APT report for 2018-11-21

TRANSNATIONAL / UNKNOWN

1. How Retailers Can Protect Against Magecart This Black Friday and Holiday Season
2. Black Friday & Cyber Monday Deals: Phishing and Site Skimmers
3. Magecart Black Hats Battle it Out On Infected Site
4. Exploit Windows Remote PC with EternalBlue & DoublePulsar Exploit through Metasploit
5. Is Magecart Checking Out Your Secure Online Transactions?
6. Weekly Threat Briefing: Russian APT Comes Back to Life with New US Spear-phishing Campaign
7. Infowars Online Store Got Infected with Card Skimming Malware
8. MageCart Group Sabotages Rival to Ruin Data and Reputation

CHINA

9. Inspiring the Next Generation of Tech Talent
10. Weekly Threat Briefing: Russian APT Comes Back to Life with New US Spear-phishing Campaign

INDIA

Nil

NORTH KOREA

11. Lazarus APT Uses Modular Backdoor to Target Financial Institutions
12. Millions Stolen by North Korea-Linked Hacking Group from Atms in Africa and Asia

PAKISTAN

Nil

VIETNAM

Nil

IRAN

13. Analyzing OilRig’s Ops Tempo from Testing to Weaponization to Delivery

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

14. Russian Cozy Bear cyberspies awake from hibernation to sling spyware
15. Sofacy APT unleashes new 'Cannon' trojan
16. New Pterodo Backdoor Malware Detected By Ukraine
17. New Campaign by APT Group Sofacy Discovered using new Malware Named Cannon
18. Fancy Bear hacker crew Putin dirty RATs in Word documents emailed to govt orgs – report
19. Weekly Threat Briefing: Russian APT Comes Back to Life with New US Spear-phishing Campaign
20. Latest Hacking News Podcast
21. Sofacy APT group used a new tool in latest attacks, the Cannon
22. Russian hackers are conducting more covert attacks on US and European computers
23. Fancy Bear APT Uses New Cannon Trojan to Target Government Entities
24. Sofacy APT Takes Aim with Novel ‘Cannon’ Trojan
25. Russia Linked Group Resurfaces With Large-Scale Phishing Campaign

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-11-21

WINDOWS

1. What Is Windows PowerShell (And Could It Be Malicious)?
2. Take a Look at L0rdix, The Super Malware Toolkit of 2018
3. New Wine in Old Bottle: New Azorult Variant Found in FindMyName Campaign using Fallout Exploit Kit
4. New Pterodo Backdoor Malware Detected By Ukraine
5. Exploit Windows Remote PC with EternalBlue & DoublePulsar Exploit through Metasploit
6. Weekly Threat Briefing: Russian APT Comes Back to Life with New US Spear-phishing Campaign
7. Adobe plugs critical RCE Flash Player flaw, update ASAP! Exploitation may be imminent
8. CVE-2018-15981: Adobe Flash Player Arbitrary Code Execution Vulnerability
9. How to find, is link malicious/URL or not

LINUX

10. What Is Windows PowerShell (And Could It Be Malicious)?
11. Mirai Used as Payload in Hadoop YARN Vulnerability
12. Hackers target Drupal servers chaining several flaws, including Drupalgeddon2 and DirtyCOW
13. Adobe plugs critical RCE Flash Player flaw, update ASAP! Exploitation may be imminent
14. CVE-2018-15981: Adobe Flash Player Arbitrary Code Execution Vulnerability
15. Uncover virtual hosts of domain with Fierce
16. How to find, is link malicious/URL or not

UNIX

Nil

ANDROID

17. Spoofed addresses and anonymous sending: new Gmail bugs make for easy pickings
18. 500K Android users hit with malware, and what to do if you're infected
19. 13 Malware-Laden Fake Apps on Google Play
20. Malicious programs disguised as racing games on Google Play
21. "Luiz O Pinto" pushed 500,000+ installs of malware via Google Play, in ~1 week.

IOS

22. Spoofed addresses and anonymous sending: new Gmail bugs make for easy pickings
23. 13 Malware-Laden Fake Apps on Google Play
24. New Wine in Old Bottle: New Azorult Variant Found in FindMyName Campaign using Fallout Exploit Kit

MACOS

25. Pen-test at Dropbox turns up three Apple 0-day bugs
26. What Is Windows PowerShell (And Could It Be Malicious)?
27. Adobe plugs critical RCE Flash Player flaw, update ASAP! Exploitation may be imminent
28. CVE-2018-15981: Adobe Flash Player Arbitrary Code Execution Vulnerability

Threat report for 2018-11-21

DATA BREACH & DATA LOSS

1. Email Addresses and Phone Numbers of More than 60 Million Users Exposed by USPS
2. A flaw in US Postal Service website exposed data on 60 Million Users
3. Emotet Banking Trojan Uses Stolen Templates to Boost Phishing Campaign Numbers
4. Amazon Customer Email Addresses Leaked Because of 'Technical Error'
5. Google Taking Over Health Records Raises Patient Privacy Fears
6. Amazon tech error leaks customers’ email addresses
7. USPS Site Exposed Data on 60 Million Users
8. Vision Direct Deals With Customer Data Leak
9. Amazon suffers data breach days before Black Friday
10. Emotet’s Thanksgiving Campaign Delivers New Recipes for Compromise
11. Researchers Reveal Identity of Hacker Behind Massive Data Breaches
12. Record Retention
13. A hacker known as #Tessa88 offered several compromise databases obtained from LinkedIn, MySpace and other companies. Now Recorded Future believes
14. The promised integration with #HaveIBeenPwned is expanding in #FirefoxMonitor with new breach alerts when a user visits a recently compromised
15. Amazon warns customers it leaked their names and email addresses
16. Amazon leaks users' email addresses due to 'technical error'
17. High Tail Hall data breach exposes over 400,000 furry fans
18. Facebook Ads Urge Its Staff To Leak Secrets
19. Amazon Suffers Data Breach Days Before Black Friday
20. New Wine in Old Bottle: New Azorult Variant Found in FindMyName Campaign using Fallout Exploit Kit
21. Despite early speculation, experts concluded the BGP route leak that sent Google traffic through China and Russia was due to
22. Amazon UK is notifying a data breach to its customers days before Black Friday
23. New Campaign by APT Group Sofacy Discovered using new Malware Named Cannon
24. White House admits Ivanka Trump used private email for government business
25. .@Amazon unveils new settings to help users avoid S3 data leaks, but UpGuard's Chris Vickery, who uncovered most #AWS exposures,
26. How have #phishing campaigns threatened your #EnterpriseSecurity system?
27. Weekly Threat Briefing: Russian APT Comes Back to Life with New US Spear-phishing Campaign
28. Amazon Data Leak Exposes Email Addresses Right Before Black Friday
29. Yikes...#Instagram Accidentally Exposed Some Users' #Passwords In Plaintext
30. APAC consumers want IoT devices, but fear data leaks
31. OUR BLACK FRIDAY DEALS ARE LIVE! Get 50% off from FREEDOME VPN and TOTAL subscriptions with coupon code BLACKFRIDAY. Buy now:
32. Russia Linked Group Resurfaces With Large-Scale Phishing Campaign

