Hackmanac Cyber Alerts

🚨Cyberattack Alert ‼️ 🇺🇸USA - Camelot Facility & Property Management RansomHub hacking group claims to have breached Camelot Facility & Property Management. Allegedly, 89 GB of data were exfiltrated. Ransom deadline: 26th Oct 24.

🚨Cyberattack Alert ‼️ 🇺🇸USA - Aristoi Classical Academy RansomHub hacking group claims to have breached Aristoi Classical Academy. Allegedly, 66 GB of data were exfiltrated. Ransom deadline: 26th Oct 24.

🚨Cyberattack Alert ‼️ 🇺🇸USA - Chilton ISD RansomHub hacking group claims to have breached Chilton ISD. Allegedly, 58 GB of data were exfiltrated. Ransom deadline: 21st Oct 24.

🚨 Radiant Capital Hacked: Over $55M Stolen 🚨 On the evening of October 16, Radiant Capital fell victim to a hacking attack. Preliminary reports estimate that over $51.5 million worth of digital assets were stolen, with the total damage now approaching $55 million and still growing. 🔗 Targeted blockchains: - Binance Smart Chain - Arbitrum One A significant portion of the stolen funds was converted into native tokens such as BNB and ETH. The stolen assets are currently held in several cryptocurrency addresses, with the main ones being: 💸 Stolen funds held in: - 0x8B75E47976C3C500D0148463931717001F620887 – $33.8M - 0xcF47c058CC4818CE90f9315B478EB2f2d588Cc78 – $19.2M - 0x911215CF312a64C128817Af3c24B9fDF66B7Ac95 – $0.76M - 0x0629b1048298AE9deff0F4100A31967Fb3f98962 – $0.48M 💻 Hacker addresses identified: - 0xc24927Bd40Bab67CcfB2ca0A90d6cbB8Edb21302 - 0x579145D6d1F26a460d9BDD3040C37517dac379ac 🔍 The hackers used various hosting and VPN services. However, analysis indicates that the attackers may be linked to the CIS region, with preparations for the attack starting on September 23. We are closely monitoring the situation and tracking the hackers' actions as they attempt to launder the stolen funds. 👋 Match Systems

🚨The website domain for Ambient Finance has been hacked. 🚨 Do not connect wallet. Do not sign any transactions.

🚨Cyberattack Alert ‼️ 🇺🇾Uruguay - Uruguayan Institute of Meteorology (Inumet) The Uruguayan Institute of Meteorology (Inumet) confirmed that its system was hacked, leading to the publication of a false red alert for strong winds across the country on its official channels. Inumet clarified that there are no current weather alerts in effect for Uruguay. The false alert appeared for a few minutes on the website and social media accounts of the institute.

🚨Cyberattack Alert ‼️ 🇺🇸USA - HiCare RansomHub ransomware group claims to have breached HiCare. Ransom deadline: 23rd Oct 24.

🚨Cyberattack Alert ‼️ 🇲🇾Malaysia - Big Pharmacy RansomHub hacking group claims to have breached Big Pharmacy. Allegedly, 50 GB of data were exfiltrated, including clinical laboratory reports, medical certificates, prescriptions, and invoices. Ransom deadline: 22nd Oct 24.

🚨Cyberattack Update ‼️ 🇺🇸USA - Globe Life Inc. In a recent FORM 8-K filing, Globe Life Inc. disclosed that it has been targeted by an unknown threat actor attempting to extort money in exchange for not disclosing certain sensitive information held by the company and its subsidiary, American Income Life Insurance Company. The data potentially affected includes personal information such as names, email addresses, phone numbers, and Social Security numbers of approximately 5,000 individuals. The threat actor has shared limited data with third parties, including short sellers and plaintiffs' attorneys. The extortion attempt has not involved ransomware or disrupted the company's systems or services. FORM 8-K: https://www.sec.gov/Archives/edgar/data/320335/000032033524000056/gl-20241017.htm

🚨Cyberattack Alert ‼️ 🇮🇹Italy - Municipality of Sorso The municipality of Sorso in Italy has suffered a ransomware attack, causing a complete shutdown of its IT system and encryption of all administrative data, including those related to building permits, administrative acts, and council decisions. The attackers have demanded a ransom to restore access to the encrypted data. The attack was discovered on Monday, and local authorities have filed a report with the postal police. The disruption has affected municipal operations, including the scheduling of the next council meeting. More details: https://www.unionesarda.it/news-sardegna/sassari-provincia/attacco-hacker-al-comune-di-sorso-sistema-informatico-in-tilt-chiesto-un-riscatto-per-il-ripristino-n4zd4imy

🚨Cyberattack Alert ‼️ 🇮🇹Italy - AUXIT S.R.L. Sarcoma hacking group claims to have breached AUXIT S.R.L. Allegedly, 163 GB of data were exfiltrated. The sample provided shows identity cards and notarial deeds. Ransom deadline: 12th Nov 24.

🚨Cyberattacks Alert ‼️ 🇯🇵Japan - Starting from September 18, the cybercriminal group known as CyberVolk initiated an operation targeting various Japanese infrastructures, including Internet Initiative Japan Inc. (IIJ), the National Hearse Association, DNA Data Bank of Japan, RIKEN, GISC Tokyo, Asia Pacific Energy Research Centre, Japan Advanced Institute of Science and Technology, The Japan Oceanographic Data Center (JODC), and Parking Pay. Notably, on September 19, another threat actor compromised Parking Pay and leaked the data of 267,354 users on a hacking forum (our post here: https://x.com/H4ckManac/status/1836998279868850533). Following the data exfiltration, the group demands a ransom payment in BTC, which, for the claimed attacks, can range from $10,000 to $70,000. In their latest message on Telegram, the group announced that additional attacks against Japanese entities are expected within an hour.

🚨Cyberattack Alert ‼️ 🇮🇳India - Volo Health Kill Security hacking group claims to have breached Volo Health. Allegedly, exfiltrated data include full names, dates of birth, Aadhaar numbers, patient photos, medical diagnoses and treatments, financial data such as hospitalization costs, and GPS-tagged photos showing patients' exact locations. Ransom deadline: 25th Oct 24.

🚨Cyberattack Alert ‼️ 🇩🇪Germany - Fractal ID Stormous hacking group claims to have breached Fractal ID. Allegedly, 12 GB of data, including personal photos, bank statements, proof of address, and ETH/BTC addresses, and more were exfiltrated.

🚨Cyberattack Alert ‼️ 🇵🇱Poland - Jędrzejów County RansomHub hacking group claims to have breached Jędrzejów County. Allegedly, personal data including full names, parents' names, physical addresses, phone numbers, PESEL IDs, and email addresses were exfiltrated. Ransom deadline: 31st Oct 24.

🚨Cyberattack Alert ‼️ 🇮🇪Ireland - Horse Sport Ireland (HSI) RansomHub hacking group claims to have breached Horse Sport Ireland (HSI), the National Governing Body for Equestrian Sport in Ireland. Allegedly, exfiltrated data include personally identifiable information (PII) and horse registers. Ransom deadline: 22nd Oct 24.

🚨Cyberattack Alert ‼️ 🇺🇸USA - Doctors To You (DTY) RansomHub hacking group claims to have breached Doctors To You (DTY). Ransom deadline: 20th Oct 24.

🚨Cyberattack Alert ‼️ 🇮🇳India - ASTO LABS RansomHub hacking group claims to have breached ASTO LABS. Allegedly, 35,000 records, including diagnostic documents, were exfiltrated. Ransom deadline: 21st Oct 24.

🚨Cyberattack Alert ‼️ 🇺🇸USA - Corporate Job Bank BianLian hacking group claims to have breached Corporate Job Bank. Allegedly, 200 GB of data were exfiltrated, including customer data banks, passports and IDs, operational data, business files, and file server data.

🚨 Match Systems has published an insightful article, “The Rise of Scams in the TON Ecosystem.” ✍️ In this new article, we explore how scam schemes began to emerge with the growing popularity of TON. Why have attackers started using the TON blockchain, and how can you protect your assets? 📋 We’ve highlighted the key signs of fraud and provided security tips to help you avoid unpleasant situations. Whether you’re using the TON ecosystem or simply interested in cryptocurrencies, this material is definitely worth reading! 📖 Read more 🔗 👋 Match Systems