Security Affairs

JULY 8, 2021

The American multinational investment bank and financial services firm Morgan Stanley discloses a data breach caused by the hack of an Accellion FTA server of a third-party vendor. The hack of the FTA server took place in March, but the hacker had access to the data of Morgan Stanley customers in May. ” reads the letter.

Data breaches 121

Data breaches Hacking Banking Financial Services 121

The Last Watchdog

JUNE 21, 2020

Although most people think of ransomware as a dodgy application that encrypts data and holds it for ransom, the concept is much more heterogeneous than that. File encryption 2013 – 2015. It emerged in September 2013 and paved the way for hundreds of file-encrypting menaces that have splashed onto the scene ever since.

Ransomware 243

Ransomware Hacking Encryption Penetration Testing 243

Security Affairs

FEBRUARY 19, 2024

Schneider Electric said that other divisions of the company were not impacted by the cyber attack. The gang also published several pictures of passports and company documents as proof of the hack. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, ransomware)

Ransomware 104

Ransomware Digital transformation Retail Antivirus 104

Security Affairs

JUNE 28, 2020

Asian media firm E27 suffered a security breach and hackers asked for a “donation” to provide information on the flaws they exploited in the attack. If you use the legacy email and password login, your passwords are encrypted, but we highly encourage that you change it. SecurityAffairs – hacking, E27).

Media 141

Media Hacking Passwords Data breaches 141

Security Affairs

MARCH 23, 2021

According to a data breach notification published by the company on its website, the cyber attack did not affect its network, but it only impacted an Accellion FTA server. “Shell has been impacted by a data security incident involving Accellion’s File Transfer Appliance. .” SecurityAffairs – hacking, Shell).

Data breaches 124

Data breaches Hacking Cybercrime Cyber Attacks 124

Security Affairs

FEBRUARY 26, 2020

The file downloaded from this censorship free file hosting is actually a chunk of 125KB random looking bytes, suggesting it would likely be some binary payload protected with strong encryption. Figure 4: Piece of the encrypted file downloaded from “share.]dmca.]gripe”. New Cyber Attack Campaign Leverages the COVID-19 Infodemic.

Cyber Attacks 114

Cyber Attacks Malware Social Engineering Advertising 114

Security Affairs

NOVEMBER 12, 2023

Like other ransomware gangs, Lorenz operators also implement double-extortion model by stealing data before encrypting it and threatening them if the victim doesn’t pay the ransom. In mid-October, the ALPHV/BlackCat ransomware group claimed to have hacked the Morrison Community Hospital and added it to its dark web Tor leak site.

Ransomware 125

Ransomware Healthcare Encryption Cyber Attacks 125

Security Affairs

OCTOBER 15, 2023

The ALPHV/BlackCat ransomware group claims to have hacked the Morrison Community Hospital and added it to its dark web Tor leak site. The group claims to have stolen 5TB of patients’ and employee’s information, backups, PII documents, and more. Other ransomware attacks recently hit US hospitals.

Ransomware 123

Ransomware Healthcare Data breaches Cyber Attacks 123

Security Affairs

DECEMBER 28, 2023

The ransomware gang hit the KHO on Christmas Eve and gained access to specifically encrypted data, the organization revealed in a statement published on its website. “Unknown persons gained access to the hospitals’ IT infrastructure systems and specifically encrypted data. the timeline for which cannot yet be predicted.

Ransomware 112

Ransomware Encryption Cyber Attacks Hacking 112

Security Affairs

SEPTEMBER 14, 2023

The Lockbit ransomware group claims to have hacked two major hospitals, the Carthage Area Hospital and Claxton-Hepburn Medical Center. At this time the group has yet to publish any samples of the alleged stolen data as a proof of the hack. Other ransomware attacks recently hit US hospitals.

Ransomware 107

Ransomware Healthcare Cyber Attacks Hacking 107

Security Affairs

DECEMBER 25, 2019

A new cyber attack hit the radio network Entercom, this is the second time the company has suffered a similar security incident in a few months. A cyber attack hit the radio network Entercom, the incident has impacted the back-office functions and in some cases, the stations were apparently forced to run recorded programs.

Cyber Attacks 54

Cyber Attacks Advertising Marketing Encryption 54

Security Affairs

JANUARY 9, 2024

The LockBit ransomware gang claimed responsibility for the cyber attack on the Capital Health hospital network. The cybercriminal group clarified that its attacks do not disrupt patient care but are confined to data theft when targeting hospitals. Capital Health Regional Medical Center is a member of Capital Health System.

