SVR (COZYBEAR)
January 25, 2018
•[ espionage, government ]
A threat actor successfully compromised the networks of the Dukes (Cozy Bear), gaining visibility into the Dukes' targeting methods and operations. This compromise allegedly helped the U.S. intelligence community to attribute the 2016 compromise of the Democratic National Committee and other entities to Russian state-sponsored actors.
Harris County
January 24, 2018
•[ financial, phishing, government ]
Harris County lose almost $900K in a phishing scam. The attack dates back to September 2017.
Advertisement screen in London
February 13, 2018
•[ hack, malware, technology ]
And the last victim of the cryptocurrency frenzy is an advertisement screen in London that is infected by a miner.
Pyeongchang Winter Olympics
February 10, 2018
•[ hack, government ]
Pyeongchang Winter Olympics organizers confirm that the Games had fallen victim to a cyber attack during Friday's opening ceremony, but they refused to reveal the source. US intelligence the attack was carried by Russia while trying to make it appear as though North Korea was responsible.
Undisclosed water utility company
February 8, 2018
•[ financial, malware, energy ]
Researchers from Radiflow discover the first example of a malware attacking the operational network of a water utility company in order to mine the Monero cryptocurrency,
City of Enumclaw
February 7, 2018
•[ social, phishing, government ]
The city of Enumclaw accidentally sends an email to an "individual pretending to be a member of City administration" and compromises the W-2s of hundreds of employees.
Province of Milan
February 6, 2018
•[ hack, government ]
The same hackers also claim to have hacked the website of Provincia di Milano (Province of Milan) in Italy.
Italian Democratic Party (PD)
February 6, 2018
•[ hack, government ]
The AnonPlus hacker group says they have hacked the Florence branch of the Italian centre-left Democratic Party (PD) and leaked data regarding leader Matteo Renzi online.
City of Keokuk
February 4, 2018
•[ leak, phishing, government ]
The City of Keokuk says a data breach resulted in the release of personal information of current and former city employees and elected leaders. An unauthorized party was able to obtain 2017 W-2 tax forms through the use of a "criminal phishing email."
Ron's Pharmacy Services
February 2, 2018
•[ leak, retail ]
Ron's Pharmacy Services notifies certain patients of the unauthorized access to certain limited pieces of patient information, including patient names, Ron's Pharmacy internal account numbers, and payment adjustment information.
City of Pittsburg, Kansas
February 1, 2018
•[ social, phishing, government ]
The City of Pittsburg in Kansas reveals to have been subjected to a sophisticated phishing scheme targeting employee payroll data. The attack results in the release of sensitive information for current and former city employees who received a W-2 for the 2017 fiscal year.
Users participating to the ICO of the Bee Token Crypto Currency
January 31, 2018
•[ social, phishing, finance ]
Users who were aiming to buy Bee Tokens during a Token Generation Event (i.e., an initial coin offering) are tricked into sending the money to scammers instead. The attackers steal nearly $1M worth of cryptocurrency.
DigID
January 29, 2018
•[ hack, ddos, government ]
The Dutch official online signature system DigID is also reportedly hit by the same wave of DDoS attacks.
Chester County School District
January 29, 2018
•[ ransomware, malware, education ]
Chester County School District posts on its Facebook page that ransomware hit the district's servers over the weekend.
phpBB
January 26, 2018
•[ hack, malware, technology ]
An unknown attacker compromises download links for the phpBB forum software, according to a statement released today by the phpBB development team.
National Stores, Inc.
January 23, 2018
•[ financial, malware, retail ]
National Stores, Inc. announces that it has been the victim of a malware attack, enabling unauthorized parties to access payment card information. It appears that payment cards used by customers at some National Stores locations between July 16 and December 11, 2017 may be involved.
Metrolinx
January 23, 2018
•[ hack, government ]
Ontario transit agency Metrolinx says it was the target of a cyberattack that originated in North Korea, but no personal information was compromised.
220,000 Malaysian organ donors
January 23, 2018
•[ leak, healthcare ]
Another data breach in Malaysia. A technology forum publishes details of a trove of data which includes the personal information of more than 220,000 organ donors.
David Clarke Jr. Twitter Account
January 22, 2018
•[ hack, phishing, technology ]
The Turkish Cyber Army hacking group strikes again and hijacks the Twitter account of vocal Donald Trump supporter and ex-Milwaukee County Sheriff David Clarke Jr.
Unnamed Russian bank
February 16, 2018
•[ financial, hack, finance ]
The Russian Central Bank reveals that unknown hackers stole 339.5 million roubles ($6 million) from a Russian bank last year in an attack using the SWIFT international payments messaging system.
