Hackmanac Cyber Alerts

🚨🚨Cyberattack Alert ‼️ 🇳🇦Namibia - Telecom Namibia Hunters International ransomware group claims to have breached Telecom Namibia, the national telecommunications operator. Allegedly, 626.3 GB of data (492,633 files) were exfiltrated. Ransom deadline: 13th Dec 24.

🚨Cyberattack Alert ‼️ 🇸🇦Saudi Arabia - Haji Husein Alireza & Co. Ltd INC Ransom ransomware group claims to have breached Haji Husein Alireza & Co. Ltd., one of the largest automobile distributors in the Kingdom of Saudi Arabia.

🟧 #HackTuesday 🟧 Hack Tuesday: Week 04 - 10 December 2024 ⚠️203 cyberattacks across 42 countries ⚠️ ➡️The most active threat actor this week is FunkSec claiming responsibility for 33 cyberattacks. ➡️The USA is the most affected country, accounting for 35% of the victims, with 72 cyberattacks. ➡️The Manufacturing sector is the most impacted, representing 24% of the claimed targets. ➡️Overall, the claimed compromised data amounts to approximately 39 TB. ☣️The average ESIX® (Estimated Severity Index) is 4.5. Follow the link for list of referred victims: https://hackmanac.com/news/hack-tuesday-week-04-10-december-2024 #Hackmanac #HT #Cybersecurity

🚨Cyberattack Alert ‼️ 🇪🇸Spain - Proyectos y Seguros Akira ransomware group claims to have breached Proyectos y Seguros. Allegedly, 10 GB of data, including NDAs, screens of DNI (passport), personal bank information, personal information about their clients, and contracts with customers, were exfiltrated.

🚨Data Breach Alert‼️ 🇯🇵Japan - Sankei (株式会社三恵) Sankei disclosed a data breach involving its former e-commerce website, potentially affecting 71,943 customers' credit card information and 292,707 customers' personal information. The breach, caused by a vulnerability exploited by unauthorized access, exposed data such as credit card details, names, addresses, and encrypted login passwords. The attack targeted transactions from December 27, 2019, to May 15, 2024. The old site was shut down, and Sankei implemented a new system on May 15, 2024. Investigations revealed misuse of stolen credit card data. Source: https://sankei-innerwear.com/assets/common/pdf/aboutcreditcard_incidentv2.pdf

🚨Ransomware‼️ 🇯🇵Japan - EXD. Inc. On November 28, 2024, EXD Co., Ltd., a subcontractor for Exceed Tokyo and its associated companies, suffered a ransomware attack that encrypted part of its servers. The affected servers have been disconnected from the network, and no reports of secondary damage involving personal information have been confirmed so far. Source: https://www.exd.co.jp/information/security-2/

🚨Cyberattack Alert ‼️ 🇦🇺Australia - Equity & Advisory Lynx ransomware group claims to have breached Equity & Advisory. The cybercriminal group states that 1.5 TB of company and customer data were exfiltrated, including information from companies such as Yura Services, Ice Engineering, M&B Civil, Heavymech, QMM, and Fabitech.

Windows Zero-Day Vulnerability CVE-2024-38193 Exploited in the Wild: PoC Published https://securityonline.info/windows-zero-day-vulnerability-cve-2024-38193-exploited-in-the-wild-poc-published/

🚨Cyberattack Alert ‼️ 🇩🇪Germany - Urological Competence Center Hochfranken & Center for Orthopedics and Neurosurgery The Cloak ransomware group claims to have breached two German medical facilities: Urological Competence Center Hochfranken and Center for Orthopedics and Neurosurgery. Allegedly, approximately 100 GB of data per facility has been exfiltrated and leaked after ransom demands expired.

🚨Cyberattack Alert ‼️ 🇬🇷Greece - Neda Maritime Agency Blackout ransomware group claims to have breached Neda Maritime Agency. Allegedly, 150 GB of data were exfiltrated, including corporate information, shipping logs, and crew personal data. The group states, “Everything is encrypted, backups have been deleted.” Ransom deadline: 23rd Dec 24.

