HACK TUESDAY WEEK 16 - 22 OCTOBER 2024: 171 CYBERATTACKS ACROSS 29 COUNTRIES
- The most active threat actor this week is RansomHub, claiming responsibility for 36 attacks.
- The United States is the most affected country, accounting for 39% of the victims, followed by Japan with 13%
- The Manufacturing sector is the most impacted, representing 15% of the claimed targets, followed by the Gov / Mil / LE sectors with 14%
- Overall, the claimed compromised data amounts to approximately 22.878 terabytes.
- The average ESIX® (Estimated Severity Index) is 4.3.
Disclaimer:
Data are collected from public info published on both Clear and Dark Web.
The ESIX© (Estimated Severity Index) is calculated on cyber attacks’ impact based on available data and it's based on a set of proprietary algorithms that evaluate multiple variables, including social, economic (direct and indirect), technical and reputational impact.
For each attack we collect and classify, an ESIX® is calculated on a scale of one to ten, corresponding to four impact categories (Low, Medium, High and Critical): 1 = very low, 10= very critical.
TOP 10 CYBER THREAT ACTORS OF THE WEEK
TOP 10 TARGETED INDUSTRIES OF THE WEEK
LIST OF REFERRED VICTIMS
| DATE | ATTACKER | VICTIM | COUNTRY | ESIX© |
|---|---|---|---|---|
| 17/10/2024 | UAC-0050 (Fire Cells Group) | Ukrainian organizations, embassies, media outlets, state agencies. | 🇺🇦 | 7.70 |
| 16/10/2024 | N/A | Radiant Capital | ❌ | 7.45 |
| 18/10/2024 | Suspected North Korean hackers | Tapioca DAO | ❌ | 7.19 |
| 15/10/2024 | Cactus | Synertrade | 🇩🇪 | 6.75 |
| 22/10/2024 | RansomHub | Mauguio Carnon | 🇫🇷 | 6.57 |
| 15/10/2024 | N/A | La mairie de Clairefontaine-en-Yvelines | 🇫🇷 | 6.52 |
| 14/10/2024 | N/A | Sorso | 🇮🇹 | 6.52 |
| 16/10/2024 | North Korean cyber criminal | Unnamed company | ❌ | 6.43 |
| 17/10/2024 | N/A | Municipality of Aversa | 🇮🇹 | 6.30 |
| 19/10/2024 | RansomHub | Star Health | 🇮🇳 | 6.17 |
| 19/10/2024 | N/A | CERP Bretagne-Atlantique | 🇫🇷 | 6.07 |
| 19/10/2024 | TAINTU | United States Space Force (USSF) | 🇺🇸 | 5.98 |
| 19/10/2024 | Black Suit | Rutherford County Schools | 🇺🇸 | 5.97 |
| 21/10/2024 | BlackBasta | Kaiser Enterprise | 🇺🇸 | 5.97 |
| 21/10/2024 | N/A | Moldova’s parliamentary email servers | 🇲🇩 | 5.95 |
| 17/10/2024 | RansomHub | Big Pharmacy | 🇲🇾 | 5.79 |
| 20/10/2024 | Hunters International | Atende | 🇵🇱 | 5.79 |
| 18/10/2024 | Black Suit | Neighbors Credit Union | 🇺🇸 | 5.76 |
| 14/10/2024 | RansomHub | Yorozu Corporation | 🇯🇵 | 5.60 |
| 15/10/2024 | BianLian | Lein Law Offices | 🇺🇸 | 5.60 |
| 19/10/2024 | Kill Security | Apollo Hospitals | 🇮🇳 | 5.58 |
| 19/10/2024 | RansomHub | Clinicia India | 🇮🇳 | 5.58 |
| 15/10/2024 | RansomHub | Rahnuma FPAP (Family Planning Association of Pakistan) | 🇵🇰 | 5.58 |
| 17/10/2024 | RansomHub | HiCare | 🇺🇸 | 5.39 |
