-
Undetermined
March 23, 2022
Swedish authorities reported an increase in DDoS attacks against government entities, specifically mentioning the targeting of financial and transportation administration.
-
Rostec
March 23, 2022
•
[ espionage, malware, manufacturing ]
Multiple Chinese APT groups leveraged the Russia and Ukraine war as a lure for cyberespionage operations. The APT groups have been using sanctions-related baits to attack Russian defense institutes, part of the Rostec Corporation. The hackers used new tools, which have not previously been described: a sophisticated multi-layered loader and a backdoor dubbed SPINNER. These tools use advanced evasion and anti-analysis techniques such as multi-layer in-memory loaders and compiler-level obfuscations. The operation targeted defense research institutes in Russia and possibly also in Belarus. The purpose of the backdoor and the operation is likely to collect information from targets inside the high-tech Russian defense industry to support China in its technological advancement.
-
Ferrovie dello Stato Italiane (Italian Railways)
March 23, 2022
•
[ hack, government ]
Italian railway company Ferrovie dello Stato Italiane temporarily halts some ticket sale services as it feared they had been targeted by a cyber attack.
-
Morinaga
March 22, 2022
•
[ leak, manufacturing ]
Japanese confectionery manufacturer Morinaga warns that a suspected data breach of its online store may have exposed the personal information of more than 1.6 million customers.
-
VKontakte (VK)
March 21, 2022
VKontakte users receive messages from what appears to be the official VK account about Russia's war on Ukraine, suggesting a possible hack.
-
Black River Falls School District
April 8, 2022
•
[ hack, education ]
Black River Falls School District cancels all classes because of an incident involving unauthorized access to the district's IT network.
-
Aerogas
April 8, 2022
•
[ leak, energy ]
The Anonymous collective leaks 100,000 emails inside 145 GB of data from Aerogas.
-
Russian Unified National System for Digital Marking and Tracking of Goods
April 7, 2022
•
[ hack, ddos, government ]
The Student CyberArmy, a Ukrainian-affiliated collective, has conducted a DDoS attack against the servers of the Russian operator of the Unified National System for Digital Marking and Tracking of Goods.
-
Kremlin CCTV system
April 6, 2022
•
[ hack, government ]
Hacktivists from the Black Rabbit World claim to have gained access to the Kremlin CCTV system.
-
Central Vermont Eye Care
April 6, 2022
•
[ hack, healthcare ]
Central Vermont Eye Care reports a hacking incident affecting 30,000 patients.
-
U-Haul International (U-Haul)
April 5, 2022
Moving and storage giant U-Haul International (U-Haul) discloses a data breach after a customer contract search tool was hacked to access customers' names and driver's license information.
-
The Works
April 5, 2022
UK retail chain The Works announces it was forced to shut down several stores due to till issues caused by a cyber-security incident involving unauthorized access to its computer systems.
-
Physician's Business Office (PBO)
April 5, 2022
•
[ leak, healthcare ]
Physician's Business Office (PBO) reveals to have suffered a data breach that impacted 196,573 individuals.
-
Saskatchewan Liquor and Gaming Authority
April 4, 2022
•
[ ransomware, malware, government ]
RANSOM HOUSE criminal gang exploits data and encrypts systems. Data and ransom demands presented on "leak" site on dark web.
-
Korolevskiy
April 4, 2022
•
[ hack, leak, manufacturing ]
Anonymous has hacked a rations manufacturer for the Russian military, and leaked thousands of emails (82 GB).
-
Yandex Food
April 1, 2022
•
[ hack, leak, insider ]
Yandex blames one of its employees for the hacking and subsequent leak of data from Yandex Food, a popular food delivery service in Russia.
-
Capital Legal Services
April 1, 2022
Anonymous leaked 60GB of emails exfiltrated from the website of a Russian law firm.
-
Undisclosed organization
March 31, 2022
Researchers from Forescout reveal the detail of a BlackCat ransomware attack during an attack exploiting an Internet-exposed SonicWall firewall to gain initial access to the network and then moving to and encrypting a VMware ESXi virtual farm.
-
Russian state officers
March 31, 2022
•
[ espionage, malware, government ]
Researchers from Secureworks discover a campaign carried out by the Mustang Panda group targeting Russian state officers with the PlugX remote access tool.
-
Marathon Group
March 31, 2022
In name of #OpRussia, the Anonymous hacks the Marathon Group, a Russian investment firm owned by oligarch Alexander Vinokurov, and releases 62,000 emails.
