HACK TUESDAY WEEK 04 - 10 DECEMBER 2024: 203 CYBERATTACKS ACROSS 42 COUNTRIES
- The most active threat actor this week is FunkSec claiming responsibility for 33 attacks.
- The USA is the most affected country, accounting for 35% of the victims, with 72 cyberattacks..
- The Manufacturing sector is the most impacted, representing 12% of the claimed targets.
- Overall, the claimed compromised data amounts to approximately 39 TB.
- The average ESIX® (Estimated Severity Index) is 4.5.
Disclaimer:
Data are collected from public info published on both Clear and Dark Web.
The ESIX© (Estimated Severity Index) is calculated on cyber attacks’ impact based on available data and it's based on a set of proprietary algorithms that evaluate multiple variables, including social, economic (direct and indirect), technical and reputational impact.
For each attack we collect and classify, an ESIX® is calculated on a scale of one to ten, corresponding to four impact categories (Low, Medium, High and Critical): 1 = very low, 10= very critical.
TOP 10 CYBER THREAT ACTORS OF THE WEEK
TOP 10 TARGETED INDUSTRIES OF THE WEEK
LIST OF REFERRED VICTIMS
| ATTACKER | VICTIM | COUNTRY | ESIX© |
|---|---|---|---|
| FunkSec | ARDES | 🇦🇫 | 3.51 |
| Abyss | PEZ Candy | 🇦🇹 | 3.87 |
| DXPLOIT | Onestep Disability Services | 🇦🇺 | 3.07 |
| DXPLOIT | Maitland Lutheran Parish | 🇦🇺 | 3.07 |
| Kill Security | Thanks For The Help | 🇦🇺 | 3.83 |
| Lynx | Equity & Advisory | 🇦🇺 | 4.74 |
| nor | Steps To Life | 🇦🇺 | 3.56 |
| - | Muswellbrook Shire Council | 🇦🇺 | 5.79 |
| Eraleig/APT73/Bashe | Azape | 🇧🇷 | 3.87 |
| Eraleig/APT73/Bashe | Melhor Compra | 🇧🇷 | 3.93 |
| FunkSec | Sincor-PE | 🇧🇷 | 3.83 |
| FunkSec | União Mármores | 🇧🇷 | 3.49 |
| LockBit 3.0 | Copral | 🇧🇷 | 4.20 |
| 8Base | Mint Pharmaceuticals | 🇨🇦 | 4.00 |
| Akira | Séguin Haché SENCRL | 🇨🇦 | 4.30 |
| BlackBasta | Hampton Securities | 🇨🇦 | 5.76 |
| BlackBasta | Westbank Corp | 🇨🇦 | 4.52 |
| INC Ransom | Black Creek Community Health Centre | 🇨🇦 | 5.39 |
| SafePay | KT Partners | 🇨🇦 | 4.67 |
| - | New Westminster School District | 🇨🇦 | 4.51 |
| - | Manitoba Justice | 🇨🇦 | 4.00 |
| - | Vidymed Group | 🇨🇭 | 7.01 |
| FunkSec | China Securities Regulatory Commission | 🇨🇳 | 3.51 |
| BlackBasta | Vossko | 🇩🇪 | 5.60 |
| BlackBasta | BEKO TECHNOLOGIES | 🇩🇪 | 4.87 |
| Cloak | Urological Competence Center Hochfranken | 🇩🇪 | 5.39 |
| Cloak | Center for Orthopedics and Neurosurgery | 🇩🇪 | 5.39 |
| Fog | Friedrich Dorner | 🇩🇪 | 3.62 |
| FunkSec | spDYN | 🇩🇪 | 3.95 |
