Month: February 2024

HACKS OF TODAY 21/02/2024

Post author By Stefano Favarato
Post date 21/02/2024

HM Hacks Of Today

news

HACKS OF TODAY 21/02/2024

Today’s HOT includes 7 ransomware victims by the notorious 8Base, Meow, ThreeAM , BlackBasta and Mogilevich gangs.

The average Cyber Risk Factor is 3.4.

Read below the full list.

Disclaimer:

Data are collected from public info published on Dark Web.
The Cyber Risk factor is calculated on cyber attacks’ impact based on available data.
It shows the severity of an event: 1 = low, 5 = critical

ACIES SRL

Victim website:	aciesinstruments.com
Victim country:	Italy
Attacker name:	8Base
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	N/A
Exfiltrated data type:	Invoices, receipts, accounting documents, personal data, certificates, employment contracts, confidentiality agreements, personal files, etc.
Leaked data:	/
Ransom deadline:	06^th Mar 24
Cyber Risk Factor:	3
Image:

RIVER DELTA UNIFIED SCHOOL DISTRICT

Victim website:	rdusd.org
Victim country:	USA
Attacker name:	Meow
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	N/A
Exfiltrated data type:	N/A
Leaked data:	/
Ransom deadline:	N/A
Cyber Risk Factor:	3
Image:

HELICAL TECHNOLOGY

Victim website:	helical-technology.com
Victim country:	United Kingdom
Attacker name:	8Base
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	N/A
Exfiltrated data type:	Invoices, receipts, accounting documents, personal data, certificates, employment contracts, confidentiality agreements, personal files, etc.
Leaked data:	/
Ransom deadline:	28^th Feb 24
Cyber Risk Factor:	3
Image:

AXEL JOHNSON

Victim website:	axeljohnson.se
Victim country:	Sweden
Attacker name:	8Base
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	N/A
Exfiltrated data type:	Includes invoices, receipts, accounting documents, personal data, certificates, employment contracts, confidentiality agreements, personal files, etc.
Leaked data:	/
Ransom deadline:	28^th Feb 24
Cyber Risk Factor:	4
Image:

INFINITI USA

Victim website:	infinitiusa.com
Victim country:	USA
Attacker name:	Mogilevich
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	N/A
Exfiltrated data type:	VIN (vehicle identification number), first name, last name, address, zip, city, state, mobile, mobile provider, email, password, etc.
Leaked data:	/
Ransom deadline:	25^th Feb 24
Cyber Risk Factor:	4
Image:

DONEFF COMPANIES

Victim website:	doneff.com
Victim country:	USA
Attacker name:	ThreeAM
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	N/A
Exfiltrated data type:	N/A
Leaked data:	/
Ransom deadline:	N/A
Cyber Risk Factor:	3
Image:

DAS TEAM AG

Victim website:	dasteam.ch
Victim country:	Switzerland
Attacker name:	BlackBasta
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	202 GB
Exfiltrated data type:	Customers, HR, accounting, personal documents and more.
Leaked data:	Fully published
Ransom deadline:	N/A
Cyber Risk Factor:	4
Image:

Stay safe!

Hackmanac Team!

Latest news

HACKS OF TODAY 11-12-13-14-15/05/2024

Today's HOT includes 94 victims by the notorious Hunters International, Rhysida, BianLIan, dAn0n, Qilin, Embargo, Everest, INC Ransom, Black Suit, Monti, Akira, RansomHub, Zero Tolerance...

HACKS OF TODAY 09-10/05/2024

Today's HOT includes 94 victims by the notorious Hunters International, Rhysida, BianLIan, dAn0n, Qilin, Embargo, Everest, INC Ransom, Black Suit, Monti, Akira, RansomHub, Zero Tolerance...

OPERATION CRONOS AND THE MAGNITUDE OF THE LOCKBIT REACTION: 119 PREVIOUSLY UNCLAIMED VICTIMS WORLDWIDE

In recent days, following the events involving the LockBit criminal group and law enforcement with Operation Cronos, the hacker group decided to go all in...

