Hackmanac Cyber Alerts

🚨Hackers steal millions of dollars from EBT accounts, leaving thousands without food assistance 🚨 The attackers used skimming devices on credit card machines at gas stations and other businesses, as well as bot calls to exploit a third-party vendor system. They also leveraged stolen personal information, such as social security numbers and dates of birth, to access funds. Frances Jacobsen, a victim, reported her account drained to just five cents on November 9, 2024. https://www.kcbd.com/2024/11/26/hackers-steal-millions-dollars-ebt-accounts-leaving-thousands-without-food-assistance/

🌐💻 HOW TO BE PREPARED FOR A CYBER ATTACK: A GUIDE TO PROTECT YOUR ASSETS 🔒🛡 Cyberattacks are more common than ever—are you ready? 🚨 Discover practical steps to safeguard your data, protect your privacy, and respond effectively if the unexpected happens. 💡 Discover how to: ✔️ Secure your devices and networks ✔️ Spot suspicious activity ✔️ Respond to a breach and recover 👉 Read the full article here⤵️ https://hackmanac.com/news/how-to-be-prepared-for-a-cyber-attack-a-guide-to-protect-your-assets #CyberSecurity #CyberAttack #DataProtection #ExpertInsights #Hackmanac #CyberAware #StayCyberSafe

🚨Cyberattack Alert ‼️ 🇳🇦Namibia - Namforce Life Insurance Space Bears hacking group claims to have breached Namforce Life Insurance. Allegedly, financial documents, accounting reports, backups, customer database, and personal information of employees and clients were exfiltrated. Ransom deadline: 06th Dec 24.

🚨Cyberattack Alert ‼️ 🇨🇦Canada - Delmar International Rhysida ransomware group claims to have breached Delmar International. Ransom demand: 20 BTC (approx. $1,900,000). Ransom deadline: 06th Dec 24.

🚨Cyberattack Alert ‼️ 🇬🇧United Kingdom - Alder Hey Children's NHS Foundation Trust INC Ransom ransomware group claims to have breached Alder Hey Children's NHS Foundation Trust. Allegedly, patient records, donor reports, and procurement data from 2018-2024 were exfiltrated.

🚨Cyberattack Alert ‼️ 🇺🇸🇯🇵 - JTEKT North America Corporation Black Suit hacking group claims to have breached JTEKT North America Corporation. According to the post, 893.63 GB of data were compromised, including data from companies such as BMW, Caterpillar, Rivian, Tesla, and others. The data has been fully leaked. On October 21, Japan-based JTEKT Corporation confirmed unauthorized access to the systems of its group companies in the United States, Brazil, and Argentina. The company manually responded to maintain production in these regions. European bases in the Czech Republic and Germany were temporarily disconnected from the network due to concerns about the attack's spread, though production resumed on October 16. https://www.jtekt.co.jp/news/2024/004146.html

🚨Phishing Scam🚨 Japan - A nationwide phishing scam targeting corporate internet banking users has been reported in Japan. Fraudsters impersonating bank representatives contact victims by phone, claiming their internet banking certificates have expired and requesting personal information. Victims are then sent phishing emails with malicious links, leading to fake websites that harvest credentials, including passwords and one-time passcodes. These details are used to access the victims' accounts and transfer funds to unrelated corporate accounts. Source: https://www.ncbank.co.jp/oshirase/20241128_hojinib.pdf In the image we have attached, taken from the post by Japanese cybersecurity researcher Piyokango, you can see the diagram outlining the process leading to the unauthorized transfer of funds.

⚠️Propertyrec Leak Exposes Over Half a Million Background Check Records https://hackread.com/propertyrec-leak-exposes-background-check-records/ The exposed data belongs to SL Data Services, LLC, which is doing business as Propertyrec, which offers real estate and criminal record search services. Security researcher Jeremiah Fowler discovered a publicly accessible database containing over 644,000 files, totalling a whopping 713 GB of data. Notably, this database lacked even basic password protection, leaving it wide open for anyone to access. Source: HACKREAD

🚨Cyberattack Alert ‼️ 🇨🇲Cameroon - Chanas Assurances S.A Fog ransomware group claims to have breached Chanas Assurances S.A. According to the post, 6 GB of data were exfiltrated, including employee and customer contacts, financial documents, internal corporate contracts, bank documents, assurance certificates, and passports.

🚨Cyberattack Alert ‼️ 🇺🇸USA - PBS Aerospace INC Ransom ransomware group claims to have breached PBS Aerospace. According to their post, the cybercriminals claim to have exfiltrated 2 TB of confidential data, which they are selling with a starting price of $1,000,000. Samples have been provided.

