Cybercrime and Manufacturing - Cyber Security Informer

Cybercrime Soars: FBI's 2024 Report Reveals $16.6 Billion in Losses

SecureWorld News

MAY 14, 2025

The FBI's Internet Crime Complaint Center (IC3) has released its 2024 Internet Crime Report, marking a record-breaking year in cybercrime. Other critical sectors, including manufacturing and government facilities, also faced significant threats. The report highlights a staggering $16.6 billion in losses.

Cybercrime

Cybercrime Scams Cryptocurrency Internet

XE Group shifts from credit card skimming to exploiting zero-days

Security Affairs

FEBRUARY 10, 2025

The cybercrime group XE Group exploited a VeraCore zero-day to deploy reverse shells, web shells in recent attacks. “By targeting supply chains in the manufacturing and distribution sectors, XE Group not only maximizes the impact of their operations but also demonstrates an acute understanding of systemic vulnerabilities.

Manufacturing

Manufacturing Cybercrime Authentication Hacking

Chinese Android phones shipped with malware-laced WhatsApp, Telegram apps

Security Affairs

APRIL 16, 2025

Doctor Web warns that the attackers gained access to the supply chain of a number of Chinese manufacturers of Android-based smartphones. A third of the models listed below are manufactured under the SHOWJI brand.“ The kits analyzed by the company are commercialized by many manufacturers including Huawei, Lenovo and Xiaomi.

Malware

Malware Manufacturing Mobile Spyware

Passwordless Authentication without Secrets!

Thales Cloud Protection & Licensing

OCTOBER 11, 2024

However, industries reliant on shared devices—such as healthcare, retail, and manufacturing—face unique challenges. Similarly, in retail and manufacturing, delays caused by authentication procedures reduce overall efficiency. These fast-paced environments need a more flexible approach to balance security, speed, and user privacy.

Authentication

Authentication Healthcare Retail Manufacturing

Law enforcement operations seized BlackSuit ransomware gang’s darknet sites

Security Affairs

JULY 26, 2025

BlackSuit is believed to be a rebrand of Royal ransomware , which the FBI and CISA linked to the Conti cybercrime group, a major player in Russian cybercrime. The BlackSuit ransomware targeted various critical infrastructure sectors, including commercial facilities, healthcare, government, and manufacturing.

Ransomware

Ransomware Cybercrime Manufacturing Healthcare

Hive0117 group targets Russian firms with new variant of DarkWatchman malware

Security Affairs

MAY 1, 2025

A cybercrime group named Hive0117 is behind a fresh phishing campaign that targeted Russian organizations with a new version of the DarkWatchman malware, according to Russian cybersecurity firm F6. Hive0117 targets Russian firms in multiple sectors with phishing attacks using a modified version of the DarkWatchman malware.

Malware

Malware Phishing Telecommunications Antivirus

Authorities released free decryptor for Phobos and 8base ransomware

Security Affairs

JULY 18, 2025

The group has been active since March 2022, it focused on small and medium-sized businesses in multiple industries, including finance, manufacturing, business services, and IT.

Ransomware

Ransomware Encryption Malware Antivirus

Cybersecurity Snapshot: CISA Calls for Stamping Out Buffer Overflow Vulnerabilities, as Europol Tells Banks To Prep For Quantum Threat

Security Boulevard

FEBRUARY 14, 2025

And get the latest on ransomware trends and on cybercrime legislation and prevention! Thats a key takeaway from Cybercrime: A Multifaceted National Security Threat, a report releaesd this week by Googles Threat Intelligence Group. Plus, Europol offers best practices for banks to adopt quantum-resistant cryptography.

Banking

Banking Cybercrime Cybersecurity Ransomware

Top 10 Cybersecurity Trends to Expect in 2025

Hacker's King

DECEMBER 24, 2024

Expect an increase in regulations requiring manufacturers to implement stronger security features in devices, alongside enhanced monitoring of IoT networks. Increased Collaboration Between Nations Cybercrime transcends borders, requiring global collaboration.

Cybersecurity

Cybersecurity Cyber Insurance IoT Insurance

BadBox 2.0 botnet infects millions of IoT devices worldwide, FBI warns

Security Affairs

JUNE 9, 2025

“Most of the infected devices were manufactured in China. The FBI published a Public Service Announcement (PSA) to warn that cybercriminals are using the BADBOX 2.0 botnet to exploit IoT devices on home networks, like streaming devices, projectors, and infotainment systems, mostly made in China. ” BADBOX 2.0

IoT

IoT Internet Internet Advertising

Enhanced capabilities sustain the rapid growth of Vo1d botnet

Security Affairs

FEBRUARY 28, 2025

Unfortunately, manufacturers often sell older OS versions as newer ones. By sharing our findings, we aim to contribute to the fight against cybercrime and raise awareness of this formidable threat.” Many users reported devices labeled as running Android 10 or 12, but they were actually using Android 7.1.

