Hackmanac Cyber Alerts

🏴󠁧󠁢󠁳󠁣󠁴󠁿 Historic Cryptocurrency Seizure in Scotland. 💰 In a Scottish legal first, £110,000 has been seized in Scotland following a violent robbery aimed at stealing cryptocurrency. Prosecutors utilized proceeds of crime legislation to convert Bitcoin into cash. 👮‍♂️ 29 y.o. suspect was convicted for possessing stolen goods after a man was forced to transfer Bitcoin during a 2020 assault in Blantyre, Lanarkshire. Although he denied direct involvement in the robbery, he was identified as the "technical brains" behind the operation and was sentenced to 150 hours of unpaid work and six months of supervision. ⭐️ The High Court in Edinburgh determined that the 23.5 Bitcoin could be converted into £109,601 in cash. This case marks Scotland's first successful tracing and seizure of stolen cryptocurrency. Rennie's lawyer, Marco Guarino, noted the case's unique nature, highlighting its significance in legal history. 👋 Match Systems

🚨Data Breach Alert ‼️ 🇮🇱 Israel - Sacara Cosmetics A potential data breach at Sacara Cosmetics has been detected on a hacking forum, reportedly affecting 692,244 customer records. According to the post, the compromised data includes customer identification information, contact details (address, phone number, cell phone number, and email), club membership details, and other information. The claims have yet to be confirmed or denied, but in the meantime, Sacara Cosmetics customers are advised to be cautious of potential phishing attempts.

🚨Cyberattack Alert ‼️ 🇬🇧UK - Charles Darwin School The ransomware group Black Suit claims to have breached Charles Darwin School. Allegedly, 200 GB of data were exfiltrated, including user data, business data, employee data, student data, and financial data. On 6 September 2024, parents were informed that the school had fallen victim to a ransomware attack, potentially compromising all data held by the school. The school is expected to be without internet and email access for approximately three weeks. In response, the school will be closed from 9 to 11 September to allow staff to re-plan lessons and restore systems. Charles Darwin School Communication: https://www.cdarwin.com/_site/data/files/A6D10B7C82B480CFC39A7DEA3AF4BD79.pdf

🚨 Data Breach Alert ‼️ 🇲🇽Mexico - KFC A potential data breach at KFC Mexico has been detected on a hacking forum: 349,751 customer records reportedly affected. According to the post, this includes information such as names, addresses, phone numbers, images, emails, and other details. The confirmation or denial of these claims has yet to be verified, but in the meantime, KFC Mexico customers are advised to be cautious of potential phishing attempts.

🚨Cyberattack Alert ‼️ 🇵🇷Puerto Rico - Hospital Episcopal San Lucas, Medusa Demands $500,000 The hacking group Medusa claims to have breached Hospital Episcopal San Lucas. Allegedly, 309 GB of sensitive documents, including patients' data and email correspondence, were exfiltrated. Ransom demand: $500,000. Ransom deadline: 18th Sept 24.

🚨Cyberattack Alert‼️ 🇺🇸USA - Cathedral Preparatory School The hacking group INC Ransom claims to have breached Cathedral Preparatory School.

RETHINKING IoT: CYBER RISKS BEHIND CONNECTED DEVICES 🌐📱 The spread of IoT devices is growing at a fast pace. It has been predicted that by 2025, there will be nearly 75 billion connected IoT devices in the world. But while this exorbitant number of “smart objects” 📡 brings significant benefits, it also exposes us to numerous risks⚠️. We’ve identified three categories of IoT Cyber Risks: 👁 Perception risks 🔗 Connection risks 🐛 Application risks Read here the full article⤵️ https://hackmanac.com/news/rethinking-iot-cyber-risks-behind-connected-devices #IoT #CyberRisks #hackmanac #ExpertInsights #CyberThreatMonitoring #CyberSecurityAwareness

🟧 #HackTuesday 🟧 Hack Tuesday: Week 04 - 10 September 2024 ‼️ 82 victims by 20 hacking groups ‼️ The most active ransomware group this week is RansomHub with 22 claimed attacks. The United States is the most affected country, accounting for 51% of the victims. The Manufacturing sector is the most impacted, representing 22% of the claimed targets, followed by the Professional, Scientific, and Technical sectors at 12%. Overall, the claimed stolen data amounts to approximately 26.2 Terabytes. The average Cyber Risk Factor is 4.1. Follow the link for the full list of victims: https://hackmanac.com/news/hack-tuesday-week-04-10-september-2024 #Hackmanac #HT #Cybersecurity

RansomHub ransomware abuses Kaspersky TDSSKiller to disable EDR software https://www.bleepingcomputer.com/news/security/ransomhub-ransomware-abuses-kaspersky-tdsskiller-to-disable-edr-software/

🚨Cyberattack Alert ‼️ 🇪🇸Spain - UPSA A cyberattack on the Universidad Pontificia de Salamanca (UPSA) compromises student data. Full article: https://www.salamancahoy.es/salamanca/universidad/upsa-sufre-cibeataque-haber-comprometido-datos-alumnos-20240910144835-nt.html

🚨Cyberattack Alert ‼️ 🇬🇧UK - ICBC (London branch) The hacking group Hunters International claims to have breached the London branch of Industrial and Commercial Bank of China (ICBC), a Chinese state-owned multinational banking and financial services corporation. Allegedly, 6.6 TB (5,210,357 files) of data were exfiltrated. Ransom deadline: 13th Sept 24.

