Security Affairs

JULY 8, 2021

The American multinational investment bank and financial services firm Morgan Stanley discloses a data breach caused by the hack of an Accellion FTA server of a third-party vendor. The hack of the FTA server took place in March, but the hacker had access to the data of Morgan Stanley customers in May. Pierluigi Paganini.

Data breaches 121

Data breaches Hacking Banking Financial Services 121

Security Affairs

MAY 3, 2024

In April, a cyber attack hit the Hospital Simone Veil in Cannes (CHC-SV), impacting medical procedures and forcing personnel to return to pen and paper. Non-urgent surgical procedures and consultations scheduled at the time of the attack were postponed. ” In the past, other French hospitals were victims of cyber attacks.

Cyber Attacks 110

Cyber Attacks Ransomware Healthcare Media 110

The Last Watchdog

JUNE 21, 2020

Although most people think of ransomware as a dodgy application that encrypts data and holds it for ransom, the concept is much more heterogeneous than that. File encryption 2013 – 2015. It emerged in September 2013 and paved the way for hundreds of file-encrypting menaces that have splashed onto the scene ever since.

Ransomware 243

Ransomware Hacking Encryption Penetration Testing 243

Security Affairs

JANUARY 1, 2024

The Cactus ransomware group claims to have hacked Coop, one of the largest retail and grocery providers in Sweden. The Cactus ransomware group claims to have hacked Coop and is threatening to disclose a huge amount of personal information, over 21 thousand directories. Threat actors have published ID cards as proof of hack.

Retail 125

Retail Ransomware Encryption Hacking 125

Security Affairs

FEBRUARY 23, 2021

FireEye experts linked a series of attacks targeting Accellion File Transfer Appliance (FTA) servers to the cybercrime group UNC2546, aka FIN11. Security experts from FireEye linked a series of cyber attacks against organizations running Accellion File Transfer Appliance (FTA) servers to the cybercrime group UNC2546, aka FIN11.

Cybercrime 82

Cybercrime Software Ransomware Cyber Attacks 82

Security Affairs

DECEMBER 17, 2023

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. CISA and ENISA enhance their Cooperation CISA adds Qlik bugs to exploited vulnerabilities catalog Report: 2.6 CISA and ENISA enhance their Cooperation CISA adds Qlik bugs to exploited vulnerabilities catalog Report: 2.6

Data breaches 82

Data breaches Cybercrime Firewall Artificial Intelligence 82

Security Affairs

MAY 5, 2024

The NCA will reach out to victims based in the UK in the coming days and weeks, providing support to help them recover encrypted data. However a few days later, the LockBit gang relaunched its RaaS operation, the group set up a new infrastructure and threatened to carry out cyber attacks on the government sector.

Ransomware 121

Ransomware Cybercrime Cyber Attacks Encryption 121

Security Affairs

FEBRUARY 26, 2020

The file downloaded from this censorship free file hosting is actually a chunk of 125KB random looking bytes, suggesting it would likely be some binary payload protected with strong encryption. Figure 4: Piece of the encrypted file downloaded from “share.]dmca.]gripe”. New Cyber Attack Campaign Leverages the COVID-19 Infodemic.

Cyber Attacks 114

Cyber Attacks Malware Social Engineering Advertising 114

Security Affairs

OCTOBER 15, 2023

The ALPHV/BlackCat ransomware group claims to have hacked the Morrison Community Hospital and added it to its dark web Tor leak site. In January, the LockBit ransomware gang formally apologized for the attack on the Hospital for Sick Children (SickKids) and released a free decryptor for the Hospital.

Ransomware 123

Ransomware Healthcare Data breaches Cyber Attacks 123

Security Affairs

JULY 2, 2023

WordPress sites using the Ultimate Member plugin are under attack LockBit gang demands a $70 million ransom to the semiconductor manufacturing giant TSMC Avast released a free decryptor for the Windows version of the Akira ransomware Iran-linked Charming Kitten APT enhanced its POWERSTAR Backdoor miniOrange’s WordPress Social Login and Register plugin (..)

Cybercrime 86

Cybercrime Hacking Ransomware Malware 86

CyberSecurity Insiders

FEBRUARY 8, 2021

And an official confirmation says that the attack was launched by notorious North Korean Lazarus hacking group that is known for its social engineering attacks such as the Wannacry 2017. Note- Lazarus group aka Guardians of Peace is a Cybercrime group that is being funded by North Korean intelligence- as per US Intelligence.

Ransomware 134

Ransomware Social Engineering Cryptocurrency Cybercrime 134

Security Affairs

DECEMBER 28, 2023

The ransomware gang hit the KHO on Christmas Eve and gained access to specifically encrypted data, the organization revealed in a statement published on its website. “Unknown persons gained access to the hospitals’ IT infrastructure systems and specifically encrypted data. the timeline for which cannot yet be predicted.

