HACK TUESDAY WEEK 06 - 12 NOVEMBER 2024: 196 CYBERATTACKS ACROSS 37 COUNTRIES
- The most active threat actor this week is Nam3L3ss, claiming to have leaked data from 25 companies.
- The United States is the most affected country, accounting for 55% of the victims, with 107 cyberattacks..
- The Professional / Scientific / Technical sectors are the most impacted, representing 14% of the claimed targets, followed by the Manufacturing with 11%.
- Overall, the claimed compromised data amounts to approximately 43 terabytes.
- The average ESIX® (Estimated Severity Index) is 4.6.
Disclaimer:
Data are collected from public info published on both Clear and Dark Web.
The ESIX© (Estimated Severity Index) is calculated on cyber attacks’ impact based on available data and it's based on a set of proprietary algorithms that evaluate multiple variables, including social, economic (direct and indirect), technical and reputational impact.
For each attack we collect and classify, an ESIX® is calculated on a scale of one to ten, corresponding to four impact categories (Low, Medium, High and Critical): 1 = very low, 10= very critical.
TOP 10 CYBER THREAT ACTORS OF THE WEEK
TOP 10 TARGETED INDUSTRIES OF THE WEEK
LIST OF REFERRED VICTIMS
| ATTACKER | VICTIM | COUNTRY | ESIX© |
|---|---|---|---|
| Dark Vault | Nejoum Al Jazeera | AE | 3.62 |
| Hunters International | Sucrédito Bank | AR | 4.74 |
| Akira | Followmont Transport Pty | AU | 4.99 |
| - | Sydney hospital (unnamed) | AU | 6.37 |
| - | Users searching for Bengal cat laws in Australia | AU | 3.37 |
| RansomHub | Potteau-Labo NV | BE | 3.66 |
| RansomHub | Interlabel | BE | 3.62 |
| Eraleig/APT73/Bashe | Grupo Emefarma | BR | 4.25 |
| Medusa | Lojas Marisa | BR | 5.98 |
| Black Suit | DezineCorp | CA | 3.74 |
| Lynx | Siltech Corporation | CA | 4.48 |
| Nam3L3ss | Canada Post | CA | 3.80 |
| RansomHub | MSDL | CA | 5.78 |
| Eraleig/APT73/Bashe | Baldinger Fahrzeugbau | CH | 3.93 |
| Helldown | Nightnurse Images | CH | 4.11 |
| Nam3L3ss | UBS | CH | 4.40 |
| Meow | LEXCO Collections | CL | 4.67 |
| Nam3L3ss | Lenovo | CN | 3.93 |
| Lynx | Banco de Fomento Internacional | CV | 4.94 |
| Akira | MONVIA Holding | CZ | 4.52 |
| Helldown | Qualiform | CZ | 4.11 |
| Helldown | Klinik am Kurpark | DE | 5.58 |
| Helldown | S.M.A.R.T.S Engineering | DE | 3.80 |
| Helldown | Haus des Stiftens | DE | 4.15 |
| Meow | Finger-Beton Unternehmensgruppe | DE | 4.33 |
| Akira | Xtrim (formerly Grupo TVCable) | EC | 5.15 |
| INC Ransom | Universidad Católica de Valencia | ES | 5.78 |
| IntelBroker | Nokia | FI | 4.06 |
| Eraleig/APT73/Bashe | La Maison du Citron | FR | 4.06 |
| Helldown | Saint-Joseph-de-Tivoli High School | FR | 5.23 |
| Helldown | La Clinique Du Coureur | FR | 5.39 |
| INC Ransom | Europe Qualité | FR | 4.51 |
| - | Département des Hautes-Pyrénées | FR | 4.51 |
| Cactus | Otto Simon | GB | 5.97 |
| Lynx | Plowman Craven | GB | 6.12 |
| Nam3L3ss | HSBC | GB | 4.59 |
| Nam3L3ss | BT | GB | 4.40 |
| - | Senior citizens in the UK | GB | 3.36 |
| - | Serco | GB | 5.98 |
| INC Ransom | Defense Procurement Agency Private Limited Liability Company | HU | 4.11 |
| RansomHub | FDC Group | IE | 4.30 |
| Handala Hack | Shimon Peres Negev Nuclear Research Center | IL | 5.60 |
