-
Finastra
November 7, 2024
Finastra confirms it warned customers of a cybersecurity incident after a threat actor begins selling allegedly stolen data on a hacking forum after using compromised credentials to access one of Finastra's Secure File Transfer Platform (SFTP) systems.
-
iLearningEngines
November 18, 2024
•
[ financial, hack, technology ]
iLearningEngines, an artificial intelligence company, says that a threat actor breached its network and stole a $250,000 wire payment.
-
35 organizations worldwide
November 18, 2024
•
[ ransomware, malware ]
The Akira ransomware-as-a-service gang publishes a record number (35) of new victims to its darknet leak site in a single day.
-
Thala
November 15, 2024
•
[ financial, misconfiguration, finance ]
Thala reveals it had suffered a security breach due to an isolated vulnerability related to its v1 farming contracts, which allowed the attacker to withdraw liquidity tokens. The company is able to recover $25.5 million of liquidity pool tokens
-
Manufacturing industry in Pakistan
November 16, 2024
•
[ espionage, malware, manufacturing ]
Researchers at Cyble discover a campaign linked to the known APT group DONOT, targeting the manufacturing industry that supports the countrys maritime and defense sectors.
-
CyberHaven
December 24, 2024
•
[ hack, malware, technology ]
Data-loss prevention startup Cyberhaven says threat actors published a malicious update to its Chrome extension that was capable of stealing customer passwords and session tokens.
-
Mi Argentina
December 25, 2024
•
[ hack, government ]
The Mi Argentina site and the SUBE card app, two of the governments most important digital platforms, suffer a cyber attack.
-
Undisclosed Organization(s)
December 24, 2024
Researchers at Northwave reveal that UNC5325, a suspected Chinese threat actor, is exploiting CVE-2024-9474, a vulnerability in Palo Alto firewalls, to install custom malware backdoor for espionage.
-
Undisclosed Malaysian educational institution
December 19, 2024
•
[ financial, malware, education ]
Researchers from Trend Micro discover a Python-Based NodeStealer version targeting Facebook Ads Manager.
-
Fondo Genesis (MetLife)
December 31, 2024
•
[ ransomware, malware, finance ]
The ransomware group RansomHub claims responsibility for a breach of MetLife's operations in Latin America. MetLife denies the allegations, acknowledging a separate cyber incident involving Fondo Genesis, a subsidiary operating solely in Ecuador. Claims to have exfiltrated 1TB of data.
-
Office of Foreign Assets Control
December 30, 2024
Chinese state-backed threat actors breach the Office of Foreign Assets Control (OFAC), a Treasury Department office that administers and enforces trade and economic sanctions programs, exploiting a vulnerability in a BeyondTrust Remote Support SaaS instance.
-
X account of Animoca Brands co-founder Yat Siu
December 26, 2024
A threat actor compromises the X account of Animoca Brands co-founder Yat Siu, using it to promote a fraudulent token.
-
ZAGG Inc.
October 26, 2024
ZAGG informs customers that their credit card data has been exposed to unauthorized individuals after hackers compromised a third-party application provided by the company's e-commerce provider, BigCommerce.
-
ArdyssLife
December 24, 2024
•
[ hack, manufacturing ]
The threat actor known as 0mid16B claims to have successfully attacked Ardyss[.]com and ArdyssLife[.]com, stealin 596 GB of data from United States ArdyssLife[.]com and Ardyss[.]com server network.
-
Allendale Long-Term Care Home
June 1, 2024
A cybersecurity incident involving third-party software at Allendale Long-Term Care Home in Milton exposes personal electronic health records from 2005 to this summer.
-
General Dynamics
October 10, 2024
•
[ social, phishing, manufacturing ]
Aerospace and defense giant General Dynamics says threat actors compromised dozens of employee benefits accounts after a successful phishing campaign targeting its personnel.
-
Boone County School District
December 19, 2024
•
[ social, phishing, education ]
Personal data from current and former students in Boone County School District are compromised in a phishing scheme.
-
"Tony" (undisclosed crypto investor)
December 18, 2024
•
[ social, phishing, finance ]
A scammer impersonating Google manages to phish 45 bitcoins approximately $4,725,000 at todays value from Tony, a 42-year-old professional from northern California.
-
Military personnel in Ukraine
December 18, 2024
•
[ social, malware, government ]
The Computer Emergency Response Team of Ukraine (CERT-UA) discloses that a threat actor tracked as UAC-0125 is leveraging Cloudflare Workers to trick military personnel in the country into downloading malware disguised as Army+, a mobile app that was introduced by the Ministry of Defence back in August 2024 in an effort to make the armed forces go paperless.
-
Crypto Users
February 1, 2024
•
[ financial, malware, finance ]
The threat actors behind the 2022 LastPass breach were able to steal an estimated $5.36 million in crypto assets from over 40 wallet addresses. The wave of attacks is said to have originated from the 2022 incident in the password manager service LastPass.
