Nov 27, 2018

APT report for 2018-11-26

TRANSNATIONAL / UNKNOWN

  1. Cyberthreats to financial institutions 2019: overview and predictions

CHINA

Nil

INDIA

Nil

NORTH KOREA

  1. Cyberthreats to financial institutions 2019: overview and predictions

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

  1. APT28 Is Using New Variant of Lojax
  2. Recent Attacks on US Entities Attributed to APT29

SERBIA

Nil

UKRAINE

  1. Cyberthreats to financial institutions 2019: overview and predictions
at
Labels:

Platform report for 2018-11-26

WINDOWS

  1. Half of all Phishing Sites Now Have the Padlock
  2. Phishing Campaign targeting French Industry

LINUX

  1. Linux Kernel is affected by two DoS vulnerabilities still unpatched
  2. DoS Vulnerabilities Impact Linux Kernel
  3. Experts found a new powerful modular Linux cryptominer

UNIX

Nil

ANDROID

  1. 13 Newly Discovered Malicious Apps, Deleted By Google From the Play Store
  2. Bypassing and Disabling SSL Pinning on Android to Perform Man-in-the-Middle Attack
  3. Play Store Malware Infects Half a Billion

IOS

  1. 13 Newly Discovered Malicious Apps, Deleted By Google From the Play Store

MACOS

  1. OSX.Dummy #malware has been discovered to use chat platforms in order to target #cryptocurrency investors. Learn more with expert @lewisnic
at
Labels:

Threat report for 2018-11-26

DATA BREACH & DATA LOSS

  1. Knuddels Flirt App Slapped with Hefty Fine After Data Breach
  2. When Do You Need to Report a Data Breach?
  3. USPS, Amazon Data Leaks Showcase API Weaknesses
  4. How Pirated Versions of ‘Super Smash Bros. Ultimate’ Leaked Weeks Before Release
  5. Despite growing concerns about cybersecurity and the number of data breach incidents in the news, many employees still have bad
  6. Trivial Spotify Phishing Campaign Targets Users To Steal Login Credentials
  7. Phishing Campaign targeting French Industry
  8. Russia Plans To tighten Data Protection Owing To Intelligence Leaks
  9. German Social Media Provider Fined €20K for Data Breach
  10. No need to compromise freedom for security - Europol audience told
  11. HR Software Firm PageUp Finds No Evidence of Data Theft
  12. Internal negligence to blame for most data breaches involving personal health information
  13. Sextortion 2.0: We have continued to monitor the campaigns and have seen a recent change in tactics, with some unusual
  14. An ongoing phishing campaign is targeting French industry, @FSLabs finds.
  15. Phishing Campaign targeting French Industry
  16. My Health Record opt-out officially extended to January 31

DENIAL-OF-SERVICE

Nil

MALVERTISING

Nil

PHISHING

  1. Holiday Season: Cybercriminals are Phishing All The Way
  2. Half of all Phishing Sites Now Have the Padlock
  3. Easy as APT: Spear phishing highlighted as ongoing threat for 2019
  4. Trivial Spotify Phishing Campaign Targets Users To Steal Login Credentials
  5. Phishing Campaign targeting French Industry
  6. 50% use password managers to store login details
  7. An ongoing phishing campaign is targeting French industry, @FSLabs finds.
  8. Phishing Campaign targeting French Industry
  9. Beware!! Cyber Criminals Launching Serious Phishing Attack that Target Spotify Customers

WEB DEFACEMENT

Nil

BOTNET

  1. Democrats Introduce Bill for Stopping Automated Grinch Bots from Ruining Xmas

RANSOMWARE

  1. Ransomware attack disrupted emergency rooms at Ohio Hospital System
  2. Mobile Rotexy Malware Touts Ransomware, Banking Trojan Functions
  3. Ransomware Attack Forced Ohio Hospital System to Divert ER Patients
  4. A new ransomware -- dubbed #Thanatos #ransomware -- was found encrypting data but not decrypting it despite victims paying the

CRYPTOMINING & CRYPTOCURRENCIES

  1. Hacker backdoors popular JavaScript library to steal Bitcoin funds
  2. Harberger Taxes on Ethereum
  3. OSX.Dummy #malware has been discovered to use chat platforms in order to target #cryptocurrency investors. Learn more with expert @lewisnic
  4. Cryptocurrency threat predictions for 2019
  5. Crypto Mining Malware Infects Make-A-Wish-Foundation Website
  6. Experts found a new powerful modular Linux cryptominer

MALWARE

  1. Lenovo to Pay $7.3 Million in Settlement for Installing Adware on 800K Notebooks
  2. 13 Newly Discovered Malicious Apps, Deleted By Google From the Play Store
  3. What is Data Classification? Guidelines and Process
  4. Mobile Rotexy Malware Touts Ransomware, Banking Trojan Functions
  5. Subscribe to the relaunched Virus Bulletin eNews newsletter
  6. Play Store Malware Infects Half a Billion
  7. Microsoft PowerPoint as Malware Dropper
  8. OSX.Dummy #malware has been discovered to use chat platforms in order to target #cryptocurrency investors. Learn more with expert @lewisnic
  9. Ukrainian Police Nab Suspected RAT-Slinger
  10. Crypto Mining Malware Infects Make-A-Wish-Foundation Website