| Iran-linked hacker group | Hyp | IL | 4.94 |
| Radwan Cyber Pal | Israel’s Ministry of National Security | IL | 5.97 |
| APT36 (aka Transparent Tribe) Pakistan-based | Several targets included Gov entities | IN | 6.15 |
| AlphaTeam | Brevi | IT | 3.87 |
| - | Several individuals | IT | 3.36 |
| - | Several individuals | IT | 3.36 |
| - | Avis San Francesco al Campo | IT | 5.79 |
| Arashi Kyōeiken | Japan Care Association | JP | 3.11 |
| - | Tohoku Gakuin University | JP | 3.83 |
| - | Kodomo Nutrition Balance mog Online Store | JP | 3.74 |
| - | HAKUTEN | JP | 3.62 |
| NoName057(16) | South Korea’s Ministry of National Defense | KR | 2.90 |
| NoName057(16) | South Korea’s Joint Chiefs of Staff | KR | 2.90 |
| - | Sri Lanka Meteorological Department | LK | 3.49 |
| Lynx | Interoute | LU | 4.99 |
| Space Bears | Intermed Hospital | MO | 5.39 |
| Masco | Secretaría de Educación Pública de Hidalgo (SEPH) | MX | 7.19 |
| r57 | Ticket to Go | MX | 3.49 |
| - | Individuals seeking official birth certificates online | MX | 3.36 |
| - | DeltaPrime | - | 7.45 |
| Nam3L3ss | DSM-Firmenich | NL | 3.97 |
| RansomHub | APOYO Consultoría | PE | 4.11 |
| RansomHub | BitQuail | PL | 4.79 |
| RansomHub | Algify | PL | 4.68 |
| RansomHub | FTPie | PL | 4.96 |
| Kill Security | National Institute of Administration | RO | 5.52 |
| Ransomhub | District 5 City Hall | RO | 6.97 |
| Kill Security | Oxyhealth Clinics | SA | 4.99 |
| RansomHub | Cenergica - Nejapa Power | SV | 5.31 |
| Hellcat | College of Business Education (CBE) | TZ | 3.87 |
| Akira | Hillandale Farms | US | 3.80 |
| Akira | Yazoo Valley Electric | US | 3.97 |
| Akira | Allegheny Millwork | US | 3.97 |
| Akira | ActionCOACH | US | 4.48 |
| Akira | Datron World Communications | US | 4.68 |
| Akira | Duplo USA | US | 3.97 |
| Akira | Irr Supply Centers | US | 4.25 |
| Akira | Falvey Linen Supply | US | 4.25 |
| Babatunde Francis Ayeni | Individuals involved in real estate transactions | US | 7.45 |
| BianLian | Healthcare Management Systems | US | 5.98 |
| BianLian | Immuno Laboratories | US | 5.98 |
| BianLian | ATSG Inc. | US | 6.77 |
| BianLian | Mizuno USA | US | 4.11 |
| BianLian | Falco Sult & Company | US | 5.97 |
| BianLian | Palmisano & Goodman | US | 4.48 |
| Black Suit | Maxxis International | US | 3.74 |
| Black Suit | Jarrell Properties | US | 4.01 |
| Black Suit | Supply Technologies | US | 4.59 |
| BlackLock | Nations Homes II | US | 3.97 |
| Embargo | Wexford County | US | 5.98 |
| Eraleig/APT73/Bashe | Assurified | US | 4.25 |
| Eraleig/APT73/Bashe | Lift Kits 4 Less | US | 4.20 |
| Everest | The MedElite Group | US | 5.39 |
| Fog | Cape Cod Regional Technical High School | US | 4.11 |
| Fog | GSR Andrade Architects | US | 4.11 |
| Helldown | CSI Kitchen & Bath | US | 3.97 |
| Helldown | Fuelco US | US | 4.89 |
| Helldown | Compass Funding Solutions | US | 4.94 |
| Helldown | San Jacinto County | US | 5.39 |
| Helldown | General Dentistry for Children | US | 4.99 |
| Helldown | Gonzalez Castillo Moya | US | 4.67 |
| Helldown | Knox Law Center | US | 4.67 |
| Helldown | American Ventures | US | 4.01 |
| Hunters International | Dietzgen Corporation | US | 5.78 |
| Hunters International | Stephen New & Associates | US | 4.30 |
