Hackmanac Cyber Alerts

🚨Ransomware Alert ‼️ 🇯🇵🇺🇸 - Kurita America Inc. (KAI), a subsidiary of Kurita Water Industries Ltd. based in Minnesota, United States, suffered a ransomware attack on November 29, 2024. Multiple servers were encrypted, and data potentially belonging to customers, business partners, and employees may have been leaked. Following the detection of unauthorized access, compromised servers were isolated to prevent further damage. Source: https://news.kurita-water.com/241207-01

🚨Cyberattack Alert ‼️ 🇺🇸USA - Boston Chinatown Neighborhood Center (BCNC) Interlock ransomware group claims to have breached Boston Chinatown Neighborhood Center (BCNC). Allegedly, personal data of employees, contracts, and much more were exfiltrated.

🚨Cyberattack Alert ‼️ 🇮🇹Italy - CO-VER Power Technology S.p.A. Everest hacking group claims to have breached CO-VER Power Technology. Allegedly, 800 GB of financial data, client and supplier data, contracts, confidential documents, and other data were exfiltrated. Ransom deadline: December 21, 2024.

"Pwned", The Book, Is Now Available for Free You can find the direct download links here: https://troyhunt.com/pwned-the-book-is-now-available-for-free/

🚨Data Breach Alert - Signzy A threat actor on a Russian hacking forum claims to have breached Signzy, an online identity verification service, in November 2024 and is offering 668GB of customer onboarding data for sale. The breach allegedly affects major companies, including SBI Mutual Fund, ICICI Prudential, OneCard, Kotak, and Bank of Baroda (BOB). The dataset includes sensitive customer and employee information such as images of tax ID cards, signatures, ID cards, video recordings, bank data, geolocation, and device information. According to TechCrunch, Signzy confirms a security incident. https://techcrunch.com/2024/12/02/indian-online-id-verification-firm-signzy-confirms-security-incident/

🚨🚨🚨Cyberattack Alert ‼️ 🇺🇸USA - Blue Yonder The Termite ransomware group claims responsibility for the attack on Blue Yonder. Allegedly, 680 GB of data were exfiltrated, including databases, email lists "for future attacks" (over 16,000 entries), miscellaneous documents (over 200,000), reports, and insurance documents. On November 21, a ransomware attack on Blue Yonder, a third-party technology provider for supply chain solutions, disrupted operations for several major companies, including Starbucks, BIC, and Morrisons. The attack affected critical systems just before Thanksgiving. Starbucks experienced disruptions in its employee scheduling system but maintained payroll operations. BIC reported limited shipping delays, while Morrisons faced issues with warehouse management for fresh foods, relying on backup systems to mitigate the impact.

🚨Cyberattack Alert ‼️ 🇪🇸Spain - Originpath Group 8Base ransomware group claims to have breached Originpath Group. Allegedly, invoice receipts, accounting documents, personal data, certificates, employment contracts, a huge amount of confidential information, confidentiality agreements, and personal files were exfiltrated. Ransom deadline: 10th Dec 24.

🚨Cyberattack Alert ‼️ Saudi Arabia - Pan Gulf Holding Sarcoma hacking group claims to have breached Pan Gulf Holding, an investment holding company. Allegedly, 113 GB of data were exfiltrated. Samples have been provided. Ransom deadline: 13th Dec 24.

🚨Cyberattack Alert ‼️ 🇦🇹Austria - PEZ Abyss hacking group claims to have breached PEZ, a candy company world-famous for producing pocket character dispensers that hold fruit-flavored candy pieces. Allegedly, 1.1 TB of data were exfiltrated. Ransom deadline: 14th Dec 24.

🚨Cyberattack Alert ‼️ 🇭🇷Croatia - Port of Rijeka 8Base ransomware group claims to have breached Port of Rijeka. Allegedly, invoice receipts, accounting documents, personal data, certificates, employment contracts, a huge amount of confidential information, confidentiality agreements, and personal files were exfiltrated. Ransom deadline: 10th Dec 24.