| Nam3L3ss | JLL | 🇩🇪 | 3.41 |
| Pro-Russian hackers | Aarhus | 🇩🇰 | 2.86 |
| Pro-Russian hackers | Vejle | 🇩🇰 | 2.86 |
| Pro-Russian hackers | Esbjerg | 🇩🇰 | 2.86 |
| Pro-Russian hackers | Dragor | 🇩🇰 | 2.86 |
| Pro-Russian hackers | Frederiksberg | 🇩🇰 | 2.86 |
| - | Aabenraa | 🇩🇰 | 2.86 |
| - | Haderslev | 🇩🇰 | 2.86 |
| RansomHub | Frigopesca C. A. | 🇪🇨 | 6.30 |
| 8Base | Originpath Group | 🇪🇸 | 3.87 |
| Akira | Proyectos y Seguros S.A. | 🇪🇸 | 4.54 |
| Black Suit | Copreci | 🇪🇸 | 4.11 |
| RansomHub | INIA-CSIC | 🇪🇸 | 7.70 |
| - | Andalusian Animal Identification Registry (RAIA) | 🇪🇸 | 3.87 |
| - | Comisión Nacional de los Mercados y la Competencia (CNMC) | 🇪🇸 | 8.21 |
| Nam3L3ss | Nokia | 🇫🇮 | 3.83 |
| FunkSec | IFA Paris | 🇫🇷 | 3.49 |
| Guy Demarle | 🇫🇷 | 3.31 | |
| BlackBasta | Graham + Sibbald | 🇬🇧 | 5.90 |
| BlackBasta | Lorne Stewart Group | 🇬🇧 | 5.60 |
| BlackBasta | BT Group | 🇬🇧 | 5.56 |
| Brain Cipher | Deloitte UK | 🇬🇧 | 5.94 |
| Lynx | Hosting.co.uk | 🇬🇧 | 4.00 |
| - | Bender UK | 🇬🇧 | 4.52 |
| Blackout | Neda Maritime Agency | 🇬🇷 | 5.15 |
| 8Base | Port of Rijeka | 🇭🇷 | 5.15 |
| FunkSec | INET GLOBAL INDO | 🇮🇩 | 3.60 |
| - | Fuji Electric Indonesia | 🇮🇩 | 5.21 |
| FunkSec | Digital Invoice | 🇮🇱 | 3.62 |
| Akira | Cipla | 🇮🇳 | 4.59 |
| FunkSec | Altus Lab | 🇮🇳 | 3.51 |
| FunkSec | National Centre for Financial Education (NCFE) | 🇮🇳 | 3.37 |
| FunkSec | Styched | 🇮🇳 | 3.31 |
| Space Bears | Aptus Value Housing Finance India Limited | 🇮🇳 | 4.74 |
| - | Signzy | 🇮🇳 | 5.60 |
| BlackBasta | NIER Ingegneria S.p.A | 🇮🇹 | 5.97 |
| BlackBasta | Snatt Logistica Spa | 🇮🇹 | 5.98 |
| Everest | CO-VER Power Technology S.p.A. | 🇮🇹 | 5.41 |
| FunkSec | Zero 5 Srl | 🇮🇹 | 3.44 |
| FunkSec | Edizioni Dottrinari | 🇮🇹 | 3.41 |
| - | Several individuals | 🇮🇹 | 3.36 |
| - | Several individuals | 🇮🇹 | 3.44 |
| - | Several individuals | 🇮🇹 | 3.44 |
| - | Clients of Intesa Sanpaolo | 🇮🇹 | 3.36 |
| FunkSec | Royal Society for the Conservation of Nature | 🇯🇴 | 3.49 |
| Wang Yanqia and Shen Lu | A gym website operated by a company in Nakagyo Ward | 🇯🇵 | 3.12 |
| - | Kanagawa Arts and Culture Foundation | 🇯🇵 | 6.02 |
| - | Daiwa House Industry | 🇯🇵 | 3.36 |
| - | Tokyo Keizai University | 🇯🇵 | 3.53 |
| - | A Japanese educational institution | 🇯🇵 | 3.44 |
| - | Kyoto University Graduate School of Management | 🇯🇵 | 2.90 |
| - | The Orion Hotel Naha | 🇯🇵 | 3.66 |
| - | Tully's Coffee Japan | 🇯🇵 | 5.79 |
| - | AtCoder | 🇯🇵 | 3.49 |
| - | Sumitomo Heavy Industries (SHI) | 🇯🇵 | 3.74 |
| - | BizSTATION users | 🇯🇵 | 3.11 |
