Hackmanac Cyber Alerts

🚨AWS, Azure auth keys found in Android and iOS apps used by millions 🚨 List of apps ⬇️ Google Play: - Pic Stitch - Meru Cabs - Sulekha Business - ReSound Tinnitus Relief - Saludsa - Chola Ms Break In - EatSleepRIDE Motorcycle GPS - Beltone Tinnitus Calmer Apple's App Store: - Crumbl - Eureka: Earn money for surveys - Videoshop – Video Editor - Solitaire Clash: Win Real Cash - Zap Surveys -Earn Easy Money More details: https://www.bleepingcomputer.com/news/security/aws-azure-auth-keys-found-in-android-and-ios-apps-used-by-millions/

🚨Zero-Day Alert ‼️ FortiGate admins report active exploitation 0-day. Vendor isn’t talking. https://arstechnica.com/security/2024/10/fortinet-stays-mum-on-critical-0-day-reportedly-under-active-exploitation/

Valeria Fedyakina, a 24-year-old Russian influencer known as the "Queen of Crypto," allegedly scammed over $22 million from at least four investors by posing as a cryptocurrency expert. She convinced them to transfer large sums of money to Dubai-based crypto accounts, promising bonuses, but instead funneled the money to support the Ukrainian army amid the ongoing war with Russia. One victim reported losing $70 million in the scheme. Fedyakina was arrested in September 2023 while attempting to flee Russia and remains in pre-trial detention. She is expected to face formal charges next month, with a potential sentence of up to 10 years in prison. Source: New York Post

🚨Cyberwarfare 🚨 🇮🇱Israel - Hackers supporting Hezbollah launched a cyberattack targeting hospitals in northern Israel, spreading disinformation on social media following the bombing of a Hezbollah hospital in Beirut. The attackers circulated false claims that Israeli hospitals, including Carmel Medical Center in Haifa and Assuta Hospital, were concealing weapons and ammunition. One post urged missile and drone strikes against these medical centers, though there is no evidence of military equipment being stored under these hospitals. The attack follows an Israeli Defense Forces (IDF) operation targeting Hezbollah assets in Beirut, including a bunker storing cash and gold beneath the Al-Sekal Hospital. Source: The Jerusalem Post

🚨DDoS Alert ‼️ 🇷🇺Russia - The Russian Foreign Ministry reported a large-scale Distributed Denial-of-Service (DDoS) cyberattack targeting its resources on October 23, 2024. Ministry spokeswoman Maria Zakharova confirmed that the ministry's website was rendered inaccessible due to the attack. As a result, a scheduled press briefing was postponed. More details: https://www.aa.com.tr/en/world/russian-foreign-ministry-reports-large-scale-cyberattack-on-its-resources/3371361

🚨Cyberattack Alert ‼️ 🇺🇸USA - Tricon Energy Lynx hacking group claims to have breached Tricon Energy. Samples have been provided

Easterseals Central Illinois experienced a cyberattack on April 1, 2024, which disrupted its network and affected the functionality and availability of its computer systems. It was confirmed that the attackers accessed files containing patient data, including names, dates of birth, Social Security numbers, and medical information.

🚨Cyberattack Alert ‼️ 🇺🇸USA - Easterseals, Rhysida Demands 20 BTC Rhysida ransomware group claims to have breached Easterseals, an American nonprofit providing disability services. Allegedly, a ransom demand of $1,300,000 has been made. The sample provided includes passports, SSNs, forms, and other documents. Ransom deadline: 30th Oct 24.

⚠️Juventus Football Club's English #X account was compromised by threat actors on October 21, 2024. The unauthorized users posted a fake announcement claiming that Turkish footballer Arda Güler, who currently plays for Real Madrid, had joined Juventus. Multiple tweets in Turkish were also posted. Juventus quickly confirmed on its official Italian X account that the English account had been hacked and warned followers to disregard the false information. #Juventus

🚨🚨Senior Pentagon staffer leaked Israel's Iran strike plans 🚨🚨 Ariane Tabatabai, a senior Pentagon staffer, has allegedly been identified as the source of a significant security breach, leaking classified documents detailing Israel’s military plans to strike Iran. The leaked documents reportedly reveal Israel’s covert military activities, including a planned strike in retaliation for Iran’s recent attack on Israel. The breach is currently under FBI investigation More details: https://www.israelnationalnews.com/news/397968