🚨Cyberattack Alert ‼️ 🇫🇷France - ALLTUB GROUP Fog ransomware group claims to have breached ALLTUB GROUP. According to the post, internal financial documents and customer contacts were exfiltrated.

🚨Crypto Exchange Hack🚨 XT exchange suspends withdrawals after reported $1.7 million hack A statement from XT this morning claims the exchange suffered an “abnormal transfer” of crypto from its platform wallet with the address 0xdb3ded7731c781224ec292e2163d9554c094fd7c. https://protos.com/xt-exchange-suspends-withdrawals-after-reported-1-7-million-hack/

🚨Cyberattack Alert ‼️ 🇦🇺Australia - Australian Centre for Heart Health SafePay ransomware group claims to have breached the Australian Centre for Heart Health.

🚨New Ransomware Group Detected: Argonauts🚨 The newly discovered ransomware group "Argonauts" claims to have hit at least 10 targets, including 6 entities in Italy, 3 in Taiwan, and 1 in Japan: 🇮🇹Italy: ▪️AIAD - Italian Federation of Aerospace, Defense, and Security Companies ▪️Avis Intercomunale Arnaldo Colombo ▪️CONTACT S.R.L. Unipersonale ▪️FIT-CISL, Italian Federation of Transport ▪️BOCCHI S.r.l. ▪️Crolla Systems 🇹🇼Taiwan: ▪️NUUO ▪️Hung Jie Technology Corporation ▪️Ivy Life Sciences 🇯🇵Japan: ▪️ZACROS The attacks were reportedly conducted starting as early as September 15. Only Ivy Life Sciences and ZACROS have presented samples. Additionally, as previously reported, on September 14, 2024, ZACROS identified a ransomware attack affecting some of its production management and core systems, encrypting stored information. Whether this is the work of this new ransomware group remains to be determined.

Cyberattack Alert ‼️ 🇪🇬Egypt - Contrack Facilities Management S.A.E Ra World hacking group claims to have breached Contrack Facilities Management S.A.E., a professional integrated facilities management solutions company. Allegedly, 100 GB of data were exfiltrated. A sample has been provided. Ransom deadline: December 25, 2024.

🚨Cyberattack Alert ‼️ 🇺🇸USA - Times Supermarket RansomHub ransomware group claims to have breached Times Supermarket, an American supermarket chain headquartered in Honolulu, Hawaii. Ransom deadline: 04th Dec 24. In early October, Pan Pacific Retail Management Hawaii, the parent company of Times Supermarket, Don Quijote, and Marukai, detected suspicious activity on its computer systems. This caused disruptions in payment services, forcing shoppers to rely on cash transactions as debit card use was unavailable.

🚨Cyberattack Alert ‼️ 🇯🇵Japan - ZACROS (藤森工業株式会社) The Argonauts hacking group claims to have breached ZACROS. Allegedly, 140 GB of data were exfiltrated, with samples provided. As previously reported, on September 14, 2024, ZACROS, formerly known as FUJIMORI KOGYO CO., LTD.), identified a ransomware attack affecting some of its production management and core systems, encrypting stored information. The company received a ransom demand but chose not to comply.

🚨Cyberattack Alert ‼️ 🇦🇷Argentina - OSMEDICA RansomHub ransomware group claims to have breached OSMEDICA. Allegedly, miscellaneous documents, including invoices and patients’ medical data, were exfiltrated. Ransom deadline: 06th Dec 24.

🚨🚨Cyberattack Alert ‼️ 🇮🇹Italy - Bologna FC ⚽️ RansomHub ransomware group claims to have breached Bologna FC. Allegedly, 200 GB of data were exfiltrated, including: - Sponsorship contracts and documents revealing sponsor details and conditions. - Financial data spanning the club's entire history. - Personal and confidential data of players, fans, and employees. - Transfer strategies, including plans for new and young players. - Medical records of players and staff. - Confidential data related to stadiums and other structures. - Commercial strategies and business plans. - Documents that could potentially violate FIFA and UEFA regulations, including financial fair play. Samples have been provided. Ransom deadline: 29th Nov 24.

🚨Ransomware🚨 🇪🇸Spain - The Instituto Nacional de Investigación de Tecnología Agraria y Alimentaria (INIA-CSIC), Spain's largest agricultural research center, has been crippled by a ransomware attack since November 12, 2024. Over 600 employees are unable to access internal systems, internet, or scientific data due to the attack. The ransomware encrypted sensitive data on affected devices, though quick action reportedly prevented further spread. The attack disrupted critical research activities, including genetic editing and conservation of endangered species, and halted essential operations like procurement and data sharing. https://elpais.com/ciencia/2024-11-26/el-mayor-centro-del-csic-paralizado-por-los-hackers.html