Antivirus

Antivirus Firmware Encryption Manufacturing

A new Mirai botnet variant targets DigiEver DS-2105 Pro DVRs

Security Affairs

DECEMBER 26, 2024

Hardware manufacturers do not always issue patches for retired devices, and the manufacturer itself may sometimes be defunct. . “One of the easiest methods for threat actors to compromise new hosts is to target outdated firmware or retired hardware.” ” concludes the report.

Manufacturing

Manufacturing Malware Firmware IoT

OT Under Siege No More? Fortinet Report Shows Improving Landscape

SecureWorld News

JULY 17, 2025

Fortinet warns that nation-state and ransomware actors remain highly active, with manufacturing once again the most targeted sector. Alarmingly, AI-powered cybercrime is accelerating, with adversaries using it to scale phishing and evade detection. Despite the gains, the threat landscape is escalating.

CISO

CISO Cyber Risk Risk CSO

Texas oilfield supplier Newpark Resources suffered a ransomware attack

Security Affairs

NOVEMBER 8, 2024

” Newpark Resources pointed out that its manufacturing and field operations remain largely unaffected, continuing with established downtime procedures despite the ransomware attack.

Ransomware

Ransomware Manufacturing Malware Hacking

Cartier disclosed a data breach following a cyber attack

Security Affairs

JUNE 4, 2025

Cartier designs, manufactures, distributes, and sells jewelry, watches, leather goods, and accessories. Due to the data involved, the company warns customers to stay alert for unsolicited or suspicious communications. Cartier ( @Cartier ) has confirmed unauthorized access to its systems, compromising sensitive customer information.

Data breaches

Data breaches Cyber Attacks Manufacturing Banking

Sarcoma ransomware gang claims the theft of sensitive data from PCB maker Unimicron

Security Affairs

FEBRUARY 12, 2025

The Sarcoma ransomware group announced a breach of the Taiwanese printed circuit board (PCB) manufacturing giant Unimicron. The Sarcoma ransomware group claims to have breached Taiwanese PCB manufacturer Unimicron, leaked sample files, and threatened a full data release if no ransom is paid by Tuesday, February 20, 2025.

Computers and Electronics

Computers and Electronics Ransomware Manufacturing Data breaches

Ransomware attack hit Indian multinational Tata Technologies

Security Affairs

FEBRUARY 1, 2025

The company, which is engaged in product engineering, provides services to automotive and aerospace original equipment manufacturers as well as industrial machinery companies. Indian multinational Tata Technologies , a Tata Motors subsidiary, suspended some IT services following a ransomware attack.

Technology

Technology Ransomware Manufacturing Engineering

U.S. ICE Leads Global Takedown of BlackSuit Ransomware Infrastructure

SecureWorld News

AUGUST 11, 2025

Immigration and Customs Enforcement (ICE) , the takedown demonstrates the value of cross-border collaboration in the fight against cybercrime. BlackSuit also targeted manufacturing, technology, retail, and government organizations—industries that may have provided richer logging data to strengthen the case for a takedown.

Ransomware

Ransomware Cybercrime Manufacturing Healthcare

Cloak ransomware group hacked the Virginia Attorney General’s Office

Security Affairs

MARCH 24, 2025

The group has extended its operations to countries in Asia and targets various sectors, including healthcare, real estate, construction, IT, food, and manufacturing.” . “Cloak primarily targets small to medium-sized businesses in Europe, with Germany as a key focus. ” reads a report published by Halcyon.

Ransomware

Ransomware Hacking Social Engineering Manufacturing

Honeywell Report OT Under Siege

SecureWorld News

JUNE 6, 2025

This year's report is a must-read for practitioners defending OT-heavy sectors like manufacturing, energy, logistics, and critical infrastructure. Here are the key takeaways for defenders on the front lines.

Media

Media Social Engineering Malware Backups

Rhysida Ransomware gang claims the hack of the Government of Peru

Security Affairs

MAY 3, 2025

The ransomware gang hit organizations in multiple industries, including the education, healthcare, manufacturing, information technology, and government sectors. According to the gangs Tor leak site, at least 182 companies are victims of the operation. The victims of the group are targets of opportunity.

