news

Victim website:

stanleyelectricus.com

Victim country:

USA

Attacker name:

Royal

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

2 TB

Exfiltrated data type:

Details about their cooperation with big business names like JP Morgan, Nissan, Honda and others, but also their employees’ personal information: thousands of SSNs, passports, medical information, vaccination information, incidents, violations, confidential info, contracts etc.

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

bigassfans.com

Victim country:

USA

Attacker name:

Royal

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

246 GB

Exfiltrated data type:

Accounting and finance information, projects, contracts, payment docs, employees’ salaries, passports, medical insurance policies, phones, emails

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

agp.ph

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 200,000

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

18^th Apr 23

Cyber Risk Factor:

4

Victim website:

fiamma.com.my

Victim country:

Malaysia

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 200,000

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

15^th Apr 23

Cyber Risk Factor:

4

Victim website:

euromotors.com.pe

Victim country:

Peru

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 500,000

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

N/A

Ransom deadline:

16^th Apr 23

Cyber Risk Factor:

4

Victim website:

harvardenergy.com

Victim country:

Canada

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

360 GB

Exfiltrated data type:

HR, projects, accounting, financial data. top management mail archives. company data, including company relative projects: subsidiaries, bitcoin mining, SQL databases.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

valleywomenshealth.com

Victim country:

USA

Attacker name:

BlackCat/ALPHV

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

633 GB

Exfiltrated data type:

Internal Company Data (Employees personal data, CV’s, DL’s, ID’s, SSN’s, Financial reports, Accounting data, Loans data, Insurance, Agreements and much more); – Clients documentation (DL’s, ID’s, SSN’s, Financial data, Credit cards information, Loans data, Agreements and much more); – Complete network map including credentials for local and remote services etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

tomduffy.com

Victim country:

USA

Attacker name:

Royal

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

alvaria.com

Victim country:

USA

Attacker name:

Royal

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

caremar.it

Victim country:

Italy

Attacker name:

0x3a0

Attacker class:

Cybercrime

Attack technique:

Data breach

Ransom demand:

N/A

Exfiltrated data amount:

24,577 user accounts

Exfiltrated data type:

25 admin users – full name, email, username, password (md5 hash),

52 agency users – email, password (md5 hash),

24,500 customer users – full name, telephone, email, password (md5 hash)

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

aek.mk

Victim country:

Macedonia

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including passports, identity card, card details.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

17^th Apr 23

Cyber Risk Factor:

3

Victim website:

mundocuervo.com

Victim country:

Mexico

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including name, email, financial info, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

17^th Apr 23

Cyber Risk Factor:

3

Victim website:

gregoire.fr

Victim country:

France

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 50,000

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

15^th Apr 23

Cyber Risk Factor:

3

Victim website:

disltd.ca

Victim country:

Canada

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 50,000

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

15^th Apr 23

Cyber Risk Factor:

3

Victim website:

artri.net

Victim country:

Romania

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 30,000

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

N/A

Ransom deadline:

18^th Apr 23

Cyber Risk Factor:

3

Victim website:

naturespath.com

Victim country:

Canada

Attacker name:

Royal

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

40 GB

Exfiltrated data type:

Accounting and financial, employees’ docs such as work permissions, resumes with addresses, emails, phones ect. There are also lots of agreements, contracts, invoices and other documents.

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

arcc.org

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including financial documents

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

18^th Apr 23

Cyber Risk Factor:

3