Hackmanac Cyber Alerts

🚨Cyberattack Alert ‼️ 🇧🇷Brazil - Aeris Energy Hunters International ransomware group claims to have breached Aeris Energy, a Brazilian wind blade manufacturer. Allegedly, 1.3 TB of data (673,562 files) were exfiltrated.

🚨Cyberattack Alert ‼️ 🇴🇲Oman - ABC Group Kill Security hacking group claims to have breached ABC Group. Allegedly, 240 GB of data were exfiltrated, including personal identifiable information (PII) such as customer names and phone numbers, sensitive financial data such as bank details and transactions, customer-specific payment records, and corporate information. Ransom deadline: 30th Nov 24.

🚨Cyberattack Alert ‼️ 🇫🇷France - SFR Bashe hacking group claims to have breached SFR, the second largest telecommunications company in France. Allegedly, 1,445,684 records were exfiltrated, including first name, last name, phone number, address, latitude, longitude, subscription details, and redlist information. Ransom deadline: 25th Nov 24.

🚨Data Breach Alert - AscendEX A potential data breach at AscendEX has been detected on a hacking forum. According to the post, the breach occurred on November 17, leading to the exfiltration of 290,379 rows of data, including email sendout logs, SMS sendout logs, admin details, customer PII, wallet details, and more. Samples have been provided. The confirmation or denial of these claims has yet to be verified.

🚨Cyberattack Alert ‼️ 🇺🇸USA - Tampa State Bank Akira ransomware group claims to have breached Tampa State Bank. Allegedly, 13 GB of data, including financial information, driver licenses, SSNs, and employee contacts, were exfiltrated.

🌐DEBUNKING THE TOP 5 CYBERSECURITY MYTHS 🔐 Think you're safe from cyber threats? 🤔Think again! Here are 5 common myths that could leave you or your business exposed: 1️⃣ Cybersecurity is just about technology 2️⃣ Small businesses don’t need to worry about Cybersecurity 3️⃣ Cybersecurity is too expensive 4️⃣ It’s only IT’s responsibility 5️⃣ Cybersecurity is too complex 💡In our latest article, we break down these misconceptions and reveal the truths behind them, along with practical tips to keep your digital space safe. 👉Read the full article here: https://hackmanac.com/news/cybersecurity-myths-debunking-the-top-5-most-common-misconceptions 📢 Stay informed. Stay Cyber Safe. #CyberSecurity #MythBusting #hackmanac #ExpertInsights #StayCyberSafe

🌐DEBUNKING THE TOP 5 CYBERSECURITY MYTHS 🔐 Think you're safe from cyber threats? 🤔Think again! Here are 5 common myths that could leave you or your business exposed: 1️⃣ Cybersecurity is just about technology 2️⃣ Small businesses don’t need to worry about Cybersecurity 3️⃣ Cybersecurity is too expensive 4️⃣ It’s only IT’s responsibility 5️⃣ Cybersecurity is too complex 💡In our latest article, we break down these misconceptions and reveal the truths behind them, along with practical tips to keep your digital space safe. 👉Read the full article here: https://hackmanac.com/news/cybersecurity-myths-debunking-the-top-5-most-common-misconceptions 📢 Stay informed. Stay Cyber Safe. #CyberSecurity #MythBusting #hackmanac #ExpertInsights #StayCyberSafe

🚨Zero-Day macOS🚨 Apple Confirms Zero Day Attacks Hitting macOS Systems https://www.securityweek.com/apple-confirms-zero-day-attacks-hitting-intel-based-macs/

🚨🚨Cyberattack 🇬🇧UK - Microlise The newly discovered ransomware group SAFEPAY claims responsibility for the cyberattack on Microlise, posting on its data leak site that they exfiltrated 1.2 TB of data, with a ransom deadline set for November 22. Microlise, a British software company headquartered in Nottingham, confirmed a cyberattack three weeks ago, during which hackers compromised corporate data at its headquarters. The attack affected customer systems, including disruptions to tracking systems and panic alarms on British prison vans. The company also reported the exfiltration of corporate data to international authorities but stressed that only a limited amount of employee data was impacted.

🚨Data Breach Alert - SSV Blockchain Network Handala hacking group has claimed responsibility for breaching the SSV Blockchain Network. According to the post, the hackers spent four months infiltrating the network, managing to dump 8 TB of highly sensitive information. This includes developer identities, financial documents, contracts, transaction logs, emails, KYC documents, meeting and call recordings, and more. Handala leaked 1 TB of the data as proof of concept (PoC), claiming the leaked information is worth over one million dollars.