EXPLOIT

Nil

VULNERABILITY

  1. Microsoft launches review after a trio of Azure bugs locked users out of Office 365
  2. Did UK city council over-react to a vulnerability report in its recycling app or not?
  3. Linux Kernel is affected by two DoS vulnerabilities still unpatched
  4. DoS Vulnerabilities Impact Linux Kernel
  5. Apache Hadoop Spins Cracking Code Injection Vulnerability YARN
  6. Siemens patches major firewall flaw, other vulnerabilities
  7. #Bluetooth devices might be at risk after a new Bluetooth vulnerability was found targeting #firmware and #OperatingSystem software drivers. Learn
  8. U.S. Postal Service API Flaw Exposes Data of 60 Million Customers
  9. Positive Technologies researchers recently found two serious vulnerabilities that target NCR's #ATMs. Learn how a "black box attack" was involved
  10. Discover how a @DLink #router vulnerability targeted a banking site to steal #UserCredentials with expert Judith Myerson.
  11. For recent big data software vulnerabilities, botnets and coin mining are just the beginning
  12. Frost & Sullivan Commends Rapid7 for Capturing Nearly a Quarter Share of the Global Vulnerability Management Market
at
Labels:

Region brief for 2018-11-26

ASIA

  1. Half of all Phishing Sites Now Have the Padlock
  2. Cyberthreats to financial institutions 2019: overview and predictions
  3. Ukrainian Police Nab Suspected RAT-Slinger
  4. Crypto Mining Malware Infects Make-A-Wish-Foundation Website

OCEANIA

  1. When Do You Need to Report a Data Breach?
  2. HR Software Firm PageUp Finds No Evidence of Data Theft

NORTH AMERICA

  1. Microsoft launches review after a trio of Azure bugs locked users out of Office 365
  2. When Do You Need to Report a Data Breach?
  3. Democrats Introduce Bill for Stopping Automated Grinch Bots from Ruining Xmas
  4. How Pirated Versions of ‘Super Smash Bros. Ultimate’ Leaked Weeks Before Release
  5. Microsoft PowerPoint as Malware Dropper
  6. Recent Attacks on US Entities Attributed to APT29
  7. U.S. Postal Service API Flaw Exposes Data of 60 Million Customers
  8. Russia Plans To tighten Data Protection Owing To Intelligence Leaks
  9. Cyberthreats to financial institutions 2019: overview and predictions

SOUTH AMERICA

  1. Crypto Mining Malware Infects Make-A-Wish-Foundation Website

EUROPE

  1. Did UK city council over-react to a vulnerability report in its recycling app or not?
  2. Knuddels Flirt App Slapped with Hefty Fine After Data Breach
  3. Siemens patches major firewall flaw, other vulnerabilities
  4. Recent Attacks on US Entities Attributed to APT29
  5. Phishing Campaign targeting French Industry
  6. Russia Plans To tighten Data Protection Owing To Intelligence Leaks
  7. German Social Media Provider Fined €20K for Data Breach
  8. Cyberthreats to financial institutions 2019: overview and predictions
  9. Ukrainian Police Nab Suspected RAT-Slinger
  10. Crypto Mining Malware Infects Make-A-Wish-Foundation Website
  11. Experts found a new powerful modular Linux cryptominer
  12. An ongoing phishing campaign is targeting French industry, @FSLabs finds.
  13. Phishing Campaign targeting French Industry

AFRICA

Nil
at
Labels:

Sector brief for 2018-11-26

HEALTHCARE

  1. Ransomware attack disrupted emergency rooms at Ohio Hospital System
  2. Ransomware Attack Forced Ohio Hospital System to Divert ER Patients
  3. Internal negligence to blame for most data breaches involving personal health information

TRANSPORT

  1. Holiday Season: Cybercriminals are Phishing All The Way
  2. Phishing Campaign targeting French Industry

BANKING & FINANCE

  1. What is Data Classification? Guidelines and Process
  2. When Do You Need to Report a Data Breach?
  3. Mobile Rotexy Malware Touts Ransomware, Banking Trojan Functions
  4. Holiday Season: Cybercriminals are Phishing All The Way
  5. Phishing Campaign targeting French Industry
  6. Cryptocurrency threat predictions for 2019
  7. Cyberthreats to financial institutions 2019: overview and predictions
  8. Discover how a @DLink #router vulnerability targeted a banking site to steal #UserCredentials with expert Judith Myerson.

INFORMATION & TELECOMMUNICATION

  1. Microsoft launches review after a trio of Azure bugs locked users out of Office 365
  2. 13 Newly Discovered Malicious Apps, Deleted By Google From the Play Store
  3. How Pirated Versions of ‘Super Smash Bros. Ultimate’ Leaked Weeks Before Release
  4. Half of all Phishing Sites Now Have the Padlock
  5. Despite growing concerns about cybersecurity and the number of data breach incidents in the news, many employees still have bad
  6. Phishing Campaign targeting French Industry
  7. Cyberthreats to financial institutions 2019: overview and predictions
  8. Sextortion 2.0: We have continued to monitor the campaigns and have seen a recent change in tactics, with some unusual
  9. An ongoing phishing campaign is targeting French industry, @FSLabs finds.

