Hackmanac Cyber Alerts

🚨Cyberattack Alert ‼️ 🇺🇸USA - Avi Resort & Casino The Akira ransomware group claims to have breached Avi Resort & Casino. Allegedly, 17 GB of data, including personal documents, financial information, client data, credit cards, driver's licenses, payment documents, and more, were exfiltrated.

🚨Cyberattack Alert ‼️ 🇧🇪Belgium - MediCheck Kill Security hacking group claims to have breached MediCheck. Allegedly, sensitive data related to personal identity and medical conditions were exfiltrated, including patient names, locations, accident details, certifications of incapacity for work, and specific medical conditions. Ransom deadline: 01st Oct 24.

🚨🚨🚨Cyberattack Alert ‼️ 🇨🇦Canada - Pureform Radiology, Medical Records of 10 Million Patients at Risk. Everest Claims to Have Found a Zero-Day Vulnerability The hacking group Everest claims to have breached Pureform Radiology. Allegedly, medical records of over 10 million people, all patients of medical facilities using Synthesis Health for their EMRs, have been compromised. What is more concerning is the statement from the cybercriminal group, which claims to have found a zero-day vulnerability: "we found was a zero-day exploit in the software of the company that acquired Pureform" [..] "Everyone will be able to get their own exploit build that allows access to the medical records of over 10M people, all of whom are patients of medical facilities that use Synthesis Health for their EMRs."

🚨Cyberattack Alert ‼️ 🇹🇷Turkey - Bakpiliç Entegre Tavukçuluk A.Ş. The hacking group RansomHub claims to have breached Bakpiliç Entegre Tavukçuluk A.Ş. Allegedly, 600 GB of data from the finance, accounting, production, sales, and other departments were exfiltrated. Ransom deadline: 30th Sept 24.

🚨Data Leak Alert ‼️ 🇵🇰 Pakistan - 10 Million Citizens' Records Allegedly Leaked Satanic, a well-known member of a hacking forum, claims to have a database with 10 million citizens' records, including names, addresses, and CNIC (Computerized National Identity Card). The "i love you pk" archive containing the entire database has been leaked for free. The confirmation or denial of these claims has yet to be verified

🚨Cyberattack Alert ‼️ 🇺🇸USA - Detroit PBS The hacking group Qilin claims to have breached Detroit PBS, the viewer-supported Public Broadcasting Service member station serving the nation's 11th largest television market Allegedly, 573 GB of data (875,166 files) were exfiltrated.

📣 We are excited to announce that our CEO Sofia Scozzari will be speaking at Cybearly - Forecasting 2025 🎉 (https://www.cybearly.com/forecasting-2025/) on October 3 2024*, the second edition of the **BearIT event dedicated to cyber security trends, future scenarios, and industry development 💡🌐 Our CEO will be present in two sessions : 📅 10:40 AM, with a talk entitled “The Cybercrime Panorama between Dark Web and Impacts for Victims”, to examine emerging trends and the most affected sectors 🕵️‍♀️ 📅 2:00 PM, during the panel “Women in Cyber Security: Key Skills for Innovation”, to examine the key role of women in the industry, including soft skills and hard skills 👩‍💻 🔗 Full event program: https://www.cybearly.com/wp-content/uploads/2024/09/cybearly-forecasting2025-programma-v5.pdf ✅ Participation, live or streamed, is free after registration: https://eventi.wired.it/nextfest24-trentino/registrazione 🇮🇹 See you in Italy! #Cybearly2025 #Cybearly #BearIT #events #hackmanac #corporatenews

📣 We are excited to announce that our CEO @SofiaSZM will be speaking at Cybearly - Forecasting 2025 🎉 (https://www.cybearly.com/forecasting-2025/) on October 3 3024, the second edition of BearIT event dedicated to cyber security trends, future scenarios, and industry development 💡🌐 Our CEO will be present in two sessions : 📅 10:40 AM, with a talk entitled “The Cybercrime Panorama between Dark Web and Impacts for Victims”, to examine emerging trends and the most affected sectors 🕵️‍♀️ 📅 2:00 PM, during the panel “Women in Cyber Security: Key Skills for Innovation”, to examine the key role of women in the industry, including soft skills and hard skills 👩‍💻 🔗 Full event program: https://www.cybearly.com/wp-content/uploads/2024/09/cybearly-forecasting2025-programma-v5.pdf ✅ Participation, live or streamed, is free after registration: https://eventi.wired.it/nextfest24-trentino/registrazione 🇮🇹 See you in Italy! #Cybearly2025 #Cybearly #BearIT #events #hackmanac #corporatenews

🚨Cyberattack Alert ‼️ 🇨🇦Canada - Canstar Restorations The hacking group Qilin claims to have breached Canstar Restorations. Allegedly, 287 GB of data were exfiltrated.

DeltaPrime Suffers Major Hack Resulting in Nearly $6 Million Loss https://coinmarketcap.com/community/articles/66e8064662083241cbd3ced4/

🚨Data Breach Alert ‼️ - Oracle A potential data breach at Oracle has been detected on a hacking forum: 4,002 rows of employee information reportedly affected. According to the post, in September 2024, Oracle suffered a small data breach from a third party that exposed employee details such as full names, job titles, company names, email addresses, addresses, and other personal information. The confirmation or denial of these claims has yet to be verified.

🚨Cyberattack Alert ‼️ 🇺🇸USA - Graminex The hacking group DragonForce claims to have breached Graminex. Allegedly, 17.18 GB of data were exfiltrated. Ransom deadline: 26th Sept 24.

