Hackmanac Cyber Alerts

🇮🇹Italy- Vatican and Israel implicated in Italian hacking scandal, leaked files reveal https://www.politico.eu/article/vatican-israel-italian-hacking-scandal-uk-lithuania-equalize/

🚨Cyberattack Alert - 🇬🇧London School of Science & Technology Cactus hacking group claims to have breached the London School of Science & Technology. Allegedly, 845 GB of data were exfiltrated, including personally identifiable information, confidential corporate documents and correspondence, financial documents, and personal data of students and staff.

🚨Crypto Theft - 🇦🇪M2 On October 31, 2024, at 3:16 UAE time, M2, a global crypto investment platform, experienced a cybersecurity breach involving $13.7 million. The incident was promptly addressed within 16 minutes, at 3:32 AM. M2 has since fully resolved the issue, restoring all customer funds and taking responsibility for any potential losses. @zachxbt provided the theft addresses on his Telegram channel https://t.me/investigations/174: ETH: 0x968b6984cba14444f23ee51be90652408155e142 (https://etherscan.io/address/0x968b6984CbA14444F23EE51bE90652408155e142#internaltx) BTC: bc1qu4kh7wa38xpkrp8frgxl4sak88wx0jug8n3vfj (https://blockchair.com/bitcoin/address/bc1qu4kh7wa38xpkrp8frgxl4sak88wx0jug8n3vfj) SOL: EKko14NvgqdvNttUb8JjXkVGuUs6BTikjfN3hqW4LQoL (https://solscan.io/account/EKko14NvgqdvNttUb8JjXkVGuUs6BTikjfN3hqW4LQoL#transfers) M2 Security Update: https://explore.m2.com/newsroom/security-update

🚨Cyberattack - 🇬🇧Metropolis Group Metropolis Group, publisher of Nursing Times, Property Week, and Viz, suffered a cyberattack compromising personal data of some current and former employees. The attackers penetrated two servers containing shared folders with sensitive data, including passports, bank details, National Insurance numbers, addresses, email addresses, driving licenses, and other HR-related documents. More details: https://pressgazette.co.uk/publishers/b2b/emap-metropolis-cyberattack-news-industry/

🚨Cyberattack Alert ‼️ 🇨🇳China - Menzies CNAC (formerly Jardine Aviation Services) Space Bears hacking group claims to have breached Menzies CNAC. Allegedly, exfiltrated data include financial documents, SQL databases, confidential files, customer database, and personal documents of passengers and employees. Ransom deadline: 11th Nov 24.

🚨Cyberattack 🚨 🇯🇵Japan - Yanmar Holdings Yanmar Holdings Co., Ltd. announced the unauthorized use of its management email domain (@)hanasaka-challenge.yanmar[.]com by a third party to send emails to a broad audience domestically and internationally. The emails, reportedly requesting financial transactions, were not sent by Yanmar or its affiliates. Approximately 317,000 emails were sent between September 25 and October 23, 2024. Source: https://www.yanmar.com/jp/news/2024/10/25/143645.html

‼️ Fired Disney staffer accused of hacking menu to add profanity, wingdings, removes allergen info ‼️ https://www.theregister.com/2024/10/30/fireddisney_employee_hacksmenu/

🚨Cyber attack wipes out DHL delivery tracking systems causing issues for Nisa retailers 🚨 DHL's delivery tracking systems were disrupted globally on October 31, 2024, due to a cyber attack targeting its third-party supplier, Microlise. The incident has impacted DHL’s ability to provide real-time tracking updates for deliveries, specifically affecting Nisa retailers. Although deliveries are still occurring as scheduled, DHL currently has no live visibility on their progress. More details: https://www.betterretailing.com/dhl-cyber-attack/

🚨Data Leak Alert 🚨 🇵🇪Peru - A potential data leak of information belonging to the Gobierno Regional Ancash has been detected on a hacking forum. The threat actor using the alias "shdow" claims to have leaked 180 CSV tables stolen from gob[.]pe/regionancash. Among the leaked data are various administrative records, including emails, phone numbers, and other personnel-related information.

🚨Cyberattack Alert ‼️ 🇺🇸USA - Housing Authority of the City of Los Angeles (HACLA) Cactus hacking group claims to have breached HACLA. Allegedly, 861 GB of data were exfiltrated, including personally identifiable information, database backups, financial documents, executives' and employees' personal data, customer information, corporate confidential data, and correspondence. This is not the first time that cybercriminal groups have targeted HACLA. Previously, the Housing Authority of the City of Los Angeles reported a data breach after the LockBit 3.0 ransomware group infiltrated its systems, encrypted files, and leaked sensitive data

🚨Data Leak ‼️ 🇵🇪Peru - Topitop The threat actor known as ExKase20 allegedly leaked data of 1,810,084 Topitop customers on a hacking forum. According to the post, the information includes full names, IDs, emails, phone numbers, and other details. Confirmation or denial of these claims has not yet been verified, but in the meantime, Topitop customers are advised to be cautious of potential phishing attempts.

