Skip to content

Hack Tuesday

Hacks of today 07–08/03/2024

Today's HOT includes 22 ransomware victims by the notorious LockBit 3.0, Stormous, Qilin, INC Ransom, Medusa, Play, WereWolves, BianLian, DoNex and RansomHub gangs.

The average Cyber Risk Factor is  4.3.

Read below the full list.

Disclaimer:

Data are collected from public info published on Dark Web.
The Cyber Risk factor is calculated on cyber attacks' impact based on available data.
It shows the severity of an event: 1 = low, 5 = critical

BRIGHT WIRES

Victim website:

brightwires.com.sa

Victim country:

Saudi Arabia

Attacker name:

Qilin

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous documents including personal documents, invoices, financial data, purchase orders, certificates, etc.

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Bright Wires

LIQUID ENVIRONMENTAL SOLUTIONS

Victim website:

liquidenviro.com

Victim country:

USA

Attacker name:

INC Ransom

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Liquid Environmental Solutions

VIADIRECT MARKETING

Victim website:

viadirectamarketing.com

Victim country:

Spain

Attacker name:

Stormous

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

11th Mar 24

Cyber Risk Factor:

4

Image:

ViaDirect Marketing

US FEDERAL CREDIT UNION #1364

Victim website:

usfederalcu.org

Victim country:

USA

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 200,000

Exfiltrated data amount:

N/A

Exfiltrated data type:

Personal documents, financial data, certificates, members information, etc.

Leaked data:

Sample

Ransom deadline:

14th Mar 24

Cyber Risk Factor:

4

Image:

US Federal Credit Union #1364

AMERICAN RENAL ASSOCIATES

Victim website:

americanrenal.com

Victim country:

USA

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 1,000,00

Exfiltrated data amount:

N/A

Exfiltrated data type:

Personal documents, patients and employees’ data, financial documents, etc.

Leaked data:

Sample

Ransom deadline:

15th Mar 24

Cyber Risk Factor:

5

Image:

American Renal Associates

JVC KENWOOD

Victim website:

th.jvckenwood.com

Victim country:

Thailand

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 500,000

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous technical documents, employees’ data, etc.

Leaked data:

Sample

Ransom deadline:

15th Mar 24

Cyber Risk Factor:

5

Image:

JVCKENWOOD

TOCCI

Victim website:

tocci.com

Victim country:

USA

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 100,000

Exfiltrated data amount:

N/A

Exfiltrated data type:

Forms, technical designs, passports, customers and employees’ data, financial documents, email correspondence, etc.

Leaked data:

Sample

Ransom deadline:

14th Mar 24

Cyber Risk Factor:

4

Image:

Tocci

MAINVEST

Victim website:

mainvest.com

Victim country:

USA

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential data, clients documents, budget, payroll, taxes, IDs, finance information and etc.

Leaked data:

/

Ransom deadline:

10th Mar 24

Cyber Risk Factor:

4

Image:

Mainvest

LOGHMAN PHARMACEUTICALS

Victim website:

loghmanpharma.com

Victim country:

Iran

Attacker name:

Stormous

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

06th Mar 24

Cyber Risk Factor:

5

Image:

Loghman Pharmaceuticals

DUVEL

Victim website:

duvel.com

Victim country:

Belgium

Attacker name:

Stormous

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

88 GB

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

25th Mar 24

Cyber Risk Factor:

5

Image:

Duvel

VSEXSHOP

Victim website:

vsexshop.ru

Victim country:

Russia

Attacker name:

WereWolves

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 70,000

Exfiltrated data amount:

N/A

Exfiltrated data type:

Clients’ personal data

Leaked data:

/

Ransom deadline:

1st Apr 24

Cyber Risk Factor:

4

Image:

VsexShop

MERCHANT ID

Victim website:

merchant.id

Victim country:

Indonesia

Attacker name:

