From: To: Cc: Subject: Date: Importance: "Reiff, Darrell (MM) (FBI)" <dreiffgfbi.gov> Southeast Florida Fusion Center <[email protected]>, "bso_intelgsheriff.org" <bso_intelgsheriff.org>, "pbregionalfusiongpbso.org" <pbregionalfusion((e5pbso.org>, FusionCenter FL - CFIX <[email protected]>, "Florida Fusion Center" <[email protected]> "NCTC at Miami (miami(unetc.gov)" <miamignetc.gov> Cyber Highlights for January 16 - 23, 2018 Tue, 23 Jan 2018 18:30:39 +0000 Normal To the South Florida JTTF, and the Florida Fusion Centers, and the Private Sector Security Partners, The following list of cyber highlights articles are intended for information only, and not as official FBI opinion: Cyber Highlights January 16 — 23, 2018 NEWS ITEMS: Legislation /Policy: NA Critical Infrastructure / SCADA: NA Ransomware: 1 - World's Largest Spam Botnet Is Pumping and Dumping an Obscure Cryptocurrency https://www.bleepingcomputer.cominews/cryptocurrency/worlds-largest-spam-botnet-is-pumping-and-dumping- an-obscure-cryptocurrency/ • Necurs, the world's largest spam botnet, is currently sending millions of spam emails that push an obscure cryptocurrency named Swisscoin. • Such spam emails are known as pump-and-dump, and the technique relies on sending large quantities of spam to drive interest up towards a particular penny stock. • Necurs, a spam botnet believed to have millions of bots, has been known to engage in pump-and-dump spam campaigns for years, being one of its primary activities, besides spreading the Dridex banking trojan, and several ransomware families. • The cryptocurrency in question is Swisscoin, an altcoin that's been described as a Multi-Level-Marketing (MLM) ponzi scheme in a report last year, and for which trading was recently suspended. • It was also seen sending dating spam and emails carrying files that spread the Globelmposter ransomware. 2 - City Of Farmington Recovering After SamSam Ransomware Attack EFTA00162778