| 17/10/2024 | RansomHub | Puerto Rican Institute of Culture | 🇵🇷 | 5.31 |
| 16/10/2024 | Stormous | Fractal ID | 🇩🇪 | 5.19 |
| 22/10/2024 | Medusa | American Medical Billing | 🇺🇸 | 5.19 |
| 21/10/2024 | BlackBasta | Miller Edge | 🇺🇸 | 5.04 |
| 20/10/2024 | Stormous | Transak | 🇺🇸 | 5.02 |
| 19/10/2024 | RansomHub | Sempre Medico | 🇧🇷 | 4.99 |
| 16/10/2024 | N/A | Manufacturing companies, retail firms, government agencies in Brazil | 🇧🇷 | 4.99 |
| 15/10/2024 | RansomHub | ASTO LABS | 🇮🇳 | 4.99 |
| 16/10/2024 | RansomHub | Jędrzejów County | 🇵🇱 | 4.99 |
| 22/10/2024 | RansomHub | 1doc | 🇸🇬 | 4.99 |
| 15/10/2024 | BianLian | Boston Children's Health Physicians | 🇺🇸 | 4.99 |
| 19/10/2024 | Black Suit | Mid-Ohio Psychological Services | 🇺🇸 | 4.99 |
| 19/10/2024 | Black Suit | Kansas City Hospice | 🇺🇸 | 4.99 |
| 15/10/2024 | RansomHub | G-Plans | 🇺🇸 | 4.99 |
| 15/10/2024 | RansomHub | Doctors To You (DTY) | 🇺🇸 | 4.99 |
| 20/10/2024 | N/A | Internet Archive (The Wayback Machine) | 🇺🇸 | 4.99 |
| 19/10/2024 | Crypt Ghouls | Russian government agencies, mining, energy, finance, and retail companies | 🇷🇺 | 4.94 |
| 21/10/2024 | Kill Security | One Day Event Insurance | 🇺🇸 | 4.94 |
| 21/10/2024 | BlackBasta | Silver Springs Bottled Water Company | 🇺🇸 | 4.87 |
| 20/10/2024 | Arcus Media | Interbel | 🇪🇸 | 4.83 |
| 18/10/2024 | Everest | CreaGen Biosciences | 🇺🇸 | 4.83 |
| 16/10/2024 | N/A | Texas Department of Public Safety (DPS) | 🇺🇸 | 4.83 |
| 21/10/2024 | Fog | Schweiger Group | 🇩🇪 | 4.79 |
| 21/10/2024 | RansomHub | STIVO (Société de Transport Interurbains du Val d'Oise) | 🇫🇷 | 4.79 |
| 21/10/2024 | LockBit 3.0 | Ford Country Americas | 🇲🇽 | 4.69 |
| 17/10/2024 | Play | Wilkinson & Company | 🇨🇦 | 4.67 |
| 18/10/2024 | Cicada3301 | Dubin Group | 🇺🇸 | 4.67 |
| 19/10/2024 | Hunters International | KMC Controls | 🇺🇸 | 4.67 |
| 19/10/2024 | Hunters International | The Law Offices of Michael J. Gurfinkel | 🇺🇸 | 4.67 |
| 15/10/2024 | Play | CETRULO LLP | 🇺🇸 | 4.67 |
| 17/10/2024 | RansomHub | Aristoi Classical Academy | 🇺🇸 | 4.67 |
| 19/10/2024 | Everest | Country Inn & Suites by Radisson | 🇧🇪 | 4.51 |
| 21/10/2024 | BlackBasta | LEWA Austria GmbH | 🇩🇪 | 4.51 |
| 16/10/2024 | N/A | Texas Tech University Health Sciences Center (TTUHSC) | 🇺🇸 | 4.51 |
| 21/10/2024 | Hunters International | Mercury Theatre | 🇬🇧 | 4.48 |
| 18/10/2024 | Cicada3301 | Luxwood Software Tools | 🇨🇦 | 4.45 |
| 16/10/2024 | N/A | Electronic billboards in Northbrook | 🇺🇸 | 4.38 |
| 16/10/2024 | N/A | Uruguayan Institute of Meteorology (Inumet) | 🇺🇾 | 4.35 |
| 21/10/2024 | Monti | La Tazza D'oro | 🇮🇹 | 4.33 |
| 18/10/2024 | Cicada3301 | RDC Control | 🇨🇦 | 4.30 |
| 22/10/2024 | RansomHub | Lycée Horticole de Fayl-Billot | 🇫🇷 | 4.30 |
| 19/10/2024 | Sarcoma | Pheim Unit Trusts Berhad | 🇲🇾 | 4.30 |
