-
Town of Iowa
November 2, 2023
•
[ ransomware, malware, government ]
The ransomware group ALPHV (BlackCat) publishes a first part of exfiltrated data from the Town of Iowa in the state of Louisiana.
-
Japan Aviation Electronics
November 2, 2023
•
[ ransomware, malware, manufacturing ]
Manufacturing giant Japan Aviation Electronics confirms that its systems are facing a cyberattack that has forced the company to shut down its website. The ALPHV/BlackCat ransomware gang claims responsibility for the attack.
-
St. Johns River Water Management District
November 1, 2023
•
[ leak, government ]
St. Johns River Water Management District, a regulatory agency in Florida that oversees the long-term supply of drinking water, confirms that it responded to a cyberattack after the Cyber Av3ngers said it attacked the organization, providing samples of what it stole.
-
Clinique
November 1, 2023
•
[ leak, manufacturing ]
The Spanish branch of Skincare products maker Clinique, a subsidiary of cosmetics giant Este Lauder, reportedly experiences a significant data breach, with the personal information of over 700,000 customers exposed by a threat actor with the moniker of Pwned.
-
South Korean Officials and Journalists
October 31, 2023
•
[ financial, phishing, finance ]
The North Korean threat actors from Kimsuky are accused of impersonating South Korean officials and journalists in a plot to steal cryptocurrency for the North Korean regime.
-
Organizations in the transportation, logistics and technology sectors in Israel
October 31, 2023
•
[ espionage, malware, technology ]
Researchers from Crowdstrike reveal the details of a new campaign from Imperial Kitten targeting transportation, logistics, and technology firms in Israel using a novel malware family.
-
Marketing professionals in India
October 31, 2023
Researchers from Kaspersky reveal that the Vietnamese threat actors behind the Ducktail stealer malware have been linked to a new campaign that ran targeting marketing professionals in India with an aim to hijack Facebook business accounts.
-
Cryptocurrency exchanges, venture capital firms and banks
October 31, 2023
Researchers from Jamf discover a new campaign by the North Korean-backed BlueNoroff threat group targeting Apple customers with a new macOS malware tracked as ObjCShellz that can open remote shells on compromised devices.
-
At least 24 Cambodian government organizations
October 31, 2023
Researchers from Palo Alto Networks reveal that two prominent Chinese government hacking groups are targeting at least 24 Cambodian government organizations through cloud backup services.
-
Casino servers
November 7, 2023
The Federal Bureau of Investigation warns that ransomware threat actors are targeting casino servers and use legitimate system management tools to increase their permissions on the network.
-
Canadian Psychological Association
November 6, 2023
•
[ ransomware, malware, healthcare ]
The Canadian Psychological Association (CPA), the primary representative body for psychologists across Canada, allegedly falls victim to a cyberattack by the notorious Medusa ransomware group.
-
-
Jeffco Public Schools
November 2, 2023
•
[ hack, education ]
The Jeffco Public Schools has some data stolen from a threat actor named SingularityMD.
-
Spolzino Termosanitari
November 1, 2023
•
[ ransomware, malware, manufacturing ]
The NoEscape ransomware gang claims responsibility for a cyber attack against Spolzino Termosanitari.
-
Onyx
November 1, 2023
•
[ hack, financial, finance ]
Decentralized finance protocol Onyx is the victim of a $2.1 million hack.
-
Advarra
November 1, 2023
•
[ ransomware, phishing, healthcare ]
An Advarra employee falls victim of a compromise of their phone number and the threat actors from ALPHV/BlackCat claim to have acquired over 120GB+ of confidential data belonging to customers, patients, and current and former employees.
-
Undefined tech company
October 31, 2023
•
[ espionage, malware, education ]
The Israel Computer Emergency Response Team (CERT) issues an alert about the BiBi wiper malware targeting organizations in Israel in the education and technology sectors. The attacks are attributed to the Iranian APT Agonizing Serpens.
-
National Payment Card System (NSPK)
October 30, 2023
•
[ hack, finance ]
Activists from the DumpForums group and the Ukrainian Cyber Alliance say they defaced a website of the government-run National Payment Card System (NSPK) and reportedly gained access to the internal systems of the consumer payment network Mir ("world" in Russian), a homegrown alternative to brands like Visa and Mastercard, is operated by the NSPK.
-
Ace Hardware
October 30, 2023
•
[ hack, retail ]
Ace Hardware confirms that a cyberattack is preventing local stores and customers from placing orders as the company works to restore 196 servers.
-
Italian Org #4
November 7, 2023
The Pro-Russian hacktivists from NoName057(16) launch a DDoS attack against five targets in Italy including a subdomain of the Ministry of Defense, and a primary bank (Credito Cooperativo.)
