Hackmanac Cyber Alerts

🚨Ransomware attack takes down health system network in Micronesia https://therecord.media/ransomware-attack-micronesia-health-system

🚨Cyberattack Alert‼️ 🇦🇪UAE - Rixos Hotels Embargo hacking group claims to have breached Rixos Hotels, allegedly exfiltrating 1.8 TB of data. Ransom deadline: March 16, 2025.

🟧 #HackTuesday 🟧 Hack Tuesday: Week 05 - 11 March 2025 ⚠️474 cyber attacks across 44 countries ⚠️ ➡️The most active threat actor last week was NoName057(16) claiming responsibility for 105 cyber attacks. ➡️🇪🇸Spain is the most affected country, accounting for 22.6% of incidents, with 107 cyber attacks. ➡️The Gov / Mil / LE sector is the most impacted, accounting for 36.7% of incidents with 174 cyber attacks. ➡️The estimated Critical cyber attacks account to 18(3.8% of the total). ➡️Overall, the claimed compromised data amounts to approximately 32TB. Follow the link for the list of attacks (claimed or disclosed): https://hackmanac.com/news/hack-tuesday-week-05-11-march-2025 #Hackmanac #HT #Cybersecurity

🔥 HEALTHCARE AT RISK: Cyber Threats and Solutions for 2025 🏥💻 🚨 The healthcare sector remains one of the most targeted by cybercriminals. 📊 Key Insights from Our Analysis about Healthcare: 🔹 827 publicly disclosed healthcare cyber incidents in 2024—a 30% increase from the previous year 📈 🔹 99.5% of attacks were driven by cybercrime, with ransomware involved in 2 out of 3 attacks 🔹 78% of incidents affected the Americas, followed by Europe (13%) and Asia (5%) 🔹 90% of attacks had a significant impact, with 67% classified as “high” severity and 23% as “critical” 💡 How Can Healthcare Organizations Defend Themselves? Here are our suggestion for the sector: ✅ Zero Trust Architecture ✅ Incident Response Plans ✅ Employee Training ✅ IoT Security ✅ Threat Intelligence ✅ Regulatory Compliance 🚑 Cybersecurity in healthcare is no longer optional—it’s critical to ensuring patient safety and trust. 🔗Read the full analysis here: https://hackmanac.com/news/healthcare-at-risk-cyber-threats-and-solutions-for-2025 #CyberSecurity #Healthcare #StrategicThreatIntelligence #ExperInsight #Hackmanac #ZeroTrust #CyberThreats

🚨Cyberattack Alert ‼️ 🇺🇸USA - Rocket Stores Cactus hacking group claims to have breached Rocket Stores. Allegedly, 3.2 TB of data were exfiltrated, including personal identifiable information, corporate internal data, contracts, NDAs, financial data/payroll, legal documents, employees and executives’ personal data, corporate confidential and personal correspondence, etc.

🚨Cyberattack Alert ‼️ 🇺🇸USA - Urban One Cactus hacking group claims to have breached Urban One. Allegedly, 2.5 TB of data were exfiltrated, including personal identifiable information, database backups, corporate internal documents, contracts, agreements, financial data/payroll, legal documents, employees and executives’ personal data, corporate confidential and personal correspondence, etc. A sample has been leaked.

🚨Cyber Attack‼️ 🇪🇸Spain - COAG (Coordinadora de Organizaciones de Agricultores y Ganaderos) The agricultural organization COAG (Coordinadora de Organizaciones de Agricultores y Ganaderos) has reported that its website was hacked after demanding the immediate suspension of the trade agreement between the EU and Morocco. More details: https://gaceta.es/espana/una-organizacion-agraria-sufre-el-hackeo-de-su-web-tras-denunciar-la-competencia-desleal-de-marruecos-que-les-esta-arruinando-20250308-1236/

🚨Cyberattack Alert ‼️ 🇺🇸USA - Skyward Specialty Insurance Kill Security hacking group claims to have breached Skyward Specialty Insurance. Ransom deadline: 20th March 2025.

🚨Cyberattack Alert ‼️ 🇫🇷France - France Universités FunkSec hacking group claims to have breached France Universités. Allegedly, personal data of 35,000 students and 4,000 staff members were exfiltrated. Ransom demand: 15 BTC (approx. $1,200,000).

