Technical

[Asyn]

Ransoc Desktop Locking Ransomware Ransacks Local Files and Social Media Profiles
https://www.proofpoint.com/us/threat-insight/post/ransoc-desktop-locking-ransomware-ransacks-local-files-social-media-profiles

[Asyn]

Your Android could be sending messages to China
https://blog.avast.com/your-android-could-be-sending-messages-to-china

[DavidR]

Your Android could be sending messages to China
https://blog.avast.com/your-android-could-be-sending-messages-to-china

Strangely enough, I have always been wary of Chinese products and that only strengthened after the Lenovo issue. I did however take a punt on the Huawei Nexus 6P by a "Chinese telecommunications company that has been manufacturing mobile phones since 1997."

Nice to see that avast has this covered.

[Asyn]

iPhone User? Your Calls Go to iCloud
https://blog.elcomsoft.com/2016/11/iphone-user-your-calls-go-to-icloud/

[Asyn]

[0day] [PoC] Risky design decisions in Google Chrome and Fedora desktop enable drive-by downloads
https://scarybeastsecurity.blogspot.com/2016/11/0day-poc-risky-design-decisions-in.html

[Asyn]

3 million Android phones vulnerable due to pre-installed rootkit
https://blog.avast.com/3-million-android-phones-vulnerable-due-to-pre-installed-rootkit
http://blog.anubisnetworks.com/blog/ragentek-android-ota-update-mechanism-vulnerable-to-mitm-attack

[Asyn]

Locky Ransomware now using the Aesir Extension for Encrypted Files
http://www.bleepingcomputer.com/news/security/locky-ransomware-now-using-the-aesir-extension-for-encrypted-files/

[Asyn]

Nemucod downloader spreading via Facebook
https://bartblaze.blogspot.com/2016/11/nemucod-downloader-spreading-via.html

[Asyn]

Android Banking Malware Masquerading as Email App Targets German Banks
https://blog.fortinet.com/2016/11/18/android-banking-malware-masquerading-as-email-app-targets-german-banks

[.: Mac :.]

Locky Ransomware now using the Aesir Extension for Encrypted Files
http://www.bleepingcomputer.com/news/security/locky-ransomware-now-using-the-aesir-extension-for-encrypted-files/

What I would give to get my hands on the creators of Locky! Many lost nights restoring customers from backups.

BTW - Love the Avatar of Mr. Incredible

[Asyn]

What I would give to get my hands on the creators of Locky!

You're not alone pal.

[Asyn]

You Can Now Rent a Mirai Botnet of 400,000 Bots
http://www.bleepingcomputer.com/news/security/you-can-now-rent-a-mirai-botnet-of-400-000-bots/

[Asyn]

Here’s a secret: ɢoogle.com is not google.com
http://www.analyticsedge.com/2016/11/heres-a-secret-%C9%A2oogle-com-is-not-google-com/
http://help.analyticsedge.com/spam-filter/definitive-guide-to-removing-google-analytics-spam/

[Asyn]

Google warns journalists and professors: Your account is under attack
http://arstechnica.com/security/2016/11/google-warns-journalists-and-professors-your-account-is-under-attack/

[Asyn]

Locky Ransomware putting us to sleep with the ZZZZZ Extension
http://www.bleepingcomputer.com/news/security/locky-ransomware-putting-us-to-sleep-with-the-zzzzz-extension/