Hackmanac Cyber Alerts

🚨🚨🚨Major #DataLeak Alert 🚨🚨🚨 National Public Data - 2.9 Billion Records, Including SSNs, Reportedly Exposed National Public Data, a criminal records and background check service owned by Jerico Pictures Inc., was targeted last April when the cybercriminal group USDoD listed 2.9 billion records for sale for $3.5 million. These records were initially exfiltrated by the threat actor SXUL. Today, a new threat actor calling themselves "Fenice," allegedly collaborating with USDoD, claims to have leaked these records. The leaked information includes personal details such as full names, physical addresses, phone numbers, and critically, Social Security Numbers (SSNs) in plain text. Some affected users are already taking to Reddit to report the misuse of their Social Security Numbers (SSNs). If confirmed, this data breach at National Public Data could be one of the largest and most significant cybersecurity incidents in recent years. #CyberAttack #DataBreach #CyberSecurity #Hack

🚨 #CyberAttack Alert🚨 🇮🇳 Sobha Ltd. Sobha Ltd., one of the largest and only backward integrated real estate players in the country, has been listed as a victim by the RansomHub ransomware group. The hackers allegedly exfiltrated 10 GB of "very private data". Ransom deadline: 11th Aug 24. #Ransomware #RansomHub #Hack #Cybersecurity

🟧 #HackTuesday 🟧 Hack Tuesday: Week 31 July - 06 August 2024 🚨 79 victims by 25 hacking groups 🚨 The most active ransomware group this week is RansomHub with 11 claimed attacks. The most affected country is the United States, accounting for 54% of the victims, while the Manufacturing sector is the most impacted, accounting for 27% of the claimed targets, followed by the Professional, Scientific and Technical sectors with 15%. Overall, the claimed stolen data amounts to approximately 34.5 Terabytes. The average #CyberRisk Factor is 4.0. #Ransomware #CyberAttack #HT #Cybersecurity

🚨 #CyberAttack 🚨 🇪🇸 #Spain, Casco Antiguo Casco Antiguo, a company dedicated to the manufacture, distribution and sale of commercial, technical and recreational diving equipment has been listed as a victim by the Hunters International ransomware group. #Ransomware

🚨 #CyberAttack 🚨 🇲🇾 #Malaysia, IOI Corporation Berhad IOI Corporation Berhad, one of the leading global integrated and sustainable palm oil players, has been listed as a victim by the Fog ransomware group. The hackers allegedly exfiltrated 20 GB of data. #Ransomware #MYR

🚨 #CyberAttack 🚨 🇪🇸 #Spain, Fractalia Group Fractalia Group has been listed as a victim by the Hunters International ransomware group. The hackers allegedly exfiltrated 153 GB (372,710 files) of data. #Ransomware #CyberSecurity

🚨#CyberAttack Update 🚨 🇺🇸#USA, Keytronic - ransomware causes $17 million in losses In May, we reported that Keytronic had fallen victim to the BlackBasta ransomware group. In a SEC filing, the company disclosed that due to this event, it incurred approximately $2.3 million of additional expenses and believes that it lost approximately $15 million of revenue during the fourth quarter, resulting in losses of over $17 million. https://www.sec.gov/Archives/edgar/data/719733/000071973324000044/q42024preliminaryexhibit991.htm #Ransomware

🚨 #CyberAttack🚨 🇫🇷#France: Grand Palais Hit by Ransomware Attack On August 3-4, 2024, cybercriminals launched a ransomware attack on the Grand Palais, which manages the financial data of 40 French museums, including the Louvre. The attackers have encrypted some of the financial data and are threatening to release it within 48 hours if the demanded ransom is not paid. The attack occurred over the weekend when IT staff presence was low. Article and image by Le Parisien: https://www.leparisien.fr/high-tech/cybersecurite-le-grand-palais-et-plusieurs-musees-dont-le-louvre-victimes-dune-attaque-par-rancongiciel-05-08-2024-LYA4YVRAW5CQHPVRHSC3LAGPHM.php #Ransomware

🚨 #DataBreach 🚨 🇦🇪#UAE, LuLu - 190K email and phone numbers exposed On July 11, we reported a potential data breach at Lulu Hypermarket. The analysis conducted by HIBP confirms that 190,506 unique email addresses were exposed and shared, along with associated phone numbers. https://haveibeenpwned.com/PwnedWebsites#LuLu #CyberAttack