🚨Cyberattack Alert ‼️ 🇷🇴Romania - Societatea Energetica Electrica S.A., is experiencing an ongoing cyberattack. The attack's source has not yet been identified, but the company has activated response protocols in collaboration with national cybersecurity authorities. While the critical systems remain unaffected, temporary protective measures have caused some disruptions. https://www.londonstockexchange.com/news-article/ELSA/cyber-attack-in-progress/16802405

🚨Cyberattack Alert ‼️ 🇺🇸USA - Coffee Beanery Akira ransomware group claims to have breached Coffee Beanery. Allegedly, customer contact addresses, inside financial information, employees' contact details, and internal financial documents were exfiltrated.

🚨Cyberattack Alert - Cipla Akira ransomware group claims to have breached Cipla, an Indian multinational pharmaceutical company headquartered in Mumbai, operating 47 manufacturing facilities worldwide and selling its products in 86 countries. Allegedly, 70 GB of data were exfiltrated, including personal medical records with prescribed medications, internal financial information, customer contacts with phone numbers and emails, as well as employee contact details.

🚨Cyberattack Alert ‼️ 🇪🇸Spain - Copreci Black Suit hacking group claims to have breached Copreci, a domestic appliance manufacturer. The cybercriminal group leaked all the exfiltrated data, which, upon initial analysis, appears to include administrative, production, HR, and technical documents.

🚨Cyberattack Alert‼️ 🇺🇸USA - Artivion Artivion, Inc. disclosed a cybersecurity incident on November 21, 2024, involving the acquisition and encryption of company files. The company responded by taking systems offline, engaging cybersecurity experts, and initiating remediation efforts. While the attack disrupted some order, shipping, and corporate operations, these issues have largely been mitigated. https://www.sec.gov/Archives/edgar/data/784199/000078419924000253/aort-20241209.htm

🚨Cyberattack Alert ‼️ 🇲🇷Mauritania - Bankily Bashe hacking group claims to have breached Bankily. Allegedly, 1 GB of data, including admin’s username and customer data (names, phones, balances, source data code), were exfiltrated. Ransom deadline: 13th Dec 24.

🚨🚨Cyberattack Alert ‼️ 🇪🇸Spain: INIA-CSIC RansomHub ransomware group claims responsibility for the ransomware attack on the Instituto Nacional de Investigación de Tecnología Agraria y Alimentaria (INIA-CSIC). Allegedly, 112 GB of data were exfiltrated. Ransom deadline: December 17, 2024. The Instituto Nacional de Investigación de Tecnología Agraria y Alimentaria (INIA-CSIC), Spain's largest agricultural research center, has been crippled by a ransomware attack since November 12, 2024. Over 600 employees were unable to access internal systems, the internet, or scientific data due to the attack. The ransomware encrypted sensitive data on affected devices, though quick action reportedly prevented further spread. The attack disrupted critical research activities, including genetic editing and conservation of endangered species, and halted essential operations like procurement and data sharing.

🚨Cyberattack Alert ‼️ 🇨🇦Canada - Mint Pharmaceuticals 8Base ransomware group claims to have breached Mint Pharmaceuticals. Allegedly, invoice receipts, accounting documents, personal data, certificates, employment contracts, a huge amount of confidential information, confidentiality agreements, and personal files were exfiltrated. Ransom deadline: 10th Dec 24.

🚨Cyberattack Update - ITO EN Confirms Ransomware 🇯🇵🇺🇸 - On December 2, 2024, ITO EN (North America) INC., a subsidiary of ITO EN, suffered a ransomware attack targeting specific file servers in Texas, USA. The compromised servers were isolated from the network, and data restoration was completed using pre-attack backups. Source: https://www.itoen.co.jp/info/71295/

🚨Data Breach Update‼️ 🇯🇵Japan - KidZania Tokyo (キッザニア東京) KCJ Group announced that a security vulnerability in the KidZania Tokyo website allowed unauthorized access, leading to the exfiltration of 24,644 records containing personal information. The breach, detected on October 16, 2024, involved names, email addresses, phone numbers, and addresses of individuals who made reservations before October 17, 2024. Source: https://www.kidzania.jp/corporate/common/pdf/241206_release.pdf