Hackmanac Cyber Alerts

🚨Ransomware Alert ‼️ 🇯🇵Japan - Kanagawa Prefecture On December 1, 2024, the Kanagawa Arts and Culture Foundation, which manages several public cultural facilities in Kanagawa Prefecture, suffered a ransomware attack targeting its server. The server contained information related to facility management, internal operations, and communications with performers and users. The attack was detected early on December 1, but recovery efforts were unsuccessful, leading to the server being shut down. https://www.pref.kanagawa.jp/docs/yi4/prs/r8670184.html This is not the first time Kanagawa has been targeted by a ransomware attack: On October 9, 2024, the Kanagawa Prefectural Sewerage Public Corporation experienced a ransomware attack by the Black Suit hacking group (the same group responsible for the KADOKAWA attack), which infected its internal network system. Additionally, in mid-October, Kanagawa Prefecture was also impacted by DDoS attacks launched by the hacktivist group NoName057(16).

🚨Data Breach Alert ‼️ 🇪🇸Spain - Newskill Gaming A potential data breach at Newskill Gaming has been detected on a hacking forum, reportedly affecting 79,000 customers. According to the post, on December 1, Newskill Gaming suffered a data breach that resulted in the theft of 1.96 GB (481 CSV tables) containing 79,000 user records. These records reportedly include information such as full names, email addresses, dates of birth, and hashed passwords. The authenticity of these claims has yet to be verified. In the meantime, Newskill Gaming customers are advised to remain vigilant against potential phishing attempts.

🚨Cyberattack Update Multinational telecommunications giant BT Group (formerly British Telecom) has confirmed that its BT Conferencing business division shut down some of its servers following a Black Basta ransomware breach. More details: https://www.bleepingcomputer.com/news/security/bt-conferencing-division-took-servers-offline-after-black-basta-ransomware-attack/

🟧 #HackTuesday 🟧 Hack Tuesday: Week 27 Nov - 03 Dec 2024 ⚠️225 cyberattacks across 44 countries ⚠️ ➡️The most active threat actor this week is Akira claiming responsibility for 39 attacks. ➡️The USA is the most affected country, accounting for 46% of the victims, with 103 cyberattacks. ➡️The Manufacturing sector is the most impacted, representing 21% of the claimed targets. ➡️Overall, the claimed compromised data amounts to approximately 22 TB. ☣️The average ESIX® (Estimated Severity Index) is 4.5. Follow the link for list of referred victims: https://hackmanac.com/news/hack-tuesday-week-27-nov-03-dec-2024 #Hackmanac #HT #Cybersecurity

🚨🚨Cyberattack Alert ‼️ 🇺🇸USA - NTrust Ra World ransomware group claims to have breached NTrust, a real estate lease administration solution provider. Allegedly, 7.5 TB of data were exfiltrated, including REmaap platform database, lease platform database, REAP platform database, and financial and contract documents of more than 200 companies. Ransom deadline: 01st Jan 2025.

🚨Ransomware Alert ‼️ 🇺🇸USA - Hoboken ThreeAM ransomware group claims responsibility for the attack on Hoboken, New Jersey. On November 27, a ransomware attack forced Hoboken City Hall offices to close, suspending online city services and canceling municipal court sessions for the day. Municipal court operations were temporarily redirected to Secaucus.

🚨Cyberattack Alert ‼️ 🇺🇸USA - Crystal Lake Elementary District 47 RansomHub ransomware group claims to have breached Crystal Lake Elementary District 47. Allegedly, 600 GB of data were exfiltrated. Ransom deadline: 07th Dec 24.

🚨Cyberattack Alert - BT Group BlackBasta ransomware group claims to have breached BT Group. Allegedly, 500 GB of financial data, organisation data, users' data and personal documents, NDAs, and confidential data were exfiltrated. Ransom deadline: 12th Dec 24.