🚨 Data Breach Alert ‼️ DELL Allegedly Breached Again Following the alleged breach published on a hacking forum on September 19, which is still under investigation, another threat actor known as Chucky claims another breach at DELL, this time compromising data such as Jira files, databases, schema migration, etc., totaling 3.5GB uncompressed. The post was quickly reshared by 'grep,' the other cybercriminal who, four days ago, claimed to have published 10,800 employees belonging to Dell and their partners. He stated: "This time it was breached by Chucky, before Dell makes any claims, we both compromised your Atlassian and accessed Jenkins, Confluence, etc. " The confirmation or denial of these claims has yet to be verified

🚨Data Leak Alert ‼️ - SpaceX - CNN - The White House - China National Petroleum Corporation The threat actor known as "l33tfg" seems to have gone all in, claiming in recent days to have leaked data belonging to SpaceX, CNN, The White House, and China National Petroleum Corporation. In addition to these, starting from July 26, data from another 26 entities have allegedly been leaked, including 4chan, Verizon, T-Mobile, and Ebay. The type of data they usually publish reportedly includes full names, email addresses, server IP logs, hashes, and phone numbers. As always, these claims await analysis before confirmation.

🚨Cyberattack Alert ‼️ 🇯🇵Japan - Ishimitsu Shoji Co., Ltd. (石光商事株式会社) On September 20, 2024, Ishimitsu Shoji Co., Ltd. reported that some servers of the company and its domestic group companies, including Tokyo Allied Coffee Roasters, Kansai Allied Coffee Roasters, and US Foods, were encrypted by ransomware. The company is currently investigating the extent of the impact with the assistance of external experts. The incident was discovered on September 18, 2024, when files on various servers were found encrypted and inaccessible due to unauthorized external access. The company has since isolated affected systems and is working on restoring operations while also assessing whether any information has been leaked. The financial impact of this ransomware attack is still under review. Source: https://www.release.tdnet.info/inbs/140120240919586799.pdf

🚨Cyberattack Alert ‼️ 🇹🇭🇯🇵 - Hanwa Group (Thailand) The hacking group Brain Cipher claims to have breached Hanwa Group (Thailand). Hanwa Co., Ltd. is a leading Japan- based global trading company, we are globally operating wide range of fields, such as iron, steel and foods. Allegedly, 200 GB of data were exfiltrated. Ransom deadline: 10th Oct 24.

🚨 Major Hacking Attack on BingX Cryptocurrency Exchange 🚨 Late in the evening of September 19 (UTC), the BingX cryptocurrency exchange was targeted in a significant hacking attack, resulting in the theft of over $48 million in digital assets. 🔍 Details of the Attack: - Targeted Blockchains: Ethereum, Optimism, Polygon, BSC, Arbitrum, Tron, and others. - Stolen Funds: A significant portion was converted into native tokens of these networks. 💰 Stolen Assets Held In the Following Addresses: - TWYDPSCK4vfuMCmJYJvPcvWeUDtyT42mZB: $1.12M - 0xcfc14fa81226074036622976d95897ff84b58d66: $0.52M - 0xf7e8033366166f92eb477b7b38e0d47d47b43326: $9.4M - 0x49284f0ab5098d7effb3392124903c081d1b9f7e: $0.55M - 0xf26e64ef4300ca027d2ffedd7d765d7a3906091c: $13.9M - 0x1dd7daf089c16856155fefd7e2170966bb6b3aee: $16.5M - 0xb77a4a9678315775c4ba89f18f84f87538e748f5: $2.4M - 0xb0146aec3593410c8307b570af69adf4d74678b3: $0.85M - 0x63dc352ddfc17aa04edac47ce36e186c1e54b02c: $2.5M 🔒 Current Status: We are actively monitoring the situation and tracking the hacker's subsequent actions to launder the stolen funds. 👋 Match Systems

🟧 #HackTuesday 🟧 Hack Tuesday: Week 11 - 17 September 2024 ‼️ 111 victims by 28 hacking groups ‼️ The most active ransomware groups this week are RansomHub and Play, each with 17 claimed attacks. The United States is the most affected country, accounting for 56% of the victims. The Professional, Scientific, and Technical sectors are the most impacted, representing 18% of the claimed targets, followed by the Manufacturing sector with 14%. Overall, the claimed stolen data amounts to approximately 22.3 Terabytes. The average Cyber Risk Factor is 4.0. Follow the link for the full list of victims: https://hackmanac.com/news/hack-tuesday-week-11-17-september-2024 #Hackmanac #HT #Cybersecurity #ThreatMonitoring

The Dark Side of IoT: The Most Dangerous Cyber Incidents So Far 🚨 From hacked baby monitors to compromised nuclear facilities, the IoT has exposed us to unprecedented cyber risks. Our latest article dives deep into the top 10 most dangerous IoT cyber incidents that have occurred so far, highlighting the vulnerabilities of our increasingly connected world. 💡Discover how these attacks happened, the lessons learned and what we can do to protect ourselves moving forward. 👉 Read the full article here: https://hackmanac.com/news/the-dark-side-of-iot-the-most-dangerous-cyber-incidents-so-far #CyberSecurity #IoT #IoTSecurity #CyberAttacks #CyberThreatMonitoring #Hackmanac #ExpertInsight #StayCyberSafe

 Disney ditching Slack after massive July data breach The Walt Disney Company is reportedly ditching Slack after a July data breach exposed over 1TB of confidential messages and files posted to the company's internal communication channels. [...] https://www.bleepingcomputer.com/news/security/disney-ditching-slack-after-massive-july-data-breach/