Skip to content

Hack Tuesday

Hacks of today 03–04–05–06/05/2024

Today's HOT includes 40 victims by the notorious Eraleig, Play, Everest, Qilin, Stormous, Underground Team, Fsociety, INC Ransom, Medusa, BlackBasta, Dark Vault, Cl0p, INC Ransom, Black Suit and RansomHub gangs.

The average Cyber Risk Factor is  4.3.

Read below the full list.

Disclaimer:

Data are collected from public info published on Dark Web.
The Cyber Risk factor is calculated on cyber attacks' impact based on available data.
It shows the severity of an event: 1 = low, 5 = critical

UNIVERSIDAD NACIONAL AUTÓNOMA DE MÉXICO

Victim website:

unam.mx

Victim country:

Mexico

Attacker name:

RansomHub

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

20 GB

Exfiltrated data type:

N/A

Leaked data:

Sample

Ransom deadline:

13th May 24

Cyber Risk Factor:

4

Image:

Universidad Nacional Autónoma De México

CREDIO

Victim website:

credio.eu

Victim country:

Czech Republic

Attacker name:

Eraleig

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

11 MB

Exfiltrated data type:

Miscellaneous data

Leaked data:

Sample

Ransom deadline:

09th May 24

Cyber Risk Factor:

3

Image:

Credio

SERVICEPOWER

Victim website:

servicepower.com

Victim country:

USA

Attacker name:

Eraleig

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

0.328 GB

Exfiltrated data type:

Miscellaneous including users’ full credentials

Leaked data:

Sample

Ransom deadline:

09th May 24

Cyber Risk Factor:

4

Image:

ServicePower

CANATAL INDUSTRIES

Victim website:

canatal.net

Victim country:

Canada

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

50 GB

Exfiltrated data type:

Private and personal confidential data, client documents, budgets, payroll, accounting, contracts, taxes, IDs, financial information, etc.

Leaked data:

Fully leaked

Ransom deadline:

02nd May 24

Cyber Risk Factor:

4

Image:

Canatal Industries

AYOUB & ASSOCIATES CPA FIRM

Victim website:

ayoub-associates.com

Victim country:

USA

Attacker name:

Everest

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

465 GB

Exfiltrated data type:

Information of 2,000 clients

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Ayoub & associates CPA Firm

STAINLESS FOUNDRY & ENGINEERING

Victim website:

stainlessfoundry.com

Victim country:

USA

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential data, client documents, budgets, payroll, accounting, contracts, taxes, IDs, financial information, etc.

Leaked data:

/

Ransom deadline:

05th May 24

Cyber Risk Factor:

3

Image:

Stainless Foundry & Engineering

TOHLEN BUILDING TECHNOLOGY

Victim website:

tholen-gebaeudetechnik.de

Victim country:

Germany

Attacker name:

Qilin

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

3

Image:

Tohlen building technology

MITCHELL COUNTY CHAMBER OF COMMERCE

Victim website:

mitchellcountychamber.org

Victim country:

USA

Attacker name:

Qilin

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

41 GB

Exfiltrated data type:

N/A

Leaked data:

Fully published

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Mitchell County Chamber of Commerce

BAYANAT

Victim website:

Bayanat.ae

Victim country:

UAE

Attacker name:

Stormous

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

09th May 24

Cyber Risk Factor:

4

Image:

Bayanat

KIDX

Victim website:

kidx.ae

Victim country:

UAE

Attacker name:

Stormous

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

09th May 24

Cyber Risk Factor:

4

Image:

KIDX

FEDERAL AUTHORITY FOR NUCLEAR REGULATION (FANR)

Victim website:

fanr.gov.ae

Victim country:

UAE

Attacker name:

Stormous

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

09th May 24

Cyber Risk Factor:

4

Image:

FEDERAL AUTHORITY FOR NUCLEAR REGULATION

SHARIK

Victim website:

sharik.ae

Victim country:

UAE

Attacker name:

Stormous

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

09th May 24

Cyber Risk Factor:

4

Image:

SHARIK

TELECOMMUNICATIONS AND DIGITAL GOVERNMENT REGULATORY AUTHORITY (TDRA)

Victim website:

tdra.gov.ae

Victim country:

Stormous

Attacker name:

UAE

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

Sample

Ransom deadline:

09th May 24

Cyber Risk Factor:

4

Image:

TELECOMMUNICATIONS AND DIGITAL GOVERNMENT REGULATORY AUTHORITY

KYUNG CHANG INDUSTRIAL

Victim website:

kc.co.kr

Victim country:

South Korea

Attacker name:

Underground Team

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

1.8 TB

Exfiltrated data type:

Strictly private and confidential documents, financial documents, personal information of employees’ drawings marked proprietary, etc.