| 15/10/2024 | BianLian | Corporate Job Bank | 🇺🇸 | 4.30 |
| 21/10/2024 | BlackBasta | Temple Inc | 🇺🇸 | 4.30 |
| 18/10/2024 | Cl0p | Spectrum Chemical Mfg. Corp. | 🇺🇸 | 4.30 |
| 21/10/2024 | Meow | H.B. Fuller | 🇺🇸 | 4.30 |
| 22/10/2024 | Kill Security | BoloSign | 🇮🇳 | 4.25 |
| 20/10/2024 | N/A | District scolaire public de Winnebago | 🇺🇸 | 4.19 |
| 22/10/2024 | Medusa | American Mechanical | 🇺🇸 | 4.15 |
| 21/10/2024 | Meow | Arango Billboard Services & Construction | 🇺🇸 | 4.15 |
| 18/10/2024 | RansomHub | Quality Assured Label | 🇺🇸 | 4.15 |
| 16/10/2024 | N/A | Ukrainian conscripts using the Reserve+ app | 🇺🇦 | 4.13 |
| 20/10/2024 | Arcus Media | Superior Quality Insurance Agency | 🇺🇸 | 4.13 |
| 21/10/2024 | Fog | Trimarc Financial | 🇺🇸 | 4.13 |
| 18/10/2024 | Cicada3301 | INDIBA Group | 🇪🇸 | 4.11 |
| 19/10/2024 | Cicada3301 | T-Space Architects | 🇬🇧 | 4.11 |
| 17/10/2024 | Sarcoma | AUXIT S.R.L. | 🇮🇹 | 4.11 |
| 18/10/2024 | RansomHub | Al Qaryah Auctions | 🇦🇪 | 4.06 |
| 21/10/2024 | Fog | Philadelphia Macaroni Co. | 🇺🇸 | 4.06 |
| 18/10/2024 | Fog | Fromm International | 🇺🇸 | 4.06 |
| 22/10/2024 | RansomHub | Dennis Supply Company | 🇺🇸 | 4.06 |
| 18/10/2024 | Cicada3301 | Racing Forensics | 🇨🇦 | 4.01 |
| 17/10/2024 | N/A | Formpipe’s Danish subsidiary | 🇩🇰 | 4.01 |
| 16/10/2024 | N/A | Sundai Tourism & Foreign Language Business College | 🇯🇵 | 4.01 |
| 17/10/2024 | Kill Security | Volo Health | 🇮🇳 | 4.00 |
| 21/10/2024 | Kill Security | AutoDukan | 🇮🇳 | 4.00 |
| 17/10/2024 | RansomHub | Kersey | 🇺🇸 | 4.00 |
| 22/10/2024 | RansomHub | Semna | 🇫🇷 | 3.97 |
| 22/10/2024 | RansomHub | BWD Technologies | 🇺🇸 | 3.97 |
| 22/10/2024 | RansomHub | Davis Brothers | 🇺🇸 | 3.97 |
| 22/10/2024 | RansomHub | Polypane Glasindustrie | 🇧🇪 | 3.93 |
| 22/10/2024 | RansomHub | Don Bosco Landser | 🇫🇷 | 3.93 |
| 17/10/2024 | RansomHub | PROflex | 🇷🇴 | 3.93 |
| 16/10/2024 | Fog | Cordogan Clark | 🇺🇸 | 3.93 |
| 22/10/2024 | RansomHub | TKG | 🇺🇸 | 3.93 |
| 19/10/2024 | Sarcoma | Zierick Manufacturing Corporation | 🇺🇸 | 3.93 |
| 15/10/2024 | RansomHub | Transport Systems Group | 🇨🇴 | 3.87 |
| 15/10/2024 | Fog | Food Sciences Corporation | 🇺🇸 | 3.87 |
| 19/10/2024 | Kill Security | AskVet | 🇺🇸 | 3.83 |
| 20/10/2024 | RansomHub | QS Group | 🇮🇹 | 3.80 |
| 16/10/2024 | Fog | Welker | 🇺🇸 | 3.80 |
| 22/10/2024 | RansomHub | SpecPro inc. | 🇺🇸 | 3.80 |
| 15/10/2024 | RansomHub | Horse Sport Ireland (HSI) | 🇮🇪 | 3.74 |
| 20/10/2024 | Arcus Media | Vasesa | 🇲🇽 | 3.74 |
| 18/10/2024 | Play | The Strainrite Companies | 🇺🇸 | 3.74 |
| 17/10/2024 | RansomHub | Chilton ISD | 🇺🇸 | 3.74 |
| 17/10/2024 | RansomHub | Camelot Facility & Property Management | 🇺🇸 | 3.74 |
| 15/10/2024 | Rhysida | Henry County Schools | 🇺🇸 | 3.74 |
| 16/10/2024 | N/A | Hafetz and Associates | 🇺🇸 | 3.74 |
| 20/10/2024 | Arcus Media | Petropolis Pet Resort | 🇺🇸 | 3.66 |
