Hackmanac Cyber Alerts

Here's our last #RiskFriday! 🚀 Discover with us the evolution of: 📈 Global Average ESIX© score 🔄 ESIX© changes compared to the previous week 🏭 Top 5 impacted industries (with highest average ESIX©) 🌍 Top 5 impacted countries (with highest average ESIX©) 📆 Weekly, monthly, and quarterly ESIX© variations Stay informed with our actionable strategic intelligence insights discovering how the global threat landscape evolves and impacts different industries and regions. 👉 Explore this week's insights⤵️ ✅ Mining / Quarrying is our first new entry and the most impacted industry of the week, followed by Healthcare and Energy / Utilities ✅ Hong Kong is the second new entry and the most impacted country ✅ Morocco is the third new entry and the third most impacted country #RF #CyberThreatIntelligence #StrategicCyberThreatIntelligence #ESIX #Hackmanac #HackRisk #CyberSecurity

🟧 #HackTuesday 🟧 Hack Tuesday: Week 12 - 18 February 2025 ⚠️320 cyber attacks across 38 countries ⚠️ ➡️The most active threat actor last week was NoName057(16) claiming responsibility for 69 cyber attacks. ➡️The USA is the most affected country, accounting for 35.6% of incidents, with 114 cyber attacks. ➡️The Gov / Mil / LE sector is the most impacted, accounting for 20.9% of incidents with 67 cyber attacks. ➡️The estimated Critical cyber attacks account to 28(8.8% of the total). ➡️Overall, the claimed compromised data amounts to approximately 2 PB. Follow the link for the list of attacks (claimed or disclosed): https://hackmanac.com/news/hack-tuesday-week-12-18-february-2025 #Hackmanac #HT #Cybersecurity

🚨Stablecoin Bank @0xinfini Hacked 🚨 $49,500,000 stolen. The hacker swapped 49.5 million $USDC for 49.5 million $DAI and subsequently purchased 17,696 $ETH.

🚨Ransomware Alert ‼️ 🇭🇰Hong Kong - Invest Hong Kong (InvestHK) InvestHK, the investment promotion arm of the Hong Kong government, experienced a ransomware attack on February 22, 2025, affecting its internal customer relationship management system, intranet, and website operations. Preliminary findings suggest that basic client information, including contact details and records of InvestHK staff, may have been compromised. More details: https://www.info.gov.hk/gia/general/202502/23/P2025022300511.htm

🚨Data Breach Alert ‼️ 🇪🇸Spain - Wireless DNA The hacker group FOG claims to have leaked the source code of Wireless DNA, a company operating in the telecommunications industry.

0-Day in Parallels Desktop Allows Root Privilege Escalation, PoC Released https://securityonline.info/0-day-in-parallels-desktop-allows-root-privilege-escalation-poc-released/

🚨Cyberattack Alert ‼️ 🇯🇵Japan - Digital Technologies Corporation Cicada3301 hacking group claims to have breached Digital Technologies Corporation. Allegedly, 150 GB of data were exfiltrated. Ransom deadline: 26th March 2025.

🚨Cyberattack Alert ‼️ 🇪🇸Spain - ONDARA LOGÍSTICA RansomHub hacking group claims to have breached ONDARA LOGÍSTICA. Allegedly, 120 GB of data were exfiltrated. Ransom deadline: 03rd March 2025.

🚨Data Breach Alert ‼️ 🇸🇦Saudi - Al Hilal SFC The threat actor known as Ddarknotevil claims to have leaked documents belonging to Al Hilal SFC following a data breach that occurred in February 2025. According to the post, the stolen data includes sensitive information such as financial records, player contracts, IBANs, and personally identifiable information (PII). The leaked data reportedly consists of 824 files totaling 1.71 GB in size.

🚨 Cyberattack Hits Maryland County That's Home To NSA Headquarters 🚨 https://www.zerohedge.com/technology/cyberattack-hits-maryland-county-thats-home-nsa-headquarters

🚨Cyberattack Alert ‼️ 🇪🇬Egypt - SPEED SC & Logistics Hunters International hacking group claims to have breached Speed SC & Logistics. Allegedly, 444.8 GB (285,891 files) of data were exfiltrated.

🚨Cyberattack Alert ‼️ 🇪🇸Spain - Servicios CCOO Hunters International hacking group claims to have breached CCOO Services. Allegedly, 570.8 GB (689,764 files) of data were exfiltrated. Ransom deadline: 02nd March 2025.

🚨Cyber Attack Alert🚨 🇳🇦Namibia - Paratus Group Akira ransomware group claims responsibility for the cyber attack against Paratus Group. According to the post on the onion blog, the group managed to exfiltrate 84 GB of data, including NDAs, driver licenses, financial data, contact numbers, emails, etc. Paratus Namibia reported a cyberattack on its internal IT system on February 19, causing operational disruptions.

🚨Cyberattack Alert ‼️ 🇮🇳India - BC Jindal Group RansomHub hacking group claims to have breached BC Jindal Group. Allegedly, 140 GB of data were exfiltrated.

🚨Cyberattack Alert ‼️ 🇸🇦Saudi Arabia - Al Bawani DragonForce hacking group claims to have breached Al Bawani and demanded a ransom of $20,000,000. Allegedly 6.96 TB of data were exfiltrated, including clients, projects, employees, and more. Ransom deadline: 27th Feb 25.

🚨Cyberattack Alert ‼️ 🇺🇸USA - The Siegel Group Interlock hacking group claims to have breached The Siegel Group. Allegedly, 11 TB of data (567,708 files) were exfiltrated, including QL databases and personal data of all employees.

Here's our last #RiskFriday! 🚀 Discover with us the evolution of: 📈 Global Average ESIX© score 🔄 ESIX© changes compared to the previous week 🏭 Top 5 impacted industries (with highest average ESIX©) 🌍 Top 5 impacted countries (with highest average ESIX©) 📆 Weekly, monthly, and quarterly ESIX© variations Stay informed with our actionable strategic intelligence insights discovering how the global threat landscape evolves and impacts different industries and regions. 👉 Explore this week's insights⤵️ ✅ Mining / Quarrying is our first new entry and the most impacted industry of the week, followed by Healthcare and Energy / Utilities ✅ Hong Kong is the second new entry and the most impacted country ✅ Morocco is the third new entry and the third most impacted country #RF #CyberThreatIntelligence #StrategicCyberThreatIntelligence #ESIX #Hackmanac #HackRisk #CyberSecurity

🚨🚨 Data Breach Alert: Investing​.com – 6.5M User Records Allegedly Compromised 🚨🚨 A threat actor has claimed to have exploited an IDOR (Insecure Direct Object Reference) vulnerability in investing​.com, an Israel-based financial markets platform. According to the post, the vulnerability allowed unauthorized access to user data, exposing 6,486,700 user records before it was patched after approximately 50 million requests. The reportedly exfiltrated data includes user IDs, registration timestamps, platforms, email addresses, and registration sources. The majority of the records belong to users who registered between 2024 and 2025, though some date back as far as 2014. The confirmation or denial of these claims has yet to be verified.

#DeepSeek found to be sharing user data with #TikTok parent company ByteDance https://www.malwarebytes.com/blog/news/2025/02/deepseek-found-to-be-sharing-user-data-with-tiktok-parent-company-bytedance

🚨Cyberattack Alert ‼️ 🇲🇽Mexico - Medicalfile Kill Security hacking group claims to have breached Medicalfile. Allegedly, 519 GB of data were exfiltrated, including medical documents. Ransom deadline: 01st Mar 25.