Government

Government Hacking Ransomware Manufacturing

Port of Seattle ‘s August data breach impacted 90,000 people

Security Affairs

APRIL 5, 2025

The ransomware gang hit organizations in multiple industries, including education, healthcare, manufacturing, information technology, and government sectors. In September 2024, Port of Seattle confirmed that the Rhysida ransomware group was behind the cyberattack. The Rhysida ransomware group has been active since May 2023.

Data breaches

Data breaches Ransomware Cyber Attacks Manufacturing

Hunters International gang claims the theft of 1.4 TB of data allegedly stolen from Tata Technologies

Security Affairs

MARCH 5, 2025

The company, which is engaged in product engineering, provides services to automotive and aerospace original equipment manufacturers as well as industrial machinery companies. The ransomware attack took place in January as per a regulatory filing with the Indian National Stock Exchange. ” reads the filing.

Technology

Technology Ransomware Manufacturing Engineering

U.S. CISA adds PTZOptics camera bugs to its Known Exploited Vulnerabilities catalog

Security Affairs

NOVEMBER 5, 2024

The vulnerabilities impact NDI-enabled pan-tilt-zoom (PTZ) cameras from multiple manufacturers. VulnCheck alerted affected manufacturers to the flaws, only receiving a response from PTZOptics. The manufacturer released firmware updates addressing these flaws.” Affected devices use VHD PTZ camera firmware < 6.3.40

Firmware

Firmware Manufacturing Authentication IoT

New Ballista Botnet spreads using TP-Link flaw. Is it an Italian job?

Security Affairs

MARCH 12, 2025

Named after the ancient Roman weapon, Ballista targets TP-Link Archer routers and has affected manufacturing, healthcare, services, and tech sectors in the U.S., Cato links the Ballista botnet to an Italian-based threat actor, the attribution is based on an Italian IP address and strings in Italian in the code. Australia, China, and Mexico.

IoT

IoT Malware Encryption DDOS

Operation Phobos Aetor: Police dismantled 8Base ransomware gang

Security Affairs

FEBRUARY 11, 2025

The 8Base ransomware group has been active since March 2022, it focused on small and medium-size businesses in multiple industries, including finance, manufacturing, business services, and IT. Source Nation Thailand The gang compromised at least 17 Swiss companies using the Phobos ransomware between April 2023 and October 2024.

Ransomware

Ransomware Encryption Backups Malware

Medusa ransomware hit over 300 critical infrastructure organizations until February 2025

Security Affairs

MARCH 13, 2025

As of February 2025, Medusa developers and affiliates have impacted over 300 victims from a variety of critical infrastructure sectors with affected industries including medical, education, legal, insurance, technology, and manufacturing.” ” reads the joint advisory.

Ransomware

Ransomware Encryption Cryptocurrency Insurance

2025 Supply Chain Threat Landscape: AI, APIs, and the Weakest Link

SecureWorld News

JULY 10, 2025

Manufacturing and logistics firms, increasingly digitized and AI-driven, are acutely at risk: state-aligned hackers are "infiltrating the digital arteries of commerce" from ports to payment systems. The World Economic Forum warns that AI-powered cybercrime is among the top concerns shaping the 2025 threat landscape.

Manufacturing

Manufacturing Software Energy and Utilities Risk

New PumaBot targets Linux IoT surveillance devices

Security Affairs

MAY 28, 2025

“Notably, the malware checks for the presence of the string Pumatronix, a manufacturer of surveillance and traffic camera systems, suggesting potential IoT targeting or an effort to evade specific devices.” ” states the report.

Surveillance

Surveillance IoT Malware Manufacturing

Key Cybersecurity Trends for 2025. My Predictions

Jane Frankland

JANUARY 12, 2025

Threat Actors Cybersecurity threats are growing more complex and persistent, driven by the heightened activities of nation-state actors and increasingly sophisticated cybercrime groups. Organised Cybercrime Groups Up Their Game Cybercriminals arent resting on old tactics with cybercrime expected to hit $12 trillion in 2025.

Cybersecurity

Cybersecurity CISO Insurance IoT

Top Cyber Attacker Techniques, August–October 2024

Digital Shadows

NOVEMBER 26, 2024

The US, manufacturing sector, and professional, scientific, and technical services (PSTS) sector are primary targets amidst an overall increase in ransomware attacks. The proliferation of these guides enables more individuals to enter the cybercrime arena.