🚨Data Breach ‼️ 🇸🇬Singapore - MyRepublic The threat actor known as abyss0 claims to have breached MyRepublic Group Limited, a Singaporean communications service provider. The breach reportedly includes 473,296 images containing sensitive information such as ID cards, statements, and images of houses and businesses. Additionally, the data includes 186,692 entries, with 31,651 unmasked records and 155,041 partially masked entries.

🚨Data Breach ‼️ 🇯🇵Japan- Shimogamo Saryo (株式会社下鴨茶寮) Shimagamo Saryo Online Shop reported a data breach involving unauthorized access to personal and credit card information. On July 18, 2024, it was disclosed that the online shop had suffered unauthorized access, potentially compromising 19,235 customers' personal data and 16,682 customers' credit card details. The breach occurred due to a vulnerability in the old system used by the shop before May 13, 2024. Compromised information includes names, addresses, birth dates, and credit card details (cardholder name, number, expiration date, and security code) for purchases made between June 12, 2021, and May 13, 2024. Source: https://www.shimogamosaryo.co.jp/news/owabi20241031

🚨Data Breach Alert ‼️ 🇵🇪Peru - Interbank Threat actor "kzoldyck" claims to have leaked data on over 3 million Interbank customers, including full names, account IDs, birthdates, nationalities, and detailed bank account information. The breach involves around 3.7 TB of data, with a partial release already available. The attacker also alleges possession of clear-text usernames and passwords, enabling bank account access, some of which are restricted to Peru IP addresses with biometric validation. Additionally, internal API, LDAP, and Azure credentials were reportedly compromised.

🚨Ransomware ‼️ 🇯🇵Japan - Taketa City 竹田市 On October 24, the servers of Betsudai Kosan Co., Ltd, contracted by the city of Taketa for public housing management, suffered a ransomware attack, potentially leading to a data leak of personal information held by the company. This attack affected tenants of public housing complexes Alba Daikancho and Alba Sakuramachi. Taketa City has requested a detailed report from Betsudai Kosan and will provide updates as more information becomes available. Source: https://www.city.taketa.oita.jp/kurashitetsuzuki/sumaitochi/10487.html

🚨 Why Manufacturing is a Top Target for Cybercrime 🚨 📈 A sharp rise in cyber attacks on the Manufacturing sector in recent years has positioned it as the main targeted industry in 2023. 📊 Our data shows a shift from 5% of attacks in 2022 to 16% in 2023. 🏭 🤔 Why is Manufacturing such a prime target? - Low Tolerance for Downtime ⏱️ - Valuable Intellectual Property 💼 - Cybersecurity not a priority🔒 - Supply Chain Vulnerabilities 🔗 - High IoT Usage 📡 ➡️ As the Manufacturing industry continues to digitize, strengthening Cybersecurity is essential to protect critical assets and processes from potentially devastating impacts. 🌐 Read the full article here: https://hackmanac.com/news/why-manufacturing-is-a-top-target-for-cybercrime #Cybersecurity #Manufacturing #Cybercrime #CyberThreats #Hackmanac #ExpertInsights

🚨Cyberattack Alert ‼️ 🇺🇸USA - SmartSource Technical Solutions Fog hacking group claims to have breached SmartSource Technical Solutions. Allegedly, 81.5 GB of data were exfiltrated, including medical documents, human resources records, employee and customer contacts, NDAs, SSNs, family court general orders, driver’s licenses, and personal passports. This is the second time the company has been targeted by hackers; on September 9, the ransomware group BianLian also listed SmartSource Technical Solutions, claiming to have stolen 700 GB of data, including NDAs, financial data, client information, and email archives.

🚨Data Breach Alert ‼️ 🇺🇸USA - Hisense USA A potential data breach at Hisense USA has been detected on a hacking forum. According to the post, in October 2024, Hisense USA suffered a data breach leading to the theft of all customer information. The confirmation or denial of these claims has yet to be verified, but in the meantime, Hisense USA customers are advised to be cautious of potential phishing attempts.

On October 29, the #X account of Truth Terminal founder Andy Ayrey was hacked, resulting in the promotion of a scam memecoin, Infinite Backrooms (IB). The hackers used Ayrey’s account to boost the token’s value, which reached a $25 million valuation before they profited $602,500. The scam involved purchasing 124.6 million IB tokens at launch for $38,400 and selling them within 45 minutes. More details: https://cointelegraph.com/news/truth-terminal-founder-x-account-hacked-promotes-scam-memecoin

🚨Cyberattack Alert ‼️ 🇺🇸USA - Texas Lawyers' Insurance Exchange RansomHub hacking group claims to have breached Texas Lawyers' Insurance Exchange. Allegedly, 57 GB of data were exfiltrated. Ransom deadline: 08th Nov 24.