🚨Scam Alert‼️ 🇯🇵Japan - Yamagata Bank Yamagata Bank has suspended immediate interbank transfers via its Net EB corporate internet banking service due to confirmed cases of voice phishing (vishing) scams impersonating the bank. Victims receive an automated call claiming to be from Yamagata Bank, instructing them to update their Net EB account details. If they follow the prompts, the call is transferred to a scammer who requests their email address and sends a phishing link. Victims are then directed to enter company and banking credentials on a fake website. Subsequently, the scammers call back and guide them through actions on Net EB or token authentication, leading to unauthorized fund withdrawals. Source: https://www.yamagatabank.co.jp/release/pdf/20250310.pdf

🚨Cyberattack Alert ‼️ 🇩🇪Germany: All4Labels - Global Packaging Group Akira hacking group claims to have breached All4Labels - Global Packaging Group. Allegedly, 192 GB of financial data (audits, payment details, reports) and contact numbers and email addresses of employees and customers were exfiltrated.

🚨Cyberattack Alert ‼️ 🇺🇸USA - Veristat Akira hacking group claims to have breached Veristat. Allegedly, 63 GB of data were exfiltrated, including HR documents, contact numbers and email addresses of employees and customers, Medicare documents, customer medical records, confidential licenses, agreements and contracts, and financial data (audits, payment details, reports).

🚨Data Breach Alert‼️ 🇪🇸Spain - FEDA (Confederación de Empresarios de Albacete) The threat actor Moon_WALK claims to have breached FEDA (Confederación de Empresarios de Albacete) and is selling 36,166 records. According to the post, the dataset, dated February 2025, includes email addresses and phone numbers.

🚨Cyber Attacks Alert‼️ Akira hacking group has listed 7 new victims, which are part of a batch of attacks dating back to February 2025: 🇪🇸 Lotrans Portes SL 🇹🇼 Solomon Technology Corporation 🇲🇽 Granjero Feliz 🇳🇱 GraphicWorld Print & Packaging 🇯🇲 Gore Developments 🇺🇸 Electro-Connect, Inc 🇺🇸 L.J. Engineering, Inc

🚨Cyberattack Alert ‼️ 🇮🇹Italy - Sirius Nitrogen hacking group claims to have breached Sirius. Allegedly, 542 GB of data were exfiltrated, including detailed documents describing their products and services, control systems, and energy automation solutions, as well as contracts with employees and personal information of employees. The data has been fully leaked.

🚨Cyberattack Alert ‼️ 🇮🇹Italy: UNIMORE - Università degli Studi di Modena e Reggio Emilia FunkSec hacking group claims to have breached UNIMORE - Università degli Studi di Modena e Reggio Emilia. According to the post, the group managed to exfiltrate 1,000 files from the intranet, including data from the U-Gov project, financial transactions, internal documents, secret plans, PDFs, DOCs, XLSX files, messages, and Gmail data containing phone numbers. Additionally, the cybercriminals have announced that after the leak, a DDoS attack will target the university. Ransom deadline: 20th March 2025.

🟧 #HackTuesday 🟧 Hack Tuesday: Week 05 - 11 March 2025 ⚠️474 cyber attacks across 44 countries ⚠️ ➡️The most active threat actor last week was NoName057(16) claiming responsibility for 105 cyber attacks. ➡️🇪🇸Spain is the most affected country, accounting for 22.6% of incidents, with 107 cyber attacks. ➡️The Gov / Mil / LE sector is the most impacted, accounting for 36.7% of incidents with 174 cyber attacks. ➡️The estimated Critical cyber attacks account to 18(3.8% of the total). ➡️Overall, the claimed compromised data amounts to approximately 32TB. Follow the link for the list of attacks (claimed or disclosed): https://hackmanac.com/news/hack-tuesday-week-05-11-march-2025 #Hackmanac #HT #Cybersecurity

🚨Cyberattack Alert ‼️ 🇮🇩Indonesia - PT Catur Sentosa Adiprana Tbk RansomHub hacking group claims to have breached PT Catur Sentosa Adiprana Tbk. Allegedly, 112 GB of data were exfiltrated. Ransom deadline: 17th March 2025.

#X outage and the hacktivist group claims. Here's the first one. The hacktivist group known as Dark Storm Team claims responsibility for the disruptions of X

🚨Cyberattack Alert ‼️ 🇪🇸Spain - Arcusin Akira hacking group claims to have breached Arcusin. Allegedly, 55 GB of corporate NDAs, confidential licenses, agreements and contracts, internal correspondence, passports, and other employee and customer documents have been exfiltrated.