| - | Hiroshima Bank customers | 🇯🇵 | 5.02 |
| - | I-O Data router users | 🇯🇵 | 5.78 |
| - | National Federation of Fisheries Cooperative Associations (Zengyoren) | 🇯🇵 | 5.39 |
| - | Denis Japan Group | 🇯🇵 | 5.86 |
| - | Aizawa Asset Management | 🇯🇵 | 3.49 |
| - | EXD. Inc. | 🇯🇵 | 4.01 |
| - | Sankei | 🇯🇵 | 5.40 |
| FunkSec | Elite Rewards | 🇲🇲 | 3.41 |
| Eraleig/APT73/Bashe | BANKILY | 🇲🇷 | 4.74 |
| FunkSec | Hosting Express | 🇲🇽 | 4.25 |
| Nairo | Psicotest.mx | 🇲🇽 | 5.98 |
| Yuasa Shoji Mexico | 🇲🇽 | 3.49 | |
| FunkSec | XUI.one | – | 3.30 |
| Sarcoma | Gulf Petrochemical Services & Trading | 🇴🇲 | 4.67 |
| FunkSec | Verificativa | 🇵🇪 | 3.49 |
| FunkSec | Pakistan Ministry of Foreign Affairs | 🇵🇰 | 3.51 |
| Turla (aka Secret Blizzard) | Storm-0156 | 🇵🇰 | 6.15 |
| Eraleig/APT73/Bashe | Alior Bank | 🇵🇱 | 4.13 |
| FunkSec | Kurosu & Cia. S.A | 🇵🇾 | 2.82 |
| FunkSec | Albazaar Shop | 🇶🇦 | 3.41 |
| Suspected state actor, linked to Russia | Romania’s Permanent Electoral Authority (AEP) | 🇷🇴 | 7.60 |
| Suspected state actor, linked to Russia | Romania’s Permanent Electoral Authority (AEP) | 🇷🇴 | 6.55 |
| - | Societatea Energetica Electrica S.A. | 🇷🇴 | 5.79 |
| - | Gazprombank | 🇷🇺 | 7.19 |
| - | Kirill Parubets | 🇷🇺 | 6.17 |
| - | Russian-speaking entrepreneurs | 🇷🇺 | 4.35 |
| Sarcoma | Pan Gulf Holding | 🇸🇦 | 5.15 |
| BlackBasta | Interspiro | 🇸🇪 | 5.78 |
| FunkSec | IntBizth | 🇹🇭 | 3.41 |
| FunkSec | Smart IT Partner | 🇹🇳 | 3.41 |
| Gamaredon | Ukrainian military and government agencies | 🇺🇦 | 7.13 |
| UAC-0185 (aka UNC4221) | Ukrainian defense enterprises | 🇺🇦 | 5.76 |
| Akira | Aruba Productions | 🇺🇸 | 3.74 |
| Akira | Consumer Builders Supply | 🇺🇸 | 3.62 |
| Akira | ECBM | 🇺🇸 | 4.33 |
| Akira | Conrey Insurance Brokers and Risk Managers | 🇺🇸 | 4.54 |
| Akira | Pelstar Computer Systems | 🇺🇸 | 3.74 |
| Akira | Jamaica Bearings Group (JBG) | 🇺🇸 | 4.30 |
| Akira | Milwaukee Cylinder | 🇺🇸 | 3.62 |
| Akira | Weinberg & Schwartz | 🇺🇸 | 4.48 |
| Akira | DAVIS IMMIGRATION LAW OFFICE | 🇺🇸 | 4.30 |
| Akira | C Pathe | 🇺🇸 | 3.62 |
| Akira | PB Loader | 🇺🇸 | 3.62 |
| Akira | Coffee Beanery | 🇺🇸 | 3.87 |
| Akira | Lakeside Sod Supply | 🇺🇸 | 3.87 |
| Eraleig/APT73/Bashe | Bristol-Myers Squibb | 🇺🇸 | 3.11 |
| BianLian | Global Insurance Agency LLC | 🇺🇸 | 4.74 |
| BianLian | Physicians' Primary Care of SW Florida | 🇺🇸 | 6.57 |
| BianLian | Star Shuttle | 🇺🇸 | 5.58 |
| BianLian | LTI Trucking Services | 🇺🇸 | 5.98 |
| BlackBasta | Cafe Zupas | 🇺🇸 | 5.40 |
| BlackBasta | Medica Corporation | 🇺🇸 | 5.97 |
