CERT-SE:s veckobrev v.39

Tack för den här veckan och trevlig helg önskar CERT-SE

Notiser från veckan

KSK Rollover Postponed
https://www.icann.org/news/announcement-2017-09-27-en

Banking Trojan Attempts To Steal Brazillion$
http://blog.talosintelligence.com/2017/09/brazilbanking.html

FIN7 Group Uses JavaScript and Stealer DLL Variant in New Attacks
http://blog.talosintelligence.com/2017/09/fin7-stealer.html

Elaborate scripting-fu used in espionage attack against Saudi Arabia Government entity
https://blog.malwarebytes.com/threat-analysis/2017/09/elaborate-scripting-fu-used-in-espionage-attack-against-saudi-arabia-government_entity/

Deloitte breached by hackers for months
https://blog.malwarebytes.com/security-world/2017/09/deloitte-breached-by-hackers-for-months/

An Elaborate ATM Threat Crops Up: Network-based ATM Malware Attacks
http://blog.trendmicro.com/trendlabs-security-intelligence/an-elaborate-atm-threat-crops-up-network-based-atm-malware-attacks/

CBS Showtime website was spotted mining cryptocurrency in viewers’ web browsers
https://www.theregister.co.uk/2017/09/25/showtime_hit_with_coinmining_script/

Sophisticated Phishing Attacks Target Internet Freedom Activists
http://www.securityweek.com/sophisticated-phishing-attacks-target-internet-freedom-activists

CERT-SE i veckan

Kritiska sårbarheter i Mozilla Firefox och Firefox ESR

Kritiska sårbarheter i Cisco-produkter