CROWDSTRIKE OUTAGE: A GLOBAL WAKE-UP CALL FOR CYBER SECURITY Recently, a global IT outage caused by a faulty CrowdStrike software update caused unprecedented global chaos, affecting nearly 8.5 million Microsoft Windows devices, causing widespread disruption and crippling various services worldwide, including critical services. While Microsoft has since released a free tool to help victims recover from the flawed update (and this was not the first time this happened), there are three aspects of the issue that concern us: - What are the implications for cyber security in the coming months, given that thousands of victims worldwide have been forced to publicly disclose their reliance on CrowdStrike and Microsoft technologies, indirectly exposing themselves to more targeted attacks? - Going forward, how can we mitigate the potential domino effects looming over our globally interconnected digital society, where a single point of failure can cause widespread disruption across multiple sectors? Are these specific risks properly defined and assessed? - What are the real financial implications and liabilities of this disruption, beyond the calculated losses to large companies? What about the end users and customers of these companies? We attempted to explore this further in this article ⤵️ https://www.linkedin.com/pulse/crowdstrike-outage-global-wake-up-call-cyber-security-hackmanac-4zfgf/ #CyberSecurity #CrowdStrikeOutage #Hackmanac #StayCyberSafe

🚨 #DataBreach Alert 🚨 🇨🇳 China, Ministry of Human Resources and Social Security #CyberVolk #hacking group claimed to have breached the Ministry of Chinese Human Resources and Social Security. The group stated it was "Responsible For Any Damage" All logs are available for sale.

🚨 #Defacement Alert 🚨 🇮🇳, India, several victims ShadowDefenders hacking group took responsibility of the defacement of 4 Indian websites "due to the support of Israel" (as they stated): https://socialshutter.in https://ritukhatrimakeovers.in https://triggerdigits.in https://idealrealty.co.in #OpIsrael #OpIndia

🚨 #DataBreach Alert 🚨 🇦🇪, UAE, LuLu Hypermarket The Emirati-based LuLu retail store had 190k unique email addresses exposed and shared on a popular hacking forum, along with associated phone numbers: https://www.csoonline.com/article/2516119/hackers-steal-data-of-200k-lulu-customers-in-an-alleged-breach.html

🚨 #CyberAttack 🚨 🇨🇦 #Canada, Dahl Valve Limited #Cactus Ransomware group took responsibility for the attack to the Canadian company Dahl Valve. The group claimed to have stolen 80GB of the company's data, including PII (Personal Identifiable Information), corporate data, agreements and contracts, financial documents, DB backups. The attackers provided 1% of the data as samples. #Ransomware #DataBreach

🚨 #CyberAttack 🚨 🇲🇽 #Mexico, Penoles Industries #Akira Ransomware group took responsibility of the attack to Mexican company Penoles Industries. The group claimed to have stolen 30GB of the company's data, including employee personal documents and certificates, contracts and agreements, detailed financial data. #Ransomware #DataBreach

📰 News🗞 #Google #Chrome Adds App-Bound Encryption to Protect Cookies from #Malware https://www.redpacketsecurity.com/google-chrome-adds-app-bound-encryption-to-protect-cookies-from-malware/

Our CEO Sofia Scozzari interview for The Jersey Journal after New Jersey City University #cyberattack⤵️ https://www.nj.com/hudson/2024/07/njcu-students-must-be-vigilant-monitor-all-accounts-after-ransomware-attack-cybersecurity-experts-say.html #NJCU #ransomware

Our CEO Sofia Scozzari interview for The Jersey Journal after New Jersey City University #cyberattack⤵️

🚨 Malware alert 🚨 #BingoMod #Android #RAT steals money from victims' bank accounts and wipes data ⤵️ https://securityaffairs.com/166410/malware/bingomod-android-rat.html

🚨 #CyberAttack Alert 🚨 🇸🇪 🇸🇬 🇺🇸, Dometic Group, PeoplesHR, National Beverage Corp. #MEOW #ransomware group added 3 new victims to their #DLS: - Dometic Group - PeoplesHR - National Beverage Corp. #Ransomware