Security Affairs newsletter Round 140 – News of the week

December 10, 2017  By Pierluigi Paganini


A new round of the weekly SecurityAffairs newsletter arrived!

The best news of the week with Security Affairs.

Once again thank you!

·      Halloware Ransomware, a new malware offered for sale on the Dark Web for Only $40
·      PayPal-owned company TIO Networks data breach affects 1.6 million customers
·      Security Affairs newsletter Round 139 – News of the week
·      UK National Cyber Security Centre (NCSC)s letter warns against software made in hostile states, specifically Russia
·      Exclusive, CSE CybSec ZLAB Malware Analysis Report: The Italian Job – Android malware masqueraded as Fake Tre Updater
·      Experts discovered a new variant of Shadow BTCware Ransomware Variant
·      Global operation allowed law enforcement agencies to take down the Andromeda Botnet
·      Google Unwanted Software Policy – Its a fight against snooping apps
·      RSA Authentication SDK affected by two critical vulnerabilities, patch it now!
·      17 models of WAGO PFC200 PLC Vulnerable to Unauthenticated Remote Access Exploit
·      DJI drones may be sending data about U.S. critical infrastructure and law enforcement to China
·      German Government prepares Law for backdoors and hacking back
·      Hacked password service Leakbase shuts down, someone suspects it was associated to the Hansa seizure
·      31 Million of client records belonging to the virtual keyboard app AI.type leaked online
·      MailSploit vulnerabilities allow email spoofing with more than 30 email clients
·      TeamViewer fixes a flaw that allows users sharing a desktop session to gain control of the others PC
·      The StorageCrypt ransomware is the last malware in order of time exploiting SambaCry to target NAS Devices
·      HBO hacker linked to the Iranian Charming Kitten APT group
·      Introducing ProtonMail Bridge, email encryption for Outlook, Thunderbird, and Apple Mail
·      Major Banking Applications were found vulnerable to MiTM attacks over SSL
·      NiceHash Hacked – Crooks have allegedly stolen $60m worth of Bitcoin
·      NiceHash: security breach leads to 60 million lost – Iceman is behind?
·      Process Doppelgänging Attack allows evading most security software on all Windows Versions
·      Thousands of WordPress sites infected with a Keylogger and cryptocurrency miner scripts
·      #OpUSA – OpIsrael – Anonymous hit Israel and threatens cyberattack on US Govt
·      CVE-2017-11937 | Microsoft releases an emergency update to fix a flaw in Malware Protection Engine
·      Expert discovered a Keylogger component in HP notebook keyboard driver
·      OpenSSL patches for the fourth time in 2017 its library, and it will likely be the last one 
·      The Indian Intelligence warns China is spying through 42 mobile apps
·      Android Janus vulnerability allows attackers to inject Malware into legitimate apps avoiding detection
·      Linux.ProxyM IoT Botnet now used to launch hacking attacks against websites
·      The authors of the Orcus RAT target Bitcoin investors
[adrotate banner=”9″] [adrotate banner=”12″]

Pierluigi Paganini

(Security Affairs – Newsletter)

[adrotate banner=”5″]

[adrotate banner=”13″]



Pierluigi Paganini
Pierluigi Paganini is member of the ENISA (European Union Agency for Network and Information Security) Threat Landscape Stakeholder Group and Cyber G7 Group, he is also a Security Evangelist, Security Analyst and Freelance Writer. Editor-in-Chief at "Cyber Defense Magazine", Pierluigi is a cyber security expert with over 20 years experience in the field, he is Certified Ethical Hacker at EC Council in London. The passion for writing and a strong belief that security is founded on sharing and awareness led Pierluigi to find the security blog "Security Affairs" recently named a Top National Security Resource for US. Pierluigi is a member of the "The Hacker News" team and he is a writer for some major publications in the field such as Cyber War Zone, ICTTF, Infosec Island, Infosec Institute, The Hacker News Magazine and for many other Security magazines. Author of the Books "The Deep Dark Web" and “Digital Virtual Currency and Bitcoin”.





You might also like





  • Digging the Deep Web: Exploring the dark side of the web

    Digging The Deep Web

  • Center for Cyber Security and International Relations Studies

  • Subscribe Security Affairs Newsletter

    newsletter

  • SecurityAffairs awarded as Best European Cybersecurity Tech Blog at European Cybersecurity Blogger Awards

    EU Sec Bloggers Awards 22


More Story

National Institute of Standards and Technology releases a second Draft of the NIST Cybersecurity Framework

 The National Institute of Standards and Technology (NIST) has published a second draft of a proposed update to the NIST Cybersecurity...