⚠️ Indodax exchange hack: what happened? On the evening of September 10 (UTC), Indonesia’s largest crypto exchange, Indodax, suffered a major hack. Over $21 million in cryptocurrency assets were stolen. The hacker targeted addresses across multiple blockchains, including Bitcoin, Ethereum, Polygon, Optimism, Tron, and Bitcoin Cash, converting much of the stolen funds into native tokens. 🔍 Main sources of stolen funds. Currently, the stolen assets are held at several cryptocurrency addresses, with the most significant ones being: 0x59101e532bc728599a2d373fcdc7aff58cb48df8 — 5204.3 ETH ($12.3M) 0x90fffbc09e9a5f6d035e92d25d67e244ef5e904f — 6.84M POL ($2.54M) TBooefeY6FvGuyKfvp5yE1HmzhzvXnvA1P — 16.7M TRX ($2.5M) bc1q5uqpn0ha5llrvhcvkq3nfalp8fj7qe3rydcvmf — 25.01 BTC ($1.4M) 0xB0A2e43D3E0dc4C71346A71484aC6a2627bbCbeD — Various Altcoins ($1.23M) 0x3b8f1131a20e131c195bda6fdd6e9be38935eb6d — 380 ETH ($0.88M) qr38mvw5hq7k4q07wpy7qzesdyc3ruhhsuy22n42uj — 500 BCH ($0.16M) 🕵️‍♂️ We continue to monitor the situation and track the hacker's actions as they attempt to move and obscure the stolen funds.

‼️ Indodax Faces $20 Million Loss from Major Exploit ‼️ Both the Indodax web and mobile applications were temporarily taken offline. Source: @CryptoTimes_io, @spotonchain, @CyversAlerts Full article: https://www.cryptotimes.io/2024/09/11/indodax-faces-20-million-loss-from-major-exploit/

🚨 Cyberattack Alert ‼️ 🇮🇱Israel - The Israeli Defense Forces (IDF) and Mossad The Meow hacking group is selling sensitive data of Israeli military personnel, including members of the Israeli Defense Forces (IDF) and Mossad, the national intelligence agency of the State of Israel. The data includes: - 177 passports of IDF soldiers and Mossad operatives; - Personal details such as names, birth dates, and nationalities; - Intelligence and military-related documentation.

🚨Cyberattack Alert ‼️ 🇮🇳India - Vinati Organics targeted for the second time The hacking group RansomHub claims to have breached Vinati Organics. Allegedly, 233 GB of data, including various documents such as PII and financial data, were exfiltrated. Ransom deadline: 27th Sept 2024. This is the second time that Vinati Organics has been listed on a ransomware group's data leak site; previously, on 9 May 2024, the hacking group LockBit claimed to have stolen 63 GB of data.

🚨Cyberattacks Alert ‼️ The PLAY ransomware group added 8 new victims to its data leak site: 🇺🇸Bel-Air Bay Club 🇺🇸Piggly Wiggly Alabama Distributing Company 🇺🇸Evans Distribution Systems 🇺🇸Southeast Cooler 🇺🇸Virginia Dare Extract Co 🇺🇸Joe Swartz Electric Company 🇺🇸Elgin Separation Solutions 🇨🇦Weldco-Beales Manufacturing The ransom deadlines will expire between September 13 and 15, 2024.

🟧 #HackTuesday 🟧 Hack Tuesday: Week 04 - 10 September 2024 ‼️ 82 victims by 20 hacking groups ‼️ The most active ransomware group this week is RansomHub with 22 claimed attacks. The United States is the most affected country, accounting for 51% of the victims. The Manufacturing sector is the most impacted, representing 22% of the claimed targets, followed by the Professional, Scientific, and Technical sectors at 12%. Overall, the claimed stolen data amounts to approximately 26.2 Terabytes. The average Cyber Risk Factor is 4.1. Follow the link for the full list of victims: https://hackmanac.com/news/hack-tuesday-week-04-10-september-2024 #Hackmanac #HT #Cybersecurity

🚨Cyberattack Alert ‼️ 🇨🇦Canada - Hunter Dickinson Inc. (HDI): BianLian claims to have stolen 9.5 TB of data. The hacking group BianLian claims to have breached Hunter Dickinson Inc. (HDI), a global mining group. Allegedly, 9.5 TB of data were exfiltrated, including multiple affiliated companies' data, financial data, HR data, partners and vendors data, engineering data, incidents and injuries data, litigations data, restricted data, geological data, and mining field data from various regions. Additionally, mailboxes, email correspondence, and databases were also compromised.

🚨 HACKMANAC GLOBAL CYBER ATTACKS REPORT 2024 🚨 📊 Our Global Cyber Attacks Report 2024 is now available! 📈 In this 40+ page study we analyze more than 7,000 known attacks that occurred globally in 2023 and compare them to those of the previous five years (2018-2022), highlighting key trends such as: 🔍 Evolution of cyber threats 🔍 Most targeted industries 🔍 Most used attack techniques 🔍 Types of attackers 🔍 Most dangerous cybercrime gangs 🔍 Attack impact by industry, attacker, etc. 📥 Visit our download area for a free copy of the report ⤵ https://hackmanac.com/hackmanac-global-cyber-attacks-report-2024 #Hackmanac #CyberSecurityReport #CyberThreatMonitoring #CyberAttacks2024 #CyberThreats #CyberRiskManagement #ImpactAnalysis

🚨Data Breach ‼️ Data of nearly 300,000 exposed in a cyberattack on car rental giant Avis. https://therecord.media/avis-car-renter-cyberattack-data-breach