HACK TUESDAY WEEK 30 OCT - 05 NOV 2024: 204 CYBERATTACKS ACROSS 39 COUNTRIES
- The most active threat actor this week is RansomHub claiming responsibility for 32 attacks.
- The United States is the most affected country, accounting for 42% of the victims, followed by United Kingdom with 11%
- The Gov / Mil / LE sector is the most impacted, representing 13% of the claimed targets, followed by the Manufacturing with 11%
- Overall, the claimed compromised data amounts to approximately 32 terabytes.
- The average ESIX® (Estimated Severity Index) is 4.6.
Disclaimer:
Data are collected from public info published on both Clear and Dark Web.
The ESIX© (Estimated Severity Index) is calculated on cyber attacks’ impact based on available data and it's based on a set of proprietary algorithms that evaluate multiple variables, including social, economic (direct and indirect), technical and reputational impact.
For each attack we collect and classify, an ESIX® is calculated on a scale of one to ten, corresponding to four impact categories (Low, Medium, High and Critical): 1 = very low, 10= very critical.
TOP 10 CYBER THREAT ACTORS OF THE WEEK
TOP 10 TARGETED INDUSTRIES OF THE WEEK
LIST OF REFERRED VICTIMS
| ATTACKER | VICTIM | COUNTRY | ESIX© |
|---|---|---|---|
| - | M2 | 🇦🇪 | 7.45 |
| RansomHub | Tigre Municipality | 🇦🇷 | 5.19 |
| - | Western Sydney University | 🇦🇺 | 3.44 |
| ThreeAM | ANU Enterprise | 🇦🇺 | 4.15 |
| RansomHub | Goodline | 🇦🇺 | 4.69 |
| Abyss | Australian Nursing Home Foundation | 🇦🇺 | 5.98 |
| Medusa | International University of Sarajevo (IUS) | 🇧🇦 | 4.48 |
| Hunters International | European External Action Service (EEAS) | 🇧🇪 | 5.79 |
| ThreeAM | Caillau Automotive Clamps | 🇧🇷 | 3.74 |
| RansomHub | Maxdata | 🇧🇷 | 4.06 |
| RansomHouse | Sabesp (Companhia de Saneamento Básico do Estado de São Paulo) | 🇧🇷 | 4.99 |
| - | Art Gallery of Ontario (AGO) | 🇨🇦 | 3.66 |
| Sarcoma | TDM Technical Services | 🇨🇦 | 3.93 |
| Eraleig/APT73/Bashe | Trinite Solutions | 🇨🇦 | 4.06 |
| Chinese state-backed hackers | 20 Canadian gov networks | 🇨🇦 | 8.72 |
| Abyss | Project Alp | 🇨🇭 | 3.80 |
| RansomHub | Federico Santa Maria Technical University | 🇨🇱 | 4.11 |
| Space Bears | Menzies CNAC | 🇨🇳 | 4.89 |
| Sarcoma | CAS Software AG | 🇩🇪 | 3.87 |
| Eraleig/APT73/Bashe | ScopeSET Technology Deutschland | 🇩🇪 | 4.06 |
| RansomHub | Schweiker | 🇩🇪 | 4.11 |
| - | Stadtwerke Burg | 🇩🇪 | 5.79 |
| - | AEP | 🇩🇪 | 5.94 |
| BlackBasta | CELO | 🇪🇸 | 4.33 |
| Dragon Ransomware | Ascires Biomedical Group | 🇪🇸 | 5.39 |
