Hackmanac Cyber Alerts

🚨Cyberattack Alert ‼️ 🇲🇽Mexico - Crystal and Lavisa Brain Cipher hacking group claims to have breached Crystal and Lavisa. Allegedly, 40 GB of data were exfiltrated. Ransom deadline: 25th Dec 24.

🚨Cyberattack Alert ‼️ 🇦🇺Australia - Muswellbrook Shire Council SafePay ransomware group claims to have breached Muswellbrook Shire Council. Allegedly, 175 GB of data were exfiltrated. A few days ago, Muswellbrook Shire Council in New South Wales announced on its official website that it had experienced a cyber incident involving unauthorized access to its IT systems. The breach disrupted various services, making online payment systems unavailable. Ransom deadline: 15th Dec 24.

🚨Cyberattack Alert ‼️ 🇪🇬Egypt - Kazyon Money Message ransomware group claims to have breached Kazyon, the largest Egyptian discount supermarket chain. For now, no further information has been provided.

🚨 HOW TO RESPOND TO A RANSOMWARE ATTACK: GUIDE FOR DIRECT AND INDIRECT VICTIMS 🛡 🔒 Ransomware is a growing threat to individuals and organizations. Knowing how to respond effectively—whether you're directly attacked or impacted by a breach**—is critical. 🌟 **Key Highlights: ✅ Steps to take if you’re directly attacked (e.g., isolate, report, restore data). ✅ What to do as an indirect victim (e.g., monitor accounts, secure your data). ✅ Preventive tips for individuals and SMBs to enhance cybersecurity. 💡 Take action today to protect yourself! Learn about strong passwords, multi-factor authentication, regular backups, and more. 📖 Read here the full article: https://hackmanac.com/news/how-to-respond-to-a-ransomware-direct-and-indirect-victims-guide #CyberSecurity #CyberSecurityAwareness #Ransomware #ExperInsight #Hackmanac #CyberResilience #DataProtection

🚨🚨🚨Cyberattack Alert ‼️ 🇮🇱Israel, Fuse - Hackers demand $50 million FunkSec hacking group claims to have breached Fuse. The cybercriminal group states that they managed to exfiltrate full ROCKSDB files, more than 100GB of RocksDB data, millions of records containing logs, metadata, secret hashes and sessions, system details, transactions, network secrets, API keys, cookies, and authentication tokens. The ransom demand, which will expire on January 5, 2025, is $50,000,000.

🇫🇷France - Data Breach Alert 🚨 The threat actor known as "st0jke" claims to have breached four entities in the education sector: - ENSAE Paris - Penninghen - École de Psychologues Praticiens (EPP) - FACO Paris In all posts on the hacking forum, the cybercriminal mentions owning all user data, including source code, as well as various accesses (SMTP, MOODLE). According to their claims, the exfiltrated databases contain information such as student data, including photos, IBANs, ID cards, and passports. The confirmation or denial of these claims has yet to be verified

🚨Cyberattack Update‼️ 🇳🇦Namibia - Telecom Namibia The cybercriminal group Hunters International leaked all 626.3 GB of data allegedly stolen from Telecom Namibia.

🚨Cyberattack Update‼️ 🇲🇷Mauritania - Bankily The Bashe hacking group updates the post about the attack on Bankily and claims that the stolen data has been sold to a third party.

🚨Ransomware‼️ 🇦🇷Argentina - Comisión Nacional de Energía Atómica (CNEA) The Comisión Nacional de Energía Atómica (CNEA) in Argentina suffered a ransomware attack on November 27, 2024. https://www.infobae.com/politica/2024/12/10/el-gobierno-confirmo-un-intento-de-hackeo-a-los-sistemas-de-la-comision-de-energia-atomica-dicen-que-no-afecto-al-proyecto-carem-ni-otros-datos-sensibles/ The attack, attributed to the Money Message ransomware group, encrypted the organization’s data and disrupted administrative networks across all locations. While government officials claim no sensitive information, such as the CAREM nuclear reactor plans, was accessed, experts warn that data exfiltration cannot be ruled out in ransomware cases.