DENIAL-OF-SERVICE

Nil

MALVERTISING

33. New OceanLotus watering hole attacks target southeast Asia

PHISHING

34. Phishing: It's all too easy on mobile devices
35. Emotet Banking Trojan Uses Stolen Templates to Boost Phishing Campaign Numbers
36. Black Friday Phishing Dos and Don’ts
37. Bah HumBUG: 5 Recent Holiday Phishing Samples You Need to Watch Out For
38. Phishing Emails with .COM Extensions Are Hitting Finance Departments
39. Black Friday & Cyber Monday Deals: Phishing and Site Skimmers
40. #CyberMonday Tip 1: Be careful of phishing scams claiming to be from a package-delivery company with links to tracking information. AVG
41. How have #phishing campaigns threatened your #EnterpriseSecurity system?
42. Weekly Threat Briefing: Russian APT Comes Back to Life with New US Spear-phishing Campaign
43. Yikes...#Instagram Accidentally Exposed Some Users' #Passwords In Plaintext
44. #Gmail Glitch Enables Anonymous Messages in #Phishing Attacks:
45. Phishing Scams Serious Problem for Canada’s Global Affairs
46. Microsoft now lets you log into Outlook, Skype, Xbox Live without a password
47. Russia Linked Group Resurfaces With Large-Scale Phishing Campaign

WEB DEFACEMENT

Nil

BOTNET

48. Outlaw Group Botnet Enhanced
49. A new #botnet -- #Mylobot -- has shown new, complex levels of tools and techniques that are subsequently altering botnet
50. New Hacking Group Outlaw Distributing Botnet to Scan The Network & Perform Cryptocurrency-Mining & Brute-Force Attack

RANSOMWARE

51. City of Valdez, Alaska admits to paying off ransomware infection
52. Malaysia’s largest media company becomes victim of a ransomware attack

CRYPTOMINING & CRYPTOCURRENCIES

53. Malware Moves: Attackers Retool for Cryptocurrency Theft
54. New Hacking Group Outlaw Distributing Botnet to Scan The Network & Perform Cryptocurrency-Mining & Brute-Force Attack
55. Signing and Verifying Ethereum Signatures
56. US Department of Justice is investigating Tether for manipulation of market prices
57. Worried about cryptojacking? Check out how SentinelOne Detects and Protects from GhostMiner CryptoMiner

MALWARE

58. Emotet Banking Trojan Uses Stolen Templates to Boost Phishing Campaign Numbers
59. Lazarus APT Uses Modular Backdoor to Target Financial Institutions
60. What Is Windows PowerShell (And Could It Be Malicious)?
61. Take a Look at L0rdix, The Super Malware Toolkit of 2018
62. Mirai Used as Payload in Hadoop YARN Vulnerability
63. 500K Android users hit with malware, and what to do if you're infected
64. Russian Cozy Bear cyberspies awake from hibernation to sling spyware
65. 13 Malware-Laden Fake Apps on Google Play
66. Italian Naval Industry Attacked By MartyMcFly Malware
67. Sofacy APT unleashes new 'Cannon' trojan
68. New Pterodo Backdoor Malware Detected By Ukraine
69. New Campaign by APT Group Sofacy Discovered using new Malware Named Cannon
70. Malicious programs disguised as racing games on Google Play
71. How is Plead #malware used for #cyberespionage attacks? Learn more with Michael Cobb of @thehairyITdog.
72. Conficker: A 10-year retrospective on a legendary worm
73. Malware Moves: Attackers Retool for Cryptocurrency Theft
74. Infowars Online Store Got Infected with Card Skimming Malware
75. Awake Security uncovers malicious intent across on-premise, IoT and cloud infrastructure
76. Centreon releases Remote Server functionality for cross-domain monitoring of multi-site IT operations
77. Fancy Bear APT Uses New Cannon Trojan to Target Government Entities
78. "Luiz O Pinto" pushed 500,000+ installs of malware via Google Play, in ~1 week.
79. Uncover virtual hosts of domain with Fierce
80. Sofacy APT Takes Aim with Novel ‘Cannon’ Trojan
81. How to find, is link malicious/URL or not
82. Worried about cryptojacking? Check out how SentinelOne Detects and Protects from GhostMiner CryptoMiner

EXPLOIT

83. Attackers Exploit Recently Patched Popular WordPress Plugin
84. New Wine in Old Bottle: New Azorult Variant Found in FindMyName Campaign using Fallout Exploit Kit
85. Exploit Windows Remote PC with EternalBlue & DoublePulsar Exploit through Metasploit
86. Worried about cryptojacking? Check out how SentinelOne Detects and Protects from GhostMiner CryptoMiner

