CoinGecko’s X (formerly Twitter) account
January 10, 2024
•[ finance, phishing, hack ]
Cryptocurrency data aggregator CoinGeckos X (formerly Twitter) account is briefly compromised to promote a crypto scam.
Bill Lou
January 5, 2024
•[ social, phishing, finance ]
Bill Lou, co-founder of Nest Wallet, a cryptocurrency wallet startup, loses $125,000 to a crypto scam.
X account of nonprofit consortium ‘The Green Grid'
January 3, 2024
•[ hack, phishing, healthcare ]
The X (formerly Twitter) account of nonprofit consortium The Green Grid' is hijacked to promote a cryptocurrency scam.
Game Freak
January 1, 2024
•[ hack, phishing ]
hacked (phishing)
Radioactive Waste Management
December 31, 2023
•[ social, phishing, government ]
Threat actors try to break into Radioactive Waste Management (RWM) using LinkedIn lures.
Mountain Dermatology Specialists
December 28, 2023
•[ hack, phishing, healthcare ]
Mountain Dermatology Specialists reports an email account breach that was detected on October 26, 2023.
Lake County Health Department
December 20, 2023
•[ hack, phishing, healthcare ]
Lake County Health Department investigates a security incident involving unauthorized access to an employee's email account.
Talus Pay
December 14, 2023
•[ hack, phishing, finance ]
AMCP Payments Intermediate Company d/b/a Talus Pay files a notice of data breach after discovering that an unauthorized party had gained access to an employee email account.
High-profile individuals working on Middle Eastern affairs at universities and research organizations in Belgium, France, Gaza, Israel, the United Kingdom, and the United States
November 30, 2023
•[ espionage, malware, phishing ]
Researchers from Microsoft discover a new campaign from the Iranian-backed Mint Sandstom state hackers, targeting high-profile employees of research organizations and universities across Europe and the United States in spearphishing attacks pushing a new backdoor malware known as MediaPl.
Tax Favored Benefits
November 30, 2023
•[ hack, phishing, finance ]
Tax Favored Benefits (TFB) files a notice of data breach after discovering that an unauthorized party had gained access to an employees email account.
Washington National Insurance Company
November 29, 2023
•[ social, phishing, finance ]
Washington National Insurance Company files a notice of data breach after discovering that a senior officer was targeted in a SIM-swapping attack.
Government Agencies in Ukraine
November 12, 2023
•[ hack, phishing, government ]
Researchers from the Ukraine Computer Emergency Response Team (CERT-UA) discover a new campaign distributing the REMCOS rat via phishing letters to their targets, disguising them as official requests from Ukraine's security service (SBU).
Hilb Group Operating Company
November 2, 2023
•[ hack, phishing, finance ]
The Hilb Group Operating Company (Hilb) files a notice of data breach after learning that an unauthorized party was able to access certain employee email accounts.
Advarra
November 1, 2023
•[ ransomware, phishing, healthcare ]
An Advarra employee falls victim of a compromise of their phone number and the threat actors from ALPHV/BlackCat claim to have acquired over 120GB+ of confidential data belonging to customers, patients, and current and former employees.
South Korean Officials and Journalists
October 31, 2023
•[ financial, phishing, finance ]
The North Korean threat actors from Kimsuky are accused of impersonating South Korean officials and journalists in a plot to steal cryptocurrency for the North Korean regime.
Bitfinex
October 31, 2023
•[ social, phishing, finance ]
Bitfinex announces to have resolved a minor information security incident after a small portion of the customer support boards was accessed by an individual or group, through the phishing of a customer support agent.
CoinFlip
October 20, 2023
•[ social, phishing, technology ]
GPD Holdings d/b/a CoinFlip files a notice of data breach after discovering that a CoinFlip employee's email account was compromised.
Wishbone Medical
October 13, 2023
•[ hack, phishing, healthcare ]
Wishbone Medical files a notice of data breach after discovering that certain employee email accounts were subject to unauthorized access.
Galxe
October 6, 2023
•[ hack, phishing, technology ]
Web3 credentials and rewards platform Galxe suffers a DNS attack, refunding 980 victims with a total cost for the company a little over $396,000 .
Royal Women's Hospital
October 5, 2023
•[ hack, phishing, healthcare ]
The personal details of patients at Royal Women's Hospital in Melbourne are compromised after cybercriminals hack a staff member's private email.