Hackmanac Cyber Alerts

🚨Cyberattack Update‼️ 🇺🇸USA: Seattle-Tacoma International Airport (SEA) - Port of Seattle Rhysida updates the attack on the Port of Seattle, now including Seattle-Tacoma International Airport (SEA). According to the post, the ransomware group has stolen 3TB of databases, internal logins and passwords of employees, a full dump of servers containing emergency services applications for the Port of Seattle and Seattle-Tacoma International Airport (SEA), as well as personal data of staff and customers.

🚨Cyberattack Update🚨 🇺🇸USA - Port of Seattle Rhysida ransomware group has officially claimed responsibility for the attack on the Port of Seattle and is demanding 100 BTC (approximately 5,780,000 USD).

🚨Cyberattack Alert ‼️ 🇸🇦🇪🇬SuperCommerce Kill Security claims to have breached SuperCommerce, a company based in Saudi Arabia operating in the Middle East and Africa, obtaining data from several Egyptian companies: - Al-Abdellatif Eltarshouby Pharmacy - Alamal Pharmacies - Amen - Am Salah - CPS Pharmacies - Crocs egypt - Doss Pharmacies - Dotra - Etisal Store - Footloose - Greens Pharmacies - Kareem Stores - MakkahPharmacy - Mobilaty - Nabda - Ogawa Egypt - Star House According to the post, the data include: - Client Information (Name, Phone) - Delivery Address - Product Information (SKU, Name, Quantity, Price, Price After Discount) - Order Information (ID, Date) - Package delivery details and receipts from aramex and bosta (Egyptian logistics companies)

🚨Cyberattacks Alert ‼️ The newly discovered hacking group, calling itself "Valencia Ransomware," has listed five major victims on its data leak site: 🇪🇸Spain - Tendam 🇺🇸USA - City of Pleasanton 🇮🇳India - Satia Industries 🇲🇾Malaysia - Duopharma Biotech Berhad 🇧🇩Bangladesh - Globe Pharmaceutical Note: Just a few days ago, Tendam (formerly known as Grupo Cortefiel) had been added to Medusa ransomware group's data leak site, which demanded a ransom of $800,000. Currently, the group's onion blog is offline. Further updates will be provided as soon as possible.

🚨 Cyberattack Alert ‼️ 🇺🇸USA - MCNA Dental Everest ransomware group threatens MCNA Dental, claiming to have stolen over 1 million personal EMRs and internal company documents. This marks the third time MCNA Dental has been targeted by hackers. Earlier in March, the company was listed on LockBit's data leak site, with a data breach later confirmed to have impacted 8.9 million individuals following a ransomware attack. In June, Snatch hacking group claimed to have obtained 602 GB of the company's data.

‼️ Binance Alerts Users to Clipper Malware Hijacking Crypto Transactions ‼️ This type of malicious software, intercepts data stored in the clipboard, primarily targeting cryptocurrency wallet addresses. Source: https://www.binance.com/en/blog/security/protect-your-crypto-understanding-the-ongoing-global-malware-attacks-and-what-we-are-doing-to-stop-them-7968393135385409266

⚠️Medusa Exploits Fortinet Flaw (CVE-2023-48788) for Stealthy Ransomware Attacks ⚠️ https://securityonline.info/medusa-exploits-fortinet-flaw-cve-2023-48788-for-stealthy-ransomware-attacks/

🚨Cyberattack Alert ‼️ 🇯🇵JAPAN - JTEKT STINGS' official online shop experienced a potential data breach due to a ransomware attack on Kantsu Co., Ltd., a subcontractor of HYP Group, which handles their warehouse management. The breach, reported on September 14, 2024, may have exposed customer information, including names, addresses, phone numbers, email addresses, payment methods, dates of birth, gender, and purchased products. However, no credit card numbers or other sensitive payment data were compromised. Investigations into the breach are ongoing, with a final report expected in three to four weeks. As a precaution, the online shop has been temporarily closed, and orders placed after September 12 will be fulfilled directly by the company.

