Hackmanac Cyber Alerts

🚨 #CyberAttack 🚨 🇮🇱 #Israel, Globes - Hackers demand $1,000,000 Globes, a daily evening financial newspaper in Israel, has been listed as a victim by the Medusa ransomware group. The hackers allegedly exfiltrated financial data, photos, employees’ data, email correspondence, and other sensitive documents. Ransom demand: $1,000,000. Ransom deadline: 30th Jul 24. #Ransomware

🚨 #CyberAttack 🚨 🇿🇦 #SouthAfrica, Sibanye-Stillwater Sibanye-Stillwater has been listed as a victim by the RansomHouse ransomware group. The hackers allegedly exfiltrated 1.2 TB of data. On July 10th, media reported that a cyberattack halted some operations at the Sibanye Stillwater mining operations in Montana. The mining company said only payroll was impacted by the attack. However, an official with the United Steelworkers union said smelter operations in Columbus were impacted due to all automated systems not working. https://www.ktvq.com/news/local-news/sibanye-stillwater-hit-by-ransomware-attack #Ransomware

🚨 #CyberAttack 🚨 🇺🇸 #USA, Acadian Ambulance Acadian Ambulance has been listed as a victim by the Daixin ransomware group. On June 25, local media reported that Acadian Ambulance had been targeted by a significant cyberattack that is disrupting its computer systems. https://www.kadn.com/news/investigates/acadian-ambulance-becomes-victim-of-cyberattack/article_0632e06e-3340-11ef-8623-2bd27eb4cfb0.html #Ransomware

⚠️ According to the information we have, Inferno Drainer will be experiencing outages today. Reportedly, Inferno Drainer's infrastructure may be located at the server facilities of https://www.sollutium.com/ If you have been affected by this drainer - write to us. 🤖 Incident_report_bot 🔗 Our website

🚨 #CyberAttack 🚨 - MEMC (GlobalWafers) MEMC, a GlobalWafers company, leader in producing advanced semiconductor has been listed as a victim by the BlackBasta ransomware group. The hackers allegedly exfiltrated 1 TB of data, including corporate data, financial data, NDA, confidential data, human resources data, hire data, R&D data, engineering data, personal employees documents and info, and clients data. Ransom deadline: 29th Jul 24. On June 13, the company reported being a victim of a cyberattack affecting some of its data systems, impacting production lines at a few facilities. #Ransomware

#DataLeak - Llama 3 leaked before official release? A 4chan user claims to have leaked the base model of Meta LLaMA 3.1-405B a few days (possibly hours, according to speculations) before the official release of Meta LLaMA 3.0. From the details provided, it appears that it was allegedly obtained from a public test repository that was accidentally made accessible on HuggingFace. The confirmation of this leak has not yet been verified. #LLaMA3 #Meta

Fake CrowdStrike fixes target companies with malware, data wipers #CrowdStrike https://www.bleepingcomputer.com/news/security/fake-crowdstrike-fixes-target-companies-with-malware-data-wipers/#google_vignette

🚨 #CyberAttack 🚨 🇯🇵🇺🇸 Daikin — Hackers demand $40,000 Daikin, the world's largest air conditioner manufacturer, has been listed as a victim by the Meow hacking group. From the samples provided, it appears to be the USA branch. The hackers allegedly exfiltrated 40 GB of confidential data, including account information, bank details, and transaction records. #DataBreach

🚨 #CyberAttack 🚨 🇮🇩 #Indonesia, Garudafood Putra Putri Jaya Garudafood Putra Putri Jaya, one of the largest food and beverage companies in Indonesia, has been listed as a victim by the RansomHub ransomware group. The hackers allegedly exfiltrated 10 GB of data. Ransom deadline: 27th Jul 24. #Ransomware

🚨 #DataBreach 🚨 🇯🇵🇺🇸- Good Smile Company A potential data breach at the US branch of Good Smile Company, a Japanese manufacturer of hobby products, has been detected on a hacking forum. Reportedly, 76,474 users have been affected. Among these are information such as Customer Name, E-Mail, Nickname, Customer Group, IP and Address. The confirmation or denial of these claims has yet to be verified, but in the meantime, Good Smile users are advised to be cautious of potential phishing attempts. #CyberAttack

🚨 #CyberAttack 🚨 🇯🇵 #Japan, Kumagai Gumi Group — threatened for the second time by a hacking group Kumagai Gumi Group has been listed as a victim by the RansomHub ransomware group. The hackers allegedly exfiltrated 5 TB of data. Previously, the Japanese company had been threatened by the ALPHV ransomware group, claiming to have stolen 5 TB of data. The possibility that these are the same data that RansomHub claims to have exfiltrated today cannot be excluded at this time. #Ransomware

#CrowdStrike - Technical Details on July 19 Outage #BSODhttps://www.crowdstrike.com/blog/technical-details-on-todays-outage/

Latest #CrowdStrike statement: "I want to sincerely apologize directly to all of you for today’s outage" [...] "The outage was caused by a defect found in a Falcon content update for Windows hosts. Mac and Linux hosts are not impacted. This was not a cyberattack." [...] "We know that adversaries and bad actors will try to exploit events like this." https://www.crowdstrike.com/blog/our-statement-on-todays-outage/

🚨🚨 #CyberAttack 🚨🚨 In the past few hours, the LockBit 3.0 hacking group has added 13 victims to its list, including government entities and those in the education sector: - 🇫🇷Région Pays de la Loire - 🇺🇸Great Lakes Supply - 🇹🇭Goldstar Metal - 🇺🇸Joliet Public Schools District 86 - 🇩🇪Lothar Rapp - 🇦🇹Hotel Albona Nova - 🇬🇷Iteam Technology Solutions - 🇺🇸Clay County - 🇦🇺Wattle Range Council - 🇬🇷Barking Well Media - 🇺🇸The Troy Area School District - 🇺🇸Fusco, Brandenstein & Rada P.C - 🇧🇪Customs Support Group #Ransomware #LockBit

🚨 #CyberAttack 🚨 🇺🇸 #USA, Leech Lake Gaming Leech Lake Gaming has been listed as a victim by the Cicada3301 ransomware group. The hackers allegedly exfiltrated 223 GB of data, including financial data, clients’ data, and invoices. #Ransomware

Singapore, Don Mueang (Thailand) and Dubai International airports affected by Crowdstrike outage: https://www.youtube.com/shorts/dJCK-0vNmO4

Singapore, Don Mueang and Dubai International airports affected by Crowdstrike outage:

The President & CEO of #CrowdStrike, George Kurtz announces: "CrowdStrike is actively working with customers impacted by a defect found in a single content update for Windows hosts. Mac and Linux hosts are not impacted. This is not a security incident or cyberattack. The issue has been identified, isolated, and a fix has been deployed." https://x.com/George_Kurtz/status/1814235001745027317