OSSEG Obra Social de Seguros
March 28, 2022
•[ ransomware, malware, healthcare ]
Vice Society encrypts network and threatens to leak data on their dark web portal.
North Carolina A&T State University
March 25, 2022
•[ ransomware, malware, education ]
North Carolina A&T State University is hit with an ALPHV Ransomware attack.
Partnership HealthPlan of California
March 24, 2022
•[ ransomware, malware, healthcare ]
Partnership HealthPlan of California is hit with a Hive ransomware attack.
Rostec
March 23, 2022
•[ espionage, malware, manufacturing ]
Multiple Chinese APT groups leveraged the Russia and Ukraine war as a lure for cyberespionage operations. The APT groups have been using sanctions-related baits to attack Russian defense institutes, part of the Rostec Corporation. The hackers used new tools, which have not previously been described: a sophisticated multi-layered loader and a backdoor dubbed SPINNER. These tools use advanced evasion and anti-analysis techniques such as multi-layer in-memory loaders and compiler-level obfuscations. The operation targeted defense research institutes in Russia and possibly also in Belarus. The purpose of the backdoor and the operation is likely to collect information from targets inside the high-tech Russian defense industry to support China in its technological advancement.
Saskatchewan Liquor and Gaming Authority
April 4, 2022
•[ ransomware, malware, government ]
RANSOM HOUSE criminal gang exploits data and encrypts systems. Data and ransom demands presented on "leak" site on dark web.
Russian state officers
March 31, 2022
•[ espionage, malware, government ]
Researchers from Secureworks discover a campaign carried out by the Mustang Panda group targeting Russian state officers with the PlugX remote access tool.
Russian Federal Air Transport Agency (Rosaviatsia)
March 26, 2022
•[ hack, malware, government ]
An attack on Russian Federal Air Transport Agency infrastructure has erased all documents, files, aircraft registration data and emails from the servers. About 65 terabytes of data was erased. No backup of these data exists due to lack of funds allocated by Russia's Ministry of Finance. The agency's official website (favt.ru) went also down.
Val Verde Regional Medical Center (VVRMC)
March 25, 2022
•[ ransomware, malware, healthcare ]
Val Verde Regional Medical Center (VVRMC) appears to have been the victim of a ransomware attack involving LockBit.
Scottish Association for Mental Health
March 20, 2022
•[ ransomware, malware, healthcare ]
The RansomEXX ransomware gand drops leaked data samples on their TOR site.
Tague Family Practice
March 17, 2022
•[ ransomware, malware, healthcare ]
Tague Family Practice falls victim of a LockBit ransomware attack.
Government Agencies of Ukraine
March 17, 2022
•[ espionage, malware, government ]
The Ukranian Ministry of Defense notified CERT-UA about the distribution of e-mails containing malicious files and targeting Ukrainian government and military entities. As a result of the attack, the victim's computer would be infected with SPECTR malware.
Viva Air
March 14, 2022
•[ ransomware, leak, malware ]
The RansomEXX ransomware gand drops leaked data samples on their TOR site.
Law Enforcement Health Benefits Inc. (LEHB)
March 14, 2022
•[ ransomware, malware, healthcare ]
Law Enforcement Health Benefits Inc. (LEHB) notifies plan members of a September 2021 ransomware attack that impacted over 85,000 individuals.
Rosneft Deutschland
March 12, 2022
•[ hack, malware, energy ]
The German Federal Office for Information Security (BSI) confirms that the local subsidiary of the Russian energy giant Rosneft has been hit by a cyberattack, after the Anonymous collective claims to have stolen 20 terabytes of data.
Telegram
March 18, 2022
•[ hack, leak, malware ]
IT Army of Ukraine claims to have conducted a hack and leak operation against a Russian social media application. The operation consisted of exploiting a vulnerability in the beta version of the software, and the subsequent infection of all beta testers with an updated malicious version of the application.
Undetermined
March 14, 2022
•[ hack, malware, finance ]
ESET researchers have uncovered yet another destructive data wiper that was used in attacks against a limited number of organizations in Ukraine. No code similarities to either HermeticWiper or IsaacWiper were identified. There's evidence to suggest that the threat actors behind CaddyWiper infiltrated the target's network before executing the wiper.
Elevate Services
March 14, 2022
•[ ransomware, malware, technology ]
Elevate Services, Inc. experienced what appears to have been a ransomware attack that leaked confidential information belonging to certain consumers.
Skyxe Saskatoon Airport
March 10, 2022
•[ ransomware, leak, malware ]
SNATCH executed exfiltration of data and ransomeware in targeted network. Data presented on dark web "leak site"
Scottish Association for Mental Health (SAMH)
March 18, 2022
•[ ransomware, malware, healthcare ]
Scottish Association for Mental Health (SAMH), a mental health charity, is hit with a RansomExx ransomware attack.
Cancer and Hematology Centers of Western Michigan
March 18, 2022
•[ ransomware, malware, healthcare ]
Cancer and Hematology Centers of Western Michigan falls victim to a ransomware attack that impacted 43,071 individuals