Ransomware 112

Ransomware Encryption Cyber Attacks Hacking 112

Security Affairs

MARCH 3, 2021

Cybersecurity firm Qualys is the latest victim of a cyber attack, the company was likely hacked by threat actors that exploited a zero-day vulnerability in their Accellion FTA server. In response to the wave of attacks, the vendor has released multiple security patches to address the vulnerabilities exploited by the hackers.

Ransomware 129

Ransomware Cybersecurity Cyber Attacks Data breaches 129

Security Affairs

SEPTEMBER 14, 2023

The Lockbit ransomware group claims to have hacked two major hospitals, the Carthage Area Hospital and Claxton-Hepburn Medical Center. At this time the group has yet to publish any samples of the alleged stolen data as a proof of the hack. Other ransomware attacks recently hit US hospitals.

Ransomware 107

Ransomware Healthcare Cyber Attacks Hacking 107

Security Affairs

DECEMBER 25, 2019

A new cyber attack hit the radio network Entercom, this is the second time the company has suffered a similar security incident in a few months. A cyber attack hit the radio network Entercom, the incident has impacted the back-office functions and in some cases, the stations were apparently forced to run recorded programs.

Cyber Attacks 54

Cyber Attacks Advertising Marketing Encryption 54

Security Affairs

MAY 21, 2023

Please vote for Security Affairs ( [link] ) as the best European Cybersecurity Blogger Awards 2022 – VOTE FOR YOUR WINNERS Vote for me in the sections where is reported Securityaffairs or my name Pierluigi Paganini Please nominate Security Affairs as your favorite blog.

Data breaches 87

Data breaches Cybercrime Ransomware Passwords 87

Security Affairs

JANUARY 9, 2024

The LockBit ransomware gang claimed responsibility for the cyber attack on the Capital Health hospital network. The cybercriminal group clarified that its attacks do not disrupt patient care but are confined to data theft when targeting hospitals. Capital Health Regional Medical Center is a member of Capital Health System.

Ransomware 103

Ransomware Healthcare Encryption Cyber Attacks 103

Security Affairs

OCTOBER 3, 2023

Like all ransomware, this is a type of malware that, once introduced into an organization, encrypts the data and then requires the victim to pay a ransom in order to decrypt it. Black attack analyzed by TG Soft ‘s CRAM researchers, showed that access by cyber criminals was via exposed RDP. Black The LockBit 3.0

Ransomware 121

Ransomware Encryption Technology Backups 121

Security Affairs

DECEMBER 13, 2019

VISA is warning of ongoing targeted cyber attacks conducted by crooks on point-of-sale (POS) systems of North American fuel dispenser merchants. According to a security alert published by VISA, the PoS systems of North American fuel dispenser merchants are under attack. EMV Chip, Pointto -Point Encryption, Tokenization, etc.)

Cyber Attacks 64

Cyber Attacks Malware Cybercrime Advertising 64

Security Affairs

JANUARY 6, 2023

In December 2019, the FBI issued a warning to the private industry of cyber attacks involving the LockerGoga and MegaCortex Ransomware. The decryptor also supports the “Scan Entire System” mode which allows users to search for all encrypted files. For encryption with MegaCortex V1 (the encrypted files have the “.aes128ctr”

Ransomware 95

Ransomware Antivirus Encryption Backups 95

Security Affairs

JULY 8, 2023

Ransomware Redefined: RedEnergy Stealer-as-a-Ransomware attacks MAR-10445155-1.v1 Ransomware Redefined: RedEnergy Stealer-as-a-Ransomware attacks MAR-10445155-1.v1 v1 Truebot Activity Infects U.S. v1 Truebot Activity Infects U.S.

Firewall 84

Firewall Ransomware Password Management Malware 84

Security Affairs

JULY 30, 2022

It is quite easy today for cybercrime groups to launch a cyber attack benefitting from the Ransomware-as-a-Service model causing damages of any size. The report includes recommendations to increase resilience against ransomware attacks and respond to this threat, enjoy it ! SecurityAffairs – hacking, ENISA).

Ransomware 85

Ransomware Cybercrime Cyber Attacks Encryption 85

Security Affairs

MAY 10, 2021

FBI confirmed that the attack against the Colonial Pipeline over the weekend was launched by the Darkside ransomware gang. Federal Bureau of Investigation confirmed that the Colonial Pipeline was shut down due to a cyber attack carried out by the Darkside ransomware gang. SecurityAffairs – hacking, Colonial Pipeline).

Ransomware 138

Ransomware Energy and Utilities Healthcare Cybercrime 138

Security Affairs

DECEMBER 25, 2022

Expert found Backdoor credentials in ZyXEL LTE3301 M209 Raspberry Robin malware used in attacks against Telecom and Governments TikTok parent company ByteDance revealed the use of TikTok data to track journalists BetMGM discloses security breach impacting 1.5 SecurityAffairs – hacking, newsletter). Pierluigi Paganini.

Ransomware 92

Ransomware Hacking Malware Encryption 92

Security Affairs

OCTOBER 23, 2022

Multiple supply chains potentially impacted Bulgaria hit by a cyber attack originating from Russia Interpol arrested 75 members of the cybercrime ring Black Axe 45,654 VMware ESXi servers reached End of Life on Oct. SecurityAffairs – hacking, newsletter). Follow me on Twitter: @securityaffairs and Facebook.