Ransomware 103

Ransomware Healthcare Encryption Cyber Attacks 103

Security Affairs

OCTOBER 3, 2023

Like all ransomware, this is a type of malware that, once introduced into an organization, encrypts the data and then requires the victim to pay a ransom in order to decrypt it. Black attack analyzed by TG Soft ‘s CRAM researchers, showed that access by cyber criminals was via exposed RDP. Black The LockBit 3.0

Ransomware 121

Ransomware Encryption Technology Backups 121

Security Affairs

JANUARY 6, 2023

In December 2019, the FBI issued a warning to the private industry of cyber attacks involving the LockerGoga and MegaCortex Ransomware. The decryptor also supports the “Scan Entire System” mode which allows users to search for all encrypted files. For encryption with MegaCortex V1 (the encrypted files have the “.aes128ctr”

Ransomware 95

Ransomware Antivirus Encryption Backups 95

Security Affairs

MAY 5, 2024

The NCA will reach out to victims based in the UK in the coming days and weeks, providing support to help them recover encrypted data. However a few days later, the LockBit gang relaunched its RaaS operation, the group set up a new infrastructure and threatened to carry out cyber attacks on the government sector.

Ransomware 121

Ransomware Cybercrime Cyber Attacks Encryption 121

Security Affairs

AUGUST 6, 2021

“GIGABYTE released a major message stating that the information security team has cooperated with technical experts from a number of external information security companies to jointly handle this cyber attack on a small number of servers of GIGABYTE, and has notified the abnormal network conditions it has detected.”

Manufacturing 123

Manufacturing Ransomware Information Security Security Defenses 123

Security Affairs

DECEMBER 25, 2022

Expert found Backdoor credentials in ZyXEL LTE3301 M209 Raspberry Robin malware used in attacks against Telecom and Governments TikTok parent company ByteDance revealed the use of TikTok data to track journalists BetMGM discloses security breach impacting 1.5 SecurityAffairs – hacking, newsletter). Pierluigi Paganini.

Ransomware 92

Ransomware Hacking Malware Encryption 92

Security Affairs

DECEMBER 17, 2023

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. CISA and ENISA enhance their Cooperation CISA adds Qlik bugs to exploited vulnerabilities catalog Report: 2.6 CISA and ENISA enhance their Cooperation CISA adds Qlik bugs to exploited vulnerabilities catalog Report: 2.6

Data breaches 82

Data breaches Cybercrime Firewall Artificial Intelligence 82

Security Affairs

JANUARY 6, 2024

Unlike other ransomware, Petya does not encrypt files on the infected systems but targets the hard drive’s master file table (MFT) and renders the master boot record (MBR) inoperable. Merck had not taken out specific insurance to cover cyber attacks, it only had insurance coverage against general risks.

Insurance 111

Insurance Manufacturing Ransomware Healthcare 111

Security Affairs

AUGUST 3, 2022

“The SEMIKRON Group has become a victim of a cyber-attack by a professional hacker group. As part of this attack, the perpetrators have claimed to have exfiltrated data from our system. The attackers have infiltrated data from the company systems before encrypting a portion of the internal network.

Manufacturing 97

Manufacturing Ransomware Encryption Data breaches 97

Security Affairs

FEBRUARY 29, 2024

The NCA will reach out to victims based in the UK in the coming days and weeks, providing support to help them recover encrypted data. Now the LockBit gang is attempting to relaunch its RaaS operation, the group has set up a new infrastructure and is threatening to carry out cyber attacks on the government sector.

Ransomware 98

Ransomware Hacking Cyber Attacks Encryption 98

Security Affairs

MARCH 3, 2021

Cybersecurity firm Qualys is the latest victim of a cyber attack, the company was likely hacked by threat actors that exploited a zero-day vulnerability in their Accellion FTA server. In response to the wave of attacks, the vendor has released multiple security patches to address the vulnerabilities exploited by the hackers.

Ransomware 129

Ransomware Cybersecurity Cyber Attacks Data breaches 129

Security Boulevard

MARCH 17, 2022

Decentralized Finance and the information security protocols protecting it remain in their early stages of development, as does the adaptation of new cyberattack techniques. Blockchain-based cryptocurrency is an encrypted list arranged in chronological order providing a record of all addresses that hold assets. link] [link].

Cyber Attacks 98

Cyber Attacks Cryptocurrency Marketing Software 98

Security Affairs

DECEMBER 5, 2022

A French hospital near Paris canceled operations and transfer some patients due to a cyber attack suffered over the weekend. France’s health ministry announced that the Hospital Centre of Versailles was hit by a cyber attack over the weekend. SecurityAffairs – hacking, ransomware). Pierluigi Paganini.

Ransomware 97

Ransomware Healthcare Cyber Attacks Hacking 97

Security Affairs

MAY 16, 2023

French electronics manufacturer Lacroix Group shut down three plants after a cyber attack, experts believe it was the victim of a ransomware attack. The French electronics manufacturer Lacroix Group shut down three facilities in France, Germany, and Tunisia in response to a cyber attack.