🚨 BREAKING‼️ $DOGE flaw exploited by hacker, crashing 69% of nodes and exposing a vulnerability that could have taken down the entire network. Source: Cointelegraph

🚨Cyberattack Alert ‼️ 🇺🇸USA - City of Marlow, Oklahoma SafePay ransomware group claims to have breached the City of Marlow. Allegedly, 80 GB of data were exfiltrated. At the time of writing, the city's website cannot be reached. On December 2nd, the City of Marlow's Facebook page announced that web payments were down.

🚨Data Breach Alert - Young Living Essential Oils A potential data breach involving Young Living Essential Oils has been detected on a hacking forum, reportedly affecting 1.1 million users. According to the post, the leaked data includes information such as full names, email addresses, physical addresses, and order details of 1,131,062 users. The authenticity of these claims has yet to be verified, but in the meantime, users of Young Living Essential Oils are advised to remain vigilant against potential phishing attempts.

🚨Cyberattack Alert ‼️ 🇧🇴Bolivia - Minera San Cristóbal S.A. Bashe hacking group claims to have breached Minera San Cristóbal S.A., the most important mining undertaking of Bolivia. Allegedly, financial documents, internal documents, and personal documents were exfiltrated. Ransom deadline: 17th Dec 24.

🚨Cyberattack Alert ‼️ 🇺🇸USA - Krispy Kreme On November 29, 2024, Krispy Kreme, Inc. identified unauthorized activity on its IT systems, resulting in operational disruptions, including issues with online ordering in parts of the U.S. While the incident is expected to have a material short-term financial impact, cybersecurity insurance may offset some costs https://www.sec.gov/Archives/edgar/data/1857154/000185715424000123/dnut-20241211.htm

🚨Cyberattack Alert ‼️ 🇹🇷Turkey - NSK Group ROTA Lynx ransomware group claims to have breached NSK Group ROTA.

🚨Cyberattack Alert ‼️ 🇵🇪Peru - Corporación BJR Akira ransomware group claims to have breached Corporación BJR. Allegedly, 25 GB of data, including contact numbers and email addresses of employees and customers, inside correspondence, internal financial documents, passports, and confidential documents, were exfiltrated.

🚨Cyberattack Alert ‼️ 🇮🇹Italy - Renée Blanche Akira ransomware group claims to have breached Renée Blanche. Allegedly, 10 GB of data, including personal employee and customer information with emails and phone numbers, as well as some internal corporate financial data, were exfiltrated.

🚨Cyberattack Alert ‼️ 🇺🇸USA - Rutherford County Schools Rhysida hacking group claims to have breached Rutherford County Schools. The sample provided shows passports and other confidential documents. Ransom demand: 20 BTC (approx. $1,960,000). Ransom deadline: December 18, 2024. Our database indicates that Rutherford County Schools experienced a network disruption on November 25, 2024, during Thanksgiving week. The disruption affected systems used by 52,000 students, 7,000 employees, and contracted bus operators. Additionally, our data shows this is the second time Rutherford County Schools has been targeted by a ransomware group. On October 19, the Black Suit hacking group also listed the school on its data leak site, claiming to have exfiltrated 4.7 TB of data.

🚨Cyberattack Alert ‼️ 🇮🇳India - QuizTarget FunkSec hacking group claims to have breached QuizTarget. The cybercriminal group states that 6 GB of data, including millions of users' full names, payment details, emails, passwords, IDs, ages, source code, phone numbers, account transactions, secret hashes, cookies, social IDs, and more, were exfiltrated. Ransom demand: $1,000,000. Ransom deadline: 01st Jan 25.

🚨Cyberattack Alert ‼️ 🇦🇺Australia - Ainsworth Game Technology Medusa ransomware group claims to have breached Ainsworth Game Technology, a leading manufacturer and supplier of gaming solutions. Allegedly, 852.40 GB of data were exfiltrated. Ransom demand: $1,200,000. Ransom deadline: 24th Dec 24.