This Week in CyberSec Headlines, 19 JAN 2018

By MDL on January 19, 2018

Dark Caracal, Cyberespionage, and Lebanon, CSCC Article

Hawaii’s False Missile Alert Headlines

TRISIS/Triton, Schneider Electric, Saudi Arabia

CyberScoop, Schneider Electric: Trisis leveraged zero-day flaw, used a RAT

CyberScoop, Trisis has the security world spooked, stumped and searching for answers

Dark Reading, Schneider Electric: TRITON/TRISIS Attack Used 0-Day Flaw in its Safety Controller System, and a RAT

Security Week, Triton Malware Exploited Zero-Day in Schneider Electric Devices

KillDisk targets Latin America

Trend Micro, New KillDisk Variant Hits Financial Organizations in Latin America

“KillDisk, along with the multipurpose, cyberespionage-related BlackEnergy, was used in cyberattacks in late December 2015 against Ukraine’s energy sector as well as its banking, rail, and mining industries. The malware has since metamorphosed into a threat used for digital extortion, affecting Windows and Linux platforms.”

SC Media, KillDisk wiper malware sets sights on Latin American financial organizations

Indiana Hospital Hit by Ransomware

Greenfield Daily Reporter, Hospital hit by ransomware: Attackers demand Bitcoin to release control of system

“A ransomware attack at Hancock Regional Hospital in Greenfield, Indiana has forced the facility to shut down its computer network to limit damage.”

SC Media, Ransomware shuts down Greenfield’s Hancock Regional Hospital

Russian Cyber Capabilities

Infosecurity Magazine, Russia, China’s Cyber-Capabilities Are ‘Catastrophic’

Flashpoint blog, Business Risk Intelligence Decision Report: 2017 End-of-Year Update

The Hill, Russian hackers move to new political targets

Dark Reading, Feds Team with Foreign Policy Experts to Assess US Election Security

MailChimp Email Address Leaks

Terence Eden, MailChimp leaks your email address

Infosecurity Magazine, MailChimp Found Leaking Email Addresses

US Legislation

SC Media, House passes Cyber Diplomacy Act

Reuters, Senate passes bill renewing internet surveillance program “The U.S. Senate on Thursday passed a bill to renew the National Security Agency’s warrantless internet surveillance program for six years… “ US Senate votes to reauthorize FISA Section 702.