Cyber Bites

New attacks discovered by Cofense can perform keylogging, steal data and completely hijack a mobile device. A new phishing campaign is attempting to deliver sophisticated malware that can completely hijack an Android mobile device to steal user credentials, install a keylogger and even hold a device’s data for ransom. Source: Threat Post

A misconfiguration in an election day app developed by Likud, the party of Israeli prime minister Benjamin Netanyahu, may have potentially exposed and compromised the personal details of almost 6,5 million Israeli citizens. The leak was discovered and detailed today by Ran Bar-Zik, an Israeli-born frontend developer for Verizon Media. Source: ZD Net

Customers awaiting parcel deliveries from transport company Toll say they have been left in the dark about major delays caused by a cyber attack on the company's IT systems. The company said the hacking occurred 11 days ago and had forced it to shut down "a number of systems across multiple sites and business units", causing ongoing disruptions to distribution. Source: ABC Net

Criminal gangs are planting "sleepers" in cleaning companies to allow them to physically access IT infrastructure, a senior cyber-crime police officer has warned. And businesses are being urged to bolster their physical security processes in the face of this growing threat. Source: European Cleaning Journal

Hot on the heels of a "serious" cyber-attack that compromised United Nations servers, and in the same week that the head of the European Central Bank, Christine Lagarde, warned of the global financial implications of cyber-attacks, Iran has seemingly come under cyber-attack. Indeed, so powerful was the impact of this alleged attack that the internet was disrupted across the country. Source: Forbes

The attackers behind the RobbinHood Ransomware are exploiting a vulnerable GIGABYTE driver to install a malicious and unsigned driver into Windows that is used to terminate antivirus and security software. When performing a network-wide compromise, ransomware attackers need to push out a ransomware executable as quickly as possible and to as many systems as they can to avoid being detected. Source: Bleeping Computer

A Chinese state-sponsored hacking group has been targeting Malaysian government officials, computer experts with the Malaysian government said on Wednesday.The purpose of the attacks has been to infect computers of government officials with malware and then steal confidential documents from government networks, Malaysia's Computer Emergency Response Team (MyCERT) said in a security advisory. Source: ZD Net

The Obama administration thought its warnings to Russia about ceasing its electoral interference in 2016 worked, according to the latest instalment of the Senate Intelligence Committee’s report into Russian election interference. “Senior administration officials told the Committee that they assessed that their warnings to Russia before the election had the desired effect, and that Russia undertook little to no additional action once the warnings were delivered,” the report found. Source: The Daily Beast

A notorious malware campaign is targeting banks and financial institutions in the US and the UK with cyberattacks that are not only destructive in their own right, but could also be used as the basis for future intrusions by other hackers. Emotet started life as a banking trojan, but has also evolved into a botnet, with its criminal operators leasing out its capabilities to those who want to distribute their own malware to compromise machines Source: ZD Net

In a recently discovered phishing campaign, hackers attempted to steal victims' passwords and credentials by posing as a former Wall Street Journal reporter and sending documents with potential interview questions, according to London-based security firm Certfa Lab. Source: Bank Info Security