-
Senior American Political Figures
August 1, 2024
•
[ espionage, government ]
The U.S. believes that the Chinese cyber espionage campaign Salt Typhoon targeted and recorded telephone calls of "very senior" American political figures.
-
Multiple Romanian election sites, including bec.ro (Central Election Bureau), roaep.ro, and registrulelectoral.ro (voter registration)
November 19, 2024
A report from Romanias Intelligence Service (SRI) says that the countrys election infrastructure was targeted by more than 85,000 cyberattacks with threat actors also obtaining access credentials for election-related websites and leaked them on a Russian forum less than a week before the first presidential election round.
-
Multiple Organizations in the Cryptocurrency Space
December 4, 2024
•
[ financial, malware, finance ]
The legitimate Solana JavaScript SDK is temporarily compromised in a supply chain attack, backdoored with code to steal cryptocurrency keys and drain wallets.
-
Ukrainian State Registers
December 19, 2024
•
[ hack, government ]
Suspected Russian threat actors from the XakNet collective launch one of the largest cyberattacks on Ukraines state services in recent months.
-
Telecom Namibia
December 11, 2024
•
[ ransomware, malware, technology ]
Namibia Telecom is hit with a ransomware attack by the Hunters International gang.
-
Concession Peugeot
December 15, 2024
•
[ ransomware, malware, retail ]
Cicada3301 ransomware group claims responsibility for a data breach targeting Concession Peugeot (concessions.peugeot.fr), a prominent French automotive dealership linked to the Peugeot brand. The group claims to have stolen 35GB of sensitive data
-
Texas Tech University Health Sciences Center
September 17, 2024
The Texas Tech University Health Sciences Center and its El Paso counterpart suffer a cyberattack that disrupted computer systems and applications, potentially exposing the data of 1.4 million patients.
-
Kaiser Permanente employees
December 15, 2024
•
[ social, malware, healthcare ]
Researchers at Malwarebytes detect a malicious campaign targeting Kaiser Permanente employees via Google Search Ads.
-
Framingham Heart Study, managed by Boston University
September 8, 2024
•
[ leak, education ]
Boston Universitys renowned Framingham Heart Study (FHS) is breached by threat actors, who gained access to the data of participantsboth living and deceasedof the countrys longest running, multigenerational heart study.
-
Granite School District
September 11, 2024
•
[ ransomware, malware, education ]
Granite School District discloses that a cyber attack affected all the students' records. The Rhysida ransomware gang claims responsibility for the attack.
-
Center for Vein Restoration
October 6, 2024
•
[ hack, healthcare ]
Vein care provider Center for Vein Restoration notifies over 446,000 individuals that their personal, medical, and financial information was compromised in a recent cyberattack.
-
Electrica Group
December 9, 2024
•
[ ransomware, malware, energy ]
Electrica Group, a key player in the Romanian electricity distribution and supply market, is investigating a ransomware attack.
-
Ukrainian Defense Companies and Security and Defense Forces
December 7, 2024
•
[ social, phishing, government ]
The Computer Emergency Response Team of Ukraine (CERT-UA) discover a series of phishing emails targeting Ukrainian defense companies and security and defense forces with a fake NATO standards conference. Some recipients opened the phishing emails execiting the malicious RAR attachments.
-
Port of Rijeka
November 30, 2024
•
[ ransomware, financial, leak ]
The 8Base ransomware group hits Croatias Port of Rijeka, stealing sensitive data, including contracts and accounting info.
-
ITO EN North America
December 6, 2024
•
[ ransomware, malware, manufacturing ]
The Japanese corporation Ito En confirms that its U.S. subsidiary was hit with ransomware. The company is the largest producer of green tea in Japan and has subsidiaries in the U.S., Australia, China and Indonesia.
-
Kirill Parubets
December 5, 2024
Researchers at Citizen Lab reveal that after Kirill Parubets, a Russian programmer, was detained by Russia's Federal Security Service (FSB) for fifteen days and his phone confiscated, it was discovered that a new spyware, derived from Monokle, was secretly installed on his device upon its return.
-
Tibetans and Uyghurs Individuals
December 5, 2024
•
[ espionage, malware ]
Researchers at Trend Micro discover a previously undocumented threat activity cluster dubbed Earth Minotaur, leveraging the MOONSHINE exploit kit and an unreported Android-cum-Windows backdoor called DarkNimbus to facilitate long-term surveillance operations targeting Tibetans and Uyghurs.
-
Kash Patel
December 3, 2024
President-elect Donald Trumps FBI director pick, Kash Patel, is informed by the FBI itself that hed been targeted by Iranian threat actors.
-
Marin County Housing Authority
September 16, 2024
Threat actors steal $950,000 from Marin County Housing Authority.
-
Multiple e-commerce platforms
December 2, 2024
•
[ leak, retail ]
At least 100,000 customers' personal information, including credit cards, is believed to have been stolen from 11 e-commerce websites from multiple organizations in Japan including the coffee chain Tully's Coffee Japan and the national federation of fisheries cooperatives (JF Zengyoren).