| Qilin | Imprimerie PEAU | 🇫🇷 | 3.62 |
| Eraleig/APT73/Bashe | Legilog | 🇫🇷 | 4.06 |
| Cloak | Entrepose Echafaudages | 🇫🇷 | 4.51 |
| Hellcat | Schneider Electric | 🇫🇷 | 4.86 |
| Cactus | Lumiplan | 🇫🇷 | 4.87 |
| - | Ministry of Labor and Employment service provider | 🇫🇷 | 5.15 |
| Qilin | Groupe Althays | 🇫🇷 | 5.60 |
| Hunters International | Cerp Bretagne Nord | 🇫🇷 | 5.79 |
| NoName057(16) | Portsmouth City Council | 🇬🇧 | 2.86 |
| NoName057(16) | Bournemouth, Christchurch & Poole (BCP) Council | 🇬🇧 | 2.86 |
| NoName057(16) | Medway Council | 🇬🇧 | 2.86 |
| NoName057(16) | Exeter City Council | 🇬🇧 | 2.86 |
| NoName057(16) | Burnley Town Council | 🇬🇧 | 2.86 |
| NoName057(16) | Hemel Hempstead | 🇬🇧 | 3.03 |
| NoName057(16) | St Albans | 🇬🇧 | 3.03 |
| NoName057(16) | Salford | 🇬🇧 | 3.03 |
| NoName057(16) | Bury | 🇬🇧 | 3.03 |
| NoName057(16) | Trafford | 🇬🇧 | 3.03 |
| NoName057(16) | Tameside | 🇬🇧 | 3.03 |
| NoName057(16) | Dudley | 🇬🇧 | 3.03 |
| - | Blackburn College | 🇬🇧 | 3.36 |
| RansomHub | illumin8 Blinds and Curtains | 🇬🇧 | 3.80 |
| - | Metropolis Group | 🇬🇧 | 3.97 |
| Qilin | Valu-Trac Investment Management | 🇬🇧 | 4.74 |
| RansomHub | Bravo Networks | 🇬🇧 | 4.94 |
| Cactus | London School of Science & Technology | 🇬🇧 | 5.60 |
| - | Nisa Retail Limited | 🇬🇧 | 5.79 |
| - | DHL | 🇬🇧 | 6.52 |
| Rhysida | Fylde Coast Academy Trust (FCAT) | 🇬🇧 | 6.52 |
| - | Microlise | 🇬🇧 | 6.68 |
| RansomHub | Hellenic Open University | 🇬🇷 | 5.97 |
| RansomHub | Granjazul | 🇬🇹 | 4.15 |
| Qilin | Pátria Printing | 🇭🇺 | 3.87 |
| Eraleig/APT73/Bashe | PT. Sokka Kreatif Teknologi | 🇮🇩 | 4.06 |
| - | South East Technological University’s (SETU) | 🇮🇪 | 5.94 |
| Handala Hack | IM Cannabis | 🇮🇱 | 4.99 |
| Handala Hack | Soreq Nuclear Research Center | 🇮🇱 | 5.04 |
| Anonymous Sudan | Shva | 🇮🇱 | 5.73 |
| Handala Hack | Elad Municipality | 🇮🇱 | 6.36 |
| APT36 (aka Transparent Tribe) | High-profile entities in India | 🇮🇳 | 5.98 |
| LockBit 3.0 | Vikurverk ehf | 🇮🇸 | 4.79 |
| Sarcoma | Brancaia | 🇮🇹 | 3.80 |
| DragonForce | SCOLARI Srl | 🇮🇹 | 4.15 |
| Ra World | Bullonerie Galvit | 🇮🇹 | 4.45 |
| Hellcat | Jordan Ministry of Education | 🇯🇴 | 4.38 |
| - | HEALSIO Deli | 🇯🇵 | 3.62 |
| - | Yanmar Holdings | 🇯🇵 | 3.97 |
| - | COCORO STORE | 🇯🇵 | 4.00 |
| - | Oita City | 🇯🇵 | 4.00 |
| - | Taketa City | 🇯🇵 | 4.00 |
| - | SHIMOGAMO SARYO | 🇯🇵 | 4.19 |
| - | Hakubun Eikodo Online Shop | 🇯🇵 | 4.83 |
| - | Betsudai Kosan | 🇯🇵 | 4.83 |
| - | Karel Capek Tea Shop | 🇯🇵 | 5.40 |
| - | Demaecan | 🇯🇵 | 5.86 |
