Weekly Intelligence Bulletin – Week 40

8. October 18

QuoScient’s Weekly Intelligence Bulletin for the week of 27 September – 04 October 2018 is now available for download in the Media Center!

Find below a summary.

CYBER

Current Threat Industry

Impacted: ANY, Consumer Discretionary, Financials, Information Technology

Researchers uncovered a diverse, and scalable malware campaign dubbed GhostDNS designed to hijack routers and modify their DNS settings to route internet traffic through attacker-controlled servers to phishing sites for the purpose of stealing information.

Vulnerabilities Industry Impacted: ANY

Adobe released an out-of-band security update covering 86 vulnerabilities that affect Adobe Acrobat and Reader for Windows and MacOS platforms. Of the 86 total vulnerabilities, 47 are
classified as critical and 39 are classified as important. The various vulnerabilities allow for arbitrary code execution, information disclosure, and privilege escalation.

Threat Actor Activity

Industry Impacted: Government

Researchers discovered a targeted malware campaign with links to the threat actor group APT28 that successfully deployed a malicious Unified Extensible Firmware Interface (UEFI) rootkit module onto the system of targeted government entities mostly located in the Balkans, and Central/Eastern Europe.

Reported Incidents Industry Impacted: ANY

Both Facebook and Uber face fines for data incidents that impacted a collective 107 million customers worldwide.

CRYPTOCURRENCY

During the week, the total market capitalization for cryptocurrencies increased by less than 1 percent to EUR 188 billion. On 27 September, Italy became a member of the European Blockchain Partnership (EBP). The EBF was established in April to create a European Blockchain Services Infrastructure (EBSI) for the delivery of cross-border digital public services.

GEOPOLITICS

On 4 October several European countries and the U.S. publicly accused Russia’s government of sponsoring malicious cyber operations targeting citizens, governments, companies and international organizations worldwide.
Israel’s Prime Minister Netanyahu said Israel detected a warehouse in which Iran secretly stores nuclear-related material.

OUTLOOK

08 October – Annual Meetings of the International Monetary Fund and World Bank Group
09 October – Patch Tuesday
09 October – it-sa 2018
11 October – RuhrSummit 2018