Hackmanac Cyber Alerts

🚨Malware Campaign Alert ‼️ 🇮🇹Italy - A malware campaign named SambaSpy is targeting Italian users Launched in May, it takes control of webcams and steals passwords. Read more: https://www.ansa.it/canaletecnologia/notizie/cybersecurity/2024/09/20/campagna-malware-prende-di-mira-gli-italiani-si-chiama-sambaspy1f3c6211-045d-423b-aa38-43675e21472f.html

🚨Cyberattack Alert ‼️ 🇺🇸USA - River Region Cardiology Associates BianLian ransomware group claims to have breached River Region Cardiology Associates. Allegedly, 1.2 TB of data, including finance data, HR data, multiple patients’ PII and PHI records, partners', vendors', and providers' private data, mailboxes and internal & external email correspondence, and databases, were exfiltrated.

🚨Cyberattack Alert ‼️ 🇯🇵Japan - Up to 70,000 Customer Personal Information Possibly Leaked - Cyberattack on Taiju Life Insurance (大樹生命)’s Subcontractor. Taiju Life Insurance announced on the 20th that its subcontractor, Sougyo Service (倉業サービス), suffered a cyberattack on the 12th. The incident, reported on the 18th, could have led to the leakage of up to 70,000 customers' personal information, particularly for those who requested booklet deliveries after October 2021.

🚨Cyberattack Alert ‼️ 🇩🇪Germany - Nusser Mineral Oil The hacking group INC Ransom claims to have breached Nusser Mineral Oil. Reportedly, confidential data, customers' data, financial data, and HR information have been leaked

🚨Cyberattack Alert ‼️ 🇦🇪UAE - RAR Holding The hacking group RansomHub claims to have breached RAR Holding. Allegedly, 62 GB of data were exfiltrated. Ransom deadline: 28th Sept 24.

🚨Cyberattack Alert ‼️ 🇺🇸USA - Greene Acres Nursing Home, Rhysida Demands 10 BTC The ransomware group Rhysida claims to have breached Greene Acres Nursing Home. Ransom demand: 10 BTC (approx. $635,000). Ransom deadline: 27th Sept 24.

🚨Data Leak Alert ‼️ 🇪🇸Spain - Ministerio de Educación, Cultura y Deporte (MEDC) A potential data breach at the Ministerio de Educación, Cultura y Deporte (MEDC) has been detected on a hacking forum: A threat actor leaked 31k personnel records. According to the post, this includes information such as full names, locations, organization, role and position, and email addresses. The confirmation or denial of these claims has yet to be verified.

🚨 Data Leak Alert ‼️ 🇬🇧UK - Central Tickets A threat actor claims to have leaked for free 1 million customer records belonging to Central Tickets. The confirmation or denial of these claims has yet to be verified.

🚨BREAKING ‼️ 🇮🇳India: Star Health: 31 Million Customers Reportedly Affected. Hacker Leaks Data via Telegram Chatbots A hacker known as xenZen has allegedly exfiltrated 7.24 TB of data from Star Health, India's largest health insurer, affecting over 31 million customers. This data, which includes medical records, policy information, and sensitive personal details, is available for free on Telegram chatbots or for sale in bulk.

🚨BREAKING ‼️ 🇮🇳India: Star Health: 31 Million Customers Reportedly Affected. Hacker Leaks Data via Telegram Chatbots A hacker known as xenZen has allegedly exfiltrated 7.24 TB of data from Star Health, India's largest health insurer, affecting over 31 million customers. This data, which includes medical records, policy information, and sensitive personal details, is available for free on Telegram chatbots or for sale in bulk for $150,000 or 100,000 entries for $10,000 each. Reuters confirmed the validity of some of these documents by downloading over 1,500 files.

🚨Researchers Detail CVE-2024-38014 0-Day Vulnerability in Windows MSI Installers Exploited in the Wild 🚨 https://securityonline.info/researchers-detail-cve-2024-38014-0-day-vulnerability-in-windows-msi-installers-exploited-in-the-wild/

🚨Data Breach Alert ‼️ - DELL A potential data breach at DELL has been detected on a hacking forum: 10,800 employees belonging to Dell and their partners are allegedly affected. According to the post, in September 2024, Dell suffered a minor data breach that exposed internal employee data. Among the exposed information are details such as Employee ID, Employee full name, Employee status, and Employee internal ID. The confirmation or denial of these claims has yet to be verified.

🚨Cyberattack Alert ‼️ 🇹🇷Turkey - Aroma Bursa Meyve Suları ve Gıda San. A.Ş. RansomHub ransomware group claims to have breached Aroma Bursa Meyve Suları ve Gıda San. A.Ş., a company specializing in the production of fruit-based products. Allegedly, 500 GB of data were exfiltrated. Ransom deadline: 30th Sept 24.

