20 October 2020

This alert was created automatically by our award-winning intelligence product Silobreaker Online. Story selection is determined by an algorithm and based on a set of queries initially set by a Silobreaker user. Contact us here for more information.

Heat – Trending Malware and Threat Actors
Name Heat 1 Heat 7 Vol 1 Vol 7
NotPetya Ransomware 63 67
GravityRAT 24 24
Sandworm Team 14 14
Olympic Destroyer 14 14
BlackEnergy 9 9
Industroyer Malware 9 9
Unit 74455 7 7
Ryuk Ransomware 16 35
APT28 9 17
TeleBots 3 3
Data Breaches
Sensitive Voicemail Transcripts ExposedBankInfoSecurity – Oct 19 2020 20:41Researcher Finds Unsecure Elasticsearch Database Cluster Accessible via the…
ZDNet – Kleenheat customer names and addresses exposed in system breach https://t.co/qxsTweYK4ZZDNet – Twitter – Oct 19 2020 12:00Kleenheat customer names and addresses exposed in system breach…
ZDNet – Kleenheat customer names and addresses exposed in system breach https://t.co/ttidiXh8cMZDNet – Twitter – Oct 19 2020 07:30Kleenheat customer names and addresses exposed in system breach…
New Gitjacker Tool Lets You Find .git Folders Exposed OnlineSecurityPhresh – Oct 19 2020 12:37Tool can also download your Git repositories, allowing attackers to retrieve sensitive configuration files and source code.
Hacker Groups
Justice department indicts Russians linked to the ‘Sandworm’ hacking groupSiliconANGLE – Oct 20 2020 01:59The U.S. Department of Justice has indicated six Russians related to the so-called “Sandworm” hacking group that is allegedly linked to hacking incidents including those that targeted the Pyeongchang Winter Olympics, the 2017 French elections and the…
Financial crime group FIN11 pivots to ransomware and stolen data extortionChannel Asia – Oct 19 2020 08:44Credit: Dreamstime Extorting money from companies and other organisations using sophisticated ransomware has become a highly profitable business model for cyber criminals. This has also led to a shift in focus for some groups that were traditionally…
Wizard Spider returns (and it still uses TrickBot). MuddyWater and Thanos ransomware. EU raises GDPR questions about ad tracker.The CyberWire – Oct 19 2020 20:06Subscribe to Pro Show Notes Wizard Spider: snapshot of a cybercriminal threat group. MuddyWater deploys Thanos ransomware. Ad tracker troubles in the EU.
VICE – Six people from the Sandworm hacking group are wanted by the FBI.
https://t.co/WslHyrjbdh
VICE – Twitter – Oct 19 2020 20:30Six people from the Sandworm hacking group are wanted by the FBI.
https://bit.ly/3o7eA9m
Malware
Trickbot, Phishing, Ransomware & ElectionsDark Reading – All Stories – Oct 19 2020 18:00The botnet has taken some hits lately, but that doesn't mean the threat is over. Here are some steps you can take to keep it from your door.
GravityRAT malware also targets Android and macOSSecurity Affairs – Oct 19 2020 22:28Researchers spotted new variants of the Windows GravityRAT spyware that now can also infect Android and macOS devices. Researchers from Kaspersky Lab have spotted new variants of the …
virusbtn – Ranzy Locker, previously known as ThunderX, is the latest ransomware to launch a data leak site… https://t.co/pMzlw7jGrVvirusbtn – Twitter – Oct 19 2020 18:54Ranzy Locker, previously known as ThunderX, is the latest ransomware to launch a data leak site https://www.bleepingcomputer.com/news/security/thunderx-ransomware-rebrands-as-ranzy-locker-adds-data-leak-site/…
Ryuk Ransomware Attacks Continue Following TrickBot Takedown AttemptSecurityWeek RSS Feed – Oct 20 2020 03:40The threat actor behind the Ryuk ransomware continues to conduct attacks following the recent attempts to disrupt the TrickBot botnet, CrowdStrike reports. …
Vulnerabilities
‘Active Threat’ Warning: Patch Serious SharePoint Flaw NowBankInfoSecurity – Oct 19 2020 12:11SharePoint Remains Top Hacker Target, UK's…
DataBreachToday – ‘Active threat’ warning: Patch ‘critical’ SharePoint flaw now. Because attackers love a good SharePoint flaw.… https://t.co/aoYQufbVpJDataBreachToday – Twitter – Oct 19 2020 16:19'Active threat' warning: Patch 'critical' SharePoint flaw now. Because attackers love a good SharePoint flaw.
https://bit.ly/3kcLSBu << @euroinfosec reports https://twitter.com/DataBreachToday/status/1318225143517335558/photo/1
thinksnews – ‘Active Threat’ Warning: Patch Serious SharePoint Flaw Now https://t.co/mTpNNJuf2z #cybersecurity #databreach… https://t.co/t1wHHAw0HHthinksnews – Twitter – Oct 19 2020 12:15'Active Threat' Warning: Patch Serious SharePoint Flaw Now https://www.databreachtoday.com/active-threat-warning-patch-serious-sharepoint-flaw-now-a-15200 #cybersecurity #databreach #hackattack…
Open-source application security flaws: What you should know and how to spot themSecurity Bloggers Network – Oct 19 2020 13:03Introduction Open-source software helped to revolutionize the way that applications are built by professionals and enthusiasts alike. Being able to borrow a non-proprietary library to quickly prototype and build an application not only accelerates…
Ongoing Campaigns
Android, macOS Versions of GravityRAT Spyware Spotted in Ongoing CampaignSecurityWeek RSS Feed – Oct 19 2020 18:58Kaspersky security researchers have identified versions of the GravityRAT spyware that are targeting Android and macOS devices. …
How Much Phishing is Too Much Phishing?Cyware – Oct 19 2020 18:36Phishing is and has always been a significant threat to internet users. It takes control of your ‘lizard’ side of the brain and exploits it. What’s going on? A report by Interisle Consulting Group and Illumintel states some major facts about the…
Six Russians accused of the world’s most destructive hacks indictedArsTechnica – Oct 19 2020 19:30Enlarge US Justice Department Six men accused of carrying out some of the world's most destructive hacks—including the NotPetya disk wiper and power grid attacks that knocked out electricity for hundreds of thousands of Ukrainians—have been indicted…
U.S. Charges Russian Intelligence Officers for NotPetya, Industroyer AttacksSecurity Week – Oct 19 2020 19:06The U.S. Department of Justice on Monday announced charges against six Russian intelligence officers for their alleged role in several major cyberattacks conducted over the past years. The defendants are Yuriy Sergeyevich Andrienko, aged 32, Sergey…

Although Silobreaker has relied on what it regards as reliable sources while compiling the content herein, Silobreaker cannot guarantee the accuracy, completeness, integrity or quality of such content and no responsibility is accepted by Silobreaker in respect of such content. Readers must determine for themselves what reliance they should place on the compiled content herein.

Silobreaker Daily Cyber Alert

Sign up for the latest news on data breaches, hacker groups, malware and vulnerabilities.

Silobreaker
This website uses cookies.
See our privacy policy at www.silobreaker.com/legal