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

5

Image:

Kyung Chang Industrial

COINMAMA (to be verified)

Victim website:

coinmama.com

Victim country:

Canada

Attacker name:

Fsociety

Attacker class:

Cybercrime

Attack technique:

Data breach

Ransom demand:

N/A

Exfiltrated data amount:

2 TB

Exfiltrated data type:

Miscellaneous including 210k users’ information

Leaked data:

Sample

Ransom deadline:

12th May 24

Cyber Risk Factor:

4

Image:

Coinmama

BITFINEX (to be verified)

Victim website:

bitfinex.com

Victim country:

British Virgin Islands

Attacker name:

Fsociety

Attacker class:

Cybercrime

Attack technique:

Data breach

Ransom demand:

N/A

Exfiltrated data amount:

2.5 TB

Exfiltrated data type:

Miscellaneous including 400k users’ information

Leaked data:

Sample

Ransom deadline:

12th May 24

Cyber Risk Factor:

5

Image:

Bitfinex

RUTGERS UNIVERSITY (to be verified)

Victim website:

rutgers.edu

Victim country:

USA

Attacker name:

Fsociety

Attacker class:

Cybercrime

Attack technique:

Data breach

Ransom demand:

N/A

Exfiltrated data amount:

1 TB

Exfiltrated data type:

N/A

Leaked data:

Sample

Ransom deadline:

12th May 24

Cyber Risk Factor:

5

Image:

Rutgers University

SBC GLOBAL (to be verified)

Victim website:

Not Available

Victim country:

N/A

Attacker name:

Fsociety

Attacker class:

Cybercrime

Attack technique:

Data breach

Ransom demand:

N/A

Exfiltrated data amount:

1 TB

Exfiltrated data type:

Confidential data, users’ information.

Leaked data:

Sample

Ransom deadline:

12th May 24

Cyber Risk Factor:

5

Image:

SBC Global

DR CHARLES A EVANS

Victim website:

charlesevansmd.com

Victim country:

USA

Attacker name:

Qilin

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

2.7 GB

Exfiltrated data type:

Financial data, confidential documents, passports, etc.

Leaked data:

Fully published

Ransom deadline:

05th May 24

Cyber Risk Factor:

4

Image:

Dr Charles A Evans

MAINLINE HEALTH SYSTEMS

Victim website:

mainlinehealth.net

Victim country:

USA

Attacker name:

INC Ransom

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Personal documents, agreements, forms, and other miscellaneous data

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Mainline Health Systems

MACILDOWIE

Victim website:

macildowie.com

Victim country:

United Kingdom

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 100,000

Exfiltrated data amount:

21.5 GB

Exfiltrated data type:

Miscellaneous documents

Leaked data:

Sample

Ransom deadline:

12th May 24

Cyber Risk Factor:

4

Image:

Macildowie

NATIONAL ENVIRONMENTAL PROTECTION AGENCY

Victim website:

nepa.gov.af

Victim country:

Afghanistan

Attacker name:

RansomHub

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

48 GB

Exfiltrated data type:

Confidential data

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

5

Image:

National Environmental Protection Agency

GAI - BOTTLING

Victim website:

gai-it.com

Victim country:

Italy

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

750 GB

Exfiltrated data type:

Company data, Employees personal documents, Projects, etc.

Leaked data:

Sample

Ransom deadline:

11th May 24

Cyber Risk Factor:

5

Image:

GAI - Bottling

ACTIVE-PCB SOLUTIONS

Victim website:

active-pcb.com

Victim country:

United Kingdom

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

750 GB

Exfiltrated data type:

Company data, Employees personal documents, Dev data, Sales data, etc.

Leaked data:

Sample

Ransom deadline:

13th May 24

Cyber Risk Factor:

5

Image:

Active-PCB Solutions

SYNLAB

Victim website:

synlab.com

Victim country:

Italy

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

1.5 TB

Exfiltrated data type:

Company data, Employees personal documents, Customer personal data, medical analyzes, etc.

Leaked data:

Sample

Ransom deadline:

11th May 24

Cyber Risk Factor:

5

Image:

SYNLAB

AYESA

Victim website:

ayesa.com

Victim country:

Spain

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

4.5 TB

Exfiltrated data type:

Company data, Employees personal documents, Projects, etc.

Leaked data:

Sample

Ransom deadline:

26th May 24

Cyber Risk Factor:

5

Image:

Ayesa

TERRITORIO ENERGIA AMBIENTE S.P.A

Victim website:

teaspa.it

Victim country:

Italy

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

1 TB

Exfiltrated data type:

Users, Employees folder with personal documents, Company data, projects etc.

