Hackmanac Cyber Alerts

🚨Cyberattack Alert ‼️ 🇵🇷Puerto Rico - Cooperativa Naguabeña RansomHub hacking group claims to have breached Cooperativa Naguabeña. Allegedly, 185 GB of data were exfiltrated, including customer service documents (contracts, correspondence, invoices), user data, and accounting information. Ransom deadline: 08th Nov 24.

🚨Data Breach Update ‼️ 🇯🇵Japan - Sharp Corporation (シャープ株式会社) Sharp's official online store, "COCORO STORE," and its food delivery service, "HEALSIO Deli," suffered a data breach due to unauthorized access, compromising personal data. Detected on July 22, 2024, the attack exploited a software vulnerability, leading to site tampering and exposing user information. Approximately 5,836 customers were affected, with 4,257 cases involving the exposure of sensitive credit card information (cardholder names, numbers, expiration dates, and security codes). An additional 1,376 users had personal data exposed without credit card details. Source: https://corporate.jp.sharp/info/notices/241030-a.html

🚨Cyberattack Alert ‼️ 🇦🇺Australia - Australian Nursing Home Foundation Abyss hacking group claims to have breached the Australian Nursing Home Foundation. Allegedly, 1.5 TB of data were exfiltrated. Ransom deadline: 05th Nov 24.

🚨Cyberattack Alert ‼️ 🇺🇸USA - BayMark Health Services RansomHub hacking group claims to have breached BayMark Health Services. Allegedly, 1.5 TB of data were exfiltrated. Ransom deadline: 04th Dec 24.

🚨Data Breach ‼️ 🇯🇵Japan - Karel Čapek The official online store of Karel Čapek Tea Shop experienced unauthorized access, resulting in the potential leakage of 103,289 customers' personal information and 58,407 credit card records. The breach was attributed to a vulnerability in the website’s system that allowed third-party access, leading to tampering with the payment application. The affected data spans registrations and transactions made from April 26, 2020, to May 21, 2024. The leaked information includes names, addresses, phone numbers, email addresses, login credentials, and complete credit card details. Source: https://karelcapek.jp/privacy/

🚨DDoS ‼️ 🇮🇱Israel - Shva On October 29, 2024, a denial-of-service (DoS) cyberattack targeted Shva, Israel's main provider of IT services for the banking sector, disrupting credit card transactions across various businesses. The attack began at 7 a.m. and led to issues in transaction approvals for companies connected to Shva's network. The disruption was resolved by 9:50 a.m., with regular service restored. Though the attacker was not officially identified, reports from Bizportal suggest that "Anonymous Sudan," a group allegedly linked to Iran, may be responsible, having previously attacked Israeli entities. More details: https://www.jns.org/cyberattack-causes-credit-card-transaction-issues-in-israel/

🚨CryptoMiner Malware ‼️ 🇯🇵Japan - Demaecan (株式会社出前館) On October 25, 2024, at approximately 8:00 PM, the delivery service “Demae-can” experienced a system outage due to high server load, leading to a temporary service suspension. Although the service was initially restored, another outage occurred on October 26 at 2:30 PM. This time, the disruption was traced to a cryptocurrency mining malware known as “RedTail.” After identifying and removing the malware, the system underwent additional checks to ensure security, which prolonged the recovery process. Source: https://corporate.demae-can.co.jp/pr/news/20241029_1830.html

🟧 #HackTuesday 🟧 Hack Tuesday: Week 23 - 29 October 2024 ⚠️214 cyberattacks across 33 countries ⚠️ ➡️The most active threat actors this week are RansomHub and Bashe (formerly APT73), each claiming responsibility for 16 attacks. ➡️The 🇺🇸USA is the most affected country, accounting for 35% of the victims, followed by 🇲🇽Mexico with 7% ➡️The Education sector is the most impacted, representing 13% of the claimed targets, followed by the Manufacturing with 12%. ➡️Overall, the claimed compromised data amounts to approximately 59.535 TB. ☣️The average ESIX® (Estimated Severity Index) is 4.7. Follow the link for list of referred victims: https://hackmanac.com/news/hack-tuesday-week-23-29-october-2024 #Hackmanac #HT #Cybersecurity

🚨Cyberattack Alert ‼️ 🇺🇸USA - Sage Automotive Interiors Fog hacking group claims to have breached Sage Automotive Interiors, a leading global supplier of specialty-designed, high-performance materials for the automotive industry. Allegedly, 76 GB of data, including customer contact information, internal financial information, employee contacts, NDAs, license agreements, and insurance documents, were exfiltrated.

🚨Cyberattack Alert ‼️ 🇷🇴Romania - District 5 City Hall RansomHub Ransomware Group Hits Bucharest’s District 5 City Hall and Demands $5 Million. On October 26, 2024, Bucharest’s District 5 City Hall reported a ransomware attack targeting its servers, with hackers demanding a ransom of USD 5 million. The attack disrupted services, including the telephone switchboard, and displayed a ransom message on the servers. Mayor Cristian Popescu Piedone refused to pay the ransom, instead opting to work with the Ministry of Research, Innovation, and Digitization, and the National Cyber Security Directorate to address the issue. Only the main headquarters was affected, leaving other offices unaffected.

🚨Cyberattack Alert ‼️ 🇷🇴Romania - District 5 City Hall RansomHub Ransomware Group Hits Bucharest’s District 5 City Hall and Demands $5 Million. On October 26, 2024, Bucharest’s District 5 City Hall reported a ransomware attack targeting its servers, with hackers demanding a ransom of USD 5 million. The attack disrupted services, including the telephone switchboard, and displayed a ransom message on the servers. Mayor Cristian Popescu Piedone refused to pay the ransom, instead opting to work with the Ministry of Research, Innovation, and Digitization, and the National Cyber Security Directorate to address the issue. Only the main headquarters was affected, leaving other offices unaffected.

🚨Cyberattack ‼️ 🇷🇴Romania - District 5 City Hall District 5 City Hall in Bucharest Hit by Ransomware; Hackers Demand $5 Million. More details: https://www.romania-insider.com/bucharest-district-city-hall-ransomware-attack-october-2024

🚨Cyberattack Alert ‼️ 🇮🇳India - Fortis Healthcare Kill Security hacking group claims to have breached Fortis Healthcare. Allegedly, exfiltrated data include names, dates of birth, addresses, patient IDs, contact numbers, financial statements, health records, medical prescriptions, CT scans, MRI images, ultrasound scans, and specific treatment notes. Ransom deadline: 05th Nov 24.

🚨Phishing Alert ‼️ 🇯🇵Japan -Nintendo has reported ongoing phishing attempts using fake emails that impersonate official addresses like no-reply@accounts.nintendo.com to promote unrelated services or companies. Recipients are urged to delete these emails and avoid clicking any links, as they may lead to phishing sites. Source: Nintendo https://support.nintendo.com/jp/information/2024/1029.html

🚨New ransomware group detected: PlayBoy Locker First victim listed: 🇩🇪German Chamber of Commerce and Industry (DIHK) Ransom deadline: 05th November 2024

🚨Italian officials have arrested four individuals, with an additional 60 under investigation, for an alleged conspiracy involving the unauthorized creation of private dossiers. 🚨 https://therecord.media/italy-arrests-illegal-dossiers-private-intelligence

🚨Teacher Dies of Heart Attack Following Threats from Cyber Scammers 🚨 A 58-year-old school teacher in Agra, Malti Verma, died from cardiac arrest shortly after receiving a series of threatening calls from cyber fraudsters posing as police officers. The scammers alleged that her daughter was involved in a sex scandal and threatened to release an obscene video unless a payment of Rs 1 lakh was made. The calls began on September 30, with about ten calls over 15 minutes, one showing a WhatsApp profile with a khaki uniform and a Pakistani code (+92). Despite reassurances from her family that it was a scam, Verma's health quickly deteriorated, leading to her death. More details: https://www.indiatoday.in/cities/agra/story/agra-teacher-scam-call-daughter-sex-racket-one-lakh-demand-dies-heart-attack-2610966-2024-10-04

🚨OPERATION MAGNUS On the 28th of October 2024 the Dutch National Police, working in close cooperation with the FBI and other partners of the international law enforcement task force Operation Magnus, disrupted operation of the Redline and Meta infostealers. Operation link: https://www.operation-magnus.com/ More news will be released tomorrow.

🚨Cyber Espionage 🚨 🇺🇸The Chinese cyberespionage group Salt Typhoon is said to have collected audio recordings of American calls. More details: https://www.washingtonpost.com/national-security/2024/10/27/chinese-hackers-cellphones-trump/

🚨Data Breach Alert ‼️ 🇮🇱Israel - AGAS The pro-Palestinian hacktivist group Handala claims to have hacked AGAS, a major provider of cloud services and cybersecurity in the occupied territories. Handala allegedly gained access to AGAS's main cluster, compromising all 74 servers and its main storage system. The attack reportedly resulted in the extraction of 18 TB of sensitive customer data and the complete wiping of all servers. The confirmation or denial of these claims has yet to be verified