10Fold – Security Never Sleeps – 96

Your daily digest of “All Things Security” gathered, collected and researched by your very own 10Fold Security Practice team.

Big items to consider: Russian police have arrested 50 members of an alleged cyber-crime ring that stole more than 3 billion rubles ($45 million) from banks, the country’s biggest ever crackdown on financial hackers. Newly discovered malware ‘IronGate’ is targeting industrial control systems has the researchers who discovered it intrigued and hungry for help from the ICS community to further unravel it. Today, Yahoo became the first company to go public about NSLs it has received without needing to duke it out with the feds in court. Cisco spent $1.4 billion to acquire Jasper in February in its largest acquisition since Robbins took over as CEO. The former Sequoia-backed startup runs the largest commercial network for managing IoT devices.

Russia Detains 50 Suspected Hackers for Malware Bank Attacks – Publication: Bloomberg – Reporter name: Gavin Finch

The gang used malware to create networks of infected computers to launch 18 targeted attacks against Russian banks and state entities over the past year, the Interior Ministry said in a statement on its website.  Police were able to prevent another 2.3 billion rubles of losses, it said. The individual banks weren’t identified.


Shades Of Stuxnet Spotted In Newly Found ICS/SCADA Malware – Publication: Dark Reading – Reporter name: Kelly Jackson Higgins

FireEye researchers today detailed their findings on the so-called Irongate ICS/SCADA malware, which targets a Siemens PLC simulation (SIM) environment—not an operational one—via a man-in-the middle attack on a specific piece of custom PLC SIM code. SIM environments are where engineers test out their PLC code, which means Irongate as-is represents no actual threat to ICS operations, according to FireEye, and there’s been no sign of any attacks or attempts thus far.


Yahoo Publishes National Security Letters After FBI Drops Gag Orders – Publication: WIRED- Reporter name: Kim Zetter

Yahoo received letters in 2013 and 2015 and published redacted versions of them today. Two of the NSLs were sent to Yahoo from a special agent in the bureau’s Dallas office; the third NSL came from an agent in the bureau’s Charlotte, North Carolina office. It’s not clear whether the NSLs involve closed cases or ongoing ones for which disclosure is no longer a problem.  The letters offer no insight into the investigations behind them, and offer little else except a description of the kinds of records the FBI sought. In each case, the FBI wanted the name, address, length of service, activity logs and activity/transaction records for a specific user account.


Cisco is tracking 28 million devices on its IoT network and most of them are cars – Publication: Re/Code – Reporter name: Arik Hesseldahl

And it’s not just cars on Jasper. “It’s robots, it’s EKG machines” and other health care gear, and also robots used in manufacturing. And while the IoT is often criticized for being more hype than useful, Robbins said that Cisco has zeroed in on one significant use: Fixing things before they break. Last year Cisco teamed up with FANUC, a Japanese company building industrial robots, to keep track of how often robots in factories need maintenance. Preventive maintenance on the robots saves money by eliminating costly and unexpected downtime. “It’s turned out to be the killer app” for IoT, he said. “The savings from preventive maintenance is enough to justify the investment.”