Leaked data:

Sample

Ransom deadline:

14th May 24

Cyber Risk Factor:

5

Image:

Territorio Energia Ambiente S.P.A

OLSON STEEL

Victim website:

olsonsteel.com

Victim country:

USA

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

900 GB

Exfiltrated data type:

Company HR data, accounting data, Employee details, user data, personal documents, Projects and CAD, Confidential documents, drawings etc.

Leaked data:

Sample

Ransom deadline:

11th May 24

Cyber Risk Factor:

5

Image:

Olson steel

SWISSPRO AG

Victim website:

swisspro.ch

Victim country:

Switzerland

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

700 GB

Exfiltrated data type:

Corporate data, Employees personal data, Customer data etc.

Leaked data:

Sample

Ransom deadline:

11th May 24

Cyber Risk Factor:

5

Image:

Swisspro AG

PROVENCHER ROY

Victim website:

provencherroy.ca

Victim country:

Canada

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

3 TB

Exfiltrated data type:

Projects details (2023, 2024), CAD, 3D Drawings, Ottawa data, corporate data, Personal employees’ documents etc.

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

5

Image:

Provencher Roy

INTEGRATED DESIGN SOLUTIONS

Victim website:

ids-michigan.com

Victim country:

USA

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

500 GB

Exfiltrated data type:

Projects, CAD and drawings, Users, Corporate data, etc.

Leaked data:

Sample

Ransom deadline:

06th May 24

Cyber Risk Factor:

5

Image:

Integrated Design Solutions

CMAC TRANSPORTATION

Victim website:

cmactrans.com

Victim country:

USA

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

200 GB

Exfiltrated data type:

HR, Personal data, Finance, Personal Files, etc.

Leaked data:

Sample

Ransom deadline:

12th May 24

Cyber Risk Factor:

4

Image:

CMAC Transportation

IKF HOME FINANCE

Victim website:

ikfhomefinance.com

Victim country:

India

Attacker name:

Dark Vault

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

11th May 24

Cyber Risk Factor:

4

Image:

IKF Home Finance

COMPEX LEGAL SERVICES

Victim website:

compexlegal.com

Victim country:

USA

Attacker name:

Cl0p

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Compex Legal Services

ACCOUNTING PROFESSIONALS and PRICE, BREAZEALE & CHASTANG

Victim website:

accountingprofessionals.org
pbc-pa.com

Victim country:

USA

Attacker name:

Everest

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

574 GB

Exfiltrated data type:

Documents information of 2,000 clients

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

ACCOUNTING PROFESSIONALS and PRICE, BREAZEALE & CHASTANG

SENECA NATION HEALTH SYSTEM

Victim website:

senecahealth.org

Victim country:

USA

Attacker name:

INC Ransom

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Projects, invoices, agreements, forms, employees’ data, etc.

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Seneca Nation Health System

NESTOIL

Victim website:

nestoilgroup.com

Victim country:

Nigeria

Attacker name:

Black Suit

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

3

Image:

Nestoil

PATTERSON & ROTHWELL

Victim website:

patterson-rothwell.co.uk

Victim country:

United Kingdom

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 150,000

Exfiltrated data amount:

22.7 GB

Exfiltrated data type:

Miscellaneous including financial data.

Leaked data:

Sample

Ransom deadline:

14th May 24

Cyber Risk Factor:

4

Image:

Patterson & Rothwell

BOYDEN

Victim website:

boyden.com

Victim country:

USA

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 2,000,000

Exfiltrated data amount:

79.3 GB

Exfiltrated data type:

Agreements, email correspondence, personal data, and other miscellaneous sensitive documents.

Leaked data:

Sample

Ransom deadline:

14th May 24

Cyber Risk Factor:

5

Image:

Boyden

W.F. WHELAN COMPANY

Victim website:

wfwhelanco.com

Victim country:

USA

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 200,000

Exfiltrated data amount:

175.67 GB

Exfiltrated data type:

Financial data, forms, reports, email correspondence, and other miscellaneous sensitive documents.

Leaked data:

Sample

Ransom deadline:

14th May 24

Cyber Risk Factor:

4

Image:

W.F. Whelan Company

Stay safe!

Hackmanac Team!

← Hacks of today 02/05/2024 Hacks of today 07/05/2024 →

More from Hack Tuesday

Clearer decisions. Better budgeting. Fewer losses.

From "how many attacks?" to "how much damage?"
The clarity needed for sharper strategy.

Book a demo Open HackRisk Open HackLoss