VULNERABILITY

87. Pen-test at Dropbox turns up three Apple 0-day bugs
88. A flaw in US Postal Service website exposed data on 60 Million Users
89. Facebook increases rewards for its bug bounty program and facilitate bug submission
90. Spoofed addresses and anonymous sending: new Gmail bugs make for easy pickings
91. Mirai Used as Payload in Hadoop YARN Vulnerability
92. Facebook entices researchers with $40,000 reward for account takeover vulnerabilities
93. Major Flaws Found in IT Pentagon Processes After First Ever Financial Audit
94. How a Security Test for DropBox Revealed 3 Apple Zero Day Vulnerabilities
95. Adobe issues fix for Flash bug allowing remote code execution
96. A new vulnerability was discovered to affect #Bluetooth #firmware or operating system software drivers. Learn what this vulnerability is and
97. German eID Authentication Flaw Lets You Change Identity
98. Hackers target Drupal servers chaining several flaws, including Drupalgeddon2 and DirtyCOW
99. New vulnerabilities are coming faster than you can fix them
100. Red Hawk – Open Source Information Gathering and Vulnerability Scanning Tool
101. Hackers target critical WordPress plugin flaw to install backdoors and create admin accounts
102. Hackers target critical WordPress plugin flaw to install backdoors and create admin accounts
103. Experts found flaws in Dell EMC and VMware Products. Patch them now!
104. From directory traversal to direct travesty: Crash, hijack, siphon off this TP-Link VPN box via classic exploitable bugs
105. A @DLink #router vulnerability was used to send banking users to a fake site in order to steal #UserCredentials. Learn
106. Adobe plugs critical RCE Flash Player flaw, update ASAP! Exploitation may be imminent
107. Patches Released for Flaws Affecting Dell EMC, VMware Products
108. Adobe Fixes Critical Flash Vulnerability with
109. Facebook Increases Rewards for Account Hacking Vulnerabilities
110. Adobe Flash Player Update Released for Remote Code Execution Vulnerability
111. Facebook Boosts Bug Bounty Payouts for Account Takeover Flaws
112. Hacker got Rewarded for Discovering a Critical Steam Bug
113. CVE-2018-15981: Adobe Flash Player Arbitrary Code Execution Vulnerability
114. Major Flaws Found in IT Pentagon Processes After First Ever Financial Audit

Region brief for 2018-11-21

ASIA

1. City of Valdez, Alaska admits to paying off ransomware infection
2. Lazarus APT Uses Modular Backdoor to Target Financial Institutions
3. Adobe issues fix for Flash bug allowing remote code execution
4. Despite early speculation, experts concluded the BGP route leak that sent Google traffic through China and Russia was due to
5. Amazon UK is notifying a data breach to its customers days before Black Friday
6. New Pterodo Backdoor Malware Detected By Ukraine
7. Is Magecart Checking Out Your Secure Online Transactions?
8. Weekly Threat Briefing: Russian APT Comes Back to Life with New US Spear-phishing Campaign
9. Phishing Scams Serious Problem for Canada’s Global Affairs
10. Millions Stolen by North Korea-Linked Hacking Group from Atms in Africa and Asia
11. Malaysia’s largest media company becomes victim of a ransomware attack

OCEANIA

12. Weekly Threat Briefing: Russian APT Comes Back to Life with New US Spear-phishing Campaign

NORTH AMERICA

13. Email Addresses and Phone Numbers of More than 60 Million Users Exposed by USPS
14. A flaw in US Postal Service website exposed data on 60 Million Users
15. Emotet Banking Trojan Uses Stolen Templates to Boost Phishing Campaign Numbers
16. Lazarus APT Uses Modular Backdoor to Target Financial Institutions
17. Facebook increases rewards for its bug bounty program and facilitate bug submission
18. Inspiring the Next Generation of Tech Talent
19. What Is Windows PowerShell (And Could It Be Malicious)?
20. Spoofed addresses and anonymous sending: new Gmail bugs make for easy pickings
21. Amazon tech error leaks customers’ email addresses
22. USPS Site Exposed Data on 60 Million Users
23. Amazon suffers data breach days before Black Friday
24. Major Flaws Found in IT Pentagon Processes After First Ever Financial Audit
25. Black Friday Phishing Dos and Don’ts
26. Amazon warns customers it leaked their names and email addresses
27. Amazon UK is notifying a data breach to its customers days before Black Friday
28. New Pterodo Backdoor Malware Detected By Ukraine
29. Black Friday & Cyber Monday Deals: Phishing and Site Skimmers
30. New Campaign by APT Group Sofacy Discovered using new Malware Named Cannon
31. White House admits Ivanka Trump used private email for government business
32. Weekly Threat Briefing: Russian APT Comes Back to Life with New US Spear-phishing Campaign
33. Sofacy APT group used a new tool in latest attacks, the Cannon
34. Phishing Scams Serious Problem for Canada’s Global Affairs
35. Malaysia’s largest media company becomes victim of a ransomware attack
36. Russian hackers are conducting more covert attacks on US and European computers
37. US Department of Justice is investigating Tether for manipulation of market prices
38. Major Flaws Found in IT Pentagon Processes After First Ever Financial Audit
39. Russia Linked Group Resurfaces With Large-Scale Phishing Campaign

SOUTH AMERICA

40. Magecart Black Hats Battle it Out On Infected Site
41. Weekly Threat Briefing: Russian APT Comes Back to Life with New US Spear-phishing Campaign