Tags CYBER ATTACKS, CYBER SECURITY, CYBER SECURITY, CYBERCRIME, CYBERCRIME, DARKWEB, DATA BREACH, DATA LEAK, HACKMANAC, HACKMANAC, MALWARE, MALWARE, RANSOMWARE, RANSOMWARE

2023 expert insights News-EN Newsroom

LOCKBIT AND OPERATION CRONOS: THE DISRUPTION OF THE WORLD’S BIGGEST RANSOMWARE OPERATION

Post author By Sofia
Post date 20/02/2024

news

LOCKBIT AND OPERATION CRONOS: THE DISRUPTION OF THE WORLD'S BIGGEST RANSOMWARE OPERATION

The NCA (National Crime Agency) today, Tuesday 20 February 2024, released public details about the international disruption campaign targeting LockBit, the world’s most harmful cyber crime group.

Led by the NCA with collaboration from the FBI, Europol and support from international partners across ten countries, the operation named Cronos involved covert infiltration of LockBit’s network, resulting in control over their services and compromising their criminal enterprise.

The world’s most harmful ransomware operation

First emerged at the end of 2019, with the name of “ABCD ransomware“, LockBit grown rapidly and soon became the most deployed ransomware variant.

The success of LockBit were assured by the ransomware-as-a-service schema they provided, allowing affiliates to execute attacks using the group tools and infrastructure.

The group is also famous for experimenting new method such as the “Triple extortion” which incorporates DDoS (Distributed Denial of Service) attacks as an additional layer of pressure.

LockBit attacks led to billions in losses due to ransom payments and recovery costs.

Operation Cronos Achievements

The operation resulted in the capture of LockBit’s crucial administrative and public data leak platforms, significantly hindering their operational capabilities.

This led to the recovery of the LockBit platform’s source code and valuable intelligence on the group’s operations and collaborators.

Authorities confiscated the organization’s infrastructure and took down 34 servers in the Netherlands, Germany, Finland, France, Switzerland, Australia, the United States and the United Kingdom. Additionally, two LockBit actors were arrested in Poland and Ukraine.

Over 200 cryptocurrency accounts associated with LockBit were frozen, and several individuals were charged criminally in the United States for their involvement in LockBit’s cyberattacks.

The operation inflicted considerable damage on LockBit’s operational abilities and reputation, disrupting their ransomware dissemination and data leaking activities.

Authorities recovered more than 1,000 decryption keys, aiding victims in restoring their encrypted data.

Efforts persist in dismantling LockBit’s network and pursuing individuals linked to the group.

Furthermore, decryption tools were developed to help victims, now accessible via the ‘No More Ransom‘ website.

The NCA, FBI, and the United States Department of Justice hailed the operation as a landmark success in countering cybercrime, managing to infiltrate and dismantle the cybercriminal syndicate.

This operation underscores the complex and organized nature of the cybercriminals behind LockBit and showcases the global commitment to thwarting their schemes.

Operation Cronos Achievements (Source: Europol)

Operation Cronos marks a critical turning point in the battle against cybercrime, underscoring the power of global collaboration and cutting-edge investigative methods in breaking down complex cybercriminal enterprises.

Businesses and institutions are urged to report any ransomware attacks, aiding law enforcement efforts and minimizing harm.

Additionally, the sophisticated nature of these cybercriminal groups serves as a clear reminder of the necessity for strong cybersecurity defenses to avert such incidents.

Latest news

HACKS OF TODAY 11-12-13-14-15/05/2024

Today's HOT includes 94 victims by the notorious Hunters International, Rhysida, BianLIan, dAn0n, Qilin, Embargo, Everest, INC Ransom, Black Suit, Monti, Akira, RansomHub, Zero Tolerance...

HACKS OF TODAY 09-10/05/2024

Today's HOT includes 94 victims by the notorious Hunters International, Rhysida, BianLIan, dAn0n, Qilin, Embargo, Everest, INC Ransom, Black Suit, Monti, Akira, RansomHub, Zero Tolerance...

