-
Izvestiya
February 28, 2022
Anonymous defaces the websites of pro-Kremlin Russian media sites.
-
ABI (Associazione Bancaria Italiana)
February 28, 2022
•
[ ransomware, malware, finance ]
The ransomware group Vice Society claims responsibility for an attack to ABI, the Italian Bank Association, and publishes some employees data.
-
Sberbank
February 27, 2022
•
[ leak, finance ]
Anonymous claimed to have exfiltrated and leaked a database of a Russian bank "in support of the Ukrainian people." The data was uploaded on February 27.
-
AgainstTheWest
February 27, 2022
•
[ hack, malware, government ]
AgainstTheWest (ATW) claims to have attacked a department of the Administration of the Pskov Region with their own custom "wiper" malware. All data has been reportedly saved and deleted.
-
Ukraine border control
February 26, 2022
•
[ hack, malware, government ]
A Ukraine border control station is struck with a data wiper cyberattack severely slowing the process of allowing refugees to cross into Romania.
-
Undetermined
February 25, 2022
UNC1151 has targeted a number of Belarusian organizations. Mass phishing emails have recently been observed; after the account is compromised, the threat actiors, by the IMAP protocol, get access to all the messages. Subsequently, the attacks leverage the contact information stored in the victim's address book to propagate the phishing messages to other targets.
-
Viasat
February 24, 2022
•
[ hack, ddos, technology ]
During the early hours of February 24, satellite internet connections were disrupted at Viasat. A mysterious cyberattack against the satellite's ground infrastructure "not the satellite itself "plunged tens of thousands of people into internet darkness. Impacted the ability of customers to connect to the ground network.
-
Undetermined
February 24, 2022
ESET identified a further wiper in Ukrainian government networks, affecting organizations that had not been attacked by HermeticWiper and does not share any code similarity with it. On February 25, the attackers dropped a new version of IsaacWiper with debug logs, indicating that the attackers were unable to wipe some of the compromised machines. The malware was developed/employed at least since October 19, 2021.
-
Undetermined
February 24, 2022
•
[ espionage, phishing, finance ]
A phishing campaign was observed using a possibly compromised Ukrainian armed service member's email account, to target European government personnel involved in managing the logistics of refugees fleeing Ukraine. Researchers indicate there was a clear preference for targeting individuals with responsibilities related to transportation, financial and budget allocation, administration, and population movement within Europe.
-
Flurry Finance
February 22, 2022
•
[ financial, hack, finance ]
Hacker steals around $295,000 from decentralized platform Flurry Finance.
-
Expeditors International
February 20, 2022
Logistics and freight company suffers ransomware attack causing a shut down of most worldwide operations.
-
Belarusian Railway
February 27, 2022
•
[ hack ]
Belarusian Cyber Partisans claim to have breached the railway systems to disrupt Russian efforts to move soldiers and equipmnt through the country.
-
Gems Education
February 25, 2022
•
[ leak, education ]
Dubai's largest education operator suffers a cyberattack compromising student personal information.
-
AON
February 25, 2022
•
[ hack, finance ]
Professional services and insurance firm AON suffers a cyberattack.
-
Undetermined
February 23, 2022
•
[ ransomware, malware, finance ]
UAC-0082 (a.k.a. Sandworm) staged a file encryptor on the network of an agricultural firm, holding this entity at risk for future destruction. Microsoft assesses that this was likely targeting grain production, a major export commodity in Ukraine's economy.
-
Nvidia
February 23, 2022
•
[ leak, manufacturing ]
US chip manufacturer Nvidia suffers data breach, Lapsus$ group compromises 1TB of proprietary data and employee information.
-
Axis Communications
February 20, 2022
•
[ social, phishing, manufacturing ]
Axis Communications is victim of a phishing attack, the company shuts down most of its system in response causing severe disruptions.
-
Livingston Memorial VNA Health Corporation
February 19, 2022
•
[ ransomware, malware, healthcare ]
Livingston Memorial VNA Health Corporation files notice of a data breach after the company experienced what appears to have been a ransomware attack.
-
Memorial Village ER
February 18, 2022
•
[ hack, healthcare ]
Memorial Village ER notifies 80,000 individuals following a February 18 hacking incident.
-