EUROPE

42. Google Taking Over Health Records Raises Patient Privacy Fears
43. Vision Direct Deals With Customer Data Leak
44. Amazon suffers data breach days before Black Friday
45. Russian Cozy Bear cyberspies awake from hibernation to sling spyware
46. German eID Authentication Flaw Lets You Change Identity
47. Despite early speculation, experts concluded the BGP route leak that sent Google traffic through China and Russia was due to
48. Amazon UK is notifying a data breach to its customers days before Black Friday
49. Italian Naval Industry Attacked By MartyMcFly Malware
50. Sofacy APT unleashes new 'Cannon' trojan
51. New Pterodo Backdoor Malware Detected By Ukraine
52. New Campaign by APT Group Sofacy Discovered using new Malware Named Cannon
53. Fancy Bear hacker crew Putin dirty RATs in Word documents emailed to govt orgs – report
54. Is Magecart Checking Out Your Secure Online Transactions?
55. Weekly Threat Briefing: Russian APT Comes Back to Life with New US Spear-phishing Campaign
56. Infowars Online Store Got Infected with Card Skimming Malware
57. Sofacy APT group used a new tool in latest attacks, the Cannon
58. Phishing Scams Serious Problem for Canada’s Global Affairs
59. Russian hackers are conducting more covert attacks on US and European computers
60. Sofacy APT Takes Aim with Novel ‘Cannon’ Trojan
61. Russia Linked Group Resurfaces With Large-Scale Phishing Campaign

AFRICA

62. Weekly Threat Briefing: Russian APT Comes Back to Life with New US Spear-phishing Campaign

Sector brief for 2018-11-21

HEALTHCARE

1. Google Taking Over Health Records Raises Patient Privacy Fears
2. Conficker: A 10-year retrospective on a legendary worm

TRANSPORT

3. Sofacy APT unleashes new 'Cannon' trojan
4. New Campaign by APT Group Sofacy Discovered using new Malware Named Cannon

BANKING & FINANCE

5. Emotet Banking Trojan Uses Stolen Templates to Boost Phishing Campaign Numbers
6. Lazarus APT Uses Modular Backdoor to Target Financial Institutions
7. What Is Windows PowerShell (And Could It Be Malicious)?
8. Spoofed addresses and anonymous sending: new Gmail bugs make for easy pickings
9. USPS Site Exposed Data on 60 Million Users
10. Major Flaws Found in IT Pentagon Processes After First Ever Financial Audit
11. Black Friday Phishing Dos and Don’ts
12. Bah HumBUG: 5 Recent Holiday Phishing Samples You Need to Watch Out For
13. How Retailers Can Protect Against Magecart This Black Friday and Holiday Season
14. New Wine in Old Bottle: New Azorult Variant Found in FindMyName Campaign using Fallout Exploit Kit
15. Phishing Emails with .COM Extensions Are Hitting Finance Departments
16. Black Friday & Cyber Monday Deals: Phishing and Site Skimmers
17. Magecart Black Hats Battle it Out On Infected Site
18. Is Magecart Checking Out Your Secure Online Transactions?
19. Weekly Threat Briefing: Russian APT Comes Back to Life with New US Spear-phishing Campaign
20. A @DLink #router vulnerability was used to send banking users to a fake site in order to steal #UserCredentials. Learn
21. Infowars Online Store Got Infected with Card Skimming Malware
22. Signing and Verifying Ethereum Signatures
23. Millions Stolen by North Korea-Linked Hacking Group from Atms in Africa and Asia
24. Malaysia’s largest media company becomes victim of a ransomware attack
25. US Department of Justice is investigating Tether for manipulation of market prices
26. MageCart Group Sabotages Rival to Ruin Data and Reputation
27. Major Flaws Found in IT Pentagon Processes After First Ever Financial Audit

INFORMATION & TELECOMMUNICATION

28. Facebook increases rewards for its bug bounty program and facilitate bug submission
29. Inspiring the Next Generation of Tech Talent
30. Google Taking Over Health Records Raises Patient Privacy Fears
31. What Is Windows PowerShell (And Could It Be Malicious)?
32. Spoofed addresses and anonymous sending: new Gmail bugs make for easy pickings
33. Facebook entices researchers with $40,000 reward for account takeover vulnerabilities
34. USPS Site Exposed Data on 60 Million Users
35. Researchers Reveal Identity of Hacker Behind Massive Data Breaches
36. A hacker known as #Tessa88 offered several compromise databases obtained from LinkedIn, MySpace and other companies. Now Recorded Future believes
37. Black Friday Phishing Dos and Don’ts
38. 13 Malware-Laden Fake Apps on Google Play
39. Facebook Ads Urge Its Staff To Leak Secrets
40. How Retailers Can Protect Against Magecart This Black Friday and Holiday Season
41. New Wine in Old Bottle: New Azorult Variant Found in FindMyName Campaign using Fallout Exploit Kit
42. Amazon UK is notifying a data breach to its customers days before Black Friday
43. Black Friday & Cyber Monday Deals: Phishing and Site Skimmers
44. New Campaign by APT Group Sofacy Discovered using new Malware Named Cannon
45. Weekly Threat Briefing: Russian APT Comes Back to Life with New US Spear-phishing Campaign
46. Malicious programs disguised as racing games on Google Play
47. Yikes...#Instagram Accidentally Exposed Some Users' #Passwords In Plaintext
48. #Gmail Glitch Enables Anonymous Messages in #Phishing Attacks:
49. Facebook Increases Rewards for Account Hacking Vulnerabilities
50. Facebook Boosts Bug Bounty Payouts for Account Takeover Flaws
51. OUR BLACK FRIDAY DEALS ARE LIVE! Get 50% off from FREEDOME VPN and TOTAL subscriptions with coupon code BLACKFRIDAY. Buy now:
52. "Luiz O Pinto" pushed 500,000+ installs of malware via Google Play, in ~1 week.
53. How to find, is link malicious/URL or not
54. Microsoft now lets you log into Outlook, Skype, Xbox Live without a password
55. Worried about cryptojacking? Check out how SentinelOne Detects and Protects from GhostMiner CryptoMiner

