Hackmanac Cyber Alerts

HACKMANAC AT SECURITY SUMMIT MILANO 2025 Tomorrow March 11, 2025 our CEO Sofia Scozzari will be speaking at Clusit "Security Summit Milano 2025". Sofia will speak remotely at the first panel "Presentation of the Clusit Report 2025": https://securitysummit.it/milano-2025/presentazione-del-rapporto-clusit-2025 See you there! #cybersecurity #events #securitysummit #rapportoclusit #clusit #hackmanac

🚨Cyberattack Alert ‼️ 🇺🇸USA - The Loretto Hospital RansomHouse hacking group claims to have breached The Loretto Hospital. Allegedly, 1.5 TB of data were exfiltrated.

🚨Cyberattack Alert ‼️ 🇪🇸Spain - Grupo de protección y seguridad 909 Akira hacking group claims to have breached Grupo de protección y seguridad 909. Allegedly, contact numbers and e-mail addresses of employees and customers, personal NIF numbers, financial data, and internal correspondences were exfiltrated.

🚨Cyberattack Alert ‼️ 🇦🇪UAE - Wizz Air Abu Dhabi Stormous hacking group claims to have breached Wizz Air's Abu Dhabi branch. Allegedly, 22 GB of company reports and operations, employee and client data, internal data, and air operator certificates for all employees and others were exfiltrated.

🚨DDoS Alert ‼️ 🇪🇸Spain - The pro-Russian hacktivist group NoName057(16) continues its "OpSpain" campaign with a new wave of DDoS attacks. Today, the group has claimed responsibility for cyberattacks targeting multiple provinces and cities in Spain, in retaliation for the Spanish government's announcement of a €1 billion military aid package to Ukraine on February 24, 2024. The group criticized Spain’s financial support for Ukraine instead of investing in cybersecurity and declared ongoing attacks against Spanish internet infrastructure. The attacks reportedly disrupted online services in: - Diputació de València - Ayuntamiento de Mérida - Diputación de Cáceres - Diputación de Badajoz - Ayuntamiento de Benavente

🚨Data Breach Alert‼️ 🇰🇷South Korea - Kakao Enterprise Kakao Enterprise, the operator of Kakao Cloud, suffered a security breach where malicious code was installed on an internal server, leading to the leak of account information from approximately 60 employees, including senior executives. The attack was discovered on February 21, 2025 More details: https://blog.security-chu.com/2025/03/kakao-enterprise-sufrio-un-incidente-de.html

🚨Akira Ransomware gang encrypted network from a webcam to bypass EDR https://www.bleepingcomputer.com/news/security/akira-ransomware-encrypted-network-from-a-webcam-to-bypass-edr/

🚨Cyberattack Alert ‼️ 🇫🇷France - Sorbonne Université FunkSec hacking group claims to have breached Sorbonne Université. Allegedly, 20GB of data, including plans, reports, credentials, etc., were exfiltrated. Ransom deadline: 20th March 2025.

🚨Data Breach Alert - NATO Cosmic Top Secret (CTS) documents A threat actor known as "NATODATAX" claims to possess 16TB of highly classified and confidential NATO Cosmic Top Secret (CTS) documents. For those who don’t know, NATO Cosmic Top Secret (CTS) documents are the highest classification level within NATO. They contain information whose unauthorized disclosure could cause extreme damage to the Alliance and are accessible only to individuals with specific security clearance and a need-to-know basis. The authenticity of these claims has yet to be verified.

🚨BREAKING - Cyber Attack Alert🚨 🇺🇦Ukraine - Ministry of Foreign Affairs of Ukraine The Qilin ransomware group claims to have breached Ukraine's Ministry of Foreign Affairs, exfiltrating private correspondence, personal information, and official decrees. The group also states that a portion of the stolen data has already been sold.

