CERT-SE:s veckobrev v.48

Datainternet är fyllt till bredden av information, därför finns veckobrevet.
Trevlig helg!

Nyheter i veckan

UPnProxy: EternalSilence
https://blogs.akamai.com/sitr/2018/11/upnproxy-eternalsilence.html

New cryptominer seeks out root permissions on Linux machines
https://www.scmagazine.com/home/security-news/new-cryptominer-seeks-out-root-permissions-on-linux-machines/

Researchers link XLoader and FakeSpy malware families to Yanbian Gang
https://www.scmagazine.com/home/security-news/trend-micro-researchers-believe-they-have-spotted-a-connection-between-the-xloader-and-fakespy-malware-families-along-with-possible-ties-to-the-yanbian-gang/

Turla PNG Dropper is back
https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2018/november/turla-png-dropper-is-back/

US Postal Service Left 60 Million Users Data Exposed For Over a Year
https://thehackernews.com/2018/11/usps-data-breach.html

TrickBot POS module
https://blog.trendmicro.com/trendlabs-security-intelligence/trickbots-bigger-bag-of-tricks/

Kraschen - Ett SR P1-drama om IT-kraschen på 90-talet
https://sverigesradio.se/sida/gruppsida.aspx?programid=4976&grupp=28644

Dell changes every user's password after cyber attack that could have leaked data
https://www.independent.co.uk/life-style/gadgets-and-tech/news/dell-password-change-email-update-pc-computer-a8658836.html

McAfee Predicts More Malware Will Target Smart Homes In 2019
https://www.ubergizmo.com/2018/11/mcafee-predicts-malware-smart-homes-2019/?utm_source=mainrssoptions

Widely used open source software contained bitcoin-stealing backdoor
https://arstechnica.com/information-technology/2018/11/hacker-backdoors-widely-used-open-source-software-to-steal-bitcoin/

Google, Mozilla working on letting web apps edit files despite warning it could be 'abused in terrible ways'
https://www.techrepublic.com/article/google-mozilla-working-on-letting-web-apps-edit-files-despite-warning-it-could-be-abused-in-terrible/

FBI Shuts Down Multimillion Dollar Ad Fraud Operation
https://thehackernews.com/2018/11/3ve-ad-fraud-google.html

Facebook confirms years-old messages are randomly coming back to haunt users
https://www.theverge.com/2018/11/26/18113539/facebook-messenger-old-threads-conversations-resurfacing-no-reason

Driver loses his car to hackers -> TWICE.
https://nakedsecurity.sophos.com/2018/11/30/driver-loses-his-car-to-hackers-twice/

CERT-SE i veckan

Våg av nätfiske mot e-postkonton i Office 365 och Exchange

Samba 4.9.3

Vaksamhet inför julhelgshandeln