FOOD

Nil

WATER

Nil

ENERGY

Nil

GOVERNMENT & PUBLIC SERVICE

56. Analyzing OilRig’s Ops Tempo from Testing to Weaponization to Delivery
57. New Pterodo Backdoor Malware Detected By Ukraine
58. New Campaign by APT Group Sofacy Discovered using new Malware Named Cannon
59. White House admits Ivanka Trump used private email for government business
60. New OceanLotus watering hole attacks target southeast Asia
61. Fancy Bear hacker crew Putin dirty RATs in Word documents emailed to govt orgs – report
62. Weekly Threat Briefing: Russian APT Comes Back to Life with New US Spear-phishing Campaign
63. Sofacy APT group used a new tool in latest attacks, the Cannon
64. Phishing Scams Serious Problem for Canada’s Global Affairs
65. Russian hackers are conducting more covert attacks on US and European computers
66. Fancy Bear APT Uses New Cannon Trojan to Target Government Entities
67. Russia Linked Group Resurfaces With Large-Scale Phishing Campaign

Daily brief for 2018-11-21

ASIA

1. City of Valdez, Alaska admits to paying off ransomware infection
2. Lazarus APT Uses Modular Backdoor to Target Financial Institutions
3. Adobe issues fix for Flash bug allowing remote code execution
4. Despite early speculation, experts concluded the BGP route leak that sent Google traffic through China and Russia was due to
5. Amazon UK is notifying a data breach to its customers days before Black Friday
6. New Pterodo Backdoor Malware Detected By Ukraine
7. Is Magecart Checking Out Your Secure Online Transactions?
8. Weekly Threat Briefing: Russian APT Comes Back to Life with New US Spear-phishing Campaign
9. Phishing Scams Serious Problem for Canada’s Global Affairs
10. Millions Stolen by North Korea-Linked Hacking Group from Atms in Africa and Asia
11. Malaysia’s largest media company becomes victim of a ransomware attack

WORLD

12. Email Addresses and Phone Numbers of More than 60 Million Users Exposed by USPS
13. A flaw in US Postal Service website exposed data on 60 Million Users
14. Emotet Banking Trojan Uses Stolen Templates to Boost Phishing Campaign Numbers
15. Lazarus APT Uses Modular Backdoor to Target Financial Institutions
16. Facebook increases rewards for its bug bounty program and facilitate bug submission
17. Inspiring the Next Generation of Tech Talent
18. Google Taking Over Health Records Raises Patient Privacy Fears
19. What Is Windows PowerShell (And Could It Be Malicious)?
20. Spoofed addresses and anonymous sending: new Gmail bugs make for easy pickings
21. Amazon tech error leaks customers’ email addresses
22. USPS Site Exposed Data on 60 Million Users
23. Vision Direct Deals With Customer Data Leak
24. Amazon suffers data breach days before Black Friday
25. Major Flaws Found in IT Pentagon Processes After First Ever Financial Audit
26. Black Friday Phishing Dos and Don’ts
27. Amazon warns customers it leaked their names and email addresses
28. Russian Cozy Bear cyberspies awake from hibernation to sling spyware
29. German eID Authentication Flaw Lets You Change Identity
30. Despite early speculation, experts concluded the BGP route leak that sent Google traffic through China and Russia was due to
31. Amazon UK is notifying a data breach to its customers days before Black Friday
32. Italian Naval Industry Attacked By MartyMcFly Malware
33. Sofacy APT unleashes new 'Cannon' trojan
34. New Pterodo Backdoor Malware Detected By Ukraine
35. Black Friday & Cyber Monday Deals: Phishing and Site Skimmers
36. New Campaign by APT Group Sofacy Discovered using new Malware Named Cannon
37. White House admits Ivanka Trump used private email for government business
38. Magecart Black Hats Battle it Out On Infected Site
39. Fancy Bear hacker crew Putin dirty RATs in Word documents emailed to govt orgs – report
40. Is Magecart Checking Out Your Secure Online Transactions?
41. Weekly Threat Briefing: Russian APT Comes Back to Life with New US Spear-phishing Campaign
42. Infowars Online Store Got Infected with Card Skimming Malware
43. Sofacy APT group used a new tool in latest attacks, the Cannon
44. Phishing Scams Serious Problem for Canada’s Global Affairs
45. Malaysia’s largest media company becomes victim of a ransomware attack
46. Russian hackers are conducting more covert attacks on US and European computers
47. US Department of Justice is investigating Tether for manipulation of market prices
48. Sofacy APT Takes Aim with Novel ‘Cannon’ Trojan
49. Major Flaws Found in IT Pentagon Processes After First Ever Financial Audit
50. Russia Linked Group Resurfaces With Large-Scale Phishing Campaign

