Siemens
November 27, 2017
•[ espionage, hack, manufacturing ]
The U.S. Department of Justice indicted three members of Boyusec, a China-based internet security firm, on charges including conspiring to commit computer fraud and abuse and conspiring to commit trade-secret theft. The victims included Moody's Analytics, Siemens, and Trimble. Though not mentioned in the indictment, Boyusec is believed to work on behalf of China's Ministry of State Security and be a front for APT3.
Loake Shoes
November 22, 2017
•[ hack, retail ]
Loake Shoes warns its customers to have been the victim of a cyber attack. Apparently the email server has been compromised even if no other details are disclosed.
Osaka University
December 13, 2017
•[ hack, education ]
Osaka University says that personal data of around 80,000 students, graduates, staff, former workers and others may have been stolen by hackers.
Jeffree Star
December 10, 2017
•[ hack, leak, insider ]
Jeffree Star is the victim of a data hack, after a member of staff at cosmetics store Sephora allegedly hacks into her account and leaks sensitive information about his spending habits.
North Korean Radio station on 6400kHz
November 9, 2017
•[ hack, government ]
A North Korean radio station is reportedly hijacked by an unknown hacker to play the 1980's hit song "The Final Countdown". The short-wave radio station, 6400kHz is known to be used by Pyongyang to transmit secret codes.
Electroneum
November 6, 2017
•[ hack, ddos, finance ]
UK cryptocurrency startup Electroneum is the victim of a DDoS attack immediately after having raised $40m ( 30m).
blog
October 26, 2017
•[ hack, misconfiguration, technology ]
Two hackers going by the online handle of "n3tr1x" and "str0ng" deface the official blog (blog.jquery.com) of jQuery.
Microsoft
October 17, 2017
•[ hack, technology ]
According to five former employees, Microsoft Corp's secret internal database for tracking bugs in its own software was broken into by a highly sophisticated hacking group more than four years ago.
SchoolDesk
November 6, 2017
•[ hack, misconfiguration, education ]
Hackers from Team System Dz deface hundreds of websites across the US to post pro-ISIS messages, images of Saddam Hussein and a recruitment video. SchoolDesk, the Atlanta, Georgia-based web hosting company servicing these sites, confirmed the attack.
Aviva
October 25, 2017
•[ hack, misconfiguration, finance ]
According to the security group RedLock, a group of hackers managed to breach Amazon Web Services belonging to two companies on the Amazon Cloud: Aviva and Gemalto. The breach was due to poor password policy and aimed to use the resources to mine cryptocurrency.
Politifact
October 13, 2017
•[ hack, malware, technology ]
Politifact, the Pulitzer Prize-winning website devoted to checking the factual accuracy of US politicians' words, appears to have been hacked so that it secretly mines cryptocurrency in visitors' browsers via CoinHive.
NIC Asia Bank
November 4, 2017
•[ financial, hack, malware ]
NIC Asia Bank, based in Kathmandu, suffers a hack on its computer networks, which abused the SWIFT financial messaging system to help steal approximately $4.4m
Crunchyroll
November 4, 2017
•[ hack, malware, technology ]
Crunchyroll.com is the victim of a DNS hijack attack, so the visitors are redirected to a malicious website designed to infect them with malware.
Hetzner
November 1, 2017
•[ hack, misconfiguration, technology ]
A key database operated by large South African data centre operator and website hosting service provider Hetzner is compromised, and the company advises clients to change their passwords immediately. Compromised data includes customer and bank account details.
Dell
October 24, 2017
•[ hack, malware, manufacturing ]
KrebsOnSecurity reveals that a web site set up by PC maker Dell Inc. to help customers recover from malicious software (DellBackupandRecoveryCloudStorage.com) may have been hijacked for a few weeks this summer.
Bithumb
October 16, 2017
•[ hack, finance ]
Local news publications and leading media outlets in South Korea reported that Bithumb, the world's largest cryptocurrency exchange by trading volume, suffered a security breach that affected 30,000 users on the trading platform.
Prince Albert Police homepage
November 8, 2017
•[ hack, government ]
Hackers from Team System Dz deface the Prince Albert Police homepage and leave the message "I love Islamic State".
Midland County
October 27, 2017
•[ hack, government ]
The Midland County District Attorney warns residents after their third-party payment system is hacked.
Coinhive
October 23, 2017
•[ hack, malware, technology ]
The DNS records for coinhive.com are manipulated to redirect requests for the coinhive.min.js to a third party server hosting a modified version of the JavaScript file with a hardcoded site key and letting the attacker "steal" hashes from users.
Telitec
October 21, 2017
•[ hack, ddos, technology ]
In name of #OpCatalunya the Anonymous take down several Spanish including the Constitutional Court.