| Hunters International | Amourgis and Associates | US | 4.67 |
| INC Ransom | Webb Institute | US | 4.30 |
| Interlock | Winnebago Public Schools | US | 4.67 |
| Lynx | WIMCO Corp | US | 3.80 |
| Lynx | Model Die & Mold | US | 3.93 |
| Lynx | Future Metals | US | 4.86 |
| Lynx | Tax Pros of Clermont | US | 4.30 |
| Lynx | DZS | US | 4.94 |
| Lynx | Nebraskaland | US | 4.06 |
| Medusa | Jomar Electrical Contractors | US | 5.05 |
| Medusa | Howell Electric | US | 4.51 |
| Medusa | Alliance Technical Group | US | 5.94 |
| Meow | Lincoln University | US | 4.48 |
| Meow | Equator Worldwide | US | 4.40 |
| Meow | Karman | US | 4.25 |
| Nam3L3ss | Rush University | US | 4.54 |
| Nam3L3ss | McDonald's | US | 3.62 |
| Nam3L3ss | City National Bank | US | 4.40 |
| Nam3L3ss | TIAA | US | 3.87 |
| Nam3L3ss | Charles Schwab | US | 4.40 |
| Nam3L3ss | U.S. Bank | US | 4.40 |
| Nam3L3ss | Fidelity Investments | US | 4.40 |
| Nam3L3ss | MetLife | US | 4.59 |
| Nam3L3ss | Bristol-Myers Squibb | US | 4.25 |
| Nam3L3ss | Cardinal Health | US | 4.45 |
| Nam3L3ss | HP | US | 4.11 |
| Nam3L3ss | Leidos | US | 3.80 |
| Nam3L3ss | Westinghouse | US | 3.62 |
| Nam3L3ss | 3M | US | 3.66 |
| Nam3L3ss | Applied Materials | US | 3.80 |
| Nam3L3ss | Omnicom Group | US | 3.80 |
| Nam3L3ss | Delta Air Lines | US | 4.54 |
| Nam3L3ss | URBN | US | 4.11 |
| Nam3L3ss | Amazon | US | 4.83 |
| Play | S & W Kitchens | US | 3.62 |
| Play | Dome Construction | US | 3.62 |
| Play | Metro Electric | US | 4.69 |
| Play | Paragon Plastics | US | 3.74 |
| Play | Delfin Design & Manufacturing | US | 3.74 |
| Play | Smitty's Supply | US | 4.00 |
| Play | PostcardMania | US | 3.74 |
| Qilin | East Baton Rouge Sheriff's Office | US | 4.83 |
| RansomHub | Pacific Glazing Contractors | US | 3.97 |
| RansomHub | Brandenburger Plumbing | US | 3.80 |
| RansomHub | Arco Excavation & Paving | US | 3.97 |
| RansomHub | Nelcon | US | 3.80 |
| RansomHub | Bartley Corporation | US | 3.97 |
| RansomHub | DEL Electric | US | 3.97 |
| RansomHub | Northwest Health | US | 5.39 |
| RansomHub | Gemini Industries | US | 4.48 |
| RansomHub | Bluco Corporation | US | 3.62 |
| RansomHub | New York Press Service | US | 4.30 |
| RansomHub | Commonwealth Architects | US | 5.04 |
| RansomHub | Tolbert & Tolbert | US | 4.86 |
| Rhysida | Granite School District | US | 5.78 |
| Russian and Iranian state-linked actors | U.S. presidential election | US | 4.25 |
| - | Newpark Resources | US | 5.19 |
| - | Washington State Administrative Office of the Courts | US | 7.19 |
| - | City of Sheboygan | US | 4.99 |
| - | Kaiser Permanente | US | 3.44 |
| - | Presbyterian Healthcare Services | US | 5.98 |
| - | Sango Family Dentistry | US | 4.45 |
| - | Southern Oregon Veterinary Specialty Center (SOVSC) | US | 5.63 |
| - | Health & Palliative Services of the Treasure Coast | US | 3.62 |
| - | Universal Health Corporation | US | 3.62 |
| - | Orthopedics Rhode Island | US | 3.87 |
| - | Soliant Health | US | 3.36 |
| - | Thompson Coburn | US | 4.51 |
| - | SelectBlinds | US | 5.02 |
| - | Stop & Shop | US | 5.94 |
| - | Ahold Delhaize | US | 5.90 |
| - | Hannaford | US | 5.90 |
| Eraleig/APT73/Bashe | BOTIGA | UY | 4.20 |
An additional 8% of cyberattacks (16 in total) affected multiple countries.
Stay safe!
Hackmanac Team