ATTACKS

51. Phishing: It's all too easy on mobile devices
52. Email Addresses and Phone Numbers of More than 60 Million Users Exposed by USPS
53. A flaw in US Postal Service website exposed data on 60 Million Users
54. Emotet Banking Trojan Uses Stolen Templates to Boost Phishing Campaign Numbers
55. Amazon Customer Email Addresses Leaked Because of 'Technical Error'
56. Google Taking Over Health Records Raises Patient Privacy Fears
57. Amazon tech error leaks customers’ email addresses
58. USPS Site Exposed Data on 60 Million Users
59. Vision Direct Deals With Customer Data Leak
60. Amazon suffers data breach days before Black Friday
61. Emotet’s Thanksgiving Campaign Delivers New Recipes for Compromise
62. Researchers Reveal Identity of Hacker Behind Massive Data Breaches
63. Record Retention
64. A hacker known as #Tessa88 offered several compromise databases obtained from LinkedIn, MySpace and other companies. Now Recorded Future believes
65. Black Friday Phishing Dos and Don’ts
66. The promised integration with #HaveIBeenPwned is expanding in #FirefoxMonitor with new breach alerts when a user visits a recently compromised
67. Amazon warns customers it leaked their names and email addresses
68. Amazon leaks users' email addresses due to 'technical error'
69. High Tail Hall data breach exposes over 400,000 furry fans
70. Facebook Ads Urge Its Staff To Leak Secrets
71. Amazon Suffers Data Breach Days Before Black Friday
72. Bah HumBUG: 5 Recent Holiday Phishing Samples You Need to Watch Out For
73. New Wine in Old Bottle: New Azorult Variant Found in FindMyName Campaign using Fallout Exploit Kit
74. Phishing Emails with .COM Extensions Are Hitting Finance Departments
75. Despite early speculation, experts concluded the BGP route leak that sent Google traffic through China and Russia was due to
76. Amazon UK is notifying a data breach to its customers days before Black Friday
77. Black Friday & Cyber Monday Deals: Phishing and Site Skimmers
78. New Campaign by APT Group Sofacy Discovered using new Malware Named Cannon
79. White House admits Ivanka Trump used private email for government business
80. New OceanLotus watering hole attacks target southeast Asia
81. #CyberMonday Tip 1: Be careful of phishing scams claiming to be from a package-delivery company with links to tracking information. AVG
82. .@Amazon unveils new settings to help users avoid S3 data leaks, but UpGuard's Chris Vickery, who uncovered most #AWS exposures,
83. How have #phishing campaigns threatened your #EnterpriseSecurity system?
84. Weekly Threat Briefing: Russian APT Comes Back to Life with New US Spear-phishing Campaign
85. Amazon Data Leak Exposes Email Addresses Right Before Black Friday
86. Yikes...#Instagram Accidentally Exposed Some Users' #Passwords In Plaintext
87. #Gmail Glitch Enables Anonymous Messages in #Phishing Attacks:
88. APAC consumers want IoT devices, but fear data leaks
89. Phishing Scams Serious Problem for Canada’s Global Affairs
90. OUR BLACK FRIDAY DEALS ARE LIVE! Get 50% off from FREEDOME VPN and TOTAL subscriptions with coupon code BLACKFRIDAY. Buy now:
91. Microsoft now lets you log into Outlook, Skype, Xbox Live without a password
92. Russia Linked Group Resurfaces With Large-Scale Phishing Campaign

THREATS

93. Pen-test at Dropbox turns up three Apple 0-day bugs
94. City of Valdez, Alaska admits to paying off ransomware infection
95. A flaw in US Postal Service website exposed data on 60 Million Users
96. Emotet Banking Trojan Uses Stolen Templates to Boost Phishing Campaign Numbers
97. Lazarus APT Uses Modular Backdoor to Target Financial Institutions
98. Facebook increases rewards for its bug bounty program and facilitate bug submission
99. What Is Windows PowerShell (And Could It Be Malicious)?
100. Spoofed addresses and anonymous sending: new Gmail bugs make for easy pickings
101. Take a Look at L0rdix, The Super Malware Toolkit of 2018
102. Mirai Used as Payload in Hadoop YARN Vulnerability
103. Facebook entices researchers with $40,000 reward for account takeover vulnerabilities
104. 500K Android users hit with malware, and what to do if you're infected
105. Major Flaws Found in IT Pentagon Processes After First Ever Financial Audit
106. Russian Cozy Bear cyberspies awake from hibernation to sling spyware
107. How a Security Test for DropBox Revealed 3 Apple Zero Day Vulnerabilities
108. Adobe issues fix for Flash bug allowing remote code execution
109. 13 Malware-Laden Fake Apps on Google Play
110. A new vulnerability was discovered to affect #Bluetooth #firmware or operating system software drivers. Learn what this vulnerability is and
111. German eID Authentication Flaw Lets You Change Identity
112. Hackers target Drupal servers chaining several flaws, including Drupalgeddon2 and DirtyCOW
113. New vulnerabilities are coming faster than you can fix them
114. Red Hawk – Open Source Information Gathering and Vulnerability Scanning Tool
115. Hackers target critical WordPress plugin flaw to install backdoors and create admin accounts
116. Hackers target critical WordPress plugin flaw to install backdoors and create admin accounts
117. Italian Naval Industry Attacked By MartyMcFly Malware
118. Sofacy APT unleashes new 'Cannon' trojan
119. New Pterodo Backdoor Malware Detected By Ukraine
120. New Campaign by APT Group Sofacy Discovered using new Malware Named Cannon
121. Experts found flaws in Dell EMC and VMware Products. Patch them now!
122. From directory traversal to direct travesty: Crash, hijack, siphon off this TP-Link VPN box via classic exploitable bugs
123. A @DLink #router vulnerability was used to send banking users to a fake site in order to steal #UserCredentials. Learn
124. Malicious programs disguised as racing games on Google Play
125. Adobe plugs critical RCE Flash Player flaw, update ASAP! Exploitation may be imminent
126. Patches Released for Flaws Affecting Dell EMC, VMware Products
127. Adobe Fixes Critical Flash Vulnerability with
128. How is Plead #malware used for #cyberespionage attacks? Learn more with Michael Cobb of @thehairyITdog.
129. Conficker: A 10-year retrospective on a legendary worm
130. Malware Moves: Attackers Retool for Cryptocurrency Theft
131. Infowars Online Store Got Infected with Card Skimming Malware
132. Facebook Increases Rewards for Account Hacking Vulnerabilities
133. Adobe Flash Player Update Released for Remote Code Execution Vulnerability
134. New Hacking Group Outlaw Distributing Botnet to Scan The Network & Perform Cryptocurrency-Mining & Brute-Force Attack
135. Facebook Boosts Bug Bounty Payouts for Account Takeover Flaws
136. Signing and Verifying Ethereum Signatures
137. Hacker got Rewarded for Discovering a Critical Steam Bug
138. CVE-2018-15981: Adobe Flash Player Arbitrary Code Execution Vulnerability
139. Malaysia’s largest media company becomes victim of a ransomware attack
140. US Department of Justice is investigating Tether for manipulation of market prices
141. Awake Security uncovers malicious intent across on-premise, IoT and cloud infrastructure
142. Centreon releases Remote Server functionality for cross-domain monitoring of multi-site IT operations
143. Fancy Bear APT Uses New Cannon Trojan to Target Government Entities
144. "Luiz O Pinto" pushed 500,000+ installs of malware via Google Play, in ~1 week.
145. Uncover virtual hosts of domain with Fierce
146. Sofacy APT Takes Aim with Novel ‘Cannon’ Trojan
147. Major Flaws Found in IT Pentagon Processes After First Ever Financial Audit
148. How to find, is link malicious/URL or not
149. Worried about cryptojacking? Check out how SentinelOne Detects and Protects from GhostMiner CryptoMiner

