NEC
January 30, 2020
•[ leak, malware, manufacturing ]
NEC confirms to have been hit with a cyberattack since 2018 that resulted in unauthorized access to its internal network and the exposure of 28,000 files.
Hassan Sarbakhshian
January 30, 2020
•[ espionage, malware, government ]
The Iranian state-backed threat actor Charming Kitten impersonated prominent journalists and sent targets fake interview requests in order to steal their credentials and send them malware. Among the victims is Hassan Sarbakhshian, an Iranian photojournalist who received a fake message from Farnaz Fassihi, an Iranian-American journalist.
City of Potsdam
January 24, 2020
•[ ransomware, malware, government ]
The City of Potsdam severs the administration servers' Internet connection following a ransomware attack carried out exploiting the CVE-2019-1978 vulnerability.
Dundee and Angus College
January 31, 2020
•[ ransomware, malware, education ]
Dundee and Angus College is apparently hit with a ransomware attack.
Undisclosed Canadian insurance company
January 30, 2020
•[ ransomware, malware, finance ]
A Canadian insurance company paid nearly $1 million USD (about $1.3 million CAD) following a ransomware attack.
Electronic Warfare Associates (EWA)
January 29, 2020
•[ ransomware, malware, manufacturing ]
Electronic Warfare Associates (EWA), a 40-year-old electronics company and a well-known US government contractor, is hit with the Ryuk ransomware.
Brandywine Urology Consultants
January 25, 2020
•[ ransomware, malware, healthcare ]
Brandywine Urology Consultants notify about a ransomware attack. The attack occurred on January 25, and the practice became aware of it on January 27.
TVEyes
January 31, 2020
•[ ransomware, malware, technology ]
TVEyes, a broadcast television search engine used by political campaigns to monitor opponents and track ads, is hit with a ransomware attack.
City of Racine
January 31, 2020
•[ ransomware, malware, government ]
The city of Racine is hit with a ransomware attack that knocks most of its non-emergency computer services offline.
Bouygues Construction
January 31, 2020
•[ ransomware, malware, manufacturing ]
French construction giant Bouygues Construction shut down their computer network to avoid having all of their data encrypted by the Maze Ransomware.
Personal Touch Home Care of Greater Portsmouth.
January 28, 2020
•[ ransomware, malware, healthcare ]
Personal Touch Home Care of Greater Portsmouth notifies a Maze ransomware attack occurred on December 1, 2019.
Laurentian Bank
January 28, 2020
•[ financial, hack, malware ]
Police investigate after thieves hack three banking machines in the greater Montreal area, making off with an estimated $55,000.
Tampa Bay Times
January 24, 2020
•[ ransomware, malware ]
The Tampa Bay Times suffers a Ryuk ransomware attack.
Hong Kong Universities
January 31, 2020
•[ education, hack, malware ]
Researchers from ESET discover a new campaign of the Winnti group targeting some Hong Kong universities via the ShadowPad backdoor.
Crossroads Technologies
January 21, 2020
•[ ransomware, malware, technology ]
Crossroads Technologies is hit with a Maze ransomware attack.
Sunset Cardiology
January 17, 2020
•[ ransomware, malware, healthcare ]
Sunset Cardiology is hit with a Maze ransomware attack.
Rudolf and Stephanie Hospital in Beneov
January 16, 2020
•[ ransomware, malware, healthcare ]
The Rudolf and Stephanie Hospital in Beneov is hit with a Ryuk ransomware attack.
Company in the medical tech sector
January 13, 2020
•[ hack, malware, manufacturing ]
Researchers from Guardicore reveal the details of an attack targeting a company in the medical tech sector via a malware hiding its modules in WAV audio files and spreading to vulnerable Windows 7 machines on the network via EternalBlue.
Website collecting donations for the victims of the Australia bushfires
January 10, 2020
•[ financial, malware, healthcare ]
Researchers from Malwarebytes discover that attackers compromised a website collecting donations for the victims of the Australia bushfires and injected ATMZOW, a malicious script that steals the payment information of the donors.
Albany International Airport
January 9, 2020
•[ ransomware, malware ]
Albany International Airport's staff announces that the New York airport's administrative servers were hit by Sodinokibi Ransomware following a cyberattack that took place over Christmas.