-
Two individuals in Serbia
December 15, 2024
•
[ hack, malware ]
A Serbian journalist and an activist have their phones hacked by local authorities using a cellphone-unlocking device made by forensic tool maker Cellebrite.
-
LKQ Corporation
November 13, 2024
Automobile parts giant LKQ Corporation disclosed that one of its business units in Canada was hacked, allowing threat actors to steal data from the company.
-
SRP Federal Credit Union
November 22, 2024
More than 240,000 people have information stolen during a cyberattack on SRP Federal Credit Union, one of the largest in South Carolina.
-
Individuals in South Korea
December 11, 2024
•
[ financial, phishing, finance ]
A South Korean law enforcement operation, dubbed Operation Midas, and carried out by the Korean Financial Security Institute (K-FSI), takes down a large-scale fraud network that extorted $6.3m from victims with fake online trading platforms.
-
Senior American Political Figures
August 1, 2024
•
[ espionage, government ]
The U.S. believes that the Chinese cyber espionage campaign Salt Typhoon targeted and recorded telephone calls of "very senior" American political figures.
-
Multiple Romanian election sites, including bec.ro (Central Election Bureau), roaep.ro, and registrulelectoral.ro (voter registration)
November 19, 2024
A report from Romanias Intelligence Service (SRI) says that the countrys election infrastructure was targeted by more than 85,000 cyberattacks with threat actors also obtaining access credentials for election-related websites and leaked them on a Russian forum less than a week before the first presidential election round.
-
Multiple Organizations in the Cryptocurrency Space
December 4, 2024
•
[ financial, malware, finance ]
The legitimate Solana JavaScript SDK is temporarily compromised in a supply chain attack, backdoored with code to steal cryptocurrency keys and drain wallets.
-
Ukrainian State Registers
December 19, 2024
•
[ hack, government ]
Suspected Russian threat actors from the XakNet collective launch one of the largest cyberattacks on Ukraines state services in recent months.
-
Telecom Namibia
December 11, 2024
•
[ ransomware, malware, technology ]
Namibia Telecom is hit with a ransomware attack by the Hunters International gang.
-
Concession Peugeot
December 15, 2024
•
[ ransomware, malware, retail ]
Cicada3301 ransomware group claims responsibility for a data breach targeting Concession Peugeot (concessions.peugeot.fr), a prominent French automotive dealership linked to the Peugeot brand. The group claims to have stolen 35GB of sensitive data
-
Texas Tech University Health Sciences Center
September 17, 2024
The Texas Tech University Health Sciences Center and its El Paso counterpart suffer a cyberattack that disrupted computer systems and applications, potentially exposing the data of 1.4 million patients.
-
Kaiser Permanente employees
December 15, 2024
•
[ social, malware, healthcare ]
Researchers at Malwarebytes detect a malicious campaign targeting Kaiser Permanente employees via Google Search Ads.
-
Framingham Heart Study, managed by Boston University
September 8, 2024
•
[ leak, education ]
Boston Universitys renowned Framingham Heart Study (FHS) is breached by threat actors, who gained access to the data of participantsboth living and deceasedof the countrys longest running, multigenerational heart study.
-
Granite School District
September 11, 2024
•
[ ransomware, malware, education ]
Granite School District discloses that a cyber attack affected all the students' records. The Rhysida ransomware gang claims responsibility for the attack.
-
Center for Vein Restoration
October 6, 2024
•
[ hack, healthcare ]
Vein care provider Center for Vein Restoration notifies over 446,000 individuals that their personal, medical, and financial information was compromised in a recent cyberattack.
-
Electrica Group
December 9, 2024
•
[ ransomware, malware, energy ]
Electrica Group, a key player in the Romanian electricity distribution and supply market, is investigating a ransomware attack.
-
Ukrainian Defense Companies and Security and Defense Forces
December 7, 2024
•
[ social, phishing, government ]
The Computer Emergency Response Team of Ukraine (CERT-UA) discover a series of phishing emails targeting Ukrainian defense companies and security and defense forces with a fake NATO standards conference. Some recipients opened the phishing emails execiting the malicious RAR attachments.
-
Port of Rijeka
November 30, 2024
•
[ ransomware, financial, leak ]
The 8Base ransomware group hits Croatias Port of Rijeka, stealing sensitive data, including contracts and accounting info.
-
ITO EN North America
December 6, 2024
•
[ ransomware, malware, manufacturing ]
The Japanese corporation Ito En confirms that its U.S. subsidiary was hit with ransomware. The company is the largest producer of green tea in Japan and has subsidiaries in the U.S., Australia, China and Indonesia.
-
Kirill Parubets
December 5, 2024
Researchers at Citizen Lab reveal that after Kirill Parubets, a Russian programmer, was detained by Russia's Federal Security Service (FSB) for fifteen days and his phone confiscated, it was discovered that a new spyware, derived from Monokle, was secretly installed on his device upon its return.
