-
Undetermined
February 25, 2022
•
[ social, phishing, finance ]
UNC1151 has targeted Employees of a Kazakhstani education institution. Mass phishing emails have recently been observed; after the account is compromised, the threat actiors, by the IMAP protocol, get access to all the messages. Subsequently, the attacks leverage the contact information stored in the victim's address book to propagate the phishing messages to other targets.
-
Ukraine border control station
February 25, 2022
•
[ hack, malware, government ]
A Ukraine border control station has been struck with a data wiper cyberattack that has slowed the process of allowing refugees to cross into Romania.
-
Spine Diagnostic and Pain Treatment
February 25, 2022
•
[ ransomware, malware, healthcare ]
Louisiana medical center is hit with Conti ransomware attack.
-
New York State's Joint Commission on Public Ethics
February 25, 2022
•
[ hack, government ]
New York government ethics watch dog is forced to shut dow all systems following an unidentified cyberattack.
-
Kyiv Post
February 24, 2022
•
[ hack, ddos, technology ]
A Ukrainian news website reports that its site has been under constant cyberattack during the Russian-Ukrainian armed conflict. The DDOS attack incapacitated their systems and they had to find alternative means to publish the news by posting shortened stories on Facebook, Twitter, and LinkedIn.
-
ARcare
February 24, 2022
•
[ hack, malware, healthcare ]
ARcare notifies people whose personal and/or medical information may have been accessed or acquired in a malware incident impacting 345,353 patients.
-
Center for Life Management (CLM)
February 23, 2022
The Mental Health Center of Greater Manchester (MHCGM) in New Hampshire has announced that patient data was potentially compromised in a cyberattack at a third-party community mental health services partner, Center for Life Management (CLM), which was used for data storage.
-
ABC Seamless
February 23, 2022
SNATCH executed exfiltration of data and ransomeware in targeted network. Data presented on dark web "leak site"
-
Washington Metropolitan Area Transit Authority (WMATA)
February 21, 2022
The WMATA Twitter account is hacked and obsene messages are posted.
-
District 518
February 28, 2022
A District 518 employee's email is hacked and an investigation is underway to determine whether any data was compromised.
-
UNC1151
February 27, 2022
•
[ leak, government ]
GhostSec (Anonymous) released a sample of databases stolen from additional government and municipality sites across Russia. They conducted attacks against "Russian hackers" and the "hacker group GhostWriter" (a.k.a. UNC1151).
-
Conti
February 27, 2022
•
[ leak, insider, government ]
A Ukrainian cybersecurity researcher published the biggest leak ever of files and data from Conti following Conti's publicly supporting Russia's invasion of Ukraine. Conti is a syndicate of Russian and Eastern Europe cybercriminals wanted by the FBI for conducting attacks on hundreds of US organizations and causing millions of dollars in losses. The thousands of internal documents and communications leaked include evidence that appears to suggest Conti operatives have contacts within the Russian government, including the FSB intelligence service.
-
Undetermined
February 25, 2022
•
[ hack, education ]
The Wordfence team has identified a cyberattack on Ukrainian universities that coincided with the invasion of Ukraine by Russia, and resulted in at least 30 compromised Ukrainian university websites.
The threat actor has stated publicly that they support Russia in the conflict.
-
Aeroflot
February 25, 2022
•
[ hack, ddos, government ]
Russian government entities and state-owned companies have been targeted over events in Ukraine, with the websites of the Kremlin, flagship carrier and major lender among those to have seen outages or temporary access issues.
-
Russian Ministry of Defense
February 25, 2022
•
[ leak, government ]
Anonymous breaches a Russian Ministry of Defense database including personal contact information and leaks it online.
-
RT
February 24, 2022
•
[ hack, ddos, technology ]
Anonymous takes down the site of Russian news outlet RT.
-
Baltimore State Attorney's Office
February 24, 2022
The official Twitter account for the Baltimore State Attorney's Office is hacked.
-
Undetermined
February 23, 2022
•
[ hack, malware, finance ]
A number of organizations in Ukraine have been hit by a cyberattack, infecting hundreds of computers. The attack involved new data-wiping malware dubbed HermeticWiper '" a destructive malware that can delete or corrupt data on a targeted computer or network. The wiper has been detected in Ukraine, Latvia and Lithuania.
-
Undetermined
February 23, 2022
•
[ espionage, finance, government ]
More than 600 websites belonging to the defence ministry in Kyiv and other institutions suffered attacks with the launch of thousands of exploits with attempts pointed to at least 20 distinct vulnerabilities. The campaign started mid-February and peaked on 23 February. The attacks sought to infiltrate targets ranging from border defence forces to the national bank and railway authority. They were designed to steal data and explore ways to shut down or disrupt vital defence and civilian infrastructure. The Times, allegedly quoting a source at the SBU, claimed the campaign was co-ordinated by the Chinese government. The SBU went on to deny The Times report.
-
Ukrainian Ministry of Internal Affairs
February 23, 2022
•
[ hack, ddos, government ]
The websites of several Ukrainian banks and government departments, including the Ministry of Foreign Affairs, Ministry of Defense, Ministry of Internal Affairs, Security Service (SBU) and Cabinet of Ministers became inaccessible following a large DDoS attack. Most other sites came online within two hours of the attack but latency and outages continued into the following day for others.
