Hackmanac Cyber Alerts

🚨Data Breach Alert ‼️ 🇸🇦Saudi Arabia - Jarir Bookstore A potential data breach at Jarir Bookstore has been detected on a hacking forum, reportedly affecting 26 million users. According to the post, the compromised information includes full names, physical addresses, email addresses, and phone numbers. The threat actor also claims that the database contains data from branches in Kuwait, Qatar, Bahrain, and the UAE. The confirmation or denial of these claims has yet to be verified, but in the meantime, Jarir Bookstore users are advised to remain cautious of potential phishing attempts.

🚨Cyberattack Update ‼️ 🇯🇵Japan - Bell Data (ベル・データ株式会社) Confirms Ransomware Attack Bell Data Corporation reported that their internal systems were targeted in a ransomware attack on September 19, 2024. Some internal systems were confirmed to be infected, leading to temporary isolation of affected servers and delays in regular operations such as order processing. Efforts to fully restore the system are ongoing. Medusa ransomware group claimed responsibility for the attack on October 1st, demanding $300,000.

SEE YOU AT CYBERNEXTGEN FOR ECSC 2024 Our CEO Sofia Scozzari will be present at the CyberNextGen (https://cybersecnatlab.it/cybernextgen-speciale-ragazze-10-ottobre-workshop-gratuito-studentesse-scuole-superiori/) event on October 10, 2024 in Turin, Italy, organized by CINI, the Italian Cybersecurity National Lab (https://cybersecnatlab.it/), in collaboration with the ACN, Italian National Cybersecurity Agency (https://www.acn.gov.it/portale/home), and in conjunction with the European Cybersecurity Challenge (ECSC, https://ecsc.eu/). Sofia, who is also a member of the Board of Directors of the Community Women For Security ,(https://womenforsecurity.it/) , will be present at the panel “Women and Cybersecurity”, a moment of discussion with 3 other successful women from WFS, who will share their career paths, moderated by founder Cinzia Ercolano. See you in Italy! #hackmanac #corporatenews #events #Italy #WomenForSecurity #WomenInCybersecurity #WomenAndCybersecurity

🚨Cyberattack Alert ‼️ 🇮🇶Iraq - AlSharqiya TV An anti-Zionist hacker group, Fatemiyoun Cyber Team, has claimed responsibility for a cyberattack on the official website of Al Sharqiya channel. Allegedly, the group hacked the website in response to the channel's media support for the Zionist entity. The attackers reportedly displayed their logo and various posts on the site as a form of protest. In some statements, they claim to have exfiltrated the entire database of Al Sharqiya, though these details have not been independently verified.

🚨Cyberattack Alert ‼️ 🇸🇦 Saudi Arabia - Fursan Travel RansomHouse hacking group claims to have breached Fursan Travel, a leading travel service in the Kingdom of Saudi Arabia. On the data leak site, the cybercriminal group provided samples and stated that the ransomware attack dates back to September 6.

🚨Cyberattack Update ‼️ 🇯🇵Japan - H2O Retailing (エイチ・ツー・オー リテイリング): Possible Data Exposure Due to Contractor Ransomware Attack On September 30, 2024, Like Kids, Inc., a contractor responsible for operating H2O Nursery School under H2O Retailing Co., Ltd., suffered a ransomware attack. It is suspected that both corporate and personal information held by Like Kids, Inc. may have been compromised. The investigation into the incident is ongoing, with H2O Retailing requesting Like Kids, Inc. to assess the cause and determine the extent of the potential data breach. Source: https://www.h2o-retailing.co.jp/ja/news/news-8363494731287314314/main/0/link/20241004_toushajigyounojigyouuneiitakugaishacyberkougekikanousei.pdf

🚨Data Breach Alert ‼️ 🇮🇱Israel - Shin Bet On October 3, 2024, the pro-Palestinian hacktivist group Handala claims to have hacked Shin Bet, the Israeli security agency, through a complex supply chain attack. According to Handala, they breached the main server of Shin Bet’s exclusive security system, designed to protect the mobile devices of its officers. This security system is intended to prevent data transmission to companies like Meta and Google, but Handala claims to have installed a Trojan on all Shin Bet officers' phones. Allegedly, this hack resulted in the theft of over 7 TB of sensitive data, including phone models, IMEIs, mobile numbers, emails, apps, search histories, and geolocation data of approximately 30,000 officers. Handala has reportedly leaked 46 million rows of data as proof of the hack. The confirmation or denial of these claims has yet to be verified

The U.S. Department of Justice announced the seizure of 41 internet domains used by Russian intelligence agents, specifically the "Callisto Group," part of the Russian FSB, for conducting spear-phishing campaigns targeting U.S. government entities. Concurrently, Microsoft filed a civil action to seize 66 additional domains used by the same group, tracked by Microsoft as "Star Blizzard." Between January 2023 and August 2024, over 30 civil society organizations, including journalists and NGOs, were targeted by these phishing campaigns. These domains were used to steal sensitive information from U.S. government departments, defense contractors, and other entities. Two Callisto Group members were previously charged in December 2023 for hacking campaigns targeting the U.S., UK, NATO countries, and Ukraine. Source: https://www.justice.gov/opa/pr/justice-department-disrupts-russian-intelligence-spear-phishing-efforts

🚨Cyberattack Alert ‼️ 🇩🇪Germany - Lyomark Pharma GmbH DragonForce hacking group claims to have breached Lyomark Pharma GmbH. Allegedly, 51.31 GB of data were exfiltrated. Ransom deadline: 05th Oct 24

🚨Cyberattack Alert ‼️ 🇮🇹Italy - OfficeGroup Stormous hacking group claims to have breached OfficeGroup. Allegedly, 1 GB of data were exfiltrated and leaked.

🚨Cyberattack Alert ‼️ 🇧🇩Bangladesh - Bangabandhu Government College in Tarakanda Kill Security hacking group claims to have breached Bangabandhu Government College in Tarakanda. Allegedly, exfiltrated data include file system structure, directory names, student records, academic data, exam dates, grade levels, and more. Ransom deadline: 12th Oct 24.

🚨 AI & Cyberattacks: From Exploitation To Targeting 🚨 In our latest article, we dive deep into the dark side of Artificial Intelligence and its relationship with cyberattacks. From AI-powered scams to attacks targeting AI systems themselves, the cyber landscape is becoming more dangerous and complex. Here are some key highlights: 🔹 AI-generated voice scams tricking victims 🔹 Cryptocurrency fraud like CryptoRom 🔹 Fake Liquidity Mining scams 🔹 WormGPT: A malicious AI aiding BEC (Business Email Compromise) scams 🔹 How AI systems are under threat from evasion, poisoning, and privacy attacks Read the full article here 👉 https://hackmanac.com/news/ai-and-cyberattacks-from-exploitation-to-targeting #AI #ArtificialIntelligence #Cybersecurity #Cyberattacks #AIThreats #ExpertInsights #Hackmanac

🟧 #HackTuesday 🟧 Hack Tuesday: Week 25 Sept - 01 Oct 2024 ‼️ 94 victims by 26 hacking groups ‼️ The most active ransomware group this week is Play, claiming responsibility for 13 attacks. The United States is the most affected country, accounting for 49% of the victims. The Manufacturing sector is the hardest hit, representing 27% of the claimed targets, followed by the Professional, Scientific, and Technical sectors, as well as the Wholesale/Retail sectors, both at 11% Overall, the claimed stolen data amounts to approximately 19.5 Terabytes. The average Cyber Risk Factor stands at 4.1. Follow the link for the full list of victims: https://hackmanac.com/news/hack-tuesday-week-25-sept-01-oct-2024 #Hackmanac #HT #Cybersecurity

🚨Cyberattack Alert ‼️ 🇨🇦Canada - Red Barrels Nitrogen hacking group claims to have breached Red Barrels, a Canadian video game developer, known for developing the first-person psychological horror game Outlast. Allegedly, 1.8 TB of confidential data were exfiltrated.

🚨Cyberattack Alert ‼️ 🇯🇵Japan - Kyocera (京セラコミュニケーションシステム株式会社) Kyocera Communication Systems Co., Ltd. has reported a ransomware infection during the installation of their library system at Ikaruga Town Library in Nara Prefecture. The attack was discovered on September 30, 2024, when an error in the server connection revealed that data had been encrypted by ransomware. The ransomware attack has delayed the launch of the library system, impacting the ability of users to search the collection via the library's website. Source: https://www.kccs.co.jp/news/release/2024/1002/

🚨Data Breach Alert ‼️ 🇦🇪UAE - Rivoli Group, 44K users reportedly affected A potential data breach at Rivoli Group, a retail, jewelry & watch retail, and fashion company located in Dubai, has been detected on a hacking forum. According to the post, in October 2024, Rivoli Group suffered a data breach leading to the theft of a database containing information such as order status, date, country, and email addresses of approximately 44,000 users. The confirmation or denial of these claims has yet to be verified, but in the meantime, Rivoli users are advised to be cautious of potential phishing attempts.

🚨Data Leak Alert ‼️ 🇮🇱Israel - The hacktivist group Handala continues its campaign against Israel. Following the claim on September 26, where the group stated it had leaked 60,000 "secret" emails from Israel's Ministry of Foreign Affairs, today Handala claims to have leaked 110,000 secret emails from former Prime Minister Ehud Barak. The confirmation or denial of these claims has yet to be verified.

🚨 AI & Cyberattacks: From Exploitation To Targeting 🚨 In our latest article, we dive deep into the dark side of Artificial Intelligence and its relationship with cyberattacks. From AI-powered scams to attacks targeting AI systems themselves, the cyber landscape is becoming more dangerous and complex. Here are some key highlights: 🔹 AI-generated voice scams tricking victims 🔹 Cryptocurrency fraud like CryptoRom 🔹 Fake Liquidity Mining scams 🔹 WormGPT: A malicious AI aiding BEC (Business Email Compromise) scams 🔹 How AI systems are under threat from evasion, poisoning, and privacy attacks Read the full article here 👉 https://hackmanac.com/news/ai-and-cyberattacks-from-exploitation-to-targeting #AI #ArtificialIntelligence #Cybersecurity #Cyberattacks #AIThreats #ExpertInsights #Hackmanac

🚨Phishing Alert ‼️ Jim Fan, Senior Research Manager at NVIDIA, fell victim to a phishing attack despite using two-factor authentication (2FA). He mistakenly entered both his password and the 2FA code into a phishing site that appeared authentic. The hacker quickly posted a crypto scam on his account 15 minutes after obtaining his login. Despite acknowledging his error, Fan criticized Gmail's failure to filter the phishing email, marking it as "Important" instead. Source: https://x.com/DrJimFan/status/1841146978484568120

🚨Cyberattack Alert ‼️ 🇪🇸Spain - Universidad Católica de Valencia (Catholic University of Valencia) suffers a ransomware attack. Students are advised not to respond to the request to change their passwords. https://www.eldebate.com/espana/comunidad-valenciana/20241001/universidad-catolica-valencia-sufre-ataque-informatico-traves-codigo-malicioso_231908.html