🚨New hacking group spotted: Skira In addition to easily winning the award for the ugliest onion blog, the group has published the names of 5 victims: 🇮🇳 India - Krisala Developers 🇮🇳 India - CCL Products 🇺🇸 US - Carruth Compliance Consulting 🇺🇸 US - Lawyers Diary and Manual 🇹🇷 Turkey - Van Metropolitan Municipality (Van Büyükşehir Belediyesi)

BlackBastaGPT: AI Insights into Ransomware Operations Hudson Rock has launched BlackBastaGPT, trained on over 1 million leaked messages from the Black Basta ransomware gang. The tool helps cybersecurity researchers analyze the gang’s operations, financial strategies, and attack methods. Link: https://chatgpt.com/g/g-67b80f8b69f08191923d8e6c3fb929b6-blackbastagpt

🚨DDoS - Flight Radar 24 The World’s Most Popular Flight Tracker is Fighting An Ongoing DDoS Cyber Attack https://www.paddleyourownkanoo.com/2025/03/05/the-worlds-most-popular-flight-tracker-is-fighting-an-ongoing-ddos-cyber-attack/

Bybit hacker launders 100% of stolen $1.4B crypto in 10 days https://cointelegraph.com/news/bybit-hacker-launders-1-billion-stolen-funds

🚨Data Breach Alert‼️ 🇨🇳China - Unitree Robotics The threat actor known as "303" claims to have compromised the database of Hangzhou YuShu Technology Co., Ltd (dba Unitree Robotics) through a breach at a telecom company. The leaked database allegedly contains 8,387,164 rows and includes .SQL source code. The confirmation or denial of these claims has yet to be verified.

🚨Cyber Attacks Alert‼️ 🇪🇸Spain - Unfortunately, among the many attacks, Spain continues to be one of the most targeted countries. Comparing our data, cyberattacks have surged by 750% in the last week. This morning, our analysts detected claims targeting: DDoS (all claimed by pro-Russian hacktivists) ⬇️ - BarcelonaTaxi - CIMSA Ingeniería de Sistemas - Ministerio del Interior Leaks ⬇️ - Fundación Down21: Alleged database leak (names, email addresses, etc.) - Inelmatic Electronics: Alleged source code leak

🚨Data Breaches Alert ‼️ Today, we start with the topic: Why is Fog leaking GitLab repositories for free? A few hours ago, Fog published a list of 19 new cyberattacks exposing GitLab repositories. This is just a portion of the full list of victims. With today’s additions, the total count reaches 60. If we include ransomware attack claims since January 1, 2024, the number rises to 81. It remains unclear what the group aims to prove by freely publishing the source codes of companies. The latest list includes the following victims: 🇪🇸 Inelmatic Electronics 🇺🇸 U.S. Geological Survey 🇲🇾 Aeonsparx Interactive 🇨🇿 CIE Group 🇨🇭 FlightSim Studio 🇩🇪 Neopoly 🇩🇪 Kr3m. Media 🇮🇹 Engicam Srl 🇨🇭 FHNW University of Applied Sciences and Arts Northwestern Switzerland 🇺🇸 Manning Publications Co 🇮🇹 BizCoDe 🇺🇸 InfoReach 🇩🇪 1xINTERNET 🇹🇭 Internet Thailand Public Company Limited 🇧🇪 Euranova 🇺🇸 Blue Planet 🇩🇪 EUMETSAT 🇮🇩 Koltiva 🇧🇪 Melexis

🚨🚨🚨Cyber Attack Alert‼️ 🇯🇵Japan - NTT (コミュニケーションズ株式会社) NTT Communications (NTT Com) detected unauthorized access to its systems on February 5, 2025, and confirmed on February 6 that some corporate customer data might have been leaked. The breach affected the Order Information Distribution System, used for managing service activations and modifications. 17,891 corporate customers were potentially impacted, with exposed data including contract numbers, company names, contact persons, phone numbers, email addresses, addresses, and service usage details. Personal customer data was not affected. More details: https://www.ntt.com/about-us/press-releases/news/article/2025/0305_2.html

🚨Cyberattack Alert ‼️ 🇬🇧UK - Cyncly Akira hacking group claims to have breached Cyncly. Allegedly, 32 GB of data were exfiltrated, including contact numbers and email addresses of employees and customers, financial data (audits, payment details, reports), and HR documents.

🚨Cyberattack Alert ‼️ 🇯🇵Japan - Japanrebuilt (ジャパンリビルト株式会社) RansomHub hacking group claims to have breached Japanrebuilt. Allegedly, 200 GB of production data, audits, financial data, payments, contacts, order details, customer details, internal documents, and other sensitive data were exfiltrated. The data has been fully leaked.