Nissan
May 12, 2017
•[ ransomware, malware, manufacturing ]
A threat actor used a tool called WannaCry to encrypt data in compromised networks, and intended to provide the victims with the decryption key only after a ransom had been paid. The threat actors used an exploit, called EternalBlue--first discovered by the U.S. National Security Agency--to propagate WannaCry in organizations using the Windows operating system. The attack shut down a Nissan factory in Sunderland.
Timr Municipality
May 12, 2017
•[ ransomware, malware, government ]
A threat actor used a tool called WannaCry to encrypt data in compromised networks, and intended to provide the victims with thedecryption key only after a ransom had been paid. The threat actors used an exploit, called EternalBlue--first discovered by the U.S. National Security Agency--to propagate WannaCry in organizations using the Windows operating system.
Waverly Health Center
June 14, 2017
•[ ransomware, malware, healthcare ]
Waverly Health Center is hit by ransomware, causing the medical facility to shut down their IT systems.
ATMs in India
June 14, 2017
•[ hack, malware, finance ]
ATMs in India are under attack via Rufus, a Chinese malware targeting cash machines running outdated Windows XP.
Andres Villarreal
May 17, 2017
•[ espionage, malware, government ]
The Mexican government is suspected of using NSO Group spyware to compromise the personal devices of journalists, lawyers, activists, scientists, politicians, and civil society organizations. One of the victims is Andres Villarreal, a journalist at R'o Doce and a colleague of Javier Valdez. Valdez was killed in May 2017 and was investigating organized crime in the state of Sinaloa.
Brooks Brothers
May 12, 2017
•[ financial, malware, retail ]
U.S. clothing company Brooks Brothers reveals that payment card information of certain customers was compromised at some of its retail locations in the United States and Puerto Rico over 11 months until March.
West Bengal State Electricity Distribution Company
May 12, 2017
•[ ransomware, malware, energy ]
A threat actor used a tool called WannaCry to encrypt data in compromised networks, and intended to provide the victims with the decryption key only after a ransom had been paid. The threat actors used an exploit, called EternalBlue--first discovered by the U.S. National Security Agency--to propagate WannaCry in organizations using the Windows operating system.
HandBrake
May 2, 2017
•[ hack, malware, technology ]
The popular DVD-ripping HandBrake app, is hacked to install a new variant of the Proton malware.
City of Newark
April 25, 2017
•[ ransomware, malware, government ]
A ransomware attack hits some municipal computers in New Jersey's most populous city, Newark.
Greenway Health
April 24, 2017
•[ ransomware, malware, healthcare ]
Greenway Health is the victim of a ransomware attack.
Gamestop
April 7, 2017
•[ hack, malware, retail ]
Video game giant GameStop Corp says it is investigating reports that hackers may have siphoned credit card and customer data from its website gamestop.com.
Unnamed Kazakh bank
April 4, 2017
•[ financial, malware, finance ]
Kaspersky reveals the details of ATMitch, a fileless malware used to steal cash from ATMs. The researchers have only tracked down two incidents where ATMitch was used. The second is in a Kazakh bank.
Bill Marczak
March 29, 2017
•[ espionage, malware, technology ]
A threat actor targeted Ethiopian dissidents for the purpose of espionage, using commercially available spyware sold by Cyberbit, an Israel-based company. Most notably, the actor targeted the Oromia Media Network and some individuals associated with it.
Mountain Home Water Department
March 14, 2017
•[ ransomware, malware, government ]
The servers of Mountain Home Water Department fall victim to a ransomware attack.
Aptos
March 1, 2017
•[ financial, malware, technology ]
Shoppers of 40 online stores have had their bank card numbers and addresses stolen by a malware infection at backend provider Aptos late last year.
U.S. Residents in 20 states
February 26, 2017
•[ financial, malware ]
According to federal court documents, Russian hackers operating in Colorado and 15 other states used data-mining viruses to steal thousands of credit card numbers from U.S. residents in 20 states and sold them on the darknet for more than $3.6 million.
Bingham County
February 17, 2017
•[ ransomware, malware, government ]
Hackers demand $25K-$30K after ransomware attack takes down Bingham County servers.
KCG Holdings
April 23, 2017
•[ insider, espionage, malware ]
The FBI arrests Zhengquan Zhang, a 31-year-old IT engineer, accused of installing malware on his employer's servers to steal proprietary source.
Inland Revenue Department
February 25, 2017
•[ ransomware, malware, government ]
Thousands of Inland Revenue files are locked up after New Zealand's tax department becomes the target of a Cryptolocker attack in November.
Apple
February 23, 2017
•[ hack, malware, technology ]
A mid-2016 security incident led to Apple purging its data centers of servers built by Supermicro, including returning recently purchased systems, after malware-infected firmware was reportedly detected in an internal development environment of Apple's technical infrastructure, which powers its web-based services and holds customer data.