FOOD

Nil

WATER

Nil

ENERGY

  1. Siemens patches major firewall flaw, other vulnerabilities

GOVERNMENT & PUBLIC SERVICE

  1. Did UK city council over-react to a vulnerability report in its recycling app or not?
  2. When Do You Need to Report a Data Breach?
  3. Recent Attacks on US Entities Attributed to APT29
  4. Russia Plans To tighten Data Protection Owing To Intelligence Leaks
  5. Cyberthreats to financial institutions 2019: overview and predictions
  6. Ukrainian Police Nab Suspected RAT-Slinger
  7. Crypto Mining Malware Infects Make-A-Wish-Foundation Website
at
Labels:

Daily brief for 2018-11-26

ASIA

  1. Half of all Phishing Sites Now Have the Padlock
  2. Cyberthreats to financial institutions 2019: overview and predictions
  3. Ukrainian Police Nab Suspected RAT-Slinger
  4. Crypto Mining Malware Infects Make-A-Wish-Foundation Website

WORLD

  1. Microsoft launches review after a trio of Azure bugs locked users out of Office 365
  2. Did UK city council over-react to a vulnerability report in its recycling app or not?
  3. Knuddels Flirt App Slapped with Hefty Fine After Data Breach
  4. When Do You Need to Report a Data Breach?
  5. Democrats Introduce Bill for Stopping Automated Grinch Bots from Ruining Xmas
  6. Siemens patches major firewall flaw, other vulnerabilities
  7. How Pirated Versions of ‘Super Smash Bros. Ultimate’ Leaked Weeks Before Release
  8. Microsoft PowerPoint as Malware Dropper
  9. Recent Attacks on US Entities Attributed to APT29
  10. U.S. Postal Service API Flaw Exposes Data of 60 Million Customers
  11. Phishing Campaign targeting French Industry
  12. Russia Plans To tighten Data Protection Owing To Intelligence Leaks
  13. German Social Media Provider Fined €20K for Data Breach
  14. Cyberthreats to financial institutions 2019: overview and predictions
  15. Ukrainian Police Nab Suspected RAT-Slinger
  16. Crypto Mining Malware Infects Make-A-Wish-Foundation Website
  17. Experts found a new powerful modular Linux cryptominer
  18. HR Software Firm PageUp Finds No Evidence of Data Theft
  19. An ongoing phishing campaign is targeting French industry, @FSLabs finds.
  20. Phishing Campaign targeting French Industry

ATTACKS

  1. Knuddels Flirt App Slapped with Hefty Fine After Data Breach
  2. When Do You Need to Report a Data Breach?
  3. USPS, Amazon Data Leaks Showcase API Weaknesses
  4. Holiday Season: Cybercriminals are Phishing All The Way
  5. How Pirated Versions of ‘Super Smash Bros. Ultimate’ Leaked Weeks Before Release
  6. Half of all Phishing Sites Now Have the Padlock
  7. Easy as APT: Spear phishing highlighted as ongoing threat for 2019
  8. Despite growing concerns about cybersecurity and the number of data breach incidents in the news, many employees still have bad
  9. Trivial Spotify Phishing Campaign Targets Users To Steal Login Credentials
  10. Phishing Campaign targeting French Industry
  11. Russia Plans To tighten Data Protection Owing To Intelligence Leaks
  12. German Social Media Provider Fined €20K for Data Breach
  13. No need to compromise freedom for security - Europol audience told
  14. 50% use password managers to store login details
  15. HR Software Firm PageUp Finds No Evidence of Data Theft
  16. Internal negligence to blame for most data breaches involving personal health information
  17. Sextortion 2.0: We have continued to monitor the campaigns and have seen a recent change in tactics, with some unusual
  18. An ongoing phishing campaign is targeting French industry, @FSLabs finds.
  19. Phishing Campaign targeting French Industry
  20. Beware!! Cyber Criminals Launching Serious Phishing Attack that Target Spotify Customers
  21. My Health Record opt-out officially extended to January 31

THREATS

  1. Microsoft launches review after a trio of Azure bugs locked users out of Office 365
  2. Did UK city council over-react to a vulnerability report in its recycling app or not?
  3. Ransomware attack disrupted emergency rooms at Ohio Hospital System
  4. Lenovo to Pay $7.3 Million in Settlement for Installing Adware on 800K Notebooks
  5. 13 Newly Discovered Malicious Apps, Deleted By Google From the Play Store
  6. Hacker backdoors popular JavaScript library to steal Bitcoin funds
  7. What is Data Classification? Guidelines and Process
  8. Linux Kernel is affected by two DoS vulnerabilities still unpatched
  9. Mobile Rotexy Malware Touts Ransomware, Banking Trojan Functions
  10. Harberger Taxes on Ethereum
  11. DoS Vulnerabilities Impact Linux Kernel
  12. Subscribe to the relaunched Virus Bulletin eNews newsletter
  13. Apache Hadoop Spins Cracking Code Injection Vulnerability YARN
  14. Siemens patches major firewall flaw, other vulnerabilities
  15. Play Store Malware Infects Half a Billion
  16. Microsoft PowerPoint as Malware Dropper
  17. #Bluetooth devices might be at risk after a new Bluetooth vulnerability was found targeting #firmware and #OperatingSystem software drivers. Learn
  18. U.S. Postal Service API Flaw Exposes Data of 60 Million Customers
  19. Ransomware Attack Forced Ohio Hospital System to Divert ER Patients
  20. Positive Technologies researchers recently found two serious vulnerabilities that target NCR's #ATMs. Learn how a "black box attack" was involved
  21. OSX.Dummy #malware has been discovered to use chat platforms in order to target #cryptocurrency investors. Learn more with expert @lewisnic
  22. Cryptocurrency threat predictions for 2019
  23. Ukrainian Police Nab Suspected RAT-Slinger
  24. Crypto Mining Malware Infects Make-A-Wish-Foundation Website
  25. Experts found a new powerful modular Linux cryptominer
  26. A new ransomware -- dubbed #Thanatos #ransomware -- was found encrypting data but not decrypting it despite victims paying the
  27. Discover how a @DLink #router vulnerability targeted a banking site to steal #UserCredentials with expert Judith Myerson.
  28. For recent big data software vulnerabilities, botnets and coin mining are just the beginning
  29. Frost & Sullivan Commends Rapid7 for Capturing Nearly a Quarter Share of the Global Vulnerability Management Market