🚨Cyberattack Alert ‼️ 🇬🇧- Deloitte UK Brain Cipher ransomware group claims to have breached Deloitte UK. Allegedly, more than 1 TB of data were exfiltrated. Ransom deadline: 15th Dec 24.

🚨Cyberattack Alert ‼️ 🇺🇸USA - Certified Information Security Bashe hacking group claims to have breached Certified Information Security. Allegedly, 1.7 GB of data were exfiltrated. Ransom deadline: 09th Dec 24.

🚨Cyberattack Alert ‼️ 🇩🇪Germany - Beko Technologies BlackBasta ransomware group claims to have breached Beko Technologies. Allegedly, 700 GB of data were exfiltrated, including company data, users' folders and personal documents, customers' data, confidential data, R&D (Fue), and drawings and graphics. Ransom deadline: 12th Dec 24.

🚨Cyberattack Alert ‼️ 🇮🇹Italy - Snatt Logistica Spa BlackBasta ransomware group claims to have breached Snatt Logistica Spa. Allegedly, 1.5 TB of financial data, personal data, confidential data, and NDAs were exfiltrated. Ransom deadline: 12th Dec 24.

🚨Cyberattack Alert ‼️ 🇬🇧UK - Lorne Stewart Group BlackBasta ransomware group claims to have breached Lorne Stewart Group. Allegedly, 1 TB of financial data, personal employee data, documents, confidential data, NDAs, client data, engineering, and project information were exfiltrated. Ransom deadline: 12th Dec 24.

🚨Cyberattack Alert ‼️ 🇩🇪Germany - Vossko BlackBasta ransomware group claims to have breached Vossko. Allegedly, 800 GB of data were exfiltrated, including financial data, personal employees' data, projects, and personal documents. Ransom deadline: 12th Dec 24.

🚨Cyberattack Alert ‼️ 🇨🇦Canada - Hampton Securities BlackBasta ransomware group claims to have breached Hampton Securities. Allegedly, 500 GB of data were exfiltrated, including employees and customers' personal documents, financial data, NDAs, and confidential data. Ransom deadline: 11th Dec 24.

🚨Cyberattack Alert ‼️ 🇬🇧UK - Graham + Sibbald BlackBasta ransomware group claims to have breached Graham + Sibbald. Allegedly, 1.5 TB of data, including personal documents of employees and clients, financial data, user data, and other corporate data, were exfiltrated. Ransom deadline: 11th Dec 24.

🚨Cyberattack Alert ‼️ 🇸🇪Sweden - Interspiro BlackBasta ransomware group claims to have breached Interspiro. Allegedly, 1 TB of data, including financial data, home employees' personal folders and documents, DWG drawings and projects, NDA’s, and confidential data, were exfiltrated. Ransom deadline: 11th Dec 24.

🚨Cyberattack Alert ‼️ 🇺🇸USA - Cafe Zupas BlackBasta ransomware group claims to have breached Cafe Zupas. Allegedly, 800 GB of employees' personal documents, financial data, confidential data, and accounting records were exfiltrated. Ransom deadline: 11th Dec 24.

🚨Cyberattack Alert ‼️ 🇨🇦Canada - Westbank Corp BlackBasta ransomware group claims to have breached Westbank Corp. Allegedly, 500 GB of data were exfiltrated, including company data such as financial, HR, payroll, tax records, users' personal folders and documents, customers' data, contracts, NDAs, confidential data, and projects. Ransom deadline: 12th Dec 24.

🚨Cyberattack Alert ‼️ 🇮🇹Italy - NIER Ingegneria S.p.A BlackBasta ransomware group claims to have breached NIER Ingegneria S.p.A. Allegedly, 1.5 TB of data were exfiltrated, including engineering, financial data, users' personal folders and documents, customers' data, personal and confidential data, agreements, projects, DWG, synergy files, human resources, and office data. Ransom deadline: 11th Dec 24. The company states on its website: "On the morning of October 9, 2024, we became aware of a cyberattack targeting our organization, compromising part of the company's IT system."