Hackmanac Cyber Alerts

🚨 #DataBreach The threat actor 888 enriches its collection of third-party breach claims. Following the recent Shopify and Nokia incidents, it now allegedly leaks information of 2,073 Microsoft employees. Among the reportedly stolen data are records such as full names, job titles, email addresses and verification statuses, direct and corporate phone numbers, LinkedIn URLs, company websites, and locations including city, state, and country, as well as company phone numbers. #CyberAttack #Microsoft https://x.com/H4ckManac/status/1811044809341272193

🚨#CyberAttack 🇺🇸#USA, The Heritage Foundation The threat group SiegedSec claims to have hacked The Heritage Foundation, a conservative think tank in America responsible for Project 2025. They report accessing the foundation's database, including user data, logs, and over 200GB of other files. Additionally, the hacking group threatens to leak passwords, email addresses, and full names of every user, including US government employees and the Heritage president, Kevin Roberts. According to Have I Been Pwned, the data contained 72k unique email addresses, primarily used for commenting on articles (along with names, IP addresses, and the comments left) and by content contributors (along with usernames and passwords stored as either MD5 or phpass hashes). https://haveibeenpwned.com/PwnedWebsites#TheHeritageFoundation #DataBreach #Project2025 https://x.com/H4ckManac/status/1811024379389661190

🚨 #CyberAttack 🚨 🇧🇷 #Brazil, Usina Alta Mogiana SA Usina Alta Mogiana SA has been listed as a victim by the Akira ransomware group. The hackers allegedly exfiltrated 123 GB of data, including clients/customers info, personal employee files, financials, projects information, and confidential agreements. Usina Alta Mogiana SA produces sugar, ethanol, and electricity #Ransomware https://x.com/H4ckManac/status/1811017005941555691

🚨 #CyberAttack 🚨 🇨🇳 #China, Ronglian Group 荣联科技大厦 Ronglian Group has been listed as a victim by the RansomHouse ransomware group. The hackers allegedly exfiltrated 100 GB of data. #Ransomware https://x.com/H4ckManac/status/1811012178847113560

🚨#CyberAttack 🇺🇸#USA, Hewlett Packard Enterprise The MEOW hacking group claims to sell a confidential database from Hewlett Packard Enterprise in an "exclusive offer" for $199. #DataBreach https://x.com/H4ckManac/status/1811010496084017223

🚨 New #ransomware group: Vanir Group 🚨 Currently, the criminal group's list includes 3 victims: Beowulfchain‌‏.com: "Beowulfchain is a decentralized communication and data network that enables businesses to provide communication without barriers. We have accessed and ransomed Beowulfchain‌‏.com, exfiltrating a total of 17GB." Qinao‌‏.cn: "We have accessed and ransomed qniao‌‏.cn, exfiltrating a total of 80GB. Naturally, we hope for their steadfast cooperation to avoid the leaking of their sensitive information." Athlon‌‏.com: "We have been able to again access and ransom Athlon mobile management services. 20GB downloaded." #Ransomware https://x.com/H4ckManac/status/1810964210899189808

🚨 #CyberAttack 🚨 🇬🇷 #Greece, Heidmar Inc. Heidmar Inc. has been listed as a victim by the Akira ransomware group. The hackers allegedly exfiltrated 20 GB of personal files of employees, customers' information, NDAs, confidential agreements, agreements with international customers, etc. #Ransomware https://x.com/H4ckManac/status/1810942821081194728

🚨#CryptoTheft 🇵🇭#Philippines, Coins.​ph Two Russians Indicted for $5.8 Million Crypto Theft Philippine prosecutors have charged Vladimir Evgenevich Avdeev and Sergey Yaschuck with stealing $5.8 million in cryptocurrency from coins​.ph. The indictment under Republic Act 10175 alleges they exploited consultant access to steal 12.2 million XRP from the company's hot wallet. Read more on Gulf News: https://gulfnews.com/world/asia/philippines/should-the-philippines-build-its-own-warships-1.1720543171089 #Crypto #Blockchain #XRP https://x.com/H4ckManac/status/1810926841445732604

⚠️#CyberAttak Update: 🇯🇵#Japan, Fujitsu Fujitsu confirmed that a cyberattack in March 2024 led to the exposure of sensitive customer data. The attack, which did not involve ransomware, utilized sophisticated malware to evade detection and compromised 49 business computers. The stolen data includes personal information and business-related details of customers. 9th July official statement: https://pr.fujitsu.com/jp/news/2024/07/9.html 15th March official statement: https://pr.fujitsu.com/jp/news/2024/03/15-1.html #Fujitsu https://x.com/H4ckManac/status/1810913958003343826

🚨 #CyberAttack 🚨 🇮🇩 #Indonesia - Indika Energy has been listed as a victim by the Hunters International ransomware group. #Ransomware https://x.com/H4ckManac/status/1810733138370240528

🚀 Tomorrow is the day! ⏳ We can't wait to share our Cyber Threat Monitoring & Impact Analysis platform with you 🌐🔍✨ Ready to discover it? 🛡🔥 #hackrisk #hackmanac #cyberthreatmonitoring #attackimpactanalysis

🟧 #HackTuesday 🟧 Hack Tuesday: Week 03 - 09 July 2024 ⚠️ 58 victims by 22 hacking groups ⚠️ The most active ransomware groups this week are RansomHub and Akira, each with 10 claimed attacks. The most affected country is the United States, accounting for 52% of the victims, while the most affected sector has been Manufacturing, which accounts for 26% of the claimed targets, followed by the Professional / Scientific / Technical sectors with 21% The average Cyber Risk Factor is 4.0. For a detailed look, visit our Hack Tuesday weekly report at: https://hackmanac.com/news/hack-tuesday-week-03-09-july-2024 #Ransomware #DataBreach #CyberAttack #HT https://x.com/H4ckManac/status/1810664019688083558

#DoNex #Decryptor Researchers from Avast decrypted the DoNex ransomware. The decryptor had been secretly provided to victims since March 2024 in collaboration with law enforcement. This effort was publicly revealed in July 2024, making the secret decryption effort unnecessary. Here is the link to learn how to use the DoNex ransomware decryptor. https://decoded.avast.io/threatresearch/decrypted-donex-ransomware-and-its-predecessors/ #Avast #Ransomware https://x.com/H4ckManac/status/1810603499136151979

🚨 #CyberAttack 🚨 🇵🇰 #Pakistan - TPS Worldwide TPS Worldwide, a card processing company in Pakistan, experienced a massive ransomware attack on the night of July 8, 2024. https://propakistani.pk/2024/07/09/massive-ransomware-attack-hits-global-card-processing-company-in-pakistan/ #ransomware https://x.com/H4ckManac/status/1810594878453059941

🚨 #DataBreach 🚨 - Nokia A potential data breach has been detected on a hacking forum: After Shopify, the threat actor is claiming a data breach at Nokia. According to the post, in July 2024, Nokia suffered a data breach from a third party that exposed 7,622 rows of employees' details. Among these are information such as first and last name, job title, company name, email, direct phone number, corporate phone number, employees, industry, and geolocation. 888 is the same threat actor who claimed the breach at Shopify a few days ago. Shopify has denied a breach of its systems following a cybercriminal's claim of posting 179,873 rows of Shopify user information online but added, "the data loss reported was caused by a third-party app." https://www.bleepingcomputer.com/news/security/shopify-denies-it-was-hacked-links-stolen-data-to-third-party-app/ #CyberAttack https://x.com/H4ckManac/status/1810569160180515171

🚨 #CyberAttack 🚨 🇺🇸 #USA: Repligen has been listed as a victim by the INC Ransom ransomware group. Allegedly, the attack led to the exfiltration of 500 GB of data, including contracts, confidential documents, customers’ data, financial data, and HR information. Additionally, Redencen communicated on LinkedIn: "Please take note that it has come to our attention that individuals purporting to work for Repligen are reaching out to prospective job applicants using fraudulent email addresses." Repligen Corporation is a NASDAQ-listed company devoted to the development and production of materials used in the manufacture of biological drugs. #Ransomware https://x.com/H4ckManac/status/1810540910339330398

🗓️The big day for our new platform is almost here. 📻Stay tuned! #hackrisk #hackmanac #cyberthreatmonitoring #attackimpactanalysis

🚨 We are adding a new X account dedicated to cyber attacks news, critical alerts and insights on cyber threats! 🛡️🔐 📢 Follow us at https://x.com/H4ckRisk and stay safe! 🌐🛡️ #CyberSecurity #CyberThreats #InfoSec #StaySafe

🚨🚨 #CyberAttack 🚨🚨 🇨🇦 #Canada: Federated Co-operatives Limited (FCL) has been listed as a victim by the Akira ransomware group. Allegedly, the attack led to the exfiltration of 80 GB of data, including HR files with employee data, confidential business files, financials, and client information. On June 29, Federated Co-operatives Ltd. (FCL) announced it was grappling with the aftermath of a cybersecurity incident affecting its internal systems, local retail Co-ops, and cardlock fueling stations. Some Co-op stores in Saskatchewan are experiencing shortages of products such as bread, fresh produce, and dairy. Although retail gas stations were largely unaffected, cardlock fuel locations were significantly impacted. https://www.cbc.ca/news/canada/saskatchewan/food-items-remain-sparse-co-op-cyberattack-1.7253263 #Ransomware https://x.com/H4ckManac/status/1810294757140173311

🚨 #CyberAttack 🚨 🇧🇷 #Brazil: Cedro Technologies has been listed as a victim by the Medusa ransomware group. Ransom demand: $200,000. Allegedly, the attack led to the exfiltration of 393 GB of data, including backup data, passports, contracts, HR data, invoices, certificates, insurance data, photos, and other miscellaneous and sensitive documents. Ransom deadline: 17th Jul 24. #Ransomware https://x.com/H4ckManac/status/1810287129807015960