| mommy | Samsung | 🇰🇵 | 3.37 |
| - | Users of illegal Korean gambling platforms | 🇰🇵 | 3.44 |
| APT37 | Several South Korean entities | 🇰🇵 | 5.94 |
| RansomHub | TETCO Group | 🇱🇧 | 4.11 |
| Russian-linked hackers | Central Election Commission | 🇲🇩 | 4.03 |
| RansomHub | Mabe Global | 🇲🇽 | 5.97 |
| - | Mexican Tax Administration Service (SAT) | 🇲🇽 | 6.58 |
| Mexican Mafia (Pancho Villa) | Superior Court of Oaxaca | 🇲🇽 | 7.70 |
| - | Metawin | – | 7.19 |
| Hunters International | Hemubo Betontechniek B.V | 🇳🇱 | 5.23 |
| - | Saint Kentigern College | 🇳🇿 | 3.44 |
| kzoldyck | Interbank | 🇵🇪 | 7.96 |
| RansomHub | Noble House Distribution Enterprise | 🇵🇭 | 3.87 |
| RansomHub | Cooperativa Naguabeña | 🇵🇷 | 5.15 |
| Fog | Askling Bil | 🇸🇪 | 3.62 |
| - | Kumla kommun | 🇸🇪 | 4.83 |
| Qilin | Daikin Thailand | 🇹🇭 | 5.41 |
| RansomHub | SYM Motor Global | 🇹🇼 | 4.30 |
| - | Riverview Health | 🇺🇸 | 3.37 |
| 888 | IBM | 🇺🇸 | 3.49 |
| Play | Paul White Company | 🇺🇸 | 3.62 |
| Play | Pelsue | 🇺🇸 | 3.62 |
| Play | J.S. McCarthy Packaging + Print | 🇺🇸 | 3.62 |
| RansomHub | Lighthouse Electric | 🇺🇸 | 3.62 |
| - | Readymag | 🇺🇸 | 3.62 |
| Hunters International | Air Specialist Heating and Air Conditioning Company | 🇺🇸 | 3.62 |
| RansomHub | Red Phoenix Construction | 🇺🇸 | 3.62 |
| Play | Unlimited Lawn Care | 🇺🇸 | 3.66 |
| Qilin | Heritage Golf Links | 🇺🇸 | 3.74 |
| Play | Dirksen Screw Products | 🇺🇸 | 3.74 |
| Fog | Jillamy | 🇺🇸 | 3.74 |
| Play | iFocus Consulting | 🇺🇸 | 3.74 |
| Play | MAVAL Industries | 🇺🇸 | 3.74 |
| Play | Pureflow Airdog | 🇺🇸 | 3.74 |
| Play | CGR Technologies | 🇺🇸 | 3.74 |
| Qilin | DieTech North America | 🇺🇸 | 3.74 |
| Qilin | Axiom Constructors | 🇺🇸 | 3.80 |
| Medusa | Whitaker Construction Group | 🇺🇸 | 3.80 |
| RansomHub | Kriger Construction | 🇺🇸 | 3.80 |
| RansomHub | Lambert Marble | 🇺🇸 | 3.80 |
| RansomHub | Case Construction | 🇺🇸 | 3.80 |
| RansomHub | Urban Alternatives | 🇺🇸 | 3.83 |
| - | Clay Platte Family Medicine | 🇺🇸 | 3.87 |
| - | Barry Pointe Family Medicine Clinic | 🇺🇸 | 3.87 |
| - | Summit Family and Sports Medicine Clinic | 🇺🇸 | 3.87 |
| - | Cobblestone Family Medicine Clinic | 🇺🇸 | 3.87 |
| Play | Dana Safety Supply | 🇺🇸 | 3.87 |
| Black Suit | SVP Worldwide | 🇺🇸 | 3.87 |
| RansomHub | Kenana Sugar Company | 🇺🇸 | 3.87 |
| ThreeAM | Sandray Precision Grinding | 🇺🇸 | 3.93 |
| ThreeAM | Milano Promotional Services | 🇺🇸 | 3.93 |
| RansomHub | CSU Inc. | 🇺🇸 | 3.97 |
| RansomHub | Fullford Electric | 🇺🇸 | 3.97 |
| - | Center for Urban Community Services | 🇺🇸 | 4.01 |