Data breaches 65

Data breaches Retail Ransomware Cybercrime 65

Security Affairs

FEBRUARY 29, 2024

The NCA will reach out to victims based in the UK in the coming days and weeks, providing support to help them recover encrypted data. Now the LockBit gang is attempting to relaunch its RaaS operation, the group has set up a new infrastructure and is threatening to carry out cyber attacks on the government sector.

Ransomware 98

Ransomware Hacking Cyber Attacks Encryption 98

Security Affairs

AUGUST 3, 2022

“The SEMIKRON Group has become a victim of a cyber-attack by a professional hacker group. As part of this attack, the perpetrators have claimed to have exfiltrated data from our system. The attackers have infiltrated data from the company systems before encrypting a portion of the internal network.

Manufacturing 97

Manufacturing Ransomware Encryption Data breaches 97

Security Affairs

FEBRUARY 24, 2021

Hackers posted data stolen from manufacturer of business jets Bombardier on Clop ransomware leak site following alleged FTA hack. Security experts from FireEye linked the cyber attacks to the cybercrime group UNC2546, aka FIN11. SecurityAffairs – hacking, Avaddon ransomware). Pierluigi Paganini.

Manufacturing 116

Manufacturing Ransomware Cybercrime Hacking 116

Security Affairs

DECEMBER 5, 2022

A French hospital near Paris canceled operations and transfer some patients due to a cyber attack suffered over the weekend. France’s health ministry announced that the Hospital Centre of Versailles was hit by a cyber attack over the weekend. SecurityAffairs – hacking, ransomware). Pierluigi Paganini.

Ransomware 97

Ransomware Healthcare Cyber Attacks Hacking 97

Security Affairs

APRIL 4, 2021

This system was used by our students, faculty, and staff to transfer encrypted files. ” In February, security experts from FireEye linked a series of cyber attacks against organizations running Accellion File Transfer Appliance (FTA) servers to the cybercrime group UNC2546, aka FIN11. Pierluigi Paganini.

Ransomware 93

Ransomware Encryption Data breaches Cybercrime 93

Security Affairs

MAY 16, 2023

French electronics manufacturer Lacroix Group shut down three plants after a cyber attack, experts believe it was the victim of a ransomware attack. The French electronics manufacturer Lacroix Group shut down three facilities in France, Germany, and Tunisia in response to a cyber attack.

Manufacturing 84

Manufacturing Ransomware Cyber Attacks Backups 84

Security Affairs

JANUARY 29, 2023

Copycat Criminals mimicking Lockbit gang in northern Europe Sandworm APT targets Ukraine with new SwiftSlicer wiper ISC fixed high-severity flaws in DNS software suite BIND Patch management is crucial to protect Exchange servers, Microsoft warns Hacker accused of having stolen personal data of all Austrians and more CVE-2023-23560 flaw exposes 100 (..)

DNS 85

DNS Data breaches Hacking Backups 85

Security Affairs

MAY 19, 2021

Conti ransomware also breached the network of Ireland’s Department of Health (DoH) but the ransomware failed to encrypt the systems. Last week, Conti ransomware gang targeted the Ireland’s Health Service Executive that was forced to shut down its IT systems on Friday after being targeted with a significant ransomware attack.

Ransomware 86

Ransomware Encryption Malware Government 86

Security Affairs

MARCH 1, 2020

Raccoon Malware, a success case in the cybercrime ecosystem. Hacking campaign targets sites running popular Duplicator WordPress plugin. Kr00k Wi-Fi Encryption flaw affects more than a billion devices. New Cyber Attack Campaign Leverages the COVID-19 Infodemic. SecurityAffairs – hacking, newsletter).

Banking 90

Banking Malware Advertising Ransomware 90

Security Affairs

DECEMBER 24, 2019

The FBI has issued a warning to the private industry of cyber attacks involving the LockerGoga and MegaCortex Ransomware. The FBI is warning the private industry of cyber attacks involving the LockerGoga and MegaCortex Ransomware. SecurityAffairs – MegaCortex ransowmare , hacking). Pierluigi Paganini.

Ransomware 60

Ransomware Backups Encryption Cyber Attacks 60

Security Affairs

JULY 1, 2022

A cyber attack forced the American publishing giant Macmillan to shut down its IT systems. The company spokesman Erin Coffey told different media outlets that attackers have encrypted certain files on the Macmillan network. The attack took place on June 25, the security breach also impacted the U.K.

Ransomware 90

Ransomware Data breaches Cyber Attacks Media 90

Security Affairs

JULY 28, 2020

The activity of the Lazarus Group surged in 2014 and 2015, its members used mostly custom-tailored malware in their attacks. The group has been linked to several major cyber attacks, including the 2014 Sony Pictures hack , several SWIFT banking attacks since 2016, and the 2017 WannaCry ransomware infection.

Ransomware 100

Ransomware Malware Advertising VPN 100