| Cicada3301 | CK Technology Group | 🇺🇸 | 4.48 |
| Cloak | Donnewald Distributing | 🇺🇸 | 4.45 |
| Crimson Palace | A major U.S. Organization | 🇺🇸 | 5.90 |
| DragonForce | Precision Walls | 🇺🇸 | 4.33 |
| Everest | MTI | 🇺🇸 | 5.60 |
| FunkSec | People's Trust Insurance Company | 🇺🇸 | 3.20 |
| FunkSec | GerVetUSA | 🇺🇸 | 2.90 |
| FunkSec | CTS Technology | 🇺🇸 | 3.51 |
| FunkSec | Singular Analysts | 🇺🇸 | 4.13 |
| FunkSec | Precision Diagnostic Systems | 🇺🇸 | 2.91 |
| FunkSec | X-Cart | 🇺🇸 | 3.31 |
| FunkSec | Kingdom INC. | 🇺🇸 | 3.41 |
| INC Ransom | ARC Community Services | 🇺🇸 | 4.99 |
| Interlock | BCNC | 🇺🇸 | 3.97 |
| Interlock | Rj Michaels | 🇺🇸 | 3.93 |
| Kairos | T&M Cranes | 🇺🇸 | 3.80 |
| Kill Security | USA2Me | 🇺🇸 | 3.93 |
| Medusa | Brodsky Renehan Pearlstein & Bouquet, Chartered | 🇺🇸 | 5.23 |
| Medusa | The Levicoff Law Firm, P.C | 🇺🇸 | 5.04 |
| Nam3L3ss | Bank of America | 🇺🇸 | 4.11 |
| Nam3L3ss | Morgan Stanley | 🇺🇸 | 3.93 |
| Nam3L3ss | Xerox | 🇺🇸 | 3.69 |
| Nam3L3ss | Koch | 🇺🇸 | 4.01 |
| Nitrogen | SRP Federal Credit Union | 🇺🇸 | 6.17 |
| Play | Natalliance Securities | 🇺🇸 | 4.74 |
| Play | Ito En | 🇺🇸 | 3.97 |
| Play | Standard Calibrations | 🇺🇸 | 3.74 |
| Play | Max Trans | 🇺🇸 | 4.59 |
| Qilin | Town of Whitestown | 🇺🇸 | 5.19 |
| Ra World | NTrust | 🇺🇸 | 6.75 |
| RansomHub | MP Dory | 🇺🇸 | 3.62 |
| RansomHub | Crystal Lake Elementary District 47 | 🇺🇸 | 5.23 |
| RansomHub | Women's Care | 🇺🇸 | 5.39 |
| RansomHub | Troxler Labs | 🇺🇸 | 4.30 |
| RansomHub | Hanwha Cimarron | 🇺🇸 | 4.11 |
| RansomHub | Greenscape Land Design | 🇺🇸 | 4.01 |
| RansomHub | Island Photography | 🇺🇸 | 3.80 |
| RansomHub | Pro-MEC Engineering Services | 🇺🇸 | 3.74 |
| Rhysida | Matlock Security | 🇺🇸 | 5.78 |
| SafePay | Casa Imports | 🇺🇸 | 4.06 |
| Termite | Blue Yonder | 🇺🇸 | 7.70 |
| - | Wayne-Westland Community Schools | 🇺🇸 | 5.85 |
| - | White Lake Township | 🇺🇸 | 5.94 |
| - | Wood County government | 🇺🇸 | 5.04 |
| - | Watsonville Community Hospital | 🇺🇸 | 7.01 |
| - | Connecticut GI | 🇺🇸 | 3.87 |
| - | Cardiology Associates of Mobile | 🇺🇸 | 3.49 |
| - | Pavilion of Bridgeview | 🇺🇸 | 3.49 |
| - | Children’s Hospital Colorado Health System | 🇺🇸 | 5.04 |
| - | Kurita America Inc. (KAI) | 🇺🇸 | 4.35 |
| - | Artivion | 🇺🇸 | 5.90 |
| - | The War Room | 🇺🇸 | 5.94 |
| FunkSec | Milliy Tiklanish | 🇺🇿 | 3.87 |
| FunkSec | VNPT | 🇻🇳 | 3.60 |
| FunkSec | Workers Compensation Fund Control Board | 🇿🇲 | 4.00 |
An additional 5% of cyberattacks affected multiple countries.
Stay safe!
Hackmanac Team
