Canderel Management
November 28, 2023
•[ ransomware, leak, malware ]
The Play ransomware gang adds Canderel Management to their leak site.
Noble Mountain Tree Farm
November 28, 2023
•[ ransomware, leak, malware ]
The Play ransomware gang adds Noble Mountain Tree Farm to their leak site.
American Insulated Glass
November 28, 2023
•[ ransomware, leak, malware ]
The Play ransomware gang adds American Insulated Glass to their leak site.
DePauw University
November 27, 2023
•[ ransomware, malware, education ]
DePauw University warns students that their personal information may have been accessed by hackers who attacked the school. The Black Suit ransomware gang says it was behind the attack, claiming to have stolen 214 GB of data.
Granger Medical Clinic
November 25, 2023
•[ ransomware, malware, healthcare ]
The NoEscape ransomware group adds Granger Medical Clinic to their leak site, claiming to be in possession of more than than 35 GB sensitive data.
China Energy Engineering Corporation
November 25, 2023
•[ ransomware, malware, energy ]
The Rhysida ransomware group claims to have hacked the Chinese state-owned energy conglomerate China Energy Engineering Corporation.
Undisclosed franchise partner
December 7, 2023
•[ ransomware, malware, retail ]
Billion-dollar shoe seller Aldo says that a recent claim by the notorious LockBit ransomware gang was related to one of the company's franchise partners.
Austal USA
December 6, 2023
•[ ransomware, leak, malware ]
Austal USA, a shipbuilding company and a contractor for the U.S. Department of Defense (DoD) and the Department of Homeland Security (DHS) confirms it suffered a cyberattack and is currently investigating the impact of the incident, after the Hunters International ransomware and data extortion group claimed to have breached Austal USA and leaked some information as proof of the intrusion.
Groveport Madison Schools
December 5, 2023
•[ ransomware, malware, education ]
The Groveport Madison Schools is hit with a BlackSuit ransomware attack.
Three organizations in South Korea and abroad
December 5, 2023
•[ ransomware, malware, energy ]
Separately, the Seoul Metropolitan Police investigators discover that the group extorted three ransomware victims in South Korea and abroad for about $357,000 worth of Bitcoin.
Hermon School Department
December 4, 2023
•[ ransomware, malware, education ]
The Hermon School Department suffers a ransomware attack after the threat actors exploit the CVE-2023-46604 Apache ActiveMQ vulnerability,
St. Landry Parish Schools
December 1, 2023
•[ ransomware, malware, education ]
The St. Landry Parish Schools district is hit with a ransomware attack.
Telecommunications companies in Sudan
November 30, 2023
•[ espionage, malware, technology ]
Researchers from Broadcom/Symantec discover a campaign carried on by the cyber-espionage group Seedworm, linked to Iran's intelligence service, targeting telecommunications companies in Egypt, Sudan and Tanzania via the MuddyC2Go framework and a custom keylogger.
Trellance
November 30, 2023
•[ ransomware, malware, technology ]
About 60 credit unions are dealing with outages due to a ransomware attack on Trellance, a widely-used technology provider.
High-profile individuals working on Middle Eastern affairs at universities and research organizations in Belgium, France, Gaza, Israel, the United Kingdom, and the United States
November 30, 2023
•[ espionage, malware, phishing ]
Researchers from Microsoft discover a new campaign from the Iranian-backed Mint Sandstom state hackers, targeting high-profile employees of research organizations and universities across Europe and the United States in spearphishing attacks pushing a new backdoor malware known as MediaPl.
North Texas Municipal Water District
November 28, 2023
•[ ransomware, malware, government ]
The North Texas Municipal Water District (NTMWD) is dealing with a cybersecurity incident that caused operational issues. The Daixin ransomware gang says it was behind the attack, adding NTMWD to its list of victims and claiming to have stolen more than 33,000 files containing customer information.
Yanfeng Automotive Interiors
November 28, 2023
•[ ransomware, malware, manufacturing ]
The Qilin ransomware group claims responsibility for a cyber attack on Yanfeng Automotive Interiors (Yanfeng), one of the world's largest automotive parts suppliers.
Crystal Lake Health Centers
November 25, 2023
•[ ransomware, leak, malware ]
The Hunters International ransomware gang adds Crystal Lake Health Centers to their leak site claiming to have exfiltrated 120 GB of data in total including patient information such as contact details, SSNs, and insurance data.
Holding Slovenske Elektrarne
November 25, 2023
•[ ransomware, malware, energy ]
Slovenian power company Holding Slovenske Elektrarne (HSE) suffers a ransomware attack that compromised its systems and encrypted files, yet the company says the incident did not disrupt electric power production. Finger is pointed to the Rhysida ransomware gang.
Ethyrial: Echoes of Yore
November 24, 2023
•[ ransomware, malware, technology ]
A ransomware attack on the "Ethyrial: Echoes of Yore" MMORPG published by the Gellyberry Studios, destroys 17,000 player accounts, deleting their in-game items and progress in the game.
