ESET researchers identified 21 distinct websites that had been compromised including some particularly notable government and media sites in new watering hole attack in Southeast Asia. In other ESET research, it was discovered that in August 2018, Sednit’s operators deployed two new Zebrocy components, and since then we have seen an uptick in Zebrocy deployments, with targets in Central Asia, as well as countries in Central and Eastern Europe. Plus we have tips for shopping online on Black Friday.