CRIME

150. Emotet Banking Trojan Uses Stolen Templates to Boost Phishing Campaign Numbers
151. Facebook increases rewards for its bug bounty program and facilitate bug submission
152. What Is Windows PowerShell (And Could It Be Malicious)?
153. Spoofed addresses and anonymous sending: new Gmail bugs make for easy pickings
154. Take a Look at L0rdix, The Super Malware Toolkit of 2018
155. USPS Site Exposed Data on 60 Million Users
156. Researchers Reveal Identity of Hacker Behind Massive Data Breaches
157. Bah HumBUG: 5 Recent Holiday Phishing Samples You Need to Watch Out For
158. How Retailers Can Protect Against Magecart This Black Friday and Holiday Season
159. New Wine in Old Bottle: New Azorult Variant Found in FindMyName Campaign using Fallout Exploit Kit
160. Black Friday & Cyber Monday Deals: Phishing and Site Skimmers
161. Is Magecart Checking Out Your Secure Online Transactions?
162. Weekly Threat Briefing: Russian APT Comes Back to Life with New US Spear-phishing Campaign
163. How is Plead #malware used for #cyberespionage attacks? Learn more with Michael Cobb of @thehairyITdog.
164. Signing and Verifying Ethereum Signatures
165. Phishing Scams Serious Problem for Canada’s Global Affairs
166. Millions Stolen by North Korea-Linked Hacking Group from Atms in Africa and Asia
167. Malaysia’s largest media company becomes victim of a ransomware attack

POLITICS

168. What Is Windows PowerShell (And Could It Be Malicious)?
169. USPS Site Exposed Data on 60 Million Users
170. New Pterodo Backdoor Malware Detected By Ukraine
171. Weekly Threat Briefing: Russian APT Comes Back to Life with New US Spear-phishing Campaign
172. How is Plead #malware used for #cyberespionage attacks? Learn more with Michael Cobb of @thehairyITdog.
173. Phishing Scams Serious Problem for Canada’s Global Affairs
174. Russian hackers are conducting more covert attacks on US and European computers
175. US Department of Justice is investigating Tether for manipulation of market prices
176. MageCart Group Sabotages Rival to Ruin Data and Reputation

Daily brief for 2018-11-20

ASIA

1. ESET: Vietnamese hacking group hijacks Southeast Asian sites in watering hole campaign
2. 200K Outlaw Botnet Uses SSH Brute Forcing to Propagate, Monero Mining for Profit
3. Malvertising in Apple Pay Targets iPhone Users
4. Kaspersky Security Bulletin: Threat Predictions for 2019
5. Experts analyzed how Iranian OilRIG hackers tested their weaponized documents

WORLD

6. 200K Outlaw Botnet Uses SSH Brute Forcing to Propagate, Monero Mining for Profit
7. Infamous Russian Hacking Group Used New Trojan in Recent Attacks
8. APT29 Re-Emerges After 2 Years with Widespread Espionage Campaign
9. Voxox leak: Millions of SMS messages exposed
10. Russia’s Elite Hackers May Have New Phishing Tricks
11. Web skimmers compete in Umbro Brasil hack
12. Inspiring Gender Diversity at Women of the Channel Leadership Summit
13. Government Agencies and Think Tanks attacked, APT29 suspected
14. An Introduction to Magecart
15. Hackers Linked to Russia Impersonate US Officials
16. Two Young Men Jailed for Involvement in TalkTalk Data Breach
17. Russian hackers are trying out this new malware against US and European targets
18. TEMP.Periscope Spearphishing
19. Russian hackers are trying out this new malware against US and European targets
20. Russian APT activity is resurgent, researchers say
21. Report: Emotet makes phishing lures more convincing by scraping victims' emails
22. Sofacy Continues Global Attacks and Wheels Out New ‘Cannon’ Trojan
23. Lazarus Continues Heists, Mounts Attacks on Financial Organizations in Latin America
24. Zscaler ThreatLabZ Phishing Roundup
25. Dutch audit finds Microsoft Office leaks confidential data
26. Kaspersky Security Bulletin: Threat Predictions for 2019
27. Cozy Bear tracks: Phishing campaign looks like work of Russian APT group
28. Experts analyzed how Iranian OilRIG hackers tested their weaponized documents
29. Confiant spots major malvertising attack
30. Google, Target Hit by Twitter Bitcoin Scam Account Hacks
31. Two TalkTalk hackers jailed for 2015 data breach that cost it £77 million