🚨Cyberattack Alert ‼️ 🇵🇾Paraguay - The Ministry of Education and Culture (MEC), Hackers Demands 15 BTC The Ministry of Education and Culture (MEC) of Paraguay has suffered a cyberattack affecting its data center, which hosts crucial services such as information systems, management platforms, and digital portals. The attackers left a ransom note requesting 15 bitcoins, equivalent to around one million dollars. As a result, all online services were suspended for security reasons. More details: https://www.infobae.com/america/agencias/2024/10/22/ministerio-de-paraguay-alerta-de-ciberataque-y-pedido-de-un-millon-de-dolares-en-bitcoins/

🚨Cyberattack Alert ‼️ 🇮🇳India - Shipkar Express Kill Security hacking group claims to have breached Shipkar Express. Allegedly, exfiltrated data include personal details such as full names, addresses, phone numbers, Aadhaar numbers, email addresses, financial information (bank details, UPI IDs, payable amounts), and shipment data (package weights, dimensions, and costs).

🚨Cyberattack Alert ‼️ 🇮🇳India - Shipkar Express Kill Security hacking group claims to have breached Shipkar Express. Allegedly, exfiltrated data include personal details such as full names, addresses, phone numbers, Aadhaar numbers, email addresses, financial information (bank details, UPI IDs, payable amounts), and shipment data (package weights, dimensions, and costs).

🚨Cyberattack Alert ‼️ 🇺🇸USA - Lincoln University Fog hacking group claims to have breached Lincoln University. Allegedly, 10 GB of data were exfiltrated, including personal student contact information, employee contact information, medical documents, and other personal data.

🚨Cyberattack Alert ‼️ 🇪🇸Spain - AEROTECNIC Black Suit hacking group claims to have breached AEROTECNIC. Allegedly, 800 GB of data were exfiltrated, including users' data, business data, employee data, production data, and financial data.

🚨Data Breach Alert 🚨 A potential data breach at Grayscale Investments, a leading crypto asset manager, has been detected on a hacking forum: 693K user records reportedly affected. According to the post, in October 2024, Grayscale suffered a data breach leading to the theft of a database containing 693,635 entries. Among these are information such as ID, status, full name, job title, company name, email, phone number, and person source. The confirmation or denial of these claims has yet to be verified, but in the meantime, Grayscale users are advised to be cautious of potential phishing attempts.

🚨Samsung zero-day flaw actively exploited in the wild CVE-2024-44068 (CVSS score of 8.1) Attackers could exploit the flaw to escalate privileges on a vulnerable Android device. More details: https://securityaffairs.com/170119/security/samsung-zero-day-activey-exploited.html

🟧 #HackTuesday 🟧 Hack Tuesday: Week 16 - 22 October 2024 ⚠️171 cyberattacks across 29 countries ⚠️ ➡️The most active treat actor this week is RansomHub, claiming responsibility for 36 attacks. ➡️The 🇺🇸USA is the most affected country, accounting for 39% of the victims, followed by 🇯🇵Japan with 13%. ➡️The Manufacturing sector is the most impacted, representing 15% of the claimed targets, followed by the Gov / Mil / LE sectors with 14%. ➡️Overall, the claimed compromised data amounts to approximately 22.878 TB. ☣️The average ESIX® (Estimated Severity Index) is 4.3. Follow the link for list of referred victims: https://hackmanac.com/news/hack-tuesday-week-16-22-october-2024 #Hackmanac #HT #Cybersecurity

🚨Cyberattacks Alert ‼️ RansomHub ransomware group is particularly inspired today, October 22nd. On their data leak site, 9 new victims have been listed: 🇸🇬 1doc 🇺🇸 BWD Technologies 🇺🇸 Davis Brothers 🇺🇸 TKG 🇫🇷 Lycée Horticole de Fayl-Billot 🇧🇪 Polypane Glasindustrie 🇺🇸 Dennis Supply Company 🇺🇸 SpecPro Inc. 🇫🇷 Semna Samples have been provided for all the targets on the list, and the ransom deadlines are all set for October 31st.

🚨Cyberattack Alert ‼️ 🇮🇹Italy - Automha Medusa ransomware group claims to have breached Automha. Allegedly, 308.9 GB of data were exfiltrated. Ransom demand: $150,000. Ransom deadline: 30th Oct 24.