-
Large U.S. car maker
November 1, 2022
•
[ financial, phishing, manufacturing ]
Researchers from Blackberry reveal that the financially motivated threat actor FIN7 targeted a large U.S. car maker with spear-phishing emails for employees in the IT department to infect systems with the Anunak backdoor.
-
Argentina's driver licenses
April 16, 2024
•
[ hack, leak, government ]
A threat actor allegedly hacks a database holding 5.7M Argentinas drivers licenses, requesting a payment of $3,000 USD for whoever wishes to purchase the images of Argentine licenses.
-
United Nations Development Programme
March 27, 2024
•
[ ransomware, malware, government ]
The United Nations Development Programme (UNDP) investigates a cyberattack after threat actors breached its IT systems to steal human resources data. The 8Base ransomware operation claims responsibility for the attack.
-
Telecommunication providers in Crimea
June 27, 2024
•
[ hack, ddos, technology ]
Local authorities in Crimea warn of internet disruptions from distributed denial-of-service (DDoS) attacks targeting telecommunication providers.
-
South Africa’s National Health Laboratory Service
June 25, 2024
•
[ ransomware, malware, healthcare ]
South Africas National Health Laboratory Service (NHLS) confirms to be dealing with a ransomware attack.
-
Absolute Telecom
June 9, 2024
•
[ hack, technology ]
GhostR claims to have stolen over 34 gigabytes of data belonging to Singapore-based telecom company Absolute Telecom PTE Ltd.
-
Synnovis
June 4, 2024
•
[ ransomware, malware, healthcare ]
A Qilin ransomware attack affecting pathology and diagnostic services provider Synnovis impacts healthcare services at multiple major NHS hospitals in London.
-
New York Times
June 8, 2024
•
[ leak, misconfiguration, technology ]
The New York Times confirms that internal source code and data was leaked on the 4chan message board after being stolen from the company's GitHub repositories in January 2024.
-
Official Microsoft India account on X (formerly Twitter)
June 3, 2024
•
[ financial, hack, phishing ]
The official Microsoft India account on X (formerly Twitter), with over 211,000 followers, is hijacked by cryptocurrency scammers to impersonate Roaring Kitty, the handle used by notorious meme stock trader Keith Gill.
-
Europol
September 6, 2023
•
[ hack, government ]
Europol, the European Union's law enforcement agency, confirms that its Europol Platform for Experts (EPE) portal was breached and is now investigating the incident after the threat actor IntelBroker claimed they stole For Official Use Only (FOUO) documents containing classified data.
-
Starlight Media.
May 9, 2024
Russia-aligned threat actors hijack at least 15 TV channels owned by Starlight Media. to broadcast a Victory Day parade in Moscow, commemorating the defeat of Nazi Germany in World War II. The attack is carried out compromising the Astra communication satellites owned and operated by SES, a Luxembourg-based company
-
Undisclosed contractor
April 30, 2024
The infamous IntelBroker threat actor claims to have breached a third-party contractor and stolen sensitive data belonging to two prominent banks in the United Kingdom: HSBC and Barclays.
-
Polish government institutions
May 9, 2024
•
[ espionage, malware, government ]
Polands computer emergency response team, CERT-PL, reveals that it had observed a large-scale malware campaign targeting Polish government institutions, likely carried out by the hacker group APT28, associated with Russias military intelligence agency, the GRU.
-
Several Italian Ministry websites
May 7, 2024
The Pro-Russia Hacktivists of NoName057(16) take down several italian websites including the Ministry of Made in Italy, the Financial Police, and the Ministry of Infrastructure and Transport.
-
DocGo
May 7, 2024
•
[ leak, healthcare ]
Mobile medical care firm DocGo confirms it suffered a cyberattack after threat actors breached its systems and stole patient health data.
-
Undisclosed organizations in El Salvador
April 1, 2024
•
[ leak ]
Researchers from Resecurity identify a massive leak of the personally identifiable information (PII) of over five million citizens from El Salvador on the Dark Web, impacting more than 80% of the countrys population.
-
London Drugs
April 28, 2024
•
[ ransomware, malware, retail ]
Canadian pharmacy chain London Drugs closes all its retail stores to contain what it described as a "cybersecurity incident." One month later the LockBit ransomware operation claims responsibility for the attack.
-
Coffee County, GA
April 15, 2024
Coffee County is hit with a cyber attack.
-
Tipton Wastewater Treatment Plant
April 20, 2024
•
[ hack ]
The Cyber Army of Russia claims responsibility for a cyber attack to the Tipton Wastewater Treatment Plant. An investigation by Mandiant claims that this group may be linked operationally to APT44 GRU Sandworm
-
Medios de Prevención Externos Sur SL
March 22, 2024
•
[ ransomware, malware, healthcare ]
Medios de Prevencin Externos Sur SL, a medical company servicing Spain's Guardia Civil, is hit with a LockBit ransomware attack.
