Daily brief for 2018-11-20

ASIA

1. ESET: Vietnamese hacking group hijacks Southeast Asian sites in watering hole campaign
2. 200K Outlaw Botnet Uses SSH Brute Forcing to Propagate, Monero Mining for Profit
3. Malvertising in Apple Pay Targets iPhone Users
4. Kaspersky Security Bulletin: Threat Predictions for 2019
5. Experts analyzed how Iranian OilRIG hackers tested their weaponized documents

WORLD

6. 200K Outlaw Botnet Uses SSH Brute Forcing to Propagate, Monero Mining for Profit
7. Infamous Russian Hacking Group Used New Trojan in Recent Attacks
8. APT29 Re-Emerges After 2 Years with Widespread Espionage Campaign
9. Voxox leak: Millions of SMS messages exposed
10. Russia’s Elite Hackers May Have New Phishing Tricks
11. Web skimmers compete in Umbro Brasil hack
12. Inspiring Gender Diversity at Women of the Channel Leadership Summit
13. Government Agencies and Think Tanks attacked, APT29 suspected
14. An Introduction to Magecart
15. Hackers Linked to Russia Impersonate US Officials
16. Two Young Men Jailed for Involvement in TalkTalk Data Breach
17. Russian hackers are trying out this new malware against US and European targets
18. TEMP.Periscope Spearphishing
19. Russian hackers are trying out this new malware against US and European targets
20. Russian APT activity is resurgent, researchers say
21. Report: Emotet makes phishing lures more convincing by scraping victims' emails
22. Sofacy Continues Global Attacks and Wheels Out New ‘Cannon’ Trojan
23. Lazarus Continues Heists, Mounts Attacks on Financial Organizations in Latin America
24. Zscaler ThreatLabZ Phishing Roundup
25. Dutch audit finds Microsoft Office leaks confidential data
26. Kaspersky Security Bulletin: Threat Predictions for 2019
27. Cozy Bear tracks: Phishing campaign looks like work of Russian APT group
28. Experts analyzed how Iranian OilRIG hackers tested their weaponized documents
29. Confiant spots major malvertising attack
30. Google, Target Hit by Twitter Bitcoin Scam Account Hacks
31. Two TalkTalk hackers jailed for 2015 data breach that cost it £77 million

ATTACKS

32. ESET: Vietnamese hacking group hijacks Southeast Asian sites in watering hole campaign
33. Gmail Glitch Enables Anonymous Messages in Phishing Attacks
34. jQuery File Upload Disclosure Due Diligence
35. Emotet Returns with Thanksgiving Theme and Better Phishing Tricks
36. APT29 Re-Emerges After 2 Years with Widespread Espionage Campaign
37. APT29 Re-Emerges After 2 Years with Widespread Espionage Campaign
38. Emotet Returns with Thanksgiving Theme and Better Phishing Tricks
39. Voxox leak: Millions of SMS messages exposed
40. Russia’s Elite Hackers May Have New Phishing Tricks
41. Second WordPress hacking campaign underway, this one targeting AMP for WP plugin
42. Vision Direct Reveals Data Breach
43. Malvertising in Apple Pay Targets iPhone Users
44. Instagram glitch exposed some user passwords
45. OSIsoft Warns Employees, Contractors of Data Breach
46. Two Young Men Jailed for Involvement in TalkTalk Data Breach
47. TEMP.Periscope Spearphishing
48. Report: Emotet makes phishing lures more convincing by scraping victims' emails
49. OceanLotus: New watering hole attack in Southeast Asia
50. OceanLotus: New watering hole attack in Southeast Asia
51. tRat: New Modular RAT Appears in Multiple Email Campaigns
52. Emotet Campaigns Persist, Utilize Updated Tactics and Techniques
53. Mac users using Exodus cryptocurrency wallet targeted by a small spam campaign
54. AWS moves to curb S3 data leaks, but Chris Vickery is doubtful
55. TalkTalk hackers jailed for role in £77m data breach
56. CarBlues – Bluetooth Vehicle Hack Exploit Affects Millions Of Vehicles Exposing Users PII
57. Zscaler ThreatLabZ Phishing Roundup
58. 2018 holiday travel period expected to be the busiest travel season on record
59. Vision Direct 'fesses up to hack that exposed customer names, payment cards
60. A little phishing knowledge may be a dangerous thing
61. Dutch audit finds Microsoft Office leaks confidential data
62. Cozy Bear tracks: Phishing campaign looks like work of Russian APT group
63. Instagram Patched A Data Download Tool Bug That Exposed Users Passwords
64. Confiant spots major malvertising attack
65. Two TalkTalk hackers jailed for 2015 data breach that cost it £77 million

THREATS

66. Instagram bug exposes user passwords
67. Critical Adobe Flash Bug Impacts Windows, macOS, Linux and Chrome OS
68. 200K Outlaw Botnet Uses SSH Brute Forcing to Propagate, Monero Mining for Profit
69. Hackers target Drupal servers chaining several flaws, including Drupalgeddon2 and DirtyCOW
70. Flash Player Type Confusion Critical Vulnerability, Another Reason Not to Use It
71. Down But Not Out, WannaCry Malware Continues to Infect Unpatched Windows PCs
72. Infamous Russian Hacking Group Used New Trojan in Recent Attacks
73. 560,000 Duped Into Installing Android Malware in the Form of Fake Driving Games
74. Flash Player Update Patches Disclosed Code Execution Flaw
75. Attackers Target Drupal Web Servers with Chained Vulnerabilities
76. DirtyCOW Is Back In Backdoor Attack Targeting Drupal Web Servers
77. Inserted Malicious URLs within Office Documents’ Embedded Videos
78. Russian hackers are trying out this new malware against US and European targets
79. Russian hackers are trying out this new malware against US and European targets
80. Sofacy Continues Global Attacks and Wheels Out New ‘Cannon’ Trojan
81. WordPress GDPR Plug-in Contains Privilege Escalation Flaw
82. tRat: New Modular RAT Appears in Multiple Email Campaigns
83. Dharma Ransomware Variant Discovered
84. Hackers Exploit Vulnerability in WP GDPR Compliance Plugin – Update Now
85. Mac users using Exodus cryptocurrency wallet targeted by a small spam campaign
86. For Smbs Ransomware Attacks still the Greatest Online Threat
87. Almost 50 Percent of 2018 Vulnerabilities Can Be Exploited Remotely
88. Targeted ransomware attacks on the rise in 2018, NCSC warns
89. TP-Link fixes 2 Remote Code Execution flaws in TL-R600VPN SOHO Router and other issues
90. Raft of flaws discovered in MiSafes child-monitoring devices
91. Scumbags cram Make-A-Wish website with coin-mining malware
92. Instagram Patched A Data Download Tool Bug That Exposed Users Passwords
93. Microsoft Releases Azure Blockchain Development Kit
94. DirtyCOW is back in backdoor attack targeting Drupal Web Servers
95. Can a D-Link router vulnerability threaten bank customers?
96. 3 New Code Execution Flaws Discovered in Atlantis Word Processor
97. Vulnerability Spotlight: Multiple remote code execution vulnerabilities in Atlantis Word Processor
98. Google Account Hacked for Fake Bitcoin Reward
99. 2019 Security Predictions – Utilities and Industrial Control Systems Targeted with Ransomware
100. Google, Target Hit by Twitter Bitcoin Scam Account Hacks
101. The wiper #malware that briefly disrupted the Winter #Olympics earlier this year appears to be back - now with a
102. 13 Malicious Apps in Google Play With More than 560,000+ Installs
103. Apache OpenOffice 4.1.6 release: important bug fixes and security fixes
104. Almost 50 Percent of 2018 Vulnerabilities Can Be Exploited Remotely
105. #BluetoothDevices might be at risk after a new #Bluetooth vulnerability was found targeting #firmware or operating system software drivers. Learn

CRIME

106. Inspiring Gender Diversity at Women of the Channel Leadership Summit
107. An Introduction to Magecart
108. Two Young Men Jailed for Involvement in TalkTalk Data Breach
109. Report: Emotet makes phishing lures more convincing by scraping victims' emails
110. Zscaler ThreatLabZ Phishing Roundup
111. Magecart Spies Payment Cards From Retailer Vision Direct
112. Kaspersky Security Bulletin: Threat Predictions for 2019
113. Google, Target Hit by Twitter Bitcoin Scam Account Hacks
114. Two TalkTalk hackers jailed for 2015 data breach that cost it £77 million

POLITICS

115. Infamous Russian Hacking Group Used New Trojan in Recent Attacks
116. APT29 Re-Emerges After 2 Years with Widespread Espionage Campaign
117. APT29 Re-Emerges After 2 Years with Widespread Espionage Campaign
118. Russia’s Elite Hackers May Have New Phishing Tricks
119. Web skimmers compete in Umbro Brasil hack
120. TEMP.Periscope Spearphishing
121. Mac users using Exodus cryptocurrency wallet targeted by a small spam campaign
122. Magecart Spies Payment Cards From Retailer Vision Direct
123. Dutch audit finds Microsoft Office leaks confidential data
124. Kaspersky Security Bulletin: Threat Predictions for 2019
125. Experts analyzed how Iranian OilRIG hackers tested their weaponized documents

Sector brief for 2018-11-20

HEALTHCARE

1. Hackers Linked to Russia Impersonate US Officials
2. Russian APT activity is resurgent, researchers say
3. Zscaler ThreatLabZ Phishing Roundup

TRANSPORT

Nil

BANKING & FINANCE

4. Emotet Returns with Thanksgiving Theme and Better Phishing Tricks
5. Emotet Returns with Thanksgiving Theme and Better Phishing Tricks
6. Web skimmers compete in Umbro Brasil hack
7. Malvertising in Apple Pay Targets iPhone Users
8. An Introduction to Magecart
9. Report: Emotet makes phishing lures more convincing by scraping victims' emails
10. Lazarus Continues Heists, Mounts Attacks on Financial Organizations in Latin America
11. Emotet Campaigns Persist, Utilize Updated Tactics and Techniques
12. For Smbs Ransomware Attacks still the Greatest Online Threat
13. Zscaler ThreatLabZ Phishing Roundup
14. Vision Direct 'fesses up to hack that exposed customer names, payment cards
15. Magecart Spies Payment Cards From Retailer Vision Direct
16. Kaspersky Security Bulletin: Threat Predictions for 2019
17. Experts analyzed how Iranian OilRIG hackers tested their weaponized documents
18. Can a D-Link router vulnerability threaten bank customers?
19. Google Account Hacked for Fake Bitcoin Reward
20. 2019 Security Predictions – Utilities and Industrial Control Systems Targeted with Ransomware
21. Two TalkTalk hackers jailed for 2015 data breach that cost it £77 million

INFORMATION & TELECOMMUNICATION

22. Instagram bug exposes user passwords
23. Gmail Glitch Enables Anonymous Messages in Phishing Attacks
24. 560,000 Duped Into Installing Android Malware in the Form of Fake Driving Games
25. Inspiring Gender Diversity at Women of the Channel Leadership Summit
26. Instagram glitch exposed some user passwords
27. Sofacy Continues Global Attacks and Wheels Out New ‘Cannon’ Trojan
28. Zscaler ThreatLabZ Phishing Roundup
29. 2018 holiday travel period expected to be the busiest travel season on record
30. Kaspersky Security Bulletin: Threat Predictions for 2019
31. Instagram Patched A Data Download Tool Bug That Exposed Users Passwords
32. Vulnerability Spotlight: Multiple remote code execution vulnerabilities in Atlantis Word Processor
33. Google Account Hacked for Fake Bitcoin Reward
34. Google, Target Hit by Twitter Bitcoin Scam Account Hacks

FOOD

Nil

WATER

35. Tech Docs: Keep Out of the Flood Zone with DoS Protection

ENERGY

36. Tech Docs: Keep Out of the Flood Zone with DoS Protection
37. Experts analyzed how Iranian OilRIG hackers tested their weaponized documents
38. 2019 Security Predictions – Utilities and Industrial Control Systems Targeted with Ransomware

GOVERNMENT & PUBLIC SERVICE

39. ESET: Vietnamese hacking group hijacks Southeast Asian sites in watering hole campaign
40. 200K Outlaw Botnet Uses SSH Brute Forcing to Propagate, Monero Mining for Profit
41. Infamous Russian Hacking Group Used New Trojan in Recent Attacks
42. APT29 Re-Emerges After 2 Years with Widespread Espionage Campaign
43. APT29 Re-Emerges After 2 Years with Widespread Espionage Campaign
44. Russia’s Elite Hackers May Have New Phishing Tricks
45. Government Agencies and Think Tanks attacked, APT29 suspected
46. Hackers Linked to Russia Impersonate US Officials
47. Russian APT activity is resurgent, researchers say
48. Sofacy Continues Global Attacks and Wheels Out New ‘Cannon’ Trojan
49. OceanLotus: New watering hole attack in Southeast Asia
50. OceanLotus: New watering hole attack in Southeast Asia
51. Kaspersky Security Bulletin: Threat Predictions for 2019
52. Experts analyzed how Iranian OilRIG hackers tested their weaponized documents
53. Google, Target Hit by Twitter Bitcoin Scam Account Hacks

Region brief for 2018-11-20

ASIA

1. ESET: Vietnamese hacking group hijacks Southeast Asian sites in watering hole campaign
2. 200K Outlaw Botnet Uses SSH Brute Forcing to Propagate, Monero Mining for Profit
3. Malvertising in Apple Pay Targets iPhone Users
4. Kaspersky Security Bulletin: Threat Predictions for 2019
5. Experts analyzed how Iranian OilRIG hackers tested their weaponized documents

OCEANIA

6. Zscaler ThreatLabZ Phishing Roundup

NORTH AMERICA

7. APT29 Re-Emerges After 2 Years with Widespread Espionage Campaign
8. Russia’s Elite Hackers May Have New Phishing Tricks
9. Web skimmers compete in Umbro Brasil hack
10. Inspiring Gender Diversity at Women of the Channel Leadership Summit
11. Hackers Linked to Russia Impersonate US Officials
12. Russian hackers are trying out this new malware against US and European targets
13. Russian hackers are trying out this new malware against US and European targets
14. Russian APT activity is resurgent, researchers say
15. Report: Emotet makes phishing lures more convincing by scraping victims' emails
16. Sofacy Continues Global Attacks and Wheels Out New ‘Cannon’ Trojan
17. Lazarus Continues Heists, Mounts Attacks on Financial Organizations in Latin America
18. Zscaler ThreatLabZ Phishing Roundup
19. Kaspersky Security Bulletin: Threat Predictions for 2019
20. Experts analyzed how Iranian OilRIG hackers tested their weaponized documents
21. Confiant spots major malvertising attack
22. Google, Target Hit by Twitter Bitcoin Scam Account Hacks

SOUTH AMERICA

Nil

EUROPE

23. 200K Outlaw Botnet Uses SSH Brute Forcing to Propagate, Monero Mining for Profit
24. Infamous Russian Hacking Group Used New Trojan in Recent Attacks
25. APT29 Re-Emerges After 2 Years with Widespread Espionage Campaign
26. Voxox leak: Millions of SMS messages exposed
27. Russia’s Elite Hackers May Have New Phishing Tricks
28. Government Agencies and Think Tanks attacked, APT29 suspected
29. An Introduction to Magecart
30. Hackers Linked to Russia Impersonate US Officials
31. Two Young Men Jailed for Involvement in TalkTalk Data Breach
32. Russian hackers are trying out this new malware against US and European targets
33. TEMP.Periscope Spearphishing
34. Russian hackers are trying out this new malware against US and European targets
35. Russian APT activity is resurgent, researchers say
36. Sofacy Continues Global Attacks and Wheels Out New ‘Cannon’ Trojan
37. Dutch audit finds Microsoft Office leaks confidential data
38. Kaspersky Security Bulletin: Threat Predictions for 2019
39. Cozy Bear tracks: Phishing campaign looks like work of Russian APT group
40. Two TalkTalk hackers jailed for 2015 data breach that cost it £77 million

AFRICA

Nil

Threat report for 2018-11-20

DATA BREACH & DATA LOSS

1. ESET: Vietnamese hacking group hijacks Southeast Asian sites in watering hole campaign
2. jQuery File Upload Disclosure Due Diligence
3. APT29 Re-Emerges After 2 Years with Widespread Espionage Campaign
4. APT29 Re-Emerges After 2 Years with Widespread Espionage Campaign
5. Voxox leak: Millions of SMS messages exposed
6. Second WordPress hacking campaign underway, this one targeting AMP for WP plugin
7. Vision Direct Reveals Data Breach
8. Instagram glitch exposed some user passwords
9. OSIsoft Warns Employees, Contractors of Data Breach
10. Two Young Men Jailed for Involvement in TalkTalk Data Breach
11. tRat: New Modular RAT Appears in Multiple Email Campaigns
12. Emotet Campaigns Persist, Utilize Updated Tactics and Techniques
13. Mac users using Exodus cryptocurrency wallet targeted by a small spam campaign
14. AWS moves to curb S3 data leaks, but Chris Vickery is doubtful
15. TalkTalk hackers jailed for role in £77m data breach
16. CarBlues – Bluetooth Vehicle Hack Exploit Affects Millions Of Vehicles Exposing Users PII
17. 2018 holiday travel period expected to be the busiest travel season on record
18. Vision Direct 'fesses up to hack that exposed customer names, payment cards
19. Dutch audit finds Microsoft Office leaks confidential data
20. Cozy Bear tracks: Phishing campaign looks like work of Russian APT group
21. Instagram Patched A Data Download Tool Bug That Exposed Users Passwords
22. Two TalkTalk hackers jailed for 2015 data breach that cost it £77 million

DENIAL-OF-SERVICE

23. Tech Docs: Keep Out of the Flood Zone with DoS Protection

MALVERTISING

24. ESET: Vietnamese hacking group hijacks Southeast Asian sites in watering hole campaign
25. Malvertising in Apple Pay Targets iPhone Users
26. OceanLotus: New watering hole attack in Southeast Asia
27. OceanLotus: New watering hole attack in Southeast Asia
28. Confiant spots major malvertising attack

PHISHING

29. Gmail Glitch Enables Anonymous Messages in Phishing Attacks
30. Emotet Returns with Thanksgiving Theme and Better Phishing Tricks
31. Emotet Returns with Thanksgiving Theme and Better Phishing Tricks
32. Russia’s Elite Hackers May Have New Phishing Tricks
33. TEMP.Periscope Spearphishing
34. Report: Emotet makes phishing lures more convincing by scraping victims' emails
35. Zscaler ThreatLabZ Phishing Roundup
36. A little phishing knowledge may be a dangerous thing
37. Cozy Bear tracks: Phishing campaign looks like work of Russian APT group

WEB DEFACEMENT

Nil

BOTNET

38. 200K Outlaw Botnet Uses SSH Brute Forcing to Propagate, Monero Mining for Profit

RANSOMWARE

39. Dharma Ransomware Variant Discovered
40. For Smbs Ransomware Attacks still the Greatest Online Threat
41. Targeted ransomware attacks on the rise in 2018, NCSC warns
42. 2019 Security Predictions – Utilities and Industrial Control Systems Targeted with Ransomware

CRYPTOMINING & CRYPTOCURRENCIES

43. 200K Outlaw Botnet Uses SSH Brute Forcing to Propagate, Monero Mining for Profit
44. Mac users using Exodus cryptocurrency wallet targeted by a small spam campaign
45. Microsoft Releases Azure Blockchain Development Kit
46. Google Account Hacked for Fake Bitcoin Reward
47. Google, Target Hit by Twitter Bitcoin Scam Account Hacks

MALWARE

48. Down But Not Out, WannaCry Malware Continues to Infect Unpatched Windows PCs
49. Infamous Russian Hacking Group Used New Trojan in Recent Attacks
50. 560,000 Duped Into Installing Android Malware in the Form of Fake Driving Games
51. DirtyCOW Is Back In Backdoor Attack Targeting Drupal Web Servers
52. Inserted Malicious URLs within Office Documents’ Embedded Videos
53. Russian hackers are trying out this new malware against US and European targets
54. Russian hackers are trying out this new malware against US and European targets
55. Sofacy Continues Global Attacks and Wheels Out New ‘Cannon’ Trojan
56. tRat: New Modular RAT Appears in Multiple Email Campaigns
57. Scumbags cram Make-A-Wish website with coin-mining malware
58. DirtyCOW is back in backdoor attack targeting Drupal Web Servers
59. The wiper #malware that briefly disrupted the Winter #Olympics earlier this year appears to be back - now with a
60. 13 Malicious Apps in Google Play With More than 560,000+ Installs

EXPLOIT

61. Hackers Exploit Vulnerability in WP GDPR Compliance Plugin – Update Now
62. CarBlues – Bluetooth Vehicle Hack Exploit Affects Millions Of Vehicles Exposing Users PII

VULNERABILITY

63. Instagram bug exposes user passwords
64. Critical Adobe Flash Bug Impacts Windows, macOS, Linux and Chrome OS
65. Hackers target Drupal servers chaining several flaws, including Drupalgeddon2 and DirtyCOW
66. Flash Player Type Confusion Critical Vulnerability, Another Reason Not to Use It
67. Flash Player Update Patches Disclosed Code Execution Flaw
68. Attackers Target Drupal Web Servers with Chained Vulnerabilities
69. WordPress GDPR Plug-in Contains Privilege Escalation Flaw
70. Hackers Exploit Vulnerability in WP GDPR Compliance Plugin – Update Now
71. Almost 50 Percent of 2018 Vulnerabilities Can Be Exploited Remotely
72. TP-Link fixes 2 Remote Code Execution flaws in TL-R600VPN SOHO Router and other issues
73. Raft of flaws discovered in MiSafes child-monitoring devices
74. Instagram Patched A Data Download Tool Bug That Exposed Users Passwords
75. Can a D-Link router vulnerability threaten bank customers?
76. 3 New Code Execution Flaws Discovered in Atlantis Word Processor
77. Vulnerability Spotlight: Multiple remote code execution vulnerabilities in Atlantis Word Processor
78. Apache OpenOffice 4.1.6 release: important bug fixes and security fixes
79. Almost 50 Percent of 2018 Vulnerabilities Can Be Exploited Remotely
80. #BluetoothDevices might be at risk after a new #Bluetooth vulnerability was found targeting #firmware or operating system software drivers. Learn

Platform report for 2018-11-20

WINDOWS

1. Critical Adobe Flash Bug Impacts Windows, macOS, Linux and Chrome OS
2. 200K Outlaw Botnet Uses SSH Brute Forcing to Propagate, Monero Mining for Profit
3. Flash Player Type Confusion Critical Vulnerability, Another Reason Not to Use It
4. Down But Not Out, WannaCry Malware Continues to Infect Unpatched Windows PCs
5. APT29 Re-Emerges After 2 Years with Widespread Espionage Campaign
6. Malvertising in Apple Pay Targets iPhone Users
7. Hackers Linked to Russia Impersonate US Officials
8. Sofacy Continues Global Attacks and Wheels Out New ‘Cannon’ Trojan
9. Lazarus Continues Heists, Mounts Attacks on Financial Organizations in Latin America
10. Mac users using Exodus cryptocurrency wallet targeted by a small spam campaign
11. Kaspersky Security Bulletin: Threat Predictions for 2019
12. Experts analyzed how Iranian OilRIG hackers tested their weaponized documents
13. Apache OpenOffice 4.1.6 release: important bug fixes and security fixes

LINUX

14. Critical Adobe Flash Bug Impacts Windows, macOS, Linux and Chrome OS
15. 200K Outlaw Botnet Uses SSH Brute Forcing to Propagate, Monero Mining for Profit
16. Hackers target Drupal servers chaining several flaws, including Drupalgeddon2 and DirtyCOW
17. Flash Player Type Confusion Critical Vulnerability, Another Reason Not to Use It
18. Malvertising in Apple Pay Targets iPhone Users
19. Attackers Target Drupal Web Servers with Chained Vulnerabilities

UNIX

Nil

ANDROID

20. 200K Outlaw Botnet Uses SSH Brute Forcing to Propagate, Monero Mining for Profit
21. 560,000 Duped Into Installing Android Malware in the Form of Fake Driving Games
22. Web skimmers compete in Umbro Brasil hack
23. Malvertising in Apple Pay Targets iPhone Users
24. Kaspersky Security Bulletin: Threat Predictions for 2019
25. 13 Malicious Apps in Google Play With More than 560,000+ Installs

IOS

26. Malvertising in Apple Pay Targets iPhone Users
27. Kaspersky Security Bulletin: Threat Predictions for 2019

MACOS

28. Critical Adobe Flash Bug Impacts Windows, macOS, Linux and Chrome OS
29. Flash Player Type Confusion Critical Vulnerability, Another Reason Not to Use It
30. Mac users using Exodus cryptocurrency wallet targeted by a small spam campaign

APT report for 2018-11-20

TRANSNATIONAL / UNKNOWN

1. Magecart group hilariously sabotages competitor
2. Web skimmers compete in Umbro Brasil hack
3. An Introduction to Magecart
4. Magecart Spies Payment Cards From Retailer Vision Direct

CHINA

5. Inspiring Gender Diversity at Women of the Channel Leadership Summit
6. TEMP.Periscope Spearphishing

INDIA

Nil

NORTH KOREA

7. Lazarus Continues Heists, Mounts Attacks on Financial Organizations in Latin America

PAKISTAN

Nil

VIETNAM

8. ESET: Vietnamese hacking group hijacks Southeast Asian sites in watering hole campaign

IRAN

9. Experts analyzed how Iranian OilRIG hackers tested their weaponized documents

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

10. APT29 Re-Emerges After 2 Years with Widespread Espionage Campaign
11. APT29 Re-Emerges After 2 Years with Widespread Espionage Campaign
12. Russia’s Elite Hackers May Have New Phishing Tricks
13. Sednit: What’s going on with Zebrocy?
14. Sednit: What’s going on with Zebrocy?
15. Government Agencies and Think Tanks attacked, APT29 suspected
16. Hackers Linked to Russia Impersonate US Officials
17. Russian APT activity is resurgent, researchers say
18. Sofacy Continues Global Attacks and Wheels Out New ‘Cannon’ Trojan
19. Kaspersky Security Bulletin: Threat Predictions for 2019
20. Cozy Bear tracks: Phishing campaign looks like work of Russian APT group

SERBIA

Nil

UKRAINE

Nil

APT report for 2018-11-19

TRANSNATIONAL / UNKNOWN

1. VisionDirect Blindsided by Magecart in Data Breach
2. A week in security (November 12 – 18)
3. Collective Intelligence Podcast, Vitali Kremez on Magecart

CHINA

Nil

INDIA

Nil

NORTH KOREA

4. New ShadowTalk update looks at: New nation-state threat actor uses advanced TTPs to target Pakistan Lazarus Group’s FASTCash malware

PAKISTAN

Nil

VIETNAM

Nil

IRAN

5. Iran-Linked Hackers Use Just-in-Time Creation of Weaponized Attack Docs

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

6. Not So Cozy: An Uncomfortable Examination of a Suspected APT29 Phishing Campaign
7. Cybaze ZLab – Yoroi team analyzed malware used in recent attacks on US entities attributed to APT29
8. Russian Cozy Bear APT 29 hackers may be impersonating State Department

SERBIA

Nil

UKRAINE

9. Not So Cozy: An Uncomfortable Examination of a Suspected APT29 Phishing Campaign

Platform report for 2018-11-19

WINDOWS

1. Not So Cozy: An Uncomfortable Examination of a Suspected APT29 Phishing Campaign
2. DarkGate Malware Avoids Endpoint AV Detection
3. Cybaze ZLab – Yoroi team analyzed malware used in recent attacks on US entities attributed to APT29
4. Outlaw Group Distributes Botnet for Cryptocurrency-Mining, Scanning, and Brute-Force

LINUX

5. Finds vulnerabilities in wordpress websites using WPSCAN
6. Outlaw Group Distributes Botnet for Cryptocurrency-Mining, Scanning, and Brute-Force

UNIX

Nil

ANDROID

7. Outlaw Group Distributes Botnet for Cryptocurrency-Mining, Scanning, and Brute-Force

IOS

8. Tianfu Cup PWN hacking contest – White hat hackers earn $1 Million for Zero-Day exploits

MACOS

9. Tianfu Cup PWN hacking contest – White hat hackers earn $1 Million for Zero-Day exploits

Threat report for 2018-11-19

DATA BREACH & DATA LOSS

1. Not So Cozy: An Uncomfortable Examination of a Suspected APT29 Phishing Campaign
2. Data Leak Incident Reported by Fortune 500 Metropolitan Life Insurance Company
3. VisionDirect Blindsided by Magecart in Data Breach
4. OSIsoft Breached, All Domain Accounts, Emails, and Passwords Assumed Compromised
5. “Simplicity without Compromise” with Catalyst 9200 – Intent Based Networking Everywhere!
6. EOS.IO Smart Contract Database Walkthrough
7. Ford Eyes Use of Customers’ Personal Data to Boost Profits
8. Vision Direct Admits To Breach With CVVs Compromised
9. Instagram Bug, Now Fixed, Exposed User Passwords
10. Business email compromise scam costs Pathé $21.5 million
11. Database Misconfiguration Leaks 26 Million SMS Messages
12. The Most Damaging Election Disinformation Campaign Came From Donald Trump, Not Russia
13. SUNY Upstate Hospital announced a former employee inappropriately accessed more than 1,200 patient records.
14. Subject: Invoice. The cause of 6 out of 10 of the most effective phishing campaigns in 2018
15. Vision Direct reveals customer credit card leak, fake Google script may be to blame
16. Most Important Consideration of Confidentiality,Integrity, Availability (CIA Triad) to Avoid Organization Data Breach
17. New security feature to prevent Amazon S3 bucket misconfiguration and data leaks
18. Instagram Privacy Tool Exposed Passwords
19. Vision Direct Notifies Customers of Data Compromise
20. Proofpoint #ThreatInsight research: #sLoad and #Ramnit pairing in sustained personalized campaigns against UK and Italy:
21. Instagram Accidentally Exposed Some User Passwords
22. Email campaign spreading new tRAT malware
23. The promised integration with #HaveIBeenPwned is expanding in #FirefoxMonitor with new breach alerts when a user visits a recently compromised
24. Instagram Critical Bug Leaked User’s Password Via its Data Download Tool
25. After early speculation of #malicious intent, experts said an accidental misconfiguration caused the BGP route leak that sent traffic destined
26. Firefox automatically alerts users when you access sites that have data breaches
27. Instagram Accidentally Exposed Some Users' Passwords In Plaintext

DENIAL-OF-SERVICE

Nil

MALVERTISING

Nil

PHISHING

28. Not So Cozy: An Uncomfortable Examination of a Suspected APT29 Phishing Campaign
29. Top 5 ways to pick a secure password
30. Top 5 ways to pick a secure password
31. 2FA Login Failure in Office 365 and Azure
32. Subject: Invoice. The cause of 6 out of 10 of the most effective phishing campaigns in 2018
33. A little phishing knowledge may be a dangerous thing
34. The more you say you know about phishing, the more vulnerable you are … Until you’re hoodwinked
35. More than 50% forgot their password once at least one in the last month
36. An espionage group used stolen #DigitalCertificates to sign Plead #malware and used a password stealer component that was used in
37. How #privacy intersects with #CyberSecurity. “Criminals can craft better phishing emails to scam you when they know what you’re interested in.”
38. Review: Specops Password Policy
39. Instagram Critical Bug Leaked User’s Password Via its Data Download Tool
40. Sai quali sono i modelli più utilizzati dagli utenti per creare le proprie #password? Qui ti suggeriamo alcune 'best practice'

WEB DEFACEMENT

Nil

BOTNET

41. Outlaw Group Distributes Botnet for Cryptocurrency-Mining, Scanning, and Brute-Force
42. How do you think the #Mylobot #botnet attack will affect the future of botnets?

RANSOMWARE

43. Texas hospital becomes victim of Dharma ransomware
44. A History of Ransomware Attacks: The Biggest and Worst Ransomware Attacks of All Time
45. Wannacry Continues to be Dominant Ransomware

CRYPTOMINING & CRYPTOCURRENCIES

46. EOS.IO Smart Contract Database Walkthrough
47. Bitcoin Falls Below $5,000
48. Cryptojacking Attack Targets Make-A-Wish Foundation Website
49. WebCobra Installs Cryptominer On Victim's System
50. Outlaw Group Distributes Botnet for Cryptocurrency-Mining, Scanning, and Brute-Force
51. How can a @Trezor #cryptocurrency wallet fall victim to attack? Learn more with expert @lewisnic
52. Turkish Police Arrested Cryptocurrency Hackers

MALWARE

53. New Modular tRat Remote Access Trojan Surfaced During September
54. OSIsoft Breached, All Domain Accounts, Emails, and Passwords Assumed Compromised
55. Traps: Fighting Threats With Cloud-Based Malware Analysis
56. U.S. warns countries not to 'manipulate the extradition process' for cybercriminals
57. DarkGate Malware Avoids Endpoint AV Detection
58. New ShadowTalk update looks at: New nation-state threat actor uses advanced TTPs to target Pakistan Lazarus Group’s FASTCash malware
59. Cybaze ZLab – Yoroi team analyzed malware used in recent attacks on US entities attributed to APT29
60. An espionage group used stolen #DigitalCertificates to sign Plead #malware and used a password stealer component that was used in
61. Email campaign spreading new tRAT malware
62. After early speculation of #malicious intent, experts said an accidental misconfiguration caused the BGP route leak that sent traffic destined
63. Fun fact: The Morris Worm of 1988 did never spread to Finland, as the outbreak happened two weeks before we
64. October 2018’s Most Wanted Malware: For The First Time, Remote Access Trojan Reaches Global Threat Index’s Top 10

EXPLOIT

Nil

VULNERABILITY

65. Finds vulnerabilities in wordpress websites using WPSCAN
66. TP-Link Patches Remote Code Execution Flaws in SOHO Router
67. Tianfu Cup PWN hacking contest – White hat hackers earn $1 Million for Zero-Day exploits
68. Instagram Flaw Exposes User Passwords
69. Multiple Remote TP-Link TL-R600VPN Router Vulnerabilities Patched
70. A bug in EA Origin client exposes gamers' data
71. Vulnerabilities Dip 7%, but Researchers Are Cautious
72. Instagram Bug, Now Fixed, Exposed User Passwords
73. Vulnerability Spotlight: Multiple remote vulnerabilities in TP-Link TL-R600VPN
74. SUNY Upstate Hospital announced a former employee inappropriately accessed more than 1,200 patient records.
75. Instagram flaw exposes user passwords
76. Hackers Earn $1 Million for Zero-Day Exploits at Chinese Competition
77. Privilege escalation bug patched in Accelerated Mobile Pages WordPress plug-in
78. How does a Bluetooth vulnerability enable validation attacks?
79. How does site isolation defend against #Spectre vulnerabilities? Expert Michael Cobb of @thehairyITdog explains
80. Helping researchers with IoT firmware vulnerability discovery
81. Vulnerability Spotlight: Multiple remote vulnerabilities in TP-Link TL-R600VPN
82. Instagram Critical Bug Leaked User’s Password Via its Data Download Tool

Region brief for 2018-11-19

ASIA

1. U.S. warns countries not to 'manipulate the extradition process' for cybercriminals
2. Tianfu Cup PWN hacking contest – White hat hackers earn $1 Million for Zero-Day exploits
3. Business email compromise scam costs Pathé $21.5 million
4. The Most Damaging Election Disinformation Campaign Came From Donald Trump, Not Russia
5. Iran-Linked Hackers Use Just-in-Time Creation of Weaponized Attack Docs
6. New ShadowTalk update looks at: New nation-state threat actor uses advanced TTPs to target Pakistan Lazarus Group’s FASTCash malware
7. Hackers Earn $1 Million for Zero-Day Exploits at Chinese Competition
8. Turkish Police Arrested Cryptocurrency Hackers
9. After early speculation of #malicious intent, experts said an accidental misconfiguration caused the BGP route leak that sent traffic destined

OCEANIA

10. 2FA Login Failure in Office 365 and Azure

NORTH AMERICA

11. Not So Cozy: An Uncomfortable Examination of a Suspected APT29 Phishing Campaign
12. Finds vulnerabilities in wordpress websites using WPSCAN
13. Traps: Fighting Threats With Cloud-Based Malware Analysis
14. U.S. warns countries not to 'manipulate the extradition process' for cybercriminals
15. A week in security (November 12 – 18)
16. Business email compromise scam costs Pathé $21.5 million
17. The Most Damaging Election Disinformation Campaign Came From Donald Trump, Not Russia
18. 2FA Login Failure in Office 365 and Azure
19. Subject: Invoice. The cause of 6 out of 10 of the most effective phishing campaigns in 2018
20. New ShadowTalk update looks at: New nation-state threat actor uses advanced TTPs to target Pakistan Lazarus Group’s FASTCash malware
21. Cybaze ZLab – Yoroi team analyzed malware used in recent attacks on US entities attributed to APT29
22. Outlaw Group Distributes Botnet for Cryptocurrency-Mining, Scanning, and Brute-Force
23. Russian Cozy Bear APT 29 hackers may be impersonating State Department

SOUTH AMERICA

Nil

EUROPE

24. Not So Cozy: An Uncomfortable Examination of a Suspected APT29 Phishing Campaign
25. U.S. warns countries not to 'manipulate the extradition process' for cybercriminals
26. Business email compromise scam costs Pathé $21.5 million
27. The Most Damaging Election Disinformation Campaign Came From Donald Trump, Not Russia
28. 2FA Login Failure in Office 365 and Azure
29. DarkGate Malware Avoids Endpoint AV Detection
30. WebCobra Installs Cryptominer On Victim's System
31. Cybaze ZLab – Yoroi team analyzed malware used in recent attacks on US entities attributed to APT29
32. Proofpoint #ThreatInsight research: #sLoad and #Ramnit pairing in sustained personalized campaigns against UK and Italy:
33. Russian Cozy Bear APT 29 hackers may be impersonating State Department
34. Email campaign spreading new tRAT malware
35. After early speculation of #malicious intent, experts said an accidental misconfiguration caused the BGP route leak that sent traffic destined
36. Fun fact: The Morris Worm of 1988 did never spread to Finland, as the outbreak happened two weeks before we

AFRICA

37. The Most Damaging Election Disinformation Campaign Came From Donald Trump, Not Russia