Hackmanac Cyber Alerts

🔥 BREAKING! 🔥 Zscaler researchers discovered a record-breaking ransom payment of US$75 million made by a unnamed company to the #DarkAngels #ransomware group following an #attack occurred in early 2024. This is the largest ransomware payment by a company in history. https://securityaffairs.com/166372/uncategorized/fortune-50-company-paid-record-breaking-75m-ransom.html

🚨 #CyberAttack 🚨 🇺🇸 #US Virgin Islands, Schneider Regional Medical Center and Hospital Schneider Regional Medical Center and Hospital in St. Thomas in US Virgin Islands has been listed as a victim by #Qilin ransomware group. #Ransomware #Healthcare

🚨 #CyberAttack 🚨 🇺🇸 #USA, City of Columbus, Ohio Rhysida ransomware gorup took responsability for the attack to City of Columbus happened on July 18. The hackers allegedly exfiltrated 6.5 Tb of data containing database, internal logins and password, a full dump of servers with emergency services applications of the city, access from city cameras. Selling price is 30 BTC. #Ransomware

🔒📚 Over the past few days, we have been publishing interesting articles about the dangers of "dirty" cryptocurrency. We decided to combine this material into one post for your convenience. ⛓️‍💥 What is dirty cryptocurrency? ⛔️ Coins and tokens are considered "dirty" if they are associated with illegal activities. For example, in money laundering, scamming, arms and drug trafficking. 🔍 Why check cryptocurrency for purity? 🔒 If you accept "dirty" funds into your wallet and transfer even a small portion of them to an exchange, your wallet may be seized or blocked. Such sanctions regarding these funds may occur not immediately, but six months later, when someone within the framework of a case initiates a criminal investigation and the police reach you through the chain. 🥷 How does dirty crypto get into your wallet? 🔄 Fraudsters hide the transaction history of cryptocurrency in various ways. For example, they use mixers - services that divide the funds into small parts and mix them randomly with coins of other users. After mixers, it's much harder to trace the origin of the currency. Running crypto through anonymous wallets and decentralized exchanges can also confuse the trail and complicate the task of analysts. 💸 What happens if you accept dirty cryptocurrency 🔍 🔒 The consequences of trading "dirty" cryptocurrency can include lockout funds due to non-compliance with AML rules. Exchanges monitor suspicious transactions and have the authority to lockout your assets. 🚫 🛡️ How to Protect Yourself from "Dirty" Cryptocurrency 🙌 Before accepting cryptocurrency assets, you should check the sender's address to identify potential risks associated with it and reduce the likelihood of your account being blocked on the exchange. One service that allows for cryptocurrency verification is the Telegram bot. For businesses, it is advisable to hire a personal AML officer who can conduct checks on counterparty addresses.

🚨 #CyberAttack 🚨 🇧🇪 #Belgium, Macadam Europe Macadam Europe has been listed as a victim by the Akira ransomware group. The hackers allegedly exfiltrated 50 GB of HR data, non-disclosures documents, agreements, customers' database, and data of their international partners. #Ransomware

🚨 #CyberAttack 🚨 🇺🇸 #USA, We Level Up We Level Up, a treatment centers for mental health & addiction rehab, has been listed as a victim by the RansomHub ransomware group. The hackers allegedly exfiltrated 100 GB of data. Ransom deadline: 06th Aug 24. #Ransomware #CyberSecurity #RansomHub

ThreatLabz has uncovered a record breaking $75 million payment made by a Fortune 50 company to the Dark Angels (a.k.a. Dunghill) #ransomware group. Read more: https://www.zscaler.com/campaign/threatlabz-ransomware-report #DarkWeb #CyberAttack

🟧 #HackTuesday 🟧 Hack Tuesday: Week 24 - 30 July 2024 🚨 121 victims by 31 hacking groups 🚨 The most active ransomware group this week is RansomHub with 13 claimed attacks. The most affected country is the United States, accounting for 56% of the victims, while the Manufacturing sector is the most impacted, accounting for 26% of the claimed targets, followed by the Healthcare with 13% and Professional, Scientific and Technical sectors with 10%. The average Cyber Risk Factor is 4.1. #Ransomware #CyberAttack #HT #Cybersecurity

🚨 #CyberAttack 🚨 🇺🇸 Community High School District 117 Community High School District 117 has been listed as a victim by the Black Suit ransomware group. #Ransomware #CyberSecurity #BlackSuit

🚨 #BREAKING - 1.6 Million Bausch Health DEA Numbers and Prescriber Details Allegedly Compromised. The threat actor Sp1d3rHunters threatens the pharmaceutical company and demands $3,000,000. According to the post, this is another Snowflake-related data breach. #Healthcare #Snowflake #Cyberattack #DataBreach

🚨 #CyberAttack 🚨 🇺🇸Sage Publications Sage Publications, a global academic publisher of books, journals, and library resources, has been listed as a victim by the Akira ransomware group. The hackers allegedly exfiltrated financial data, agreements, and more. #Ransomware #cybersecurity

🚨 #CyberAttack #Healthcare🚨 🇹🇭 #Thailand, Udonthani Cancer Hospital Udonthani Cancer Hospital has been listed as a victim by the RansomHub ransomware group. The hacking group states "everything is down" Ransom deadline: 10th Aug 24. #Ransomware

VMware ESXi Flaw Exploited by Ransomware Groups for Admin Access #cybersecurity #ransomware https://thehackernews.com/2024/07/vmware-esxi-flaw-exploited-by.html

🚨 #DataLeak 🚨 🇸🇦#Saudi, Farm (المزرعة) - A potential data breach at Farm has been detected on a hacking forum: 569,886 users reportedly affected. According to the post, in July 2024, Farm suffered a data breach from their FarmGo app, leading to the theft of a database containing the full name, points, gender, mobile number, email, date of birth, nationality, and barcode of 569,886 users. The confirmation or denial of these claims has yet to be verified, but in the meantime, Farm users are advised to be cautious of potential phishing attempts. #DataBreach

WhatsApp for Windows lets Python, PHP scripts execute with no warning #WhatsApp https://www.bleepingcomputer.com/news/security/whatsapp-for-windows-lets-python-php-scripts-execute-with-no-warning/

🚨 #CyberAttack - BASF | Nunhems Nunhems, a world-renowned brand in the hybrid seed industry, has been listed as a victim by the Fog ransomware group. The hackers allegedly exfiltrated 30 GB of data. #Ransomware

🚨 #CyberAttack 🚨 🇺🇸 #USA, Priefert Priefert, a leading manufacturer of high-quality livestock handling and rodeo equipment, has been listed as a victim by the Hunters International ransomware group. The hackers allegedly exfiltrated 195.8 GB (103,641 files) of data, including databases, PII, financial data, customers’ data, and confidential data. Ransom deadline: 30th Jul 24. #Ransomware

🚨 #DataLeak - Ubook A potential data leak of 710K Ubook users has been detected on a hacking forum. According to the post, in July 2024, Ubook suffered a data breach leading to the theft of a database containing email addresses, full names, and dates of birth of 710,000 users. The threat actor leaked all the data. The confirmation or denial of these claims has yet to be verified, but in the meantime, Ubook users are advised to be cautious of potential phishing attempts. #DataBreach

Fake Falcon Crash Reporter Installer Used to Target German CrowdStrike Users #CrowdStrike 🇩🇪#Germany https://securityaffairs.com/166256/hacking/fake-crowdstrike-falcon-crash-reporter-installer.html

🚨 #CyberAttack 🚨 🇵🇰 #Pakistan, Al-Karam Textile Mills Al-Karam Textile Mills, a leading textile manufacturer and exporter in Pakistan, has been listed as a victim by the RansomHouse ransomware group. The hacking group claims to have encrypted the company data on May 17, 2024. #Ransomware