Cyber Attacks

Cyber Attacks Phishing Ransomware Cyber Insurance

Chinese Cyberespionage Groups Probe SentinelOne in Sophisticated ShadowPad and PurpleHaze Campaigns

Penetration Testing

JUNE 9, 2025

ShadowPad, a privately sold modular malware platform, was used in a global campaign spanning June 2024 to March 2025, compromising victims in manufacturing, government, finance, telecom, and research. The cluster included a notable intrusion into a South Asian government IT provider.

Penetration Testing

Penetration Testing Advertising DNS Cybersecurity

World Backup Day: Pledge to protect your digital life

Webroot

MARCH 12, 2025

But if your hard drive crashes, your laptop gets stolen, or you fall victim to cybercrime, the loss can be devastating. Many hard drives fail in less than three years , and its been found that the newer drives have shorter lifespans than those manufactured before 2015. Its a nightmare scenario that happens more often than you think.

Backups

Backups Encryption Antivirus Data preservation

Embargo Ransomware nets $34.2M in crypto since April 2024

Security Affairs

AUGUST 9, 2025

million in incoming transaction volume likely associated with the group, with most victims located in the United States (US) in the healthcare, business services, and manufacturing sectors.” The RaaS mainly targeted US healthcare, business services, and manufacturing. . “TRM Labs has identified approximately USD 34.2

Ransomware

Ransomware Healthcare Manufacturing Business Services

FBI Warning: AI-Driven Impersonation Attacks Target U.S. Officials

SecureWorld News

MAY 29, 2025

The FBI's IC3 released its 2024 Internet Crime Report earlier this month, announcing a record-breaking year in cybercrime. A staunch supporter of Ukraine, Crosetto has often been the subject of vicious attacks from senior Russian politicians, including former Russian President Dmitri Medvedev," Col. Leighton added.

Scams

Scams Social Engineering Phishing Media

Why Merging DSPM with PKI Is Key to Modern Risk Management

GlobalSign

JULY 25, 2025

Why Cyber Criminals Keep Winning Against SMEs Jul 14, 2025 SMEs are the unsuspecting targets of cybercrime, but with the right strategy, they can turn this to their advantage.

Risk

Risk IoT Encryption Authentication

Trade Wars: How U.S. Tariffs Are Reshaping Cyber Risk and Resilience

SecureWorld News

MARCH 5, 2025

The impact will be felt well beyond the involved countries of Canada, USA, Mexico, and China," said Kenrick Bagnall , Founder, KONCYBER & RB-Cyber Assurance; Royal Candian Mounted Police (RCMP) Contractor/Instructor; Toronto Police Service (Cybercrime Unit) (Ret.). " Here is his detailed breakdown: 1.Cross-border

Cyber Risk

Cyber Risk Risk Cyber Insurance Small Business

A ransomware attack pushed the German napkin firm Fasana into insolvency

Security Affairs

JUNE 20, 2025

. “A cyberattack has potentially serious consequences for the approximately 240 employees of the Euskirchen-based company Fasana : The attack caused so much damage to the paper napkin manufacturer that it has now filed for insolvency.” ” states the insolvency administrator Maike Krebber.

Ransomware

Ransomware Encryption Manufacturing Malware

Creating an Incident Response Plan with a People-First Approach

GlobalSign

JULY 16, 2025

More from the author > GlobalSign Newsletter & Blog Register Here Register Here Connect with us Recent Blogs Why Cyber Criminals Keep Winning Against SMEs Jul 14, 2025 SMEs are the unsuspecting targets of cybercrime, but with the right strategy, they can turn this to their advantage.

IoT

IoT Identity Theft Computers and Electronics Authentication

Agencies Issue Warning on Threats to Oil and Gas ICS and OT Systems

SecureWorld News

MAY 8, 2025

The advisory also emphasizes the importance of regular communication with third-party managed service providers, system integrators, and system manufacturers to secure OT systems effectively. Practice reverting to manual controls to quickly restore operations in the event of an incident.

Technology

Technology Risk Internet Internet

A Year Later, Cybercrime Groups Still Rampant on Facebook

Krebs on Security

APRIL 8, 2019

Almost exactly one year ago, KrebsOnSecurity reported that a mere two hours of searching revealed more than 100 Facebook groups with some 300,000 members openly advertising services to support all types of cybercrime, including spam, credit card fraud and identity theft. Facebook responded by deleting those groups.