CRIME

  1. When Do You Need to Report a Data Breach?
  2. Holiday Season: Cybercriminals are Phishing All The Way
  3. Half of all Phishing Sites Now Have the Padlock
  4. Russia Plans To tighten Data Protection Owing To Intelligence Leaks
  5. Cryptocurrency threat predictions for 2019
  6. Cyberthreats to financial institutions 2019: overview and predictions
  7. Ukrainian Police Nab Suspected RAT-Slinger
  8. Experts found a new powerful modular Linux cryptominer
  9. HR Software Firm PageUp Finds No Evidence of Data Theft
  10. Sextortion 2.0: We have continued to monitor the campaigns and have seen a recent change in tactics, with some unusual

POLITICS

  1. Russia Plans To tighten Data Protection Owing To Intelligence Leaks
  2. Cryptocurrency threat predictions for 2019
  3. Ukrainian Police Nab Suspected RAT-Slinger
at
Labels:

Nov 25, 2018

APT report for 2018-11-24

TRANSNATIONAL / UNKNOWN

Nil

CHINA

Nil

INDIA

Nil

NORTH KOREA

  1. North Korea-linked group Lazarus targets Latin American banks

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

  1. News of the Week: November 24, 2018

SERBIA

Nil

UKRAINE

Nil
at
Labels:

Platform report for 2018-11-24

WINDOWS

  1. TA505 Cybercrime Group Experimenting with a New RAT In The Wild

LINUX

  1. CVE-2018-19406, CVE-2018-19407: Two DoS vulnerabilities on Linux Kernel
  2. New Trojan mining on the Linux will steal user passwords & removes anti-viruses

UNIX

Nil

ANDROID

Nil

IOS

Nil

MACOS

  1. MacOS Penetration Test Reveals Three Zero-Day Vulnerabilities
at
Labels:

Threat report for 2018-11-24

DATA BREACH & DATA LOSS

Nil

DENIAL-OF-SERVICE

Nil

MALVERTISING

Nil

PHISHING

  1. This week's #RiskAndRepeatPodcast digs into the debate over #WeakPasswords and password reuse, and asks: how much are users responsible for

WEB DEFACEMENT

Nil

BOTNET

Nil

RANSOMWARE

  1. Quebec Dubbed As An Embarrassment After Paying $30,000 To Ransomware Authors
  2. Powerful Mobile Malware Rotexy Launched over 70,000 Attacks with Banking Trojan & Ransomware Modules
  3. .@TalosSecurity recently created a #decryptor that helps files affected by the #ransomware #Thanatos -- typically known to not decrypt files
  4. SMBs suffered the brunt of ransomware attacks in 2018
  5. The Week in Ransomware - November 23rd 2018 - STOP, Dharma, and More

CRYPTOMINING & CRYPTOCURRENCIES

Nil

MALWARE

  1. Powerful Mobile Malware Rotexy Launched over 70,000 Attacks with Banking Trojan & Ransomware Modules
  2. TA505 Cybercrime Group Experimenting with a New RAT In The Wild
  3. Researchers at @okta found a bypass that allows #ThreatActors to pose files as legitimate @Apple files despite being #malware and
  4. 42-year-old man Arrested For Hacking More than 2,000 Computers From 50 countries With DarkComet RAT
  5. New Trojan mining on the Linux will steal user passwords & removes anti-viruses

EXPLOIT

Nil

VULNERABILITY

  1. Adobe Patched A Critical Flash Player Vulnerability Disclosed Publicly
  2. MacOS Penetration Test Reveals Three Zero-Day Vulnerabilities
  3. CVE-2018-19406, CVE-2018-19407: Two DoS vulnerabilities on Linux Kernel
  4. How has the @DLink #router vulnerability affected your enterprise?
at
Labels:

Region brief for 2018-11-24

ASIA

  1. North Korea-linked group Lazarus targets Latin American banks

OCEANIA

Nil

NORTH AMERICA

  1. Quebec Dubbed As An Embarrassment After Paying $30,000 To Ransomware Authors
  2. Adobe Patched A Critical Flash Player Vulnerability Disclosed Publicly
  3. News of the Week: November 24, 2018
  4. North Korea-linked group Lazarus targets Latin American banks

SOUTH AMERICA

Nil

EUROPE

  1. 42-year-old man Arrested For Hacking More than 2,000 Computers From 50 countries With DarkComet RAT
  2. New Trojan mining on the Linux will steal user passwords & removes anti-viruses

AFRICA

Nil
at
Labels:

Sector brief for 2018-11-24

HEALTHCARE

Nil

TRANSPORT

Nil

BANKING & FINANCE

  1. Quebec Dubbed As An Embarrassment After Paying $30,000 To Ransomware Authors
  2. Powerful Mobile Malware Rotexy Launched over 70,000 Attacks with Banking Trojan & Ransomware Modules
  3. North Korea-linked group Lazarus targets Latin American banks
  4. .@TalosSecurity recently created a #decryptor that helps files affected by the #ransomware #Thanatos -- typically known to not decrypt files
  5. TA505 Cybercrime Group Experimenting with a New RAT In The Wild

INFORMATION & TELECOMMUNICATION

  1. Quebec Dubbed As An Embarrassment After Paying $30,000 To Ransomware Authors

FOOD

Nil

WATER

  1. TA505 Cybercrime Group Experimenting with a New RAT In The Wild

ENERGY

Nil

GOVERNMENT & PUBLIC SERVICE

  1. Quebec Dubbed As An Embarrassment After Paying $30,000 To Ransomware Authors
  2. 42-year-old man Arrested For Hacking More than 2,000 Computers From 50 countries With DarkComet RAT
at
Labels:

Daily brief for 2018-11-24

ASIA

  1. North Korea-linked group Lazarus targets Latin American banks

WORLD

  1. Quebec Dubbed As An Embarrassment After Paying $30,000 To Ransomware Authors
  2. Adobe Patched A Critical Flash Player Vulnerability Disclosed Publicly
  3. News of the Week: November 24, 2018
  4. North Korea-linked group Lazarus targets Latin American banks
  5. 42-year-old man Arrested For Hacking More than 2,000 Computers From 50 countries With DarkComet RAT
  6. New Trojan mining on the Linux will steal user passwords & removes anti-viruses

ATTACKS

  1. This week's #RiskAndRepeatPodcast digs into the debate over #WeakPasswords and password reuse, and asks: how much are users responsible for

THREATS

  1. Quebec Dubbed As An Embarrassment After Paying $30,000 To Ransomware Authors
  2. Adobe Patched A Critical Flash Player Vulnerability Disclosed Publicly
  3. MacOS Penetration Test Reveals Three Zero-Day Vulnerabilities
  4. Powerful Mobile Malware Rotexy Launched over 70,000 Attacks with Banking Trojan & Ransomware Modules
  5. .@TalosSecurity recently created a #decryptor that helps files affected by the #ransomware #Thanatos -- typically known to not decrypt files
  6. TA505 Cybercrime Group Experimenting with a New RAT In The Wild
  7. Researchers at @okta found a bypass that allows #ThreatActors to pose files as legitimate @Apple files despite being #malware and
  8. 42-year-old man Arrested For Hacking More than 2,000 Computers From 50 countries With DarkComet RAT
  9. SMBs suffered the brunt of ransomware attacks in 2018
  10. CVE-2018-19406, CVE-2018-19407: Two DoS vulnerabilities on Linux Kernel
  11. New Trojan mining on the Linux will steal user passwords & removes anti-viruses
  12. How has the @DLink #router vulnerability affected your enterprise?
  13. The Week in Ransomware - November 23rd 2018 - STOP, Dharma, and More

CRIME

  1. TA505 Cybercrime Group Experimenting with a New RAT In The Wild
  2. New Trojan mining on the Linux will steal user passwords & removes anti-viruses

POLITICS

  1. Quebec Dubbed As An Embarrassment After Paying $30,000 To Ransomware Authors
  2. North Korea-linked group Lazarus targets Latin American banks
at
Labels:

Nov 24, 2018

APT report for 2018-11-23

TRANSNATIONAL / UNKNOWN

  1. Criminal turf war may be brewing after Magecart double whammy
  2. Synthetic identity fraud to drive $48 billion in annual losses by 2023 – Juniper Research
  3. The team discuss continuing activity by the Magecart group, as well as the ways in which #cybercriminals are gearing up

CHINA

  1. US Says China Increased Hacking over Trade Dispute

INDIA

Nil

NORTH KOREA

  1. North Korean Hackers Hit Latin American Banks

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

  1. Week in security with Tony Anscombe
  2. Phishing Used to Launch GreyEnergy's ICS Attacks
  3. Exclusive Cybaze ZLab – Yoroi – Hunting Cozy Bear, new campaign, old habits

SERBIA

Nil

UKRAINE

Nil
at
Labels:

Platform report for 2018-11-23

WINDOWS

  1. NUI Galway’s Problem: Misplaced USB Flash Drive Containing Unencrypted Student Records
  2. New Emotet Thanksgiving campaign differs from previous ones

LINUX

  1. New Crypto-Miner Attacks Linux Machines, Kills Other Miners and Anti-Malware
  2. DoS Vulnerabilities Found in Linux Kernel, Unpatched
  3. Malware scum want to build a Linux botnet using Mirai
  4. New Linux crypto-miner steals your root password and disables your antivirus
  5. New Crypto Malware Spreading that Infects Linux Machines & Removes Anti-Virus