| Fog | Jordan Public Schools | 🇺🇸 | 4.11 |
| Fog | SmartSource Technical Solutions | 🇺🇸 | 4.11 |
| RansomHub | Oldcastle BuildingEnvelope | 🇺🇸 | 4.11 |
| Play | ASTAC | 🇺🇸 | 4.13 |
| RansomHub | Fat Boys Fleet & Auto | 🇺🇸 | 4.15 |
| - | St. Anthony Regional Hospital | 🇺🇸 | 4.25 |
| - | Parkland Health | 🇺🇸 | 4.25 |
| RansomHub | Rosito Bisani Imports | 🇺🇸 | 4.25 |
| Russian hackers | U.S. presidential election | 🇺🇸 | 4.25 |
| RansomHub | Mid-State Supply | 🇺🇸 | 4.25 |
| Medusa | Spirit Lake Community School District | 🇺🇸 | 4.30 |
| Qilin | The Law Offices of Jed Silverman | 🇺🇸 | 4.30 |
| Qilin | AIMS | 🇺🇸 | 4.45 |
| ThreeAM | In-Home Attendant Services | 🇺🇸 | 4.45 |
| ThreeAM | Freedom Home Care | 🇺🇸 | 4.45 |
| Everest | Arctrade | 🇺🇸 | 4.45 |
| BianLian | Russell Law Firm | 🇺🇸 | 4.48 |
| Medusa | McMillan Electric Company | 🇺🇸 | 4.48 |
| RansomHub | Sundt Construction | 🇺🇸 | 4.51 |
| Qilin | Propak | 🇺🇸 | 4.59 |
| Play | Sunrise Express | 🇺🇸 | 4.59 |
| Meow | Houston Housing Authority | 🇺🇸 | 4.59 |
| Arcus Media | Surfnet Communications | 🇺🇸 | 4.74 |
| Qilin | Mount Laurel Municipal Utilities Authority | 🇺🇸 | 4.79 |
| RansomHub | Dr Butler And Associates | 🇺🇸 | 4.79 |
| BlackBasta | Distribution Alternatives | 🇺🇸 | 4.86 |
| RansomHub | Texas Lawyers' Insurance Exchange | 🇺🇸 | 4.94 |
| Stormous | Guardian Healthcare | 🇺🇸 | 4.99 |
| - | Mystic Valley Elder Services | 🇺🇸 | 5.02 |
| Qilin | Colonial Behavioral Health | 🇺🇸 | 5.19 |
| Qilin | Freyberg Petroleum | 🇺🇸 | 5.31 |
| RansomHub | HCF Management | 🇺🇸 | 5.39 |
| BlackBasta | Weber Packaging Solutions | 🇺🇸 | 5.58 |
| BianLian | L&B Transport | 🇺🇸 | 5.58 |
| BlackBasta | The Rosen Law Firm | 🇺🇸 | 5.60 |
| INC Ransom | San Francisco Ballet | 🇺🇸 | 5.60 |
| - | Marysville Village Exempted Schools | 🇺🇸 | 5.69 |
| Qilin | Aiken Electric Cooperative | 🇺🇸 | 5.73 |
| Qilin | PetroSouth | 🇺🇸 | 5.73 |
| Qilin | Aziz Oil | 🇺🇸 | 5.73 |
| - | Andy Ayrey | 🇺🇸 | 5.76 |
| Medusa | United Sleep Diagnostics | 🇺🇸 | 5.78 |
| RansomHub | BayMark Health Services | 🇺🇸 | 5.98 |
| Rhysida | Hope Valley Recovery | 🇺🇸 | 5.98 |
| Embargo | Memorial Hospital and Manor in Bainbridge | 🇺🇸 | 6.18 |
| Cactus | Housing Authority of the City of Los Angeles (HACLA) | 🇺🇸 | 6.37 |
| - | San Joaquin County Superior Court | 🇺🇸 | 6.52 |
| Michael Scheuer | Disney | 🇺🇸 | 7.45 |
| LockBit 3.0 | Alimentos Serimar | 🇻🇪 | 4.06 |
| Kill Security | Sumitomo Rubber South Africa | 🇿🇦 | 4.11 |
An additional 9% of cyberattacks (19 in total) affected multiple countries.
Stay safe!
Hackmanac Team