OPERATION CRONOS AND THE MAGNITUDE OF THE LOCKBIT REACTION: 119 PREVIOUSLY UNCLAIMED VICTIMS WORLDWIDE

In recent days, following the events involving the LockBit criminal group and law enforcement with Operation Cronos, the hacker group decided to go all in...

Tags CYBER ATTACKS, CYBER SECURITY, CYBERCRIME, EUROPOL, FBI, LOCKBIT, NCA, OPERATION CRONOS, RANSOMWARE

2023 HOT News-EN

HACKS OF TODAY 17-18-19-20/02/2024

Post author By Stefano Favarato
Post date 20/02/2024

HM Hacks Of Today

news

HACKS OF TODAY 17-18-19-20/02/2024

Today’s HOT includes 32 ransomware victims by the notorious Medusa, Cactus, Akira, Stormous, Trisec, ALPHV/BlackCat, Hunters International, DragonForce, BianLian, Qilin, Everest and LockBit 3.0 gangs.

The average Cyber Risk Factor is 3.9.

Read below the full list.

Disclaimer:

ETISALAT

Victim website:	etisalat.ae
Victim country:	UAE
Attacker name:	LockBit 3.0
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	$ 100,000
Exfiltrated data amount:	N/A
Exfiltrated data type:	Backups, technical designs, database, etc.
Leaked data:	Sample
Ransom deadline:	16^th Apr 24
Cyber Risk Factor:	5
Image:

GRUPO BIMBO

Victim website:	grupobimbo.com
Victim country:	Mexico
Attacker name:	Medusa
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	$ 6,500,000
Exfiltrated data amount:	N/A
Exfiltrated data type:	Databases, financial data, invoices, email correspondence, employees and customers’ data, etc.
Leaked data:	Sample
Ransom deadline:	25^th Feb 24
Cyber Risk Factor:	5
Image:

SCHNEIDER ELECTRIC

Victim website:	se.com
Victim country:	France
Attacker name:	Cactus
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	1.5 TB
Exfiltrated data type:	Personal documents, confidential and non-disclosure agreements, etc.
Leaked data:	Sample
Ransom deadline:	N/A
Cyber Risk Factor:	5
Image:

BRAM AUTO GROUP

Victim website:	bramautogroup.com
Victim country:	USA
Attacker name:	Akira
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	85 GB
Exfiltrated data type:	Passports, SSNs, driver licenses, client information, etc.
Leaked data:	/
Ransom deadline:	N/A
Cyber Risk Factor:	4
Image:

DELIA COSMETICS

Victim website:	delia.pl
Victim country:	Poland
Attacker name:	Stormous
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	64 GB
Exfiltrated data type:	Miscellaneous documents
Leaked data:	/
Ransom deadline:	N/A
Cyber Risk Factor:	4
Image:

THE CHAS. E. PHIPPS

Victim website:	chasephipps.com
Victim country:	USA
Attacker name:	Medusa
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	$ 150,000
Exfiltrated data amount:	N/A
Exfiltrated data type:	Miscellaneous documents
Leaked data:	Sample
Ransom deadline:	25^th Feb 24
Cyber Risk Factor:	4
Image:

TOYOTA IRELAND

Victim website:	cogans.ie
Victim country:	Ireland
Attacker name:	Trisec
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	N/A
Exfiltrated data type:	N/A
Leaked data:	/
Ransom deadline:	10^th Mar 24
Cyber Risk Factor:	4
Image:

LOANDEPOT

Victim website:	loandepot.com
Victim country:	USA
Attacker name:	ALPHV/BlackCat
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	4 TB
Exfiltrated data type:	N/A
Leaked data:	/
Ransom deadline:	N/A
Cyber Risk Factor:	5
Image:

PRUDENTIAL FINANCIAL

Victim website:	prudential.com
Victim country:	USA
Attacker name:	ALPHV/BlackCat
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	N/A
Exfiltrated data type:	N/A
Leaked data:	/
Ransom deadline:	N/A
Cyber Risk Factor:	4
Image:

CP COMMUNICATIONS

Victim website:	cpcomms.com
Victim country:	USA
Attacker name:	Hunters International
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	N/A
Exfiltrated data type:	N/A
Leaked data:	/
Ransom deadline:	N/A
Cyber Risk Factor:	3
Image:

POPULATION SERVICES INTERNATIONAL

Victim website:	psi.org
Victim country:	USA
Attacker name:	Hunters International
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	N/A
Exfiltrated data type:	N/A
Leaked data:	/
Ransom deadline:	N/A
Cyber Risk Factor:	3
Image:

WAPITI ENERGY

Victim website:	wapitienergy.com
Victim country:	USA
Attacker name:	Hunters International
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	436.3 GB
Exfiltrated data type:	N/A
Leaked data:	/
Ransom deadline:	N/A
Cyber Risk Factor:	5
Image:

BS&B SAFETY SYSTEMS

Victim website:	bsbsystems.com
Victim country:	USA
Attacker name:	Hunters International
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	714.9 GB
Exfiltrated data type:	N/A
Leaked data:	/
Ransom deadline:	N/A
Cyber Risk Factor:	5
Image:

CHICAGO ZOOLOGICAL SOCIETY

Victim website:	czs.org
Victim country:	USA
Attacker name:	Hunters International
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	N/A
Exfiltrated data type:	N/A
Leaked data:	/
Ransom deadline:	N/A
Cyber Risk Factor:	3
Image:

GRAND PARIS AMÉNAGEMENT

Victim website:	grandparisamenagement.fr
Victim country:	France
Attacker name:	Hunters International
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	653.8 GB
Exfiltrated data type:	N/A
Leaked data:	/
Ransom deadline:	N/A
Cyber Risk Factor:	4
Image:

VOICE TECHNOLOGIES

Victim website:	voicetechnologies.co.uk
Victim country:	United Kingdom
Attacker name:	Hunters International
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	N/A
Exfiltrated data type:	N/A
Leaked data:	/
Ransom deadline:	N/A
Cyber Risk Factor:	4
Image:

TIETE AUTOMOBILE

Victim website:	tiete.com.br
Victim country:	Brazil
Attacker name:	Hunters International
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	68.5 GB
Exfiltrated data type:	N/A
Leaked data:	/
Ransom deadline:	N/A
Cyber Risk Factor:	4
Image:

TOWN OF GREATER NAPANEE

Victim website:	greaternapanee.com
Victim country:	Canada
Attacker name:	Hunters International
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	82.9 GB
Exfiltrated data type:	N/A
Leaked data:	/
Ransom deadline:	N/A
Cyber Risk Factor:	4
Image:

VSP DENTAL

Victim website:	vspdental.com
Victim country:	USA
Attacker name:	ALPHV/BlackCat
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	543 GB
Exfiltrated data type:	Customer information, financial records, personal employee data, etc.
Leaked data:	/
Ransom deadline:	N/A
Cyber Risk Factor:	5
Image:

BUCHER AND STRAUSS

Victim website:	bucher-strauss.ch
Victim country:	Switzerland
Attacker name:	LockBit 3.0
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	140 GB
Exfiltrated data type:	N/A
Leaked data:	/
Ransom deadline:	29^th Feb 24
Cyber Risk Factor:	4
Image:

CARL FISCHER MUSIC

Victim website:	carlfischer.com
Victim country:	USA
Attacker name:	LockBit 3.0
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	N/A
Exfiltrated data type:	N/A
Leaked data:	Sample
Ransom deadline:	06^th Mar 23
Cyber Risk Factor:	4
Image:

AEROMECH

Victim website:	aeromechinc.com
Victim country:	USA
Attacker name:	LockBit 3.0
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	N/A
Exfiltrated data type:	N/A
Leaked data:	Sample
Ransom deadline:	28^th Feb 24
Cyber Risk Factor:	4
Image:

WESTWARD360

Victim website:	westward360.com
Victim country:	USA
Attacker name:	DragonForce
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	11 GB
Exfiltrated data type:	N/A
Leaked data:	/
Ransom deadline:	20^th Feb 24
Cyber Risk Factor:	3
Image:

COMPRESSION LEASING SERVICES

Victim website:	compressionleasing.com
Victim country:	USA
Attacker name:	DragonForce
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	41.11 GB
Exfiltrated data type:	N/A
Leaked data:	/
Ransom deadline:	20^th Feb 24
Cyber Risk Factor:	4
Image:

CENTER FOR MOLECULAR MEDICINE

Victim website:	cmm.se
Victim country:	Sweden
Attacker name:	Trisec
Attacker class:	Cybercrime
Attack technique:	Data breach
Ransom demand:	N/A
Exfiltrated data amount:	N/A
Exfiltrated data type:	Access
Leaked data:	/
Ransom deadline:	N/A
Cyber Risk Factor:	3
Image:

ASSOCIAZIONE ITALIANA VETERINARI IGIENISTI

Victim website:	aivi.it
Victim country:	Italy
Attacker name:	Trisec
Attacker class:	Cybercrime
Attack technique:	Unknown
Ransom demand:	N/A
Exfiltrated data amount:	N/A
Exfiltrated data type:	N/A
Leaked data:	/
Ransom deadline:	N/A
Cyber Risk Factor:	2
Image:

FIRST PROFESSIONAL SERVICES

Victim website:	1stprofessional.com
Victim country:	USA
Attacker name:	BianLian
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	755 GB
Exfiltrated data type:	Finance data, HR, patients’ PII and PHI documents, email correspondence, database, etc.
Leaked data:	/
Ransom deadline:	N/A
Cyber Risk Factor:	5
Image:

SOCO

Victim website:	soco.be
Victim country:	Belgium
Attacker name:	LockBit 3.0
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	N/A
Exfiltrated data type:	N/A
Leaked data:	/
Ransom deadline:	N/A
Cyber Risk Factor:	3
Image:

LORAN S.R.L

Victim website:	loransrl.net
Victim country:	Italy
Attacker name:	Qilin
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	N/A
Exfiltrated data type:	N/A
Leaked data:	/
Ransom deadline:	N/A
Cyber Risk Factor:	3
Image:

FINLAY SCREENING & CRUSHING

Victim website:	finlay.com.au
Victim country:	Australia
Attacker name:	Hunters International
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	N/A
Exfiltrated data type:	N/A
Leaked data:	/
Ransom deadline:	N/A
Cyber Risk Factor:	3
Image:

ADVANCED PROJECT SOLUTIONS

Victim website:	advancedprosolutions.com
Victim country:	USA
Attacker name:	Cactus
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	54 GB
Exfiltrated data type:	Personal documents, non-disclosure agreements, invoices, etc.
Leaked data:	Sample
Ransom deadline:	N/A
Cyber Risk Factor:	4
Image:

RADIOLOGY ASSOCIATES OF OCALA

Victim website:	raocala.com
Victim country:	USA
Attacker name:	Everest
Attacker class:	Cybercrime
Attack technique:	Ransomware
Ransom demand:	N/A
Exfiltrated data amount:	N/A
Exfiltrated data type:	Miscellaneous including patient sensitive documents and doctors’ data
Leaked data:	Sample
Ransom deadline:	21^st Feb 24
Cyber Risk Factor:	5
Image:

Stay safe!

Hackmanac Team!

Latest news

Tags CYBER ATTACKS, CYBER SECURITY, CYBER SECURITY, CYBERCRIME, CYBERCRIME, DARKWEB, DATA BREACH, DATA LEAK, HACKMANAC, HACKMANAC, MALWARE, MALWARE, RANSOMWARE, RANSOMWARE