📣 We are excited to announce that our CEO, Sofia Scozzari, will be speaking at Wired Next Fest Trentino 2024 🎉 (https://eventi.wired.it/nextfest24-trentino), the second edition of Italy’s largest free-to-attend event dedicated to innovation and the transformative power of digital technologies 💡🌐 Sofia (https://eventi.wired.it/nextfest24-trentino/speaker/1310414/sofia-scozzari) will be present in 2 sessions: 📅 September 26th 2024 at the exclusive B2B session (invitation-only) for businesses 🏢 📅 September 27th 2024 at "The Culture of Cybersecurity" 🔐, alongside Stefano Fratepietro (Cyber Security Evangelist, Angel Investor & Keynote Speaker) and Giada Sciarretta (Researcher at the Cybersecurity Center, Bruno Kessler Foundation) 🔗 More info: https://hackmanac.com/news/hackmanac-at-wired-next-fest-trentino-2024 ✅ Participation is free upon registration: https://eventi.wired.it/nextfest24-trentino/registrazione 📖 Check out the full event agenda here: https://eventi.wired.it/nextfest24-trentino/programma-completo 🇮🇹 See you in Italy! #wirednextfest2024 #wirednextfest #wired #events #hackmanac #corporatenews

🚨Cyberattack Alert ‼️ 🇹🇳Tunisia - ExcelPlast Tunisia The hacking group Orca claims to have breached ExcelPlast Tunisia. Allegedly, 20 GB (46,925 files) of data, including PII, invoices, and financial data, were exfiltrated. Ransom deadline: 24th Sept 24.

🚨Cyberattack Alert‼️ 🇪🇸Spain - Mivideo․club Stormous cybercrime group has claimed responsibility for a ransomware attack on Mivideo․club. Allegedly, 3 GB of data was exfiltrated. #Stormous #Cybersecurity #Hackmanac

🚨Cyberattack Alert ‼️ 🇦🇫Afghanistan - Salaam Network The hacking group LockBit 3.0 claims to have breached Salaam Network. Ransom deadline: 29th Sept 24.

🚨Data Breach Alert ‼️ ZeroSevenGroup Claims to Have Breached CAT (Caterpillar Inc.) A potential data breach at CAT (Caterpillar Inc.) has been detected on a hacking forum: ZeroSevenGroup claims to have stolen and leaked 80GB of data. According to the post, the data includes projects, employee and customer information, financial records, manufacturing designs for engines and machinery, email correspondences, and other sensitive and confidential information. Upon initial analysis of the samples provided, it appears that CAT may not have been breached. Instead, Rimco, a Caterpillar dealer with main offices in San Juan, Puerto Rico, could be the actual target. Confirmation or denial of these claims has yet to be verified.

🚨Cyberattacks Alert ‼️ The ransomware group El Dorado listed 3 new victims on its data leak site: 🇺🇸USA - Kennedy Funding 🇺🇸USA - Palm Facility Services 🇺🇸USA - A-1 Mobile Lock & Key No samples have been provided.

🚨Cyberattack Update‼️ 🇺🇸USA: Seattle International Airport - Port of Seattle The Port of Seattle has refused to pay a ransom to the Rhysida ransomware group following a cyberattack that impacted services at the city’s airport and seaport before Labor Day. The attack, which started on August 24, caused widespread disruption, including issues with baggage handling, check-in kiosks, ticketing, and passenger display boards. While most systems were restored within a week, some, such as the external website and internal portals, are still being worked on. Full article by Jonathan Greig for for The Record: https://therecord.media/seatac-airport-port-of-seattle-cyberattack

🚨Cyberattack Alert ‼️ 🇺🇸USA - HB Construction The hacking group Hunters International claims to have breached HB Construction. Allegedly, 505.2 GB (160,734 files) of data were exfiltrated.

🚨Cyberattack Alert ‼️ 🇺🇸USA - VIcom (Virginia Integrated Communication) The hacking group Hunters International claims to have breached VIcom. Allegedly, 264.7 GB (25,391 files) of data were exfiltrated.

🚨Cyberattack Alert ‼️ 🇺🇸USA - Arch-Con Corporation is being threatened for the second time. The hacking group Hunters International claims to have breached Arch-Con Corporation. Allegedly, 860.6 GB (1,089,927 files) of data were exfiltrated. Ransom deadline: 16th Sept 24. This is the second time Arch-Con Corporation has been threatened by a ransomware group. Previously, on April 9, 2024, the BlackBasta cybercriminal group claimed to have attacked the company and exfiltrated 2 TB of data.

🚨Cyberattack Alert ‼️ 🇺🇸USA - Ascend Analytics The hacking group Lynx claims to have breached Ascend Analytics. Samples have been provided

🚨Cyberattack Alert ‼️ 🇺🇸USA - Brunswick Hospital Center The hacking group ThreeAM claims to have breached Brunswick Hospital Center. Reportedly, 22.1 GB of data were exfiltrated and leaked.