ATTACKS

32. ESET: Vietnamese hacking group hijacks Southeast Asian sites in watering hole campaign
33. Gmail Glitch Enables Anonymous Messages in Phishing Attacks
34. jQuery File Upload Disclosure Due Diligence
35. Emotet Returns with Thanksgiving Theme and Better Phishing Tricks
36. APT29 Re-Emerges After 2 Years with Widespread Espionage Campaign
37. APT29 Re-Emerges After 2 Years with Widespread Espionage Campaign
38. Emotet Returns with Thanksgiving Theme and Better Phishing Tricks
39. Voxox leak: Millions of SMS messages exposed
40. Russia’s Elite Hackers May Have New Phishing Tricks
41. Second WordPress hacking campaign underway, this one targeting AMP for WP plugin
42. Vision Direct Reveals Data Breach
43. Malvertising in Apple Pay Targets iPhone Users
44. Instagram glitch exposed some user passwords
45. OSIsoft Warns Employees, Contractors of Data Breach
46. Two Young Men Jailed for Involvement in TalkTalk Data Breach
47. TEMP.Periscope Spearphishing
48. Report: Emotet makes phishing lures more convincing by scraping victims' emails
49. OceanLotus: New watering hole attack in Southeast Asia
50. OceanLotus: New watering hole attack in Southeast Asia
51. tRat: New Modular RAT Appears in Multiple Email Campaigns
52. Emotet Campaigns Persist, Utilize Updated Tactics and Techniques
53. Mac users using Exodus cryptocurrency wallet targeted by a small spam campaign
54. AWS moves to curb S3 data leaks, but Chris Vickery is doubtful
55. TalkTalk hackers jailed for role in £77m data breach
56. CarBlues – Bluetooth Vehicle Hack Exploit Affects Millions Of Vehicles Exposing Users PII
57. Zscaler ThreatLabZ Phishing Roundup
58. 2018 holiday travel period expected to be the busiest travel season on record
59. Vision Direct 'fesses up to hack that exposed customer names, payment cards
60. A little phishing knowledge may be a dangerous thing
61. Dutch audit finds Microsoft Office leaks confidential data
62. Cozy Bear tracks: Phishing campaign looks like work of Russian APT group
63. Instagram Patched A Data Download Tool Bug That Exposed Users Passwords
64. Confiant spots major malvertising attack
65. Two TalkTalk hackers jailed for 2015 data breach that cost it £77 million

THREATS

66. Instagram bug exposes user passwords
67. Critical Adobe Flash Bug Impacts Windows, macOS, Linux and Chrome OS
68. 200K Outlaw Botnet Uses SSH Brute Forcing to Propagate, Monero Mining for Profit
69. Hackers target Drupal servers chaining several flaws, including Drupalgeddon2 and DirtyCOW
70. Flash Player Type Confusion Critical Vulnerability, Another Reason Not to Use It
71. Down But Not Out, WannaCry Malware Continues to Infect Unpatched Windows PCs
72. Infamous Russian Hacking Group Used New Trojan in Recent Attacks
73. 560,000 Duped Into Installing Android Malware in the Form of Fake Driving Games
74. Flash Player Update Patches Disclosed Code Execution Flaw
75. Attackers Target Drupal Web Servers with Chained Vulnerabilities
76. DirtyCOW Is Back In Backdoor Attack Targeting Drupal Web Servers
77. Inserted Malicious URLs within Office Documents’ Embedded Videos
78. Russian hackers are trying out this new malware against US and European targets
79. Russian hackers are trying out this new malware against US and European targets
80. Sofacy Continues Global Attacks and Wheels Out New ‘Cannon’ Trojan
81. WordPress GDPR Plug-in Contains Privilege Escalation Flaw
82. tRat: New Modular RAT Appears in Multiple Email Campaigns
83. Dharma Ransomware Variant Discovered
84. Hackers Exploit Vulnerability in WP GDPR Compliance Plugin – Update Now
85. Mac users using Exodus cryptocurrency wallet targeted by a small spam campaign
86. For Smbs Ransomware Attacks still the Greatest Online Threat
87. Almost 50 Percent of 2018 Vulnerabilities Can Be Exploited Remotely
88. Targeted ransomware attacks on the rise in 2018, NCSC warns
89. TP-Link fixes 2 Remote Code Execution flaws in TL-R600VPN SOHO Router and other issues
90. Raft of flaws discovered in MiSafes child-monitoring devices
91. Scumbags cram Make-A-Wish website with coin-mining malware
92. Instagram Patched A Data Download Tool Bug That Exposed Users Passwords
93. Microsoft Releases Azure Blockchain Development Kit
94. DirtyCOW is back in backdoor attack targeting Drupal Web Servers
95. Can a D-Link router vulnerability threaten bank customers?
96. 3 New Code Execution Flaws Discovered in Atlantis Word Processor
97. Vulnerability Spotlight: Multiple remote code execution vulnerabilities in Atlantis Word Processor
98. Google Account Hacked for Fake Bitcoin Reward
99. 2019 Security Predictions – Utilities and Industrial Control Systems Targeted with Ransomware
100. Google, Target Hit by Twitter Bitcoin Scam Account Hacks
101. The wiper #malware that briefly disrupted the Winter #Olympics earlier this year appears to be back - now with a
102. 13 Malicious Apps in Google Play With More than 560,000+ Installs
103. Apache OpenOffice 4.1.6 release: important bug fixes and security fixes
104. Almost 50 Percent of 2018 Vulnerabilities Can Be Exploited Remotely
105. #BluetoothDevices might be at risk after a new #Bluetooth vulnerability was found targeting #firmware or operating system software drivers. Learn

CRIME

106. Inspiring Gender Diversity at Women of the Channel Leadership Summit
107. An Introduction to Magecart
108. Two Young Men Jailed for Involvement in TalkTalk Data Breach
109. Report: Emotet makes phishing lures more convincing by scraping victims' emails
110. Zscaler ThreatLabZ Phishing Roundup
111. Magecart Spies Payment Cards From Retailer Vision Direct
112. Kaspersky Security Bulletin: Threat Predictions for 2019
113. Google, Target Hit by Twitter Bitcoin Scam Account Hacks
114. Two TalkTalk hackers jailed for 2015 data breach that cost it £77 million

POLITICS

115. Infamous Russian Hacking Group Used New Trojan in Recent Attacks
116. APT29 Re-Emerges After 2 Years with Widespread Espionage Campaign
117. APT29 Re-Emerges After 2 Years with Widespread Espionage Campaign
118. Russia’s Elite Hackers May Have New Phishing Tricks
119. Web skimmers compete in Umbro Brasil hack
120. TEMP.Periscope Spearphishing
121. Mac users using Exodus cryptocurrency wallet targeted by a small spam campaign
122. Magecart Spies Payment Cards From Retailer Vision Direct
123. Dutch audit finds Microsoft Office leaks confidential data
124. Kaspersky Security Bulletin: Threat Predictions for 2019
125. Experts analyzed how Iranian OilRIG hackers tested their weaponized documents