| 14/10/2024 | N/A | Well Chip Group Berhad | 🇲🇾 | 3.62 |
| 18/10/2024 | Fog | Ultra Tune | 🇦🇺 | 3.62 |
| 17/10/2024 | Kill Security | tripXOXO | 🇮🇳 | 3.62 |
| 22/10/2024 | Medusa | Automha | 🇮🇹 | 3.62 |
| 17/10/2024 | N/A | Ambient | ❌ | 3.62 |
| 20/10/2024 | Arcus Media | Country Club El Bosque | 🇵🇪 | 3.62 |
| 15/10/2024 | Fog | Central Pennsylvania Food Bank | 🇺🇸 | 3.62 |
| 15/10/2024 | Play | Nor-Well Company | 🇺🇸 | 3.62 |
| 15/10/2024 | Play | Kuhn & Associates | 🇺🇸 | 3.62 |
| 18/10/2024 | Play | Mid State Electric | 🇺🇸 | 3.62 |
| 18/10/2024 | Play | McCody Concrete Products | 🇺🇸 | 3.62 |
| 18/10/2024 | Play | Absolute Machine Tools | 🇺🇸 | 3.62 |
| 19/10/2024 | RansomHub | Sizelove Construction | 🇺🇸 | 3.62 |
| 19/10/2024 | RansomHub | Carey's Mechanical | 🇺🇸 | 3.62 |
| 19/10/2024 | Sarcoma | Open Range Field Services | 🇺🇸 | 3.62 |
| 15/10/2024 | N/A | Novaya Gazeta Europe | 🇷🇺 | 3.57 |
| 16/10/2024 | N/A | TheraCom | 🇺🇸 | 3.56 |
| 15/10/2024 | N/A | Users of Banamex, BBVA, HSBC, Santander, Banorte | 🇲🇽 | 3.37 |
| 15/10/2024 | N/A | aap Implantate AG | 🇩🇪 | 3.36 |
| 16/10/2024 | NoName057(16) | Yamanashi Prefecture | 🇯🇵 | 3.36 |
| 18/10/2024 | N/A | Grupo Aeroportuario Centro Norte (OMA) | 🇲🇽 | 3.31 |
| 15/10/2024 | NoName057(16) | Liberal Democratic Party (LDP) | 🇯🇵 | 3.23 |
| 22/10/2024 | N/A | Prime Minister's Office website visitors | 🇯🇵 | 3.19 |
| 21/10/2024 | Cyber Army Russia Reborn | Adelaide Metro | 🇦🇺 | 3.03 |
| 16/10/2024 | NoName057(16) | Michiku Bank | 🇯🇵 | 2.97 |
| 21/10/2024 | Pro-Palestinian hacker groups | Cyprus' critical infrastructure, including government | 🇨🇾 | 2.86 |
| 16/10/2024 | NoName057(16) | Ishikawa Prefecture | 🇯🇵 | 2.86 |
| 16/10/2024 | NoName057(16) | Nanao City | 🇯🇵 | 2.86 |
| 16/10/2024 | NoName057(16) | Iwate Prefecture | 🇯🇵 | 2.86 |
| 16/10/2024 | NoName057(16) | Hanamaki City | 🇯🇵 | 2.86 |
| 16/10/2024 | NoName057(16) | Tokyo | 🇯🇵 | 2.86 |
| 16/10/2024 | NoName057(16) | Adachi | 🇯🇵 | 2.86 |
| 16/10/2024 | NoName057(16) | Arakawa Ward | 🇯🇵 | 2.86 |
| 16/10/2024 | NoName057(16) | Suginami Ward | 🇯🇵 | 2.86 |
| 16/10/2024 | NoName057(16) | Kanagawa Prefecture | 🇯🇵 | 2.86 |
| 16/10/2024 | NoName057(16) | Fujisawa City | 🇯🇵 | 2.86 |
| 16/10/2024 | NoName057(16) | Odawara City | 🇯🇵 | 2.86 |
| 16/10/2024 | NoName057(16) | Mito City | 🇯🇵 | 2.86 |
| 16/10/2024 | NoName057(16) | Hiroshima City | 🇯🇵 | 2.86 |
| 20/10/2024 | NoName057(16) | Nagoya City | 🇯🇵 | 2.86 |
| 17/10/2024 | N/A | ITEP Co., Ltd. | 🇯🇵 | 2.86 |
| 14/10/2024 | NoName057(16) | Japan Bar Association | 🇯🇵 | 2.75 |
| 22/10/2024 | Cyber Army Russia Reborn | University of Adelaide | 🇦🇺 | 2.65 |
| 16/10/2024 | N/A | Illinois State Historical Society | 🇺🇸 | 1.70 |
An additional 8% of cyberattacks (13 in total) affected multiple countries.
Stay safe!
Hackmanac Team