🚨 UNDERSTANDING CYBER ATTACKS: A COMPREHENSIVE OVERVIEW🚨 🌐 Discover the Types of Cyber Attacks and how they target individuals, businesses, and governments. From phishing scams to malware, DoS attacks, and web exploits like SQL Injection and XSS—our latest article breaks it all down. 📋 What’s Inside: 🔍 A overview of main families of Cyber Attacks and the Best Practices for a proper defense: 📨 Phishing and Social Engineering tactics (and their variations like Smishing & Vishing) 💻 Malware: Ransomware, Trojans, Spyware and more 🌊 DoS and DDoS Attacks 🌐 Web Attacks: SQL Injection, XSS, Defacement 📖 Learn how cybercriminals operate and why awareness is your first line of defense. 👉 Here the full article⤵️ https://hackmanac.com/news/understanding-cyber-attacks-a-comprehensive-overview 🔒 Stay informed. Stay protected. Stay Cyber Safe! 🔒 #cyberattacks #expertinsights #hackmanac #malware #phishing #DDoS #SQLInjection #XSS #StayCyberSafe

🚨Cyberattack Update ‼️ 🇧🇷Brazil - Sabesp The deadline has expired, and the RansomHouse hacking group has leaked all the data exfiltrated from Sabesp.

🚨Cyberattack Alert ‼️ 🇯🇵Japan - Ito En (伊藤園) Play hacking group claims to have breached Ito En, the largest green tea distributor in Japan. Allegedly, private and personal confidential data, clients documents, budget, payroll, accounting, contracts, taxes, IDs, finance information, and other data were exfiltrated. Ransom deadline: 10th Dec 24.

🚨🚨Cyberattack Alert ‼️ USA - SRP Federal Credit Union Nitrogen ransomware group claims to have breached SRP Federal Credit Union. Allegedly, 650 GB of confidential customer data, including full names, SSNs, DOBs, addresses, account numbers, and credit ratings, were exfiltrated.

⚠️🇺🇸Chemonics International: Data Breach Impacts 263,000 Individuals https://cybernews.com/news/chemonics-usaid-contractor-data-breach/

📢Europol - Fraudulent shopping sites tied to cybercrime marketplace taken offline. Over 200 terabytes of digital evidence secured during investigation More details: https://www.europol.europa.eu/media-press/newsroom/news/fraudulent-shopping-sites-tied-to-cybercrime-marketplace-taken-offline

🚨Cyberattack Alert ‼️ Ecuador - Frigopesca C. A. RansomHub ransomware group claims to have breached Frigopesca C. A. Allegedly, 4 TB of data, including data of the CEO, CFO, NAS, source codes of applications, and databases of customers, were exfiltrated. Ransom deadline: 12th Dec 24.

🚨Cyberattack Alert ‼️ 🇵🇱Poland - Alior Bank Bashe hacking group claims to have breached Alior Bank. Allegedly, financial documents and internal documents totaling 60 MB were exfiltrated. Ransom deadline: 10th Dec 24.

🚨Ransomware Update ‼️ 🇯🇵Japan - Iseki Hokkaido, a subsidiary of Iseki & Co., Ltd., confirmed a ransomware attack that encrypted electronic data on some of its servers. Source: https://www.iseki.co.jp/cms/upload/pdf/news/co_20241205.pdf

🚨Phishing Alert‼️ 🇯🇵Japan - Hiroshima Bank (広島銀行) Hiroshima Bank announced emergency measures in response to fraudulent SMS and email phishing attacks impersonating the bank. As of November 23, 2024, these attacks have resulted in unauthorized transfers amounting to approximately 60 million yen (approx. $400,000). To mitigate further risks, the bank will reduce the transfer limits for inactive personal internet banking accounts starting December 6, 2024. https://www.hirogin.co.jp/ir/news/paper/news241205.pdf