Undetermined
March 30, 2022
•[ hack, finance ]
Unknown actors compromised the network of a major media organization.
Morgan Stanley Wealth Management
March 18, 2022
•[ social, phishing, finance ]
Morgan Stanley Wealth Management, the wealth and asset management division of Morgan Stanley, says some of its customers had their accounts compromised in voice phishing (vishing) social engineering attacks.
Undetermined
March 14, 2022
•[ hack, malware, finance ]
ESET researchers have uncovered yet another destructive data wiper that was used in attacks against a limited number of organizations in Ukraine. No code similarities to either HermeticWiper or IsaacWiper were identified. There's evidence to suggest that the threat actors behind CaddyWiper infiltrated the target's network before executing the wiper.
Undetermined
March 10, 2022
•[ espionage, finance ]
A suspected Russian threat actor compromised an institution in Ukraine that was featured in false Russian weapons conspiracies in the past.
Lakeview Loan Servicing
March 18, 2022
•[ hack, finance ]
Lakeview Loan Servicing says it had uncovered "a security incident involving unauthorized access to the file servers.
Undetermined
March 15, 2022
•[ hack, finance ]
The Anonymous collective claims to have hacked more than 1300 network cameras from Russia/Belarus
Undetermined
March 13, 2022
•[ espionage, finance ]
A suspected Russian nation state actor stole data from a nuclear safety organization. "EnergeticBear" compromised this entity in December 2021 and stole data from it from December through mid-March.
Technology Management Resources (TMR)
March 4, 2022
•[ hack, finance ]
Technology Management Resources, a payment processor, discloses to have been hit by a breach when discovering unusual activity with a user account. Multiple entities are affected.
Undetermined
March 1, 2022
•[ hack, malware, finance ]
Suspected Russian threat actor launched "DesertBlade" malware against a major broadcasting company on March 1, the same day that the Russian military announced its intention to destroy "disinformation" targets in Ukraine and directed a missile strike against a TV tower in Kyiv.
Undetermined
March 3, 2022
•[ ransomware, malware, finance ]
SNATCH executed exfiltration of data and ransomeware in targeted network. Data presented on dark web "leak site"
Undetermined
February 28, 2022
•[ hack, malware, finance ]
Hackers allegedly connected to the Iranian government have been accused of targeting diamond companies in South Africa, Israel and Hong Kong with a wiper malware built to destroy data.
Moscow Exchange
February 28, 2022
•[ hack, ddos, finance ]
The Ukraine IT Army claims to have taken down the website of the Moscow Exchange.
ABI (Associazione Bancaria Italiana)
February 28, 2022
•[ ransomware, malware, finance ]
The ransomware group Vice Society claims responsibility for an attack to ABI, the Italian Bank Association, and publishes some employees data.
Sberbank
February 27, 2022
•[ leak, finance ]
Anonymous claimed to have exfiltrated and leaked a database of a Russian bank "in support of the Ukrainian people." The data was uploaded on February 27.
Undetermined
February 24, 2022
•[ espionage, phishing, finance ]
A phishing campaign was observed using a possibly compromised Ukrainian armed service member's email account, to target European government personnel involved in managing the logistics of refugees fleeing Ukraine. Researchers indicate there was a clear preference for targeting individuals with responsibilities related to transportation, financial and budget allocation, administration, and population movement within Europe.
Flurry Finance
February 22, 2022
•[ financial, hack, finance ]
Hacker steals around $295,000 from decentralized platform Flurry Finance.
AON
February 25, 2022
•[ hack, finance ]
Professional services and insurance firm AON suffers a cyberattack.
Undetermined
February 23, 2022
•[ ransomware, malware, finance ]
UAC-0082 (a.k.a. Sandworm) staged a file encryptor on the network of an agricultural firm, holding this entity at risk for future destruction. Microsoft assesses that this was likely targeting grain production, a major export commodity in Ukraine's economy.
Undetermined
February 26, 2022
•[ hack, misconfiguration, finance ]
A number of Russia's largest domestic news websites were attacked and information replaced with a "tombstone" for the war dead. Many of the sites were then taken offline.
Undetermined
February 25, 2022
•[ social, phishing, finance ]
UNC1151 has targeted Employees of a Kazakhstani education institution. Mass phishing emails have recently been observed; after the account is compromised, the threat actiors, by the IMAP protocol, get access to all the messages. Subsequently, the attacks leverage the contact information stored in the victim's address book to propagate the phishing messages to other targets.