Cybercrime

Cybercrime Identity Theft Passwords Accountability

Airplane manufacturer Bombardier has disclosed a security breach, data leaked online

Security Affairs

FEBRUARY 24, 2021

Hackers posted data stolen from manufacturer of business jets Bombardier on Clop ransomware leak site following alleged FTA hack. Security experts from FireEye linked the cyber attacks to the cybercrime group UNC2546, aka FIN11. Bombardier pointed out that manufacturing and customer support operations have not been impacted.

Manufacturing

Manufacturing Ransomware Cybercrime Hacking

Power semiconductor component manufacturer Semikron suffered a ransomware attack

Security Affairs

AUGUST 3, 2022

Semikron, a German-based independent manufacturer of power semiconductor components, suffered a ransomware cyberattck. The German manufacturer didn’t share details about the attack or the family of ransomware that infected its systems. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Manufacturing

Manufacturing Ransomware Encryption Data breaches

UNC2529, a new sophisticated cybercrime gang that targets U.S. orgs with 3 malware

Security Affairs

MAY 5, 2021

A new cybercrime gang, tracked as UNC2529 , has targeted many organizations in the US and other countries using new sophisticated malware. FireEye’s Mandiant unit observed two distinct waves of attacks carried out by the cybercrime group in December 2020. The post UNC2529, a new sophisticated cybercrime gang that targets U.S.

Cybercrime

Cybercrime Malware Manufacturing Phishing

Cybercrime Soars: FBI's 2024 Report Reveals $16.6 Billion in Losses

XE Group shifts from credit card skimming to exploiting zero-days

Trending Sources

Chinese Android phones shipped with malware-laced WhatsApp, Telegram apps

Passwordless Authentication without Secrets!

Law enforcement operations seized BlackSuit ransomware gang’s darknet sites

Hive0117 group targets Russian firms with new variant of DarkWatchman malware

Authorities released free decryptor for Phobos and 8base ransomware

Cybersecurity Snapshot: CISA Calls for Stamping Out Buffer Overflow Vulnerabilities, as Europol Tells Banks To Prep For Quantum Threat

Top 10 Cybersecurity Trends to Expect in 2025

BadBox 2.0 botnet infects millions of IoT devices worldwide, FBI warns

Enhanced capabilities sustain the rapid growth of Vo1d botnet

A new Mirai botnet variant targets DigiEver DS-2105 Pro DVRs

OT Under Siege No More? Fortinet Report Shows Improving Landscape

Texas oilfield supplier Newpark Resources suffered a ransomware attack

Cartier disclosed a data breach following a cyber attack

Sarcoma ransomware gang claims the theft of sensitive data from PCB maker Unimicron

Ransomware attack hit Indian multinational Tata Technologies

U.S. ICE Leads Global Takedown of BlackSuit Ransomware Infrastructure

Cloak ransomware group hacked the Virginia Attorney General’s Office

Honeywell Report OT Under Siege

Rhysida Ransomware gang claims the hack of the Government of Peru

Port of Seattle ‘s August data breach impacted 90,000 people

Hunters International gang claims the theft of 1.4 TB of data allegedly stolen from Tata Technologies

U.S. CISA adds PTZOptics camera bugs to its Known Exploited Vulnerabilities catalog

New Ballista Botnet spreads using TP-Link flaw. Is it an Italian job?

Operation Phobos Aetor: Police dismantled 8Base ransomware gang

Medusa ransomware hit over 300 critical infrastructure organizations until February 2025

2025 Supply Chain Threat Landscape: AI, APIs, and the Weakest Link

New PumaBot targets Linux IoT surveillance devices

Key Cybersecurity Trends for 2025. My Predictions

Top Cyber Attacker Techniques, August–October 2024

Chinese Cyberespionage Groups Probe SentinelOne in Sophisticated ShadowPad and PurpleHaze Campaigns

World Backup Day: Pledge to protect your digital life

Embargo Ransomware nets $34.2M in crypto since April 2024

FBI Warning: AI-Driven Impersonation Attacks Target U.S. Officials

Why Merging DSPM with PKI Is Key to Modern Risk Management

Trade Wars: How U.S. Tariffs Are Reshaping Cyber Risk and Resilience

A ransomware attack pushed the German napkin firm Fasana into insolvency

Creating an Incident Response Plan with a People-First Approach

Agencies Issue Warning on Threats to Oil and Gas ICS and OT Systems

A Year Later, Cybercrime Groups Still Rampant on Facebook

Airplane manufacturer Bombardier has disclosed a security breach, data leaked online

Power semiconductor component manufacturer Semikron suffered a ransomware attack

UNC2529, a new sophisticated cybercrime gang that targets U.S. orgs with 3 malware

Stay Connected