Hackmanac Cyber Alerts

🚨Cyberattack Alert ‼️ 🇺🇸USA - Xtera Communications, Medusa Demands $390K Medusa ransomware group claims to have breached Xtera Communications. Ransom demand: $390,000. Ransom deadline: 05th Oct 24.

🚨Cyberattack Alert ‼️ 🇰🇷South Korea - Kumho Tire (formerly known as Samyang Tire) LockBit 3.0 ransomware group claims to have breached Kumho Tire. The group states: "Encrypted up on 09/07, since then the recovery progress has been 0.0%." Allegedly, exfiltrated data include finance, payroll, legal, email, IT, and chat records. Ransom deadline: 05th Oct 24.

Group-IB conducted an analysis of the ransomware gang DragonForce. "DragonForce ransomware group leveraging LockBit 3.0 & customized Conti v3 forks with advanced features" At Hackmanac, as of January 2024, we have recorded 74 claimed attacks carried out by this cybercriminal group. Full article: https://www.group-ib.com/blog/dragonforce-ransomware/?utmsource=twitter&utm_campaign=Dragonforce%20Ransomware&utmmedium=social

🔐 AI & Cyber Security: From Risks to Opportunities 🤖💻 As AI technology advances, so do cyber threats! 🚨 Cybercriminals are increasingly adopting AI to create sophisticated malware, launch targeted phishing campaigns, and exploit vulnerabilities. But there's good news: AI is also revolutionizing how we defend against these attacks! 🌐💪 🔑 Learn how AI is both a risk and a powerful tool for Cyber Security and discover the strategies organizations are using to stay ahead of emerging threats. 📲 Read the full article here: https://hackmanac.com/news/ai-and-cyber-security-from-risks-to-opportunities #CyberSecurity #AI #AIrisks #CyberRisks #DataProtection #ExpertInsights #Hackmanac #StayCyberSafe

🚨Data Breach Alert ‼️ 🇯🇵Japan - WeWork A potential data breach at WeWork Japan has been detected on a hacking forum. According to the post, all of the data compromised by the threat actor is up to September 2024 and includes source code, PDFs, CSVs, confidential files, and hardcoded credentials. The confirmation or denial of these claims has yet to be verified.

🚨Cyberattack Alert ‼️ 🇺🇸USA - The Menninger Clinic Black Suit ransomware group claims to have breached The Menninger Clinic.

🚨Cyberattack Alert ‼️ 🇺🇸USA - Germantown School District The hacking group RansomHub claims to have breached Germantown School District. Allegedly, 148 GB of data, including budget reports, employee, and student information, were exfiltrated. Ransom deadline: 30th Sept 24.

🚨Cyberattack Alert ‼️ 🇺🇸USA - Delaware Division of Libraries The hacking group RansomHub claims to have breached Delaware Division of Libraries. Allegedly, 56 GB of data, were exfiltrated. Ransom deadline: 30th Sept 24.

🚨Cyberattack Alert ‼️ 🇯🇵Japan - Ricoh Japan Co., Ltd. reported a ransomware attack on its subcontractor, Kuragyo Service Co., Ltd., resulting in the potential leakage of customer and employee information. The attack occurred on September 12, 2024, and was disclosed to Ricoh Japan on September 20, 2024. The affected data includes customer delivery details (company names, department names, addresses, phone numbers, and contact persons) involving 3,841 cases, as well as the potential exposure of personal information of 2,603 employees. Source: https://jp.ricoh.com/info/notice/2024/0924_1

🚨Data Leak Alert ‼️ Reportedly, A Breach At 911 Interpreter Led To The Exfiltration Of 12K Twilio Call Records Yesterday, on September 23, the threat actor known as "grep" claimed that an American call interpreter suffered a data breach leading to the exfiltration of 11,802 Twilio's call records, which were subsequently leaked for free on a hacking forum. Today, in another post, the cybercriminal revealed that Twilio's call records were stolen by breaching 911 Interpreter, a company that provides telephone, video, on-site, and written translation services. Once again, the data was leaked for free. The confirmation or denial of these claims has yet to be verified.

🚨Cyberattack Alert ‼️ 🇺🇸USA - College Hospital Costa Mesa LockBit ransomware group claims to have breached College Hospital Costa Mesa. Allegedly, 1.09 TB of data were exfiltrated. Ransom deadline: 15th Oct 24.

🟧 #HackTuesday 🟧 Hack Tuesday: Week 18 - 24 September 2024 ‼️ 85 victims by 25 hacking groups ‼️ The most active ransomware group this week is RansomHub, claiming responsibility for 16 attacks. The United States is the most affected country, accounting for 54% of the victims. The Manufacturing sector is the hardest hit, representing 24% of the claimed targets, followed by the Professional, Scientific, and Technical sectors at 15%. Overall, the claimed stolen data amounts to approximately 50 Terabytes. The average Cyber Risk Factor stands at 3.9. Follow the link for the full list of victims: https://hackmanac.com/news/hack-tuesday-week-18-24-september-2024 #Hackmanac #HT #Cybersecurity #ThreatMonitoring

🚨Cyberattacks Alert ‼️ 🇧🇷Brazil - Arcus Media hacking group listed four Brazilian victims on its data leak site: - Frigocenter - Partners Air - Solutii Sistemas - Nova Sinseg

#Telegram Agrees to Share User Data With Authorities for Criminal Investigations https://thehackernews.com/2024/09/telegram-agrees-to-share-user-data-with.html

"Cybersecurity issue" takes MoneyGram offline for three days – and counting https://www.theregister.com/2024/09/23/moneygramcybersecurityissue/

🚨Cyberattack Alert ‼️ 🇺🇸USA - Tellurian RansomHub hacking group claims to have breached Tellurian. Allegedly, exfiltrated data includes NDA-protected documents, proprietary data, budgets, and other internal financial information related to Tellurian and their partners. Ransom deadline: 01st Oct 24.

🚨Cyber attacks Alert ‼️ El Dorado ➡️ BlackLock The El Dorado ransomware group rebrands as BlackLock and adds three new victims to the data leak site: 🇱🇧Lebanon - CMC Construction Material Company 🇺🇸USA - Cucina Tagliani 🇧🇷Brazil - Data Campos Sistemas

🚨Cyberattack Alert ‼️ 🇦🇪UAE - Model Engineering Consultants The hacking group Cicada3301 claims to have breached Model Engineering Consultants. Allegedly, 111 GB of data were exfiltrated.

🚨Data Breach Alert ‼️ 🇮🇩Indonesia - Ministry of Education, Culture, Research and Technology (Kementerian Pendidikan dan Kebudayaan RI) A potential data breach at the Ministry of Education, Culture, Research and Technology has been detected on a hacking forum: 5.6 million records allegedly compromised. According to the post, in September 2024, the Ministry of Education, Culture, Research and Technology (Indonesia) suffered a data breach leading to the exposure of 5.6 million records. Among these are details such as full names, IP addresses, email addresses, home addresses, phone numbers, etc. The confirmation or denial of these claims has yet to be verified.

🚨Cyberattack Alert ‼️ 🇲🇽Mexico - Oleopalma LockBit 3.0 ransomware group claims to have breached Oleopalma. Allegedly, 200 GB of data were exfiltrated. Ransom deadline: 14th Oct 24.