Avanti Markets
July 8, 2017
•[ hack, malware, finance ]
Avanti Markets, a self-service payment kiosks vendors acknowledges to have suffered of breach of its internal networks in which hackers were able to push malicious software out to payment devices.
Cleveland Medical Associates
June 22, 2017
•[ ransomware, malware, healthcare ]
Cleveland Medical Associates reveals the details of a ransomware attack that happened on April 21, 2017.
Undetermined
June 27, 2017
•[ ransomware, malware, finance ]
Threat actors deploy a tool, called NotPetya, with the purpose of encrypting data on victims' machines and rendering it unusable. The malware was spread through tax software that companies and individuals require for filing taxes in Ukraine and spread globally.'Australia, Estonia,'Denmark, Lithuania, Ukraine, the United Kingdom, and the United States issued statements attributing NotPetya to Russian state-sponsored actors.
Airway Oxygen
June 22, 2017
•[ ransomware, malware, healthcare ]
Airway Oxygen notifies that a ransomware attack in mid-April resulted in the compromise of data belonging to 550,000 customers and employees.
Col. Richard Downie
June 20, 2017
•[ espionage, malware, government ]
A threat actor targeted individuals who were political critics and business rivals of Ricardo Martinelli, president of Panama between 2009 and 2014, for espionage purposes. The threat actor uses the Pegasus tool, created by the NSO Group. One of the victims is Col. Richard Downie (ret.), the former director of the Center for Hemispheric Studies at the National Defense University. He worked on the 2014 presidential campaign of Juan Carlos Navarro.
Nayana
June 19, 2017
•[ ransomware, malware, technology ]
A South Korean Web-hosting service provider, Nayana, agrees to pay $1 million to a ransomware operation that encrypted data stored on 153 Linux servers and 3,400 customer websites via the Erebus ransomware.
Kmart
May 31, 2017
•[ financial, malware, retail ]
For the second time in less than three years, Kmart Stores suffers a malware-based security breach of its store credit card processing systems.
US Department of Defense
May 18, 2017
•[ espionage, malware, government ]
A Times report suggests that Russia may have used Twitter as a tool of international espionage: agents of the Russian government could have sent malware-laced Twitter messages to more than 10,000 employees of the US Department of Defense.
Pekin Community High School
April 30, 2017
•[ ransomware, malware, education ]
A ransomware attack takes down Pekin Community High School.
Ulster University
June 16, 2017
•[ ransomware, malware, education ]
The Ulster University is also hit by ransomware.
Ismael Borquez
May 26, 2017
•[ espionage, malware, government ]
The Mexican government is suspected of using NSO Group spyware to compromise the personal devices of journalists, lawyers, activists, scientists, politicians, and civil society organizations. One of the victims is Ismael Borquez, the director of R Doce and a colleague of Javier Valdez. Valdez was killed in May 2017 and was investigating organized crime in the state of Sinaloa.
Griselda Triana
May 25, 2017
•[ espionage, malware, government ]
The Mexican government is suspected of using NSO Group spyware to compromise the personal devices of journalists, lawyers, activists, scientists, politicians, and civil society organizations. One of the victims is Ismael Borquez, the director of R Doce and a colleague of Javier Valdez. Valdez was killed in May 2017 and was investigating organized crime in the state of Sinaloa.
Panic
May 18, 2017
•[ hack, malware, technology ]
Apple app maker Panic's CEO Steven Frank says he mistakenly downloaded the malware-laced DVD-ripping app HandBrake resulting in some of the company's source code being stolen.
Debenhams
May 5, 2017
•[ hack, malware, retail ]
Malware infects the backend systems used by British high street chain Debenhams, and steals 26,000 people's personal information in the process. The hack happened after compromising the systems at Ecomnova, the firm that runs the Debenhams Flowers business, for more than six weeks.
Virginia Sex Offender and Crimes Against Children Registry (SOR)
April 29, 2017
•[ hack, malware, government ]
A malware infection affecting servers belonging to the Virginia State Police (VSP) shuts down the department's email system, along with its ability to update the Virginia Sex Offender and Crimes Against Children Registry (SOR).
The Buckle Inc.
June 17, 2017
•[ financial, malware, retail ]
The Buckle Inc., a clothier that operates more than 450 stores in 44 U.S. states, discloses that its retail locations have been hit by malicious software designed to steal customer credit card data.
University College London
June 15, 2017
•[ ransomware, malware, education ]
University College London is hit by a "major" ransomware attack which brings down its shared drives and student management system. The attack also leads to a number of hospital trusts suspending their email servers as a precautionary measure, in an attempt to prevent the repetition of last month's damaging WannaCry epidemic.
Unnamed military contractor
May 15, 2017
•[ espionage, malware, government ]
TrapX reveals to have repelled an attack against an unnamed military contractor carried on by Iranian hackers using a Russian Toolset.
Russian Central Bank
May 12, 2017
•[ ransomware, malware, finance ]
A threat actor used a tool called WannaCry to encrypt data in compromised networks, and intended to provide the victims with the decryption key only after a ransom had been paid. The threat actors used an exploit, called EternalBlue--first discovered by the U.S. National Security Agency--to propagate WannaCry in organizations using the Windows operating system. The Russian Central Bank detected an attack on its systems, but was able to thwart it.
Renault
May 12, 2017
•[ ransomware, malware, manufacturing ]
A threat actor used a tool called WannaCry to encrypt data in compromised networks, and intended to provide the victims with the decryption key only after a ransom had been paid. The threat actors used an exploit, called EternalBlue--first discovered by the U.S. National Security Agency--to propagate WannaCry in organizations using the Windows operating system. The attack shut down Renault operations in several countries.