UNIX

Nil

ANDROID

  1. Over 500k Play Store users have installed 13 games that contain malware

IOS

Nil

MACOS

  1. VMware fixed Workstation flaw disclosed at the Tianfu Cup PWN competition
at
Labels:

Threat report for 2018-11-23

DATA BREACH & DATA LOSS

  1. NUI Galway’s Problem: Misplaced USB Flash Drive Containing Unencrypted Student Records
  2. Data breach in OSIsoft
  3. Brazil's largest professional association suffers massive data leak
  4. Amazon Snafu Exposed Customers' Names and Email Addresses
  5. “Back in Black” – Article 13 has YouTube threatening to pull the plug over upload filter
  6. New Emotet Thanksgiving campaign differs from previous ones
  7. US Postal Service Website Left Data Exposed for Over a Year
  8. .@Amazon unveils new settings to help users avoid S3 data leaks, but UpGuard's Chris Vickery, who uncovered most #AWS exposures,
  9. Exclusive Cybaze ZLab – Yoroi – Hunting Cozy Bear, new campaign, old habits
  10. A #phishing campaign was recently found to be hijacking the traffic of @Trezor user #cryptocurrency wallets. Learn how such an
  11. Software company OSIsoft has suffered a data breach
  12. SAVE 50% FOR BLACK FRIDAY! Get half off FREEDOME VPN and TOTAL with coupon code BLACKFRIDAY.
  13. DNS Shell – Tool to Compromise and Maintain Control Over Victim Machine
  14. @FSecure fait son #BlackFriday ! Profitez de 50% de remise sur une sélection de produits !
  15. 60 million users’ data were exposed by the US Postal Service

DENIAL-OF-SERVICE

  1. Why e-commerce needs DDoS protection for Cyber Monday

MALVERTISING

Nil

PHISHING

  1. 8 tips for avoiding phishing, malware, scams, and hacks while holiday shopping online
  2. New Linux crypto-miner steals your root password and disables your antivirus
  3. Attackers Are Landing Email Inboxes Without the Need to Phish
  4. Do you know the top myths and facts of #mobile #phishing? If not, don't worry, we've compiled a list of
  5. Phishing Used to Launch GreyEnergy's ICS Attacks
  6. Southwest Washington Regional Surgery Center suffered a Phishing attack
  7. A #phishing campaign was recently found to be hijacking the traffic of @Trezor user #cryptocurrency wallets. Learn how such an

WEB DEFACEMENT

Nil

BOTNET

  1. Malware scum want to build a Linux botnet using Mirai
  2. Deep Instinct recently blogged about a new #botnet -- dubbed #Mylobot -- that has shown new, complex tools and techniques.

RANSOMWARE

  1. SMBs suffered the brunt of ransomware attacks in 2018
  2. The number of ransomware attacks on individuals has come down as it has become harder to get them to pay,

CRYPTOMINING & CRYPTOCURRENCIES

  1. Cryptocurrency ‘minting’ flaw could have leached money from exchanges
  2. A #phishing campaign was recently found to be hijacking the traffic of @Trezor user #cryptocurrency wallets. Learn how such an

MALWARE

  1. 8 tips for avoiding phishing, malware, scams, and hacks while holiday shopping online
  2. New Crypto-Miner Attacks Linux Machines, Kills Other Miners and Anti-Malware
  3. Malware scum want to build a Linux botnet using Mirai
  4. Ukrainian police arrest hacker who infected over 2,000 users with DarkComet RAT
  5. Black Friday special by Emotet: Filling inboxes with infected XML macros
  6. Black Friday special by Emotet: Filling inboxes with infected XML macros
  7. Ukrainian police arrest hacker who infected over 2,000 users with DarkComet RAT
  8. VMware patches guest-to-host malware vulnerability
  9. #WebCache poisoning poses a serious threat to #BrowserSecurity. Learn how #hackers can use unkeyed inputs for malicious intent from expert
  10. Best way to Remove Malware on Mac, Including Other Unwanted Apps
  11. New Crypto Malware Spreading that Infects Linux Machines & Removes Anti-Virus
  12. Over 500k Play Store users have installed 13 games that contain malware

EXPLOIT

Nil

VULNERABILITY

  1. DoS Vulnerabilities Found in Linux Kernel, Unpatched
  2. Apache Hadoop spins cracking code injection vulnerability YARN
  3. German e-government SDK patched against ID spoofing vulnerability
  4. US Postal Service Plugs API Flaw - One Year Later
  5. VMware fixed Workstation flaw disclosed at the Tianfu Cup PWN competition
  6. Adobe Flash Player Remote Code Execution Vulnerability Threat Alert
  7. Old Printer Vulnerabilities Die Hard
  8. VMware Patches Workstation Flaw Disclosed at Hacking Contest
  9. Cryptocurrency ‘minting’ flaw could have leached money from exchanges
  10. USPS Bug affects 60 Million Users, Finally Fixed.
  11. German eID vulnerability allows hackers to change identities
  12. VMware patches guest-to-host malware vulnerability
  13. Internet connected devices might be the hot item for Christmas this year, but are they secure?
  14. Hacker says USPS ignored serious security flaw for over a year
  15. CVE-2018-6983: integer overflow vulnerability in VMware Workstation and Fusion
at
Labels:

Region brief for 2018-11-23

ASIA

  1. US Says China Increased Hacking over Trade Dispute
  2. North Korean Hackers Hit Latin American Banks
  3. VMware fixed Workstation flaw disclosed at the Tianfu Cup PWN competition
  4. Adobe Flash Player Remote Code Execution Vulnerability Threat Alert
  5. VMware Patches Workstation Flaw Disclosed at Hacking Contest