Manufacturing 84

Manufacturing Ransomware Cyber Attacks Backups 84

Security Affairs

OCTOBER 31, 2022

Reflecting on the Wannacry ransomware attack, which is the lesson learnt e why most organizations are still ignoring it. The cryptolocker had the task of encrypting the data of the affected system; The exploit was to infect the victim’s local network, if not properly updated, through the SMB protocol vulnerability.

Malware 98

Malware Computers and Electronics Encryption Ransomware 98

Security Affairs

JULY 3, 2023

In an era where data has become the cornerstone of business operations, the loss of vital information can result in severe setbacks and irreparable damage. Whether it’s due to accidental deletion, hardware failure, cyber-attacks, or natural disasters, the loss of valuable data can have devastating impacts on an organization.

Unstructured Data 92

Unstructured Data Cyber Attacks Backups Encryption 92

Security Boulevard

AUGUST 18, 2022

Third-party attacks, or supply chain attacks, occur when a trusted software, vendor, or other external company property or personnel is the victim of a cyber-attack that may directly impact the partnered organization ( 1 ). Exploit Tools and Targets: Enhance Third-Party Risk Management to Mitigate Multi-Targeted Approach.

Encryption 64

Encryption Cyber Attacks Software Risk 64

Security Affairs

JANUARY 29, 2023

Copycat Criminals mimicking Lockbit gang in northern Europe Sandworm APT targets Ukraine with new SwiftSlicer wiper ISC fixed high-severity flaws in DNS software suite BIND Patch management is crucial to protect Exchange servers, Microsoft warns Hacker accused of having stolen personal data of all Austrians and more CVE-2023-23560 flaw exposes 100 (..)

DNS 85

DNS Data breaches Hacking Backups 85

Security Affairs

JULY 2, 2023

WordPress sites using the Ultimate Member plugin are under attack LockBit gang demands a $70 million ransom to the semiconductor manufacturing giant TSMC Avast released a free decryptor for the Windows version of the Akira ransomware Iran-linked Charming Kitten APT enhanced its POWERSTAR Backdoor miniOrange’s WordPress Social Login and Register plugin (..)

Cybercrime 86

Cybercrime Hacking Ransomware Malware 86

Security Affairs

DECEMBER 4, 2020

A group of Iranian hackers gained access to a un unprotected ICS at an Israeli Water Facility and posted a video as proof of the hack. The threat actors accessed a human-machine interface (HMI) system that was left unsecured online and published a video hack. An attacker could easily interact with the system via Modbus.

Cyber Attacks 106

Cyber Attacks Hacking Authentication Education 106

Security Affairs

DECEMBER 29, 2023

The malware communicated with C2 infrastructure via TCP, it use the AES-128-CBC algorithm to encrypt the traffic. At the same time, it is obvious that the malicious plan also involves taking measures to develop a cyber attack on the entire information and communication system of the organization.

Phishing 117

Phishing Malware Computers and Electronics Internet 117

Security Affairs

DECEMBER 21, 2022

. “At the present time, no damage has been done, nor are there any indications that data has been stolen or modified,” This isn’t the first attack suffered by the company, in 2012, the company was targeted by another cyber attack that was classified as “heavy” and of “exceptional quality.”. Pierluigi Paganini.

Engineering 93

Engineering Data breaches Ransomware Banking 93

Security Affairs

JULY 1, 2022

A cyber attack forced the American publishing giant Macmillan to shut down its IT systems. The company spokesman Erin Coffey told different media outlets that attackers have encrypted certain files on the Macmillan network. The attack took place on June 25, the security breach also impacted the U.K.

Ransomware 90

Ransomware Data breaches Cyber Attacks Media 90

Security Affairs

APRIL 28, 2021

UK rail network Merseyrail was hit by a cyberattack, ransomware operators breached the corporate email system to disclose the attack to employees and journalists. UK rail network Merseyrail, which operates rail services across Merseyside, announced it was a victim of a cyber attack. SecurityAffairs – hacking, Merseyrail).

Ransomware 96

Ransomware Cyber Attacks Accountability Encryption 96

Security Affairs

DECEMBER 25, 2022

Expert found Backdoor credentials in ZyXEL LTE3301 M209 Raspberry Robin malware used in attacks against Telecom and Governments TikTok parent company ByteDance revealed the use of TikTok data to track journalists BetMGM discloses security breach impacting 1.5 SecurityAffairs – hacking, newsletter). Pierluigi Paganini.

Ransomware 52

Ransomware Hacking Malware Encryption 52

Security Affairs

DECEMBER 21, 2020

The attack was reported last week by Handelsblatt , the website databreaches.net also reported the news after @Chum1ng0 alerted them. . CyberAttack , #CyberSecurity , #ciberseguridad ; "Cyber attack paralyzes MDax group Symrise" [link] — chum1ng0 (@chum1ng0) December 14, 2020. SecurityAffairs – hacking, BISMUTH).

Ransomware 101

Ransomware Encryption Malware Cyber Attacks 101