🚨Ransomware Alert 🇮🇹Italy - Inps Servizi On November 18, 2024, Inps Servizi, a provider supplying cumulative contribution data from companies via model F24 to QuAS, experienced a ransomware cyberattack. This incident exclusively affected Inps Servizi's systems and did not impact QuAS's operations. The compromised data pertained solely to the total contributions paid by each company, without any personal details of individual members. At the time of writing, the website of Inps Servizi (inpsservizi​.it) is not responding.

🚨Data Breach Update - FINASTRA confirms it’s investigating a data breach More details: https://techcrunch.com/2024/11/20/fintech-giant-finastra-confirms-its-investigating-a-data-breach/

🚨Ransomware Alert - WannaCry 2.0 The Indonesian hacking group INDOHAXSEC TEAM has reportedly developed a web-based version of the WannaCry ransomware, dubbed "WannaCry 2.0." According to posts on their Telegram channel, the group claims to have compromised the websites of at least two victims, encrypting their content and demanding Bitcoin as ransom. 💡Cyber Trivia: The original WannaCry ransomware attack took place in May 2017 and became one of the most infamous global cyberattacks. The cryptoworm targeted computers running Microsoft Windows, encrypting their data and demanding ransom payments in Bitcoin to restore access.

🚨Cyberattack ‼️ 🇫🇷France - Département de La Réunion The newly discovered Termite ransomware group claims responsibility for the cyberattack targeting the Département de La Réunion. On November 13, the Département de La Réunion announced that it had fallen victim to a cyberattack targeting its IT systems. As a precautionary measure, all external connections to the Collectivité’s networks were temporarily suspended, and email services remain offline, with key platforms used by the public temporarily inaccessible.

🚨Cyberattack Alert ‼️ 🇸🇦Saudi Arabia - Arabot Dark Vault hacking group claims to have breached Arabot, a leading enterprise chatbot platform. Ransom deadline: 26th Nov 24.

🟧 #HackTuesday 🟧 Hack Tuesday: Week 13 - 19 November 2024 ⚠️259 cyberattacks across 39 countries ⚠️ ➡️The most active threat actor this week is Akira claiming responsibility for 30 attacks. ➡️The 🇺🇸USA is the most affected country, accounting for 49% of the victims, with 126 cyberattacks. ➡️The Manufacturing sector is the most impacted, representing 16% of the claimed targets. ➡️Overall, the claimed compromised data amounts to approximately 41 TB. ☣️The average ESIX® (Estimated Severity Index) is 4.5. Follow the link for list of referred victims: https://hackmanac.com/news/hack-tuesday-week-13-19-november-2024 #Hackmanac #HT #Cybersecurity

🚨🚨Cyberattacks Alert 🚨🚨 BlackBasta ransomware group, 22 days after the last claimed attack, lists 15 new victims on its data leak site, with a total of 16.25 Terabytes of data reportedly exfiltrated: 🇺🇸 Suit-Kote Corporation 🇺🇸 McLean Mortgage Corporation 🇺🇸 Andy Frain Services 🇺🇸 Mithun 🇺🇸 Continental 🇺🇸 Instinct 🇺🇸 Gleason, Flynn, Emig & McAfee 🇺🇸 Eaton Metal Products Company 🇺🇸 Jonti-Craft 🇺🇸 Wachter 🇮🇹 ISA S.p.A. 🇺🇸 Rockport Mortgage Corporation 🇩🇪 REMBE 🇺🇸 KMC Global 🇩🇪 RAUCH As always, the cybercriminal group provided details, samples, and ransom deadlines for each attack.

🚨Cyberattack Alert ‼️ 🇲🇽🇺🇸 - Terra Energy Kill Security hacking group claims to have breached Terra Energy. Allegedly, exfiltrated data include personally identifiable information (PII) such as names, addresses, and identification numbers, customer data (project timelines, energy-related details, operational client information), financial data (transactional and contractual details), and private business information (material handover records and internal processes). Ransom deadline: 27th Nov 24.

🚨Cyberattack Alert ‼️ 🇮🇳India - Equentis Kill Security hacking group claims to have breached Equentis. Allegedly, 56 GB of data were exfiltrated, including personal client information, contact details, financial identifiers, performance metrics, business strategies, client agreements with fee structures, system architecture details, portfolio allocations, investment preferences, operational data, and sensitive organizational file structures. Ransom deadline: 27th Nov 24.

🚨🚨Cyberattack Alert ‼️ 🇸🇬Singapore - Maxeon Solar Technologies Medusa ransomware group claims to have breached Maxeon Solar Technologies. Ransom demand: $1,000,000. Ransom deadline: 27th Nov 24.