OCEANIA

Nil

NORTH AMERICA

  1. Data breach in OSIsoft
  2. US Postal Service Plugs API Flaw - One Year Later
  3. US Says China Increased Hacking over Trade Dispute
  4. North Korean Hackers Hit Latin American Banks
  5. VMware fixed Workstation flaw disclosed at the Tianfu Cup PWN competition
  6. New Emotet Thanksgiving campaign differs from previous ones
  7. US Postal Service Website Left Data Exposed for Over a Year
  8. Hacker says USPS ignored serious security flaw for over a year
  9. Synthetic identity fraud to drive $48 billion in annual losses by 2023 – Juniper Research
  10. Exclusive Cybaze ZLab – Yoroi – Hunting Cozy Bear, new campaign, old habits
  11. Southwest Washington Regional Surgery Center suffered a Phishing attack
  12. 60 million users’ data were exposed by the US Postal Service
  13. The team discuss continuing activity by the Magecart group, as well as the ways in which #cybercriminals are gearing up

SOUTH AMERICA

  1. Brazil's largest professional association suffers massive data leak

EUROPE

  1. NUI Galway’s Problem: Misplaced USB Flash Drive Containing Unencrypted Student Records
  2. New Crypto-Miner Attacks Linux Machines, Kills Other Miners and Anti-Malware
  3. German e-government SDK patched against ID spoofing vulnerability
  4. Phishing Used to Launch GreyEnergy's ICS Attacks
  5. Ukrainian police arrest hacker who infected over 2,000 users with DarkComet RAT
  6. Ukrainian police arrest hacker who infected over 2,000 users with DarkComet RAT
  7. German eID vulnerability allows hackers to change identities
  8. Exclusive Cybaze ZLab – Yoroi – Hunting Cozy Bear, new campaign, old habits

AFRICA

Nil
at
Labels:

Sector brief for 2018-11-23

HEALTHCARE

  1. US Says China Increased Hacking over Trade Dispute
  2. Southwest Washington Regional Surgery Center suffered a Phishing attack

TRANSPORT

  1. US Says China Increased Hacking over Trade Dispute

BANKING & FINANCE

  1. North Korean Hackers Hit Latin American Banks
  2. New Emotet Thanksgiving campaign differs from previous ones
  3. Synthetic identity fraud to drive $48 billion in annual losses by 2023 – Juniper Research

INFORMATION & TELECOMMUNICATION

  1. New Crypto-Miner Attacks Linux Machines, Kills Other Miners and Anti-Malware
  2. Do you know the top myths and facts of #mobile #phishing? If not, don't worry, we've compiled a list of
  3. “Back in Black” – Article 13 has YouTube threatening to pull the plug over upload filter
  4. Internet connected devices might be the hot item for Christmas this year, but are they secure?
  5. SAVE 50% FOR BLACK FRIDAY! Get half off FREEDOME VPN and TOTAL with coupon code BLACKFRIDAY.
  6. The number of ransomware attacks on individuals has come down as it has become harder to get them to pay,
  7. Over 500k Play Store users have installed 13 games that contain malware

FOOD

Nil

WATER

Nil

ENERGY

  1. US Says China Increased Hacking over Trade Dispute

GOVERNMENT & PUBLIC SERVICE

  1. German e-government SDK patched against ID spoofing vulnerability
  2. US Says China Increased Hacking over Trade Dispute
  3. Ukrainian police arrest hacker who infected over 2,000 users with DarkComet RAT
  4. Ukrainian police arrest hacker who infected over 2,000 users with DarkComet RAT
  5. US Postal Service Website Left Data Exposed for Over a Year
  6. Exclusive Cybaze ZLab – Yoroi – Hunting Cozy Bear, new campaign, old habits
  7. 60 million users’ data were exposed by the US Postal Service
at
Labels:

Daily brief for 2018-11-23

ASIA

  1. US Says China Increased Hacking over Trade Dispute
  2. North Korean Hackers Hit Latin American Banks
  3. VMware fixed Workstation flaw disclosed at the Tianfu Cup PWN competition
  4. Adobe Flash Player Remote Code Execution Vulnerability Threat Alert
  5. VMware Patches Workstation Flaw Disclosed at Hacking Contest

WORLD

  1. NUI Galway’s Problem: Misplaced USB Flash Drive Containing Unencrypted Student Records
  2. Data breach in OSIsoft
  3. New Crypto-Miner Attacks Linux Machines, Kills Other Miners and Anti-Malware
  4. Brazil's largest professional association suffers massive data leak
  5. German e-government SDK patched against ID spoofing vulnerability
  6. US Postal Service Plugs API Flaw - One Year Later
  7. US Says China Increased Hacking over Trade Dispute
  8. North Korean Hackers Hit Latin American Banks
  9. VMware fixed Workstation flaw disclosed at the Tianfu Cup PWN competition
  10. Phishing Used to Launch GreyEnergy's ICS Attacks
  11. New Emotet Thanksgiving campaign differs from previous ones
  12. Ukrainian police arrest hacker who infected over 2,000 users with DarkComet RAT
  13. Ukrainian police arrest hacker who infected over 2,000 users with DarkComet RAT
  14. US Postal Service Website Left Data Exposed for Over a Year
  15. German eID vulnerability allows hackers to change identities
  16. Hacker says USPS ignored serious security flaw for over a year
  17. Synthetic identity fraud to drive $48 billion in annual losses by 2023 – Juniper Research
  18. Exclusive Cybaze ZLab – Yoroi – Hunting Cozy Bear, new campaign, old habits
  19. Southwest Washington Regional Surgery Center suffered a Phishing attack
  20. 60 million users’ data were exposed by the US Postal Service
  21. The team discuss continuing activity by the Magecart group, as well as the ways in which #cybercriminals are gearing up

