Hackmanac Cyber Alerts

🚨Ransomware Alert ‼️ 🇯🇵Japan - Zippo Zippo-Japan’s official online shop and repair services were targeted by a cyberattack, resulting in ransomware encryption of their servers. As a result, the affected systems, including the online shop and repair services, became unusable, causing significant inconvenience to customers. At present, the company is unable to receive emails due to the attack. Source: https://www.zippo-japan.com/pdf/Zippo.pdf

🚨Cyberattack Alert ‼️ 🇿🇦South Africa - Cell C RansomHouse ransomware group claims to have breached Cell C. Allegedly, 2 TB of data were exfiltrated.

🚨🚨🚨Cyberattack Alert ‼️ 🇫🇷France - Atos Space Bears ransomware group claims to have breached Atos. Ransom deadline: 07th Jan 25.

🚨🇰🇷The X account of the Ministry of Environment of the Republic of Korea has been compromised by the threat actors IntelBroker & EnergyWeaponUser.

🚨Data Breach Alert ‼️ 🇮🇹Italy - InfoCert A potential data breach at InfoCert has been detected on a hacking forum: 5.5 million customer records reportedly affected. According to the post, the threat actor known as "PieWithNothing" claims to have exfiltrated 5.5 million customer records updated to 2024. These data, the cybercriminal states, include "1.1 million phones (from all phone fields) and 2.5 million emails (from all email fields)." The confirmation or denial of these claims has yet to be verified.

🚨Cyberattack Update ‼️ 🇨🇱Chile - FALP (Fundación Arturo López Pérez) INC Ransom hacking group has claimed responsibility for the attack on FALP (Fundación Arturo López Pérez). As previously reported by security researcher Germán Fernández 16 days ago, FALP was dealing with a ransomware attack that disrupted its website, client portal (Mi FALP), and appointment reservation services. Germán Fernández had also mentioned the possibility that the attack was carried out by the INC Ransom group.

🚨Data Leak - Volkswagen Volkswagen has faced a major data leak involving sensitive information from 800,000 electric vehicles, including location data and owner contact details. A misconfiguration in the systems of Cariad, VW's software subsidiary, left data stored on Amazon Cloud publicly accessible for months. The exposed information included precise GPS data, enabling detailed movement profiles and linking vehicles to their owners. High-profile individuals such as politicians, business leaders, and law enforcement were among those affected. More details: https://www.spiegel.de/netzwelt/web/volkswagen-konzern-datenleck-wir-wissen-wo-dein-auto-steht-a-e12d33d0-97bc-493c-96d1-aa5892861027

🚨Cyberattack Alert - Cyberhaven On December 24, 2024, Cyberhaven suffered a cyberattack in which an attacker compromised an employee's account to publish a malicious version of the Cyberhaven Chrome extension (version 24.10.4) on the Chrome Web Store. The breach, detected on December 25, allowed the attacker to exfiltrate sensitive user data, including authenticated sessions and cookies, to a domain they controlled (cyberhavennext[.]pro).

🚨Cyberattack Alert ‼️ 🇪🇸Spain - Díaz Food Solutions RansomHub ransomware group claims to have breached Díaz Food Solutions. Allegedly, 30 GB of data were exfiltrated. Ransom deadline: 04th Jan 25.

🚨Cyberattack Alert ‼️ 🇦🇷Argentina - Diario Río Negro Akira ransomware group claims to have breached Diario Río Negro. Allegedly, contact numbers, e-mail addresses of employees and customers, internal financial documents, unique tax identification codes, and other data were exfiltrated.

🚨🚨Cyberattack Alert ‼️ 🇯🇵Japan - Japan Airlines (JAL) Japan Airlines (JAL), the second-largest airline in Japan, suffered a cyberattack on December 26, 2024, disrupting both domestic and international flight operations. The attack, which began at 7:24 AM local time, targeted the airline's internal and external network equipment, causing system malfunctions and communication issues. As of now, nine flights have been delayed, with more disruptions anticipated

🚨Cyberattack Alert ‼️ 🇮🇩Indonesia - BPPKAD Kabupaten Blora Hellcat hacking group claims to have breached the Sistem Informasi Pengelolaan Keuangan Daerah (SIPKD) of BPPKAD Kabupaten Blora. Allegedly, 82 GB of data were exfiltrated, including user and access control data, financial and budgetary data, taxation data, program and project management details, administrative and organizational data, transactions and receipts, legal and regulatory data, and personally identifiable information (PII). Ransom demand: 1.5 BTC (approx. $150,000). Ransom deadline: 02nd Jan 25.

