Hackmanac Cyber Alerts

🚨Cyberattack Alert ‼️ 🇯🇵Japan - Nikki Universal Co. Ltd Hunters International ransomware group claims to have breached Nikki Universal Co. Ltd. Allegedly, 761.8 GB (476,342 files) of data were exfiltrated. Ransom deadline: 10th Jan 25. Nikki-Universal confirmed a security incident involving the encryption of electronic data on some of its servers.

🚨Cyberattacks Alert ‼️ 8Base ransomware group claims to have breached 6 new companies: 🇫🇷 Voltaire Avocats 🇫🇷 Tarnaise des Panneaux 🇨🇭 SolGeo AG 🇧🇷 Grupo Buddemeyer 🇺🇸 Jay Enn Corporation 🇺🇸 Carrollton Orthopaedic Clinic All ransom deadlines for the mentioned victims are set for 13th January 2025.

🚨Cyberattack Alert‼️ 🇸🇳Senegal - Banque de l'Habitat du Sénégal (BHS) has been facing a significant cyberattack since December 24, 2024, which has paralyzed its information system and made several services unavailable. https://senego.com/banque-de-lhabitat-du-senegal-une-attaque-informatique-paralyse-ses-services_1787744.html These disruptions include email services, the Bank to Wallet option, and ATM networks. Customers have been unable to access their accounts or withdraw funds, forcing some to visit branches for basic transactions. Although the bank has not made an official statement yet, internal sources have confirmed the ongoing issues.

🚨Cyberattack Alert ‼️ 🇫🇷France - GROUPE GM RansomHub ransomware group claims to have breached GROUPE GM. Allegedly, 28 GB of data were exfiltrated. Ransom deadline: 10th Jan 25.

🚨DDoS Alert ‼️ 🇯🇵Japan - NTT Docomo has been experiencing ongoing disruptions in its search site "goo" and smartphone payment service "d払い" due to a cyber attack that started on January 2, 2025. The attack, identified as a Distributed Denial of Service (DDoS) attack, has caused severe network congestion, making it difficult for users to access various services, including web mail service "OCN." Despite efforts to resolve the issue, no timeline for recovery has been provided. While "d払い" faced temporary issues earlier in the day, it has since been restored. https://www3.nhk.or.jp/news/html/20250102/k10014684251000.html

🎄🎁 Stay Safe This Festive Season: Avoid Holiday Scams! 🛡💻 The holiday season is all about joy and giving, but it’s also prime time for cybercriminals! From phishing emails to fake deals, scammers are more active than ever. Don't let them ruin your festive cheer! 🔍 Here’s what to watch out for: 1️⃣ Phishing emails and fake texts. 2️⃣ Fake online stores with too-good-to-be-true deals. 3️⃣ Gift card scams and emotional manipulation. 4️⃣ Charity fraud exploiting your generosity. 5️⃣ Package delivery scams via SMS or email. 6️⃣ Social media marketplace fraud. 🎅 Let’s celebrate safely and scam-free! 🛍✨ 👉 Full Article & Tips here⤵️ https://hackmanac.com/news/how-to-stay-safe-from-scams-during-the-festive-season #CyberSecurity #CyberSecurityAwareness #FestiveSeason #ExpertInsights #StayCyberSafe #Hackmanac

🟧 #HackTuesday 🟧 Hack Tuesday: Week 25 - 31 December 2024 ⚠️268 cyberattacks across 41 countries ⚠️ ➡️The most active threat actor this week is NoName057(16) claiming responsibility for 94 cyberattacks. ➡️The USA is the most affected country, accounting for 17.9% of the victims, with 48 cyberattacks. ➡️The Gov / Mil / LE sector is the most impacted, representing 22.4% of the claimed targets with 60 cyberattacks. ➡️The estimated Critical cyberattacks account to 23 (8.6% of the total). ➡️Overall, the claimed compromised data amounts to approximately 15 TB. ☣️The average ESIX® (Estimated Severity Index) is 3.73, a -16,74% drop from last week. Follow the link for list of attacks (claims or disclosures): https://hackmanac.com/news/hack-tuesday-week-25-31-december-2024 #Hackmanac #HT #Cybersecurity

🚨🚨‘Major incident’: China-backed hackers breached US Treasury workstations https://edition.cnn.com/2024/12/30/investing/china-hackers-treasury-workstations/index.html

