AvidXchange
May 3, 2023
•[ ransomware, malware, finance ]
The RansomHouse ransomware gang publishes a trove of sensitive data stolen from payment software company AvidXchange after the company fell victim to ransomware for the second time this year.
Northwest Health La Porte
May 2, 2023
•[ ransomware, malware, healthcare ]
Northwest Health La Porte confirms that the protected health information of 10,256 patients was compromised in the Clop ransomware group's series of attacks exploiting the zero-day vulnerability in Fortra's GoAnywhere file transfer.
Mission Community Hospital
May 1, 2023
•[ ransomware, leak, malware ]
Mission Community Hospital is added to the list of the victims of the RansomHouse group, which claimed to have stolen 2.5 TB of data, including a large amount of patient data exploiting vulnerabilities on Paragon and Cisco.
Bluefield University
April 30, 2023
•[ ransomware, malware, education ]
The Bluefield University is hit with an Avos ransomware attack. Few days later the ransomware gang hijacks the University's emergency broadcast system, "RamAlert," to send students and staff SMS texts and email alerts that their data was stolen and would soon be released.
Penncrest School District
April 29, 2023
•[ ransomware, malware, healthcare ]
Penncrest School District announces a ransomware attack over the weekend that disrupted their systems.
Hardenhuish School
April 27, 2023
•[ ransomware, malware, education ]
Hardenhuish School, a secondary school in the UK, confirms it has been the victim of a ransomware attack which has affected its IT network.
Yellow Pages Canada
April 24, 2023
•[ ransomware, malware, technology ]
Yellow Pages Canada, a Canadian directory publisher confirms to have been hit by a cyber attack. The Black Basta ransomware and extortion gang claims responsibility for the attack and posts sensitive documents and data over the weekend.
AECO
May 3, 2023
•[ ransomware, malware, manufacturing ]
The BlackCat ransomware gang lists the Italian sensor manufacturing company AECO in its leak site.
Barracuda
May 1, 2023
•[ hack, malware, technology ]
Barracuda, a company known for its email and network security solutions, warns customers that some of their Email Security Gateway (ESG) appliances were breached last week by targeting CVE-2023-2868, a now-patched zero-day vulnerability.
Truman State University
April 26, 2023
•[ hack, malware, education ]
Truman State University in Kirksville, Missouri says it is in the process of recovering from a "cybersecurity virus attack" that forced it to shut down the campus network and order all school-issued devices to be turned off.
Keystone SMILES Community Learning Center
April 26, 2023
•[ ransomware, malware, healthcare ]
The LockBit ransomware gang apologizes for breaching Keystone SMILES Community Learning Center, nonprofit preschool organization.
City of Lowell
April 25, 2023
•[ ransomware, malware, government ]
The City of Lowell announces to have been hit by a ransomware attack. The Play ransomware gang claims responsibility for the attack.
Fullerton India
April 24, 2023
•[ ransomware, malware, finance ]
The LockBit ransomware claims to have hit Indian non-bank lender Fullerton India and threatens to dump more than 600 gigabytes of financial data unless it receives a $3 million extortion payment.
Clarke County Hospital
April 24, 2023
•[ ransomware, malware, healthcare ]
The Clarke County Hospital is added to the list of the Royal ransomware victims.
Albany ENT & Allergy Services
April 23, 2023
•[ ransomware, malware, healthcare ]
Both BianLian and RansomHouse ransomware gangs list Albany ENT & Allergy Services in their leak site.
Multiplan
April 22, 2023
•[ ransomware, malware, finance ]
The Cl0p ransomware gang claims to have hacked Multiplan, allegedly exfiltrated exploiting the CVE-2023-0669 Fortra GoAnywhere MFT Vulnerability.
MedExHCO
April 22, 2023
•[ ransomware, malware, finance ]
The Cl0p ransomware gang claims to have hacked MedExHCO, allegedly exfiltrated exploiting the CVE-2023-0669 Fortra GoAnywhere MFT Vulnerability.
ITx
April 22, 2023
•[ ransomware, malware, finance ]
The Cl0p ransomware gang claims to have hacked ITx, a revenue management company, allegedly exfiltrated exploiting the CVE-2023-0669 Fortra GoAnywhere MFT Vulnerability.
3CX
April 20, 2023
•[ espionage, malware, technology ]
Researchers from Mandiant reveal that the 3CX supply chain attack was caused by another supply chain compromise where suspected North Korean attackers breached the site of stock trading automation company Trading Technologies to push trojanized software builds.
PaperCut
April 19, 2023
•[ ransomware, malware, technology ]
Print management software developer PaperCut warns customers to update their software immediately, as hackers are actively exploiting two flaws, ZDI-CAN-18987 / PO-1216 and ZDI-CAN-19226 / PO-1219, to gain access to vulnerable servers. Later the attacks are attributed to the Cl0p ransomware gang.
