Hackmanac Cyber Alerts

🚨Data Breach Alert ‼️ 🇷🇺Russia - ZT (ZonaTelecom) A potential data breach at ZT (ZonaTelecom) has been detected on a hacking forum: 228,732 customers are reportedly affected. According to the post, the compromised information includes full names, hashed passwords, email addresses, physical addresses, phone numbers, and other personal details. ZonaTelecom provides comprehensive services for the institutions of the Federal Penitentiary Service of Russia, allowing prisoners, convicts, and defendants to maintain contact with their families without violating internal regulations. The confirmation or denial of these claims has yet to be verified.

🚨Cyberattack Alert ‼️ 🇦🇺Australia - Second attack against Compass Group (Australian subsidiary) Medusa ransomware group claims to have breached Compass Group once again. The attackers stated, "Our affiliate entered this poor network this morning and messed the computers again! Company kiddy network administrators installed CrowdStrike Falcon EDR everywhere and thought they removed all our connections." To the previous ransom demand of $2 million, an additional demand of $100,000 has been made in this new cyberattack.

⚠️New "Raptor Train" IoT Botnet Compromises Over 200,000 Devices Worldwide Powered by a Chinese Nation-State Actor, Flax Typhoon⚠️ https://thehackernews.com/2024/09/new-raptor-train-iot-botnet-compromises.html

🚨Prosecutors Bypass Tor Anonymization🚨 Law enforcement agencies in Germany have been monitoring servers in the Tor network for months at a time to deanonymize Tor users. https://www.tagesschau.de/investigativ/panorama/tor-netzwerk-100.html

🚨 Cyberattack Update ‼️ 🇯🇵Japan - Mitsubishi Chemical Group The Everest ransomware group begins publishing data belonging to Mitsubishi Chemical Group. The entire file tree and a 19GB sample are now available on the group's data leak site. On September 2, the cybercriminal group claimed to have hit the company, threatening to publish 6 TB of data if the ransom demand of $3,000,000 was not paid.

🟧 #HackTuesday 🟧 Hack Tuesday: Week 11 - 17 September 2024 ‼️ 111 victims by 28 hacking groups ‼️ The most active ransomware groups this week are RansomHub and Play, each with 17 claimed attacks. The United States is the most affected country, accounting for 56% of the victims. The Professional, Scientific, and Technical sectors are the most impacted, representing 18% of the claimed targets, followed by the Manufacturing sector with 14%. Overall, the claimed stolen data amounts to approximately 22.3 Terabytes. The average Cyber Risk Factor is 4.0. Follow the link for the full list of victims: https://hackmanac.com/news/hack-tuesday-week-11-17-september-2024 #Hackmanac #HT #Cybersecurity #ThreatMonitoring

🚨Data Breach Alert ‼️ 🇮🇩Indonesia - Direktorat Jenderal Pajak (DJP) Potential data breach at Direktorat Jenderal Pajak: 6,663,379 user records reportedly for sale for $10,000. According to the post, among the data are details such as name, physical address, phone number, email, NIK (National Identification Number), NPWP (Tax Identification Numbers), etc. The confirmation or denial of these claims has yet to be verified.

The Dark Side of IoT: The Most Dangerous Cyber Incidents So Far 🚨 From hacked baby monitors to compromised nuclear facilities, the IoT has exposed us to unprecedented cyber risks. Our latest article dives deep into the top 10 most dangerous IoT cyber incidents that have occurred so far, highlighting the vulnerabilities of our increasingly connected world. 💡Discover how these attacks happened, the lessons learned and what we can do to protect ourselves moving forward. 👉 Read the full article here: https://hackmanac.com/news/the-dark-side-of-iot-the-most-dangerous-cyber-incidents-so-far #CyberSecurity #IoT #IoTSecurity #CyberAttacks #CyberThreatMonitoring #Hackmanac #ExpertInsight #StayCyberSafe

🚨Cyberattack Update ‼️ 🇲🇾Malaysia - Bank Rakyat: Hunters International Leaks Stolen Data Hunters International ransomware group, after temporarily removing the post about the attack on Bank Rakyat, has now decided to leak all the stolen data (463.2 GB).

🚨🚨🚨Cyberattack Alert ‼️ 🇨🇦Canada - AutoCanada The Hunters International ransomware group claims to have breached AutoCanada. Allegedly, 3.9 TB of data were exfiltrated. Ransom deadline: 20th Sept 24. AutoCanada, a large automobile dealership group, experienced a cyberattack in August, affecting its internal IT systems. https://www.bleepingcomputer.com/news/security/autocanada-discloses-cyberattack-impacting-internal-it-systems/

🟧 #HackTuesday 🟧 Hack Tuesday: Week 11 - 17 September 2024 ‼️ 111 victims by 28 hacking groups ‼️ The most active ransomware groups this week are RansomHub and Play, each with 17 claimed attacks. The United States is the most affected country, accounting for 56% of the victims. The Professional, Scientific, and Technical sectors are the most impacted, representing 18% of the claimed targets, followed by the Manufacturing sector with 14%. Overall, the claimed stolen data amounts to approximately 22.3 Terabytes. The average Cyber Risk Factor is 4.0. Follow the link for the full list of victims: https://hackmanac.com/news/hack-tuesday-week-11-17-september-2024 #Hackmanac #HT #Cybersecurity #ThreatMonitoring

