Page 5 - Threat Intelligence 11-15-2019

Security News

Millions of accounts compromised in huge internet registry breach. Register.com - one of the world's largest
internet registrars - is warning people to change their password and monitor their credit card account for
suspicious activity following a massive security breach. A registrar is a company that sells and manages
domains, or website addresses. An email to Register.com customers sent this morning NZT, says the company
learned on October 16 that "a third-party gained unauthorized access" in late August. It wasn't immediately
clear why it took until October 30 to notify customers, with some not emailed until this morning.
Register.com's email said the breach did not include credit card details but did include "information for current
and former Register.com customers may have been accessed. This information includes contact details such as
name, address, phone numbers [and] email addresses.“
Source: https://www.nzherald.co.nz/business/news/article.cfm?c_id=3&objectid=12282126

Cyber Command flags North Korean-linked hackers behind ongoing financial heists. The Department of
Defense has once again called out North Korean hackers by exposing malware samples researchers say are
linked to regime-backed financial heists, including past attacks on the interbank messaging system known as
the Society for Worldwide Interbank Financial Telecommunication (SWIFT), CyberScoop has learned. Cyber
Command assessed that the malware, which it posted to the information sharing platform VirusTotal, is being
used in ongoing cyberattacks aimed at the financial sector. “These malware samples are currently used for
fund generation and malicious cyber activities including remote access, beaconing, and malware command by
malicious cyber actors,” the command said in a tweet.
Source: https://www.cyberscoop.com/north-korea-malware-cyber-command-virus-total-apt38/

5,183 breaches from the first nine months of 2019 exposed 7.9 billion records. Breach activity in 2019 is
living up to being “the worst year on record”. Although the total number of breaches is on track to break
previous year records, the total number of records exposed has already surpassed the 2017 year end total. 7.9
billion records have already been exposed and we are on track to reach as high as 8.5 billion. Key findings state
that by NAICS economic sector, medical services, retailers and public entities experienced the most breaches,
but when all business-related sectors are combined, general business remains the most breached organization
type. Looking further into data breach landscape, hacking remains the top breach type for number of incidents
while Web has exposed the most records this year. “This year over 6 billion records have been made freely
accessible thanks to misconfigured databases, backups, end points, and services,” said Goddijn. “The
widespread availability of tools useful for identifying such leaks coupled with an interest in reporting – as well
as taking advantage of – these exposures has fueled the growth in the number of records compromised.”
Source: https://www.helpnetsecurity.com/2019/11/14/breaches-2019/

www.accumepartners.com
5