-
Water for People
January 11, 2024
•
[ ransomware, malware, healthcare ]
The ransomware-as-a-service gang Medusa lists Water for People on its darknet site, threatening to publish stolen information unless the nonprofit pays a $300,000 extortion fee.
-
CoinGecko’s X (formerly Twitter) account
January 10, 2024
•
[ finance, phishing, hack ]
Cryptocurrency data aggregator CoinGeckos X (formerly Twitter) account is briefly compromised to promote a crypto scam.
-
United States Department of Transportation (DOT)
January 8, 2024
•
[ hack, government ]
The threat actor known as IntelBroker claims responsibility for a data breach targeting the United States Department of Transportation (DOT), containing. 5.8 million flight logs from the year 2015.
-
Official X Account of Netgear
January 8, 2024
•
[ hack, malware, manufacturing ]
The official NetgearTwitter/X accounts (together with over 160,000 followers) are the latest hijacked to push scams designed to infect potential victims with cryptocurrency wallet drainer malware.
-
Roku
March 15, 2024
•
[ hack, brute-force, technology ]
Roku warns that 576,000 accounts were hacked in new credential stuffing attacks after disclosing another incident that compromised 15,000 accounts in early March.
-
International Monetary Fund (IMF)
March 15, 2024
•
[ hack, government ]
The International Monetary Fund (IMF) discloses that a cyberattack in February led to the compromise of 11 email accounts.
-
Scranton School District
March 15, 2024
•
[ ransomware, malware, education ]
The Scranton School District is hit with a ransomware attack.
-
Encina Wastewater Authority (EWA)
March 15, 2024
•
[ ransomware, malware, government ]
Encina Wastewater Authority (EWA) is hit by the BlackByte ransomware group.
-
On Q Financial
March 14, 2024
•
[ ransomware, malware, finance ]
On Q Financial discloses a breach due to the ScreenConnect CVE-2024-1709 and CVE-2024-1708 vulnerabilities. The BianLian ransomware group claims responsibility for the attack.
-
Taxpayers in the U.S.
March 11, 2024
As the tax deadline approaches, the U.S. Internal Revenue Service (IRS) warns taxpayers about impersonation scams.
-
French government agencies
March 11, 2024
•
[ hack, government ]
A number of French government agencies are hit by intense cyberattacks
-
Acuity
March 9, 2024
The threat actor known as IntelBroker claims responsibility for a data breach targeting Acuity, a Federal contractor. The breach resulted in the theft of sensitive data and documents from two prominent U.S. government entities: U.S. Immigration and Customs Enforcement (ICE) and U.S. Citizenship and Immigration Services (USCIS). One month later Acuity confirms the breach.
-
Lithuania
March 8, 2024
•
[ espionage, government ]
A report published by Lithuanian security services warne that China has escalated its espionage operations against Lithuania.
-
Microsoft
March 8, 2024
Microsoft reveals that APT29 (a.k.a. Cozy Bear, Midnight Blizzard, Nobelium, The Dukes) used the information initially exfiltrated from their corporate email systems to access portions of the source code.
-
Leicester City Council. The INC ransomware claims responsibility for the attack.
March 7, 2024
•
[ ransomware, malware, education ]
The Leicester City Council is hit with a cyber attack.
-
Duvel Moortgat Brewery
March 6, 2024
•
[ ransomware, malware, manufacturing ]
The Stormous ransomware gang takes credit for an attack on Duvel Moortgat Brewery, a major Belgian beer producer.
-
South St. Paul Public Schools
March 4, 2024
•
[ education ]
South St. Paul Public Schools alerts families to an ongoing technology disruption that is being investigated.
-
Seneca
February 29, 2024
Threat actors steal $6 million from the Seneca stablecoin protocol across the Ethereum and Arbitrum networks by exploiting a bug in the protocol's smart contract approval mechanisms
-
Organizations in Japan
February 28, 2024
•
[ espionage, malware, technology ]
Japan's Computer Security Incident Response Team (JPCERT/CC) warns that the notorious North Korean hacking group Lazarus has uploaded four malicious PyPI packages to infect developers with malware.
-
Municipality of Bjuv
February 27, 2024
•
[ ransomware, government ]
The Akira ransomware group threatens to leak nearly 200GB of stolen data from Bjuv Municipalitys systems.