🚨🚨🚨Cyberattack Alert ‼️ 🇦🇺Australia - Compass Group (Australian subsidiary), Medusa Demands $2,000,000 Medusa ransomware group claims to have breached the Australian subsidiary of Compass Group. Compass Group is a British multinational contract foodservice company headquartered in Chertsey, England. It is the largest contract foodservice company in Europe, employing over 550,000 people globally. Allegedly, 785.5 GB of data were exfiltrated, with the sample provided showing driving licenses, passports, customer data, wage declarations, financial data, and other documents. Ransom demand: $2,000,000 Ransom deadline: 26th Sept 2024

🚨Cyberattack Alert ‼️ 🇵🇭Philippines - AZPIRED, Medusa Demands $100,000 The hacking group Medusa claims to have breached AZPIRED, a world-class outsourcing service center. Allegedly, 205.7 GB of data were exfiltrated. Ransom demand: $100,000. Ransom deadline: 27th Sept 24.

🚨Cyberattack Alert ‼️ 🇨🇭🇺🇸 ThomasLloyd Group (USA branch) The Cactus hacking group claims to have breached the USA branch of ThomasLloyd, a global investment and advisory firm headquartered in Zürich, Switzerland. Allegedly, 2.4 TB of data were exfiltrated, including personally identifiable information (PII), employees' and executives' personal data, corporate confidential documents, customer information, financial documents, corporate correspondence, and database backups.

🚨 HACKMANAC GLOBAL CYBER ATTACKS REPORT 2024 🚨 📊 Our Global Cyber Attacks Report 2024 is now available! 📈 In this 40+ page study we analyze more than 7,000 known attacks that occurred globally in 2023 and compare them to those of the previous five years (2018-2022), highlighting key trends such as: 🔍 Evolution of cyber threats 🔍 Most targeted industries 🔍 Most used attack techniques 🔍 Types of attackers 🔍 Most dangerous cybercrime gangs 🔍 Attack impact by industry, attacker, etc. 📥 Visit our download area for a free copy of the report ⤵ https://hackmanac.com/hackmanac-global-cyber-attacks-report-2024 #Hackmanac #CyberSecurityReport #CyberThreatMonitoring #CyberAttacks2024 #CyberThreats #CyberRiskManagement #ImpactAnalysis

🚨Cyberattack Alert ‼️ 🇺🇸USA - Providence Public Schools, Medusa Demands $1,000,000 The ransomware group Medusa claims to have breached Providence Public Schools. Allegedly, 201.4 GB of data, including financial data, correspondence, students' and teachers' data, and PII, were exfiltrated. Ransom deadline: 25th Sept 24.

🚨Cyberattack Alert ‼️ 🇯🇵Japan - Yokohama National University Yokohama National University has reported that a server used by one of its laboratories for numerical calculations and other purposes was illegally accessed and used as a platform for external attacks. On Thursday, September 5, 2024, an external agency alerted the university about suspicious communications originating from the server’s IP address. Upon investigation, it was confirmed that the server had been compromised by unauthorized access, and it was immediately disconnected from the network. The unauthorized access occurred through an SSH server used for remote connections. While the investigation is ongoing, the university confirmed that no confidential or personal information was stored on the server. Source: https://www.ynu.ac.jp/hus/joho/32308/detail.html

🚨Cyberattacks Alert ‼️ 🇯🇵Japan - Choya Umeshu and ZACROS Co., Ltd - Choya Umeshu, a well-known Japanese producer of plum wines, suffered a ransomware attack on September 13, 2024. The company reported that customer and transaction data might have been exfiltrated. The ransomware encrypted the company’s systems, temporarily halting operations. - ZACROS Co., Ltd., a Japanese company specializing in packaging materials and products, announced that it fell victim to a cyberattack. The company detected the attack on August 20, 2024, and immediately took measures to protect its systems. It has been confirmed that some corporate data was compromised. Sources: https://choyaume.jp/blogs/news/20240913 https://www.zacros.co.jp/news/news-1302/

🚨 Cyberattack Update ‼️ 🇯🇵Japan - Mitsubishi Chemical Group The Everest ransomware group begins publishing data belonging to Mitsubishi Chemical Group. The entire file tree and a 19GB sample are now available on the group's data leak site. On September 2, the cybercriminal group claimed to have hit the company, threatening to publish 6 TB of data if the ransom demand of $3,000,000 was not paid.

🚨Cyberattacks Alert ‼️ 🇪🇸 Spain - Top Doctors and Adantia RansomHub listed two Spanish companies on its data leak site: Top Doctors and Adantia. For Top Doctors, the group states to have stolen 40 GB of data including patient information, insurance details, personal data, and sensitive patient data across all branches: Spain, Italy, Mexico, Colombia, Chile, Argentina, United Kingdom, Saudi Arabia, USA. Ransom deadline: September 22, 2024. For Adantia, the group claims to have exfiltrated 27 GB of data. The group has provided various samples and has set the ransom deadline for October 2, 2024.