🚨Cyberattack Alert ‼️ 🇮🇳India - Thomas Cook India was impacted by a cyberattack that disrupted its IT systems, leading the company to shut down the affected infrastructure. The disruption affected operations, but further details on the scope of the attack have not yet been disclosed. https://www.business-standard.com/companies/news/thomas-cook-shut-down-cyber-attack-it-infrastructure-bse-124123100576_1.html

🚨DDoS Alert ‼️ 🇯🇵Japan - Mizuho Bank and Resona Bank may have been targeted by distributed denial of service (DDoS) attacks, which overwhelmed their online systems with massive traffic. Mizuho Bank experienced disruptions starting around 7 a.m. on Tuesday, affecting both individual and corporate customer sites, but restored access by 10 a.m. Resona Bank faced similar issues on Saturday night, making it difficult for retail customers to connect to its online services. https://www.japantimes.co.jp/business/2024/12/31/companies/resona-bank-cyberattack/

🚨Cyberattack Alert ‼️ 🇫🇷France - Cogitis DragonForce ransomware group claims to have breached Cogitis. Allegedly, 81.49 GB of data were exfiltrated. Ransom deadline: 05th Jan 25.

🚨Data Breach Alert ‼️ 🇪🇬Egypt - Misr Pharmacies The threat actor known as "Satanic" claims to have breached Misr Pharmacies, an online pharmacy providing a broad range of pharmaceutical, health products, and services in Egypt. Allegedly, the data covers orders (shipment, customer, and payment details) and e-prescriptions (customer, address, and prescription info with timestamps). The data has been fully leaked.

🚨🚨🚨Cyberattack Alert ‼️ 🇺🇸USA - MetLife RansomHub ransomware group claims to have breached MetLife. Allegedly, 1 TB of data were exfiltrated. Ransom deadline: 12th Jan 2025. The samples provided by the cybercriminal group show documents belonging to ProVida AFP, Chile’s largest private pension fund administrator, acquired by MetLife in 2013.

🚨Cyberattack Update - Ford Ford Motor Company's X account was briefly hacked, posting unauthorized messages like "Israel is a terrorist state" and "Free Palestine." The posts were swiftly removed, and Ford clarified they don't reflect the company's views. An investigation is underway with platform administrators.

🚨Data Breach Alert ‼️ 🇺🇸USA - Harley-Davidson The threat actor known as "888" claims to have breached Harley-Davidson. Allegedly, 66.7k rows of customer data were exfiltrated, including first name, last name, full name, address, city, state, zip code, email address, mobile phone, home phone, email preference, SMS preference, VIN, vehicle make, vehicle model, vehicle year, sale date, warranty exp date, last service date, etc.

🚨Data Breach Alert ‼️ Spain - Albastar The threat actor known as "Corps" claims to have breached Albastar. Allegedly, operational data, internal communications, and other relevant documents were exfiltrated.

🚨Cyberattack Alert ‼️ 🇯🇵Japan - International Peace Center Hiroshima (国際平和拠点ひろしま) The website for International Peace Center Hiroshima has been compromised through unauthorized access, resulting in altered pages. As a precautionary measure, the website has been taken offline for recovery work. Users are advised not to visit the site and to avoid opening any suspicious emails or clicking on links in such emails. Source: https://www.pref.hiroshima.lg.jp/soshiki/232/juyofusei.html

🚨Data Breach Update: 🇮🇹Italy - InfoCert Confirms Data Breach InfoCert, a major provider of digital identity services (SPID) in Italy, has confirmed a data breach involving 5.5 million user records, including 1.1 million phone numbers and 2.5 million email addresses. The data was found for sale on a deep web forum for $1,500 on December 27, 2024. InfoCert attributed the breach to an attack on a third-party supplier, not compromising its own systems or user credentials for access to its services. More details: https://www.wired.it/article/infocert-spid-furto-dati/?utm_source=facebook&utm_medium=social&utm_campaign=dhfacebook&utm_content=null

🚨Cisco Confirms Authenticity of Data After Second Leak https://www.securityweek.com/cisco-confirms-authenticity-of-data-after-second-leak/ Cisco admitted the data came from a public-facing DevHub instance, not its core systems. While much of the data was publicly available, some files were not meant to be exposed.

🚨Cyberattack Alert ‼️ 🇻🇪Venezuela - Laboratorios Vargas RansomEXX ransomware group claims to have breached Laboratorios Vargas. Allegedly, 37.6 GB of data were exfiltrated and leaked.