🚨Cyberattack Alert ‼️ 🇩🇪Germany - Wertachkliniken Bobingen The ransomware group Cloak claims to have breached Wertachkliniken Bobingen and leaked 291 GB of data. In the last few hours, the group revealed the victim's name, which was previously posted on September 4 but with the name censored as 'We**.de.' As reported by various media outlets, in early September, a cyberattack paralyzed the IT systems of the Wertach clinics in Bobingen and Schwabmünchen.

🚨 Major Hacking Attack on BingX Cryptocurrency Exchange 🚨 Late in the evening of September 19 (UTC), the BingX cryptocurrency exchange was targeted in a significant hacking attack, resulting in the theft of over $48 million in digital assets. 🔍 Details of the Attack: - Targeted Blockchains: Ethereum, Optimism, Polygon, BSC, Arbitrum, Tron, and others. - Stolen Funds: A significant portion was converted into native tokens of these networks. 💰 Stolen Assets Held In the Following Addresses: - TWYDPSCK4vfuMCmJYJvPcvWeUDtyT42mZB: $1.12M - 0xcfc14fa81226074036622976d95897ff84b58d66: $0.52M - 0xf7e8033366166f92eb477b7b38e0d47d47b43326: $9.4M - 0x49284f0ab5098d7effb3392124903c081d1b9f7e: $0.55M - 0xf26e64ef4300ca027d2ffedd7d765d7a3906091c: $13.9M - 0x1dd7daf089c16856155fefd7e2170966bb6b3aee: $16.5M - 0xb77a4a9678315775c4ba89f18f84f87538e748f5: $2.4M - 0xb0146aec3593410c8307b570af69adf4d74678b3: $0.85M - 0x63dc352ddfc17aa04edac47ce36e186c1e54b02c: $2.5M 🔒 Current Status: We are actively monitoring the situation and tracking the hacker's subsequent actions to launder the stolen funds. 👋 Match Systems

🚨Crypto Theft Alert ‼️ BingX - Crypto exchange BingX confirmed it experienced a hack resulting in a “minor asset loss,” although the total loss is still being calculated. The hack was detected on September 20, after abnormal network access was found in one of BingX’s hot wallets. Initial reports from blockchain security firm PeckShield suggest that over $13.5 million was moved from the hot wallet, while analytics platform Lookonchain reported $26 million in losses. BingX’s chief product officer, Vivien Lin, stated that the exchange had activated an emergency plan, including asset transfers and withdrawal suspensions, and assured users that the losses are minimal and will be fully compensated. Withdrawals have been temporarily suspended and are expected to resume within 24 hours. More details: https://cointelegraph.com/news/singapore-based-bing-x-exchange-hot-wallet-suspected-hack

🚨Data Breach Alert ‼️ 🇯🇵Japan - PARKING PAY (パーキングペイ) A potential data breach at PARKING PAY（パーキングペイ) has been detected on a hacking forum: 267,354 users reportedly affected. According to the post, among these are information such as User ID, Email Address, Points (limited time), Number and Invitation code The confirmation or denial of these claims has yet to be verified, but in the meantime, PARKING PAY（パーキングペイ) users are advised to be cautious of potential phishing attempts.

The Dark Side of IoT: The Most Dangerous Cyber Incidents So Far 🚨 From hacked baby monitors to compromised nuclear facilities, the IoT has exposed us to unprecedented cyber risks. Our latest article dives deep into the top 10 most dangerous IoT cyber incidents that have occurred so far, highlighting the vulnerabilities of our increasingly connected world. 💡Discover how these attacks happened, the lessons learned and what we can do to protect ourselves moving forward. 👉 Read the full article here: https://hackmanac.com/news/the-dark-side-of-iot-the-most-dangerous-cyber-incidents-so-far #CyberSecurity #IoT #IoTSecurity #CyberAttacks #CyberThreatMonitoring #Hackmanac #ExpertInsight #StayCyberSafe

🚨Cyberattack Alert ‼️ 🇺🇸USA - Ring Power CAT Another CAT-related attack, this time by the RansomHub ransomware group. The group claims to have exfiltrated 371 GB of data belonging to Ring Power, a Caterpillar dealer in North and Central Florida. On September 16, we discovered that another CAT dealer, Rimco, was allegedly compromised by a different group known as 'ZeroSevenGroup'

🚨Cyberattack Alert ‼️ 🇺🇸USA - Liberty First Credit Union The hacking group RansomHub claims to have breached Liberty First CU, Nebraska’s 4th largest credit union. Allegedly, 254 GB of data, including client databases, passports, and financials, were exfiltrated. Ransom deadline: 29th Sept 24.