🚨Cyberattack Alert ‼️ 🇹🇷Turkey - Car Care Plan Turkey Hellcat hacking group claims to have breached Car Care Plan Turkey. Allegedly, 50 GB of financial records, legal documents and statements, customer records, and internal documents and records were exfiltrated. Ransom demand: 0.5 BTC (approx. $50,000). Ransom deadline: 02nd Jan 25.

🚨Cyberattack Alert ‼️ 🇲🇽Mexico - Michelle Accesorios Sarcoma ransomware group claims to have breached Michelle Accesorios. Allegedly, 296 GB of data were exfiltrated. Ransom deadline: 02nd Jan 25.

🟧 #HackTuesday 🟧 Hack Tuesday: Week 18 - 24 December 2024 ⚠️162 cyberattacks across 33 countries ⚠️ ➡️The most active threat actor this week is Kill Security claiming responsibility for 23 cyberattacks. ➡️The USA is the most affected country, accounting for 53.7% of the victims, with 87 cyberattacks. ➡️The Manufacturing sector is the most impacted, representing 17.3% of the claimed targets. ➡️The estimated Critical cyberattacks account to 25 (15.4% of the total). ➡️Overall, the claimed compromised data amounts to approximately 32.6 TB. ☣️The average ESIX® (Estimated Severity Index) is 4.48, a +7.14% increase from last week. Follow the link for list of attacks (claims or disclosures): https://hackmanac.com/news/hack-tuesday-week-18-24-december-2024 #Hackmanac #HT #Cybersecurity

🟧 #HackTuesday 🟧 Hack Tuesday: Week 11 - 17 December 2024 ⚠️212 cyberattacks across 47 countries ⚠️ ➡️The most active threat actor this week is FunkSec claiming responsibility for 22 cyberattacks. ➡️The 🇺🇸USA is the most affected country, accounting for 39% of the victims, with 82 cyberattacks. ➡️The Manufacturing sector is the most impacted, representing 16% of the claimed targets. ➡️The estimated Critical cyberattacks account to 38 (18% of the total). ➡️Overall, the claimed compromised data amounts to approximately 39 TB. ☣️The average ESIX® (Estimated Severity Index) is 4.16, a -7.56% drop from last week. Follow the link for list of attacks (claims or disclosures): https://hackmanac.com/news/hack-tuesday-week-11-17-december-2024 #Hackmanac #HT #Cybersecurity

🎄🎁 Stay Safe This Festive Season: Avoid Holiday Scams! 🛡💻 The holiday season is all about joy and giving, but it’s also prime time for cybercriminals! From phishing emails to fake deals, scammers are more active than ever. Don't let them ruin your festive cheer! 🔍 Here’s what to watch out for: 1️⃣ Phishing emails and fake texts. 2️⃣ Fake online stores with too-good-to-be-true deals. 3️⃣ Gift card scams and emotional manipulation. 4️⃣ Charity fraud exploiting your generosity. 5️⃣ Package delivery scams via SMS or email. 6️⃣ Social media marketplace fraud. 🎅 Let’s celebrate safely and scam-free! 🛍✨ 👉 Full Article & Tips here⤵️ https://hackmanac.com/news/how-to-stay-safe-from-scams-during-the-festive-season #CyberSecurity #CyberSecurityAwareness #FestiveSeason #ExpertInsights #StayCyberSafe #Hackmanac

According to a notification received from CySecurity Pte Ltd on behalf of Federal Bank, "the sample data provided by the Bashe hacking group in their claim is from a previous 2022 breach of Fedfina Financial Services Ltd, a subsidiary of Federal Bank" (https://www.halcyon.ai/attacks/everest-attacks-feedbank-financial-services-ltd). As always, we will perform our independent checks and provide further updates as more information becomes available.

🎄✨ It’s the most wonderful time of the year! ✨🎄 We want to thank you for your support throughout 2024. Merry Christmas and a Safe New Year to you and your loved ones! 🌟🎁🎅 Hackmanac Team #MerryChristmas #HappyNewYear #HappyHolydays2024 #StayCyberSafe

🌟 Exciting News from HACKMANAC! 🌟 We’re thrilled to share that on December 12, 2024, our CEO, Sofia Scozzari, was re-elected to the Steering Committee of Clusit – the Italian Association for Information Security. This marks Sofia’s second consecutive term on the Steering Committee, following her impactful contributions as a member of the Scientific Committee in previous years. 🎉 Congratulations to Sofia and the newly elected Steering Committee members! https://hackmanac.com/news/hackmanac-ceo-reelected-to-clusit-streering-committee #CyberSecurity #HACKMANAC #CLUSIT #InfoSecurity #Commitment