Page 13 - Threat Intelligence 10-28-2019

Web / Internet Threats

Cyberattack Causes Serious Disruptions at German Automation Firm Pilz. Pilz is a major automation
technology supplier based in Ostfildern, Germany. It offers machine and process automation and safety
products, consultancy, engineering and training, and has branches all around the globe. The company was hit
on October 13, with all of its server-based workplaces, including the international communication network,
affected.

Source: https://www.securityweek.com/cyberattack-causes-serious-disruptions-german-automation-
firm-pilz

Amazon Web Services experiences DDoS Cyber Attack. On October 22nd,2019, Amazon Web Services (AWS)
experienced a Distributed Denial of Service(DDoS) Attack between 10:30 AM and 6:30 AM PDT. Details such as
who launched the attack and the financial impact are yet to be probed. But the cloud services giant offered an
update early today that the issue has been resolved and all its services were up and working normally.

Source: https://www.cybersecurity-insiders.com/amazon-web-services-experiences-ddos-cyber-
attack/

New Cache Poisoning Attack Lets Attackers Target CDN Protected Sites. A team of German cybersecurity
researchers has discovered a new cache poisoning attack against web caching systems that could be used by
an attacker to force a targeted website into delivering error pages to most of its visitors instead of legitimate
content or resources. The issue affects reverse proxy cache systems like Varnish and some widely-used
Content Distribution Networks (CDNs) services, including Amazon CloudFront, Cloudflare, Fastly, Akamai, and
CDN77.
Source: https://thehackernews.com/2019/10/cdn-cache-poisoning-dos-attack.html

Malicious Code on Mission Health Store Website Undetected for 3 Years. Malicious code embedded on
Mission Health’s store website directed payment information to an unauthorized individual and went
undetected for three years, according to local news outlet ABC13 WLOS. According to officials, the malicious
code was first installed in March 2016 until it was discovered in June 2019. The North Carolina health system
recently began mailing notification letters to patients. However, there is no notice about the security incident
displayed on the website.

Source: https://healthitsecurity.com/news/malicious-code-on-mission-health-store-website-
undetected-for-3-years

www.accumepartners.com
13