ATTACKS

  1. NUI Galway’s Problem: Misplaced USB Flash Drive Containing Unencrypted Student Records
  2. Data breach in OSIsoft
  3. 8 tips for avoiding phishing, malware, scams, and hacks while holiday shopping online
  4. Brazil's largest professional association suffers massive data leak
  5. Amazon Snafu Exposed Customers' Names and Email Addresses
  6. New Linux crypto-miner steals your root password and disables your antivirus
  7. Attackers Are Landing Email Inboxes Without the Need to Phish
  8. Do you know the top myths and facts of #mobile #phishing? If not, don't worry, we've compiled a list of
  9. “Back in Black” – Article 13 has YouTube threatening to pull the plug over upload filter
  10. Phishing Used to Launch GreyEnergy's ICS Attacks
  11. New Emotet Thanksgiving campaign differs from previous ones
  12. US Postal Service Website Left Data Exposed for Over a Year
  13. .@Amazon unveils new settings to help users avoid S3 data leaks, but UpGuard's Chris Vickery, who uncovered most #AWS exposures,
  14. Exclusive Cybaze ZLab – Yoroi – Hunting Cozy Bear, new campaign, old habits
  15. Southwest Washington Regional Surgery Center suffered a Phishing attack
  16. A #phishing campaign was recently found to be hijacking the traffic of @Trezor user #cryptocurrency wallets. Learn how such an
  17. Software company OSIsoft has suffered a data breach
  18. SAVE 50% FOR BLACK FRIDAY! Get half off FREEDOME VPN and TOTAL with coupon code BLACKFRIDAY.
  19. DNS Shell – Tool to Compromise and Maintain Control Over Victim Machine
  20. @FSecure fait son #BlackFriday ! Profitez de 50% de remise sur une sélection de produits !
  21. 60 million users’ data were exposed by the US Postal Service

THREATS

  1. 8 tips for avoiding phishing, malware, scams, and hacks while holiday shopping online
  2. New Crypto-Miner Attacks Linux Machines, Kills Other Miners and Anti-Malware
  3. DoS Vulnerabilities Found in Linux Kernel, Unpatched
  4. Apache Hadoop spins cracking code injection vulnerability YARN
  5. German e-government SDK patched against ID spoofing vulnerability
  6. Malware scum want to build a Linux botnet using Mirai
  7. US Postal Service Plugs API Flaw - One Year Later
  8. VMware fixed Workstation flaw disclosed at the Tianfu Cup PWN competition
  9. Adobe Flash Player Remote Code Execution Vulnerability Threat Alert
  10. Old Printer Vulnerabilities Die Hard
  11. VMware Patches Workstation Flaw Disclosed at Hacking Contest
  12. Ukrainian police arrest hacker who infected over 2,000 users with DarkComet RAT
  13. Black Friday special by Emotet: Filling inboxes with infected XML macros
  14. Black Friday special by Emotet: Filling inboxes with infected XML macros
  15. Cryptocurrency ‘minting’ flaw could have leached money from exchanges
  16. Ukrainian police arrest hacker who infected over 2,000 users with DarkComet RAT
  17. USPS Bug affects 60 Million Users, Finally Fixed.
  18. German eID vulnerability allows hackers to change identities
  19. VMware patches guest-to-host malware vulnerability
  20. Internet connected devices might be the hot item for Christmas this year, but are they secure?
  21. Hacker says USPS ignored serious security flaw for over a year
  22. #WebCache poisoning poses a serious threat to #BrowserSecurity. Learn how #hackers can use unkeyed inputs for malicious intent from expert
  23. SMBs suffered the brunt of ransomware attacks in 2018
  24. Best way to Remove Malware on Mac, Including Other Unwanted Apps
  25. A #phishing campaign was recently found to be hijacking the traffic of @Trezor user #cryptocurrency wallets. Learn how such an
  26. CVE-2018-6983: integer overflow vulnerability in VMware Workstation and Fusion
  27. The number of ransomware attacks on individuals has come down as it has become harder to get them to pay,
  28. New Crypto Malware Spreading that Infects Linux Machines & Removes Anti-Virus
  29. Over 500k Play Store users have installed 13 games that contain malware

CRIME

  1. Data breach in OSIsoft
  2. US Says China Increased Hacking over Trade Dispute
  3. Synthetic identity fraud to drive $48 billion in annual losses by 2023 – Juniper Research
  4. Software company OSIsoft has suffered a data breach
  5. The team discuss continuing activity by the Magecart group, as well as the ways in which #cybercriminals are gearing up

POLITICS

  1. NUI Galway’s Problem: Misplaced USB Flash Drive Containing Unencrypted Student Records
  2. US Says China Increased Hacking over Trade Dispute
  3. Synthetic identity fraud to drive $48 billion in annual losses by 2023 – Juniper Research
  4. Exclusive Cybaze ZLab – Yoroi – Hunting Cozy Bear, new campaign, old habits
at
Labels:
Subscribe to: Posts (Atom)