data breach
10. Chinese Intel Agents Indicted for 5-Year IP Theft Campaign
11. Emotet malware gang is mass-harvesting millions of emails in mysterious campaign
12. Nigerian Airline Arik Air May Have Leaked Customer Data
13. Cyber Attacks Up Prior To Midterms, 81.5 Million Voter Records Threatened
14. Average data breach fines have doubled as ICO hints at higher fines
15. Australian companies failing to slow the tide of data breaches: OAIC
16. Assault and battery: Malvertising campaign checks user device' charge as anti-detection technique
17. Live Webinar | Identity Proofing in the Era of Data Breaches and Social Networking
18. Come fermare i data breach con i servizi di Detection&Response #MDR: il caso di un'importante media company finlandese
19. Fresh SamSam Ransomware Campaign Across the U.S
20. Nigerian airline Arik Air may have leaked customer data
21. Emotet malware gang is mass-harvesting millions of emails in mysterious campaign
22. SamSam Ransomware Campaigns Highly Active in 2018 and Heavily Targets Organizations
23. A Report on Data Breaches in Australia
24. A DHCPv6 package could compromise a vulnerable Linux system
25. OIG’s Take On Healthcare.gov Patient Record Breach
26. Exploit Chain Modified to Slip Antivirus Detection in a New Malware Campaign

DENIAL-OF-SERVICE

27. DDoS Attacks in Q3 2018

MALVERTISING

28. Assault and battery: Malvertising campaign checks user device' charge as anti-detection technique

PHISHING

29. Re: The Zombie Phish
30. Ramped-up phishing attacks target universities around the world
31. “Brazilian Election” Themed Phish Target Users with South American-Targeted Malware, Astaroth Trojan
32. [Infographic] 5 Ways #Cybercriminals Can Access Your Emails Without #Phishing:

WEB DEFACEMENT

Nil

BOTNET

33. Re: The Zombie Phish
34. Google aims to stop the tide of bots with reCAPTCHA v3
35. Pervasive Emotet Botnet Now Steals Emails
36. NTT Security targets botnet infrastructure
37. Satori Botnet's Alleged Developer Rearrested
38. #Mirai author fined $8.6million, gets 6 months house arrest

RANSOMWARE

39. SamSam Ransomware Goes on a Tear
40. 2018’s Most Prevalent Ransomware – We Took it for a Ride
41. Kraken Ransomware Upgrades Distribution with RaaS Model
42. GandCrab ransomware crew loses $1M after Bitdefender releases free decrypter
43. Kraken Cryptor ransomware merges with Fallout exploit kit, fees slashed to gain followers
44. Kraken Ransomware Now Being Distributed by Fallout Exploit Kit
45. Fresh SamSam Ransomware Campaign Across the U.S
46. SamSam Ransomware Campaigns Highly Active in 2018 and Heavily Targets Organizations

CRYPTOMINING & CRYPTOCURRENCIES

47. Kraken Ransomware Upgrades Distribution with RaaS Model
48. Kraken Cryptor ransomware merges with Fallout exploit kit, fees slashed to gain followers
49. Kraken Ransomware Now Being Distributed by Fallout Exploit Kit
50. It's a front? Mac cryptocurrency ticker actually installs backdoors
51. All You Need to Know About Blockchain Testing

MALWARE

52. Was the Triton Malware Attack Russian in Origin?
53. Emotet malware gang is mass-harvesting millions of emails in mysterious campaign
54. Promethium/StrongPity Malware
55. “Brazilian Election” Themed Phish Target Users with South American-Targeted Malware, Astaroth Trojan
56. "The presence of the insecure remote access software on systems used for election management raised concerns that malicious #ThreatActors --
57. Double-Gun Trojan which uses game plug-in to spread, is updated to V4.0 and looking for trouble
58. Emotet Trojan Begins Stealing Victim's Email Using New Module
59. Emotet trojan starts stealing full emails from infected machines
60. Recently found GPlayed trojan spinoff analysed
61. Federal employee infects gov't network with Russian malware through adult video websites
62. Emotet malware gang is mass-harvesting millions of emails in mysterious campaign
63. What do you think the combination of the #TrickBot banking Trojan to #IcedID means for the future of banking #Trojans?
64. 12 malicious libraries found in Python PyPI
65. 5 Types of Malware Currently Affecting macOS
66. Webroot Unveils Nastiest Malware of 2018
67. Exploit Chain Modified to Slip Antivirus Detection in a New Malware Campaign

EXPLOIT

68. Kraken Cryptor ransomware merges with Fallout exploit kit, fees slashed to gain followers
69. Kraken Ransomware Now Being Distributed by Fallout Exploit Kit
70. Exploit Chain Modified to Slip Antivirus Detection in a New Malware Campaign

VULNERABILITY

71. Software bugs could compromise midterm votes in Texas
72. Yi Technology Home Cameras Exploitable Using Multiple Vulnerabilities
73. Prioritizing the fundamentals of coordinated vulnerability disclosure
74. Vulnerability Spotlight: Multiple Vulnerabilities in Yi Technology Home Camera
75. Apple Patches Multiple Major Security Flaws
76. Actively Exploited High Impact DoS Vulnerability Found in Cisco ASA and FTD
77. Apple Fixes Multiple macOS, iOS Bugs Including a Quirky FaceTime Vulnerability
78. Many States Reject DHS Offer to Check Election Systems for Flaws, Saying They’re Safe from Hackers
79. Security Code AutoFill Flaw Exposes iOS, macOS Users to Banking Fraud Attacks
80. Whiteboard Wednesday: Common Vulnerabilities as Personified by Halloween Costumes
81. Vulnerability Spotlight: Multiple Vulnerabilities in Yi Technology Home Camera
82. Several vulnerabilities were found in controllers made by @Universal_Robot. Discover what these #robot controllers are used for and how
83. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros
84. Apple Patches Passcode Bypass, FaceTime Flaws in iOS
85. Businesses unprepared for Windows 10 migration, fear vulnerability to cyber threats
86. Apple Patches Critical Flaws in iOS 12.1, macOS 10.14.1 Updates
87. Canonical Releases Ubuntu 16.04 LTS Kernel Patch, Fixed 4 Security Vulnerabilities
88. CVE-2018-18649: Gitlab Wiki API Remote Code Execution Vulnerability Alert
89. Apple Released Security Updates for iOS, watchOS, Safari , tvOS, iTunes & Fixed Several Vulnerabilities
90. Windows 10 Universal Windows Platform Vulnerability
91. Microsoft continues to push the KB4464455 patch for fixing ZIP bug

Region brief for 2018-10-31

ASIA

1. More Information about July 2018’s Singapore SingHealth Data Breach Revealed
2. Was the Triton Malware Attack Russian in Origin?
3. Chinese Intel Agents Indicted for 5-Year IP Theft Campaign
4. Many States Reject DHS Offer to Check Election Systems for Flaws, Saying They’re Safe from Hackers
5. Ramped-up phishing attacks target universities around the world
6. NTT Security targets botnet infrastructure
7. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros
8. Fresh SamSam Ransomware Campaign Across the U.S
9. DDoS Attacks in Q3 2018
10. Microsoft continues to push the KB4464455 patch for fixing ZIP bug

OCEANIA

11. Ramped-up phishing attacks target universities around the world
12. Australian companies failing to slow the tide of data breaches: OAIC
13. Fresh SamSam Ransomware Campaign Across the U.S
14. DDoS Attacks in Q3 2018
15. A Report on Data Breaches in Australia

NORTH AMERICA

16. 85 Millions of voter records available for sale ahead of the 2018 US Midterm Elections
17. Prioritizing the fundamentals of coordinated vulnerability disclosure
18. 2018’s Most Prevalent Ransomware – We Took it for a Ride
19. Many States Reject DHS Offer to Check Election Systems for Flaws, Saying They’re Safe from Hackers
20. Ramped-up phishing attacks target universities around the world
21. Whiteboard Wednesday: Common Vulnerabilities as Personified by Halloween Costumes
22. Vulnerability Spotlight: Multiple Vulnerabilities in Yi Technology Home Camera
23. “Brazilian Election” Themed Phish Target Users with South American-Targeted Malware, Astaroth Trojan
24. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros
25. Fresh SamSam Ransomware Campaign Across the U.S
26. Federal employee infects gov't network with Russian malware through adult video websites
27. DDoS Attacks in Q3 2018
28. OIG’s Take On Healthcare.gov Patient Record Breach

SOUTH AMERICA

29. Ramped-up phishing attacks target universities around the world
30. “Brazilian Election” Themed Phish Target Users with South American-Targeted Malware, Astaroth Trojan
31. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros

EUROPE

32. Eurostar Resets Users' Passwords After Potential Data Breach
33. 2018’s Most Prevalent Ransomware – We Took it for a Ride
34. Was the Triton Malware Attack Russian in Origin?
35. Many States Reject DHS Offer to Check Election Systems for Flaws, Saying They’re Safe from Hackers
36. Ramped-up phishing attacks target universities around the world
37. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros
38. Recently found GPlayed trojan spinoff analysed
39. Fresh SamSam Ransomware Campaign Across the U.S
40. Federal employee infects gov't network with Russian malware through adult video websites
41. Businesses unprepared for Windows 10 migration, fear vulnerability to cyber threats
42. DDoS Attacks in Q3 2018
43. 12 malicious libraries found in Python PyPI

AFRICA

44. Ramped-up phishing attacks target universities around the world
45. Nigerian Airline Arik Air May Have Leaked Customer Data
46. Nigerian airline Arik Air may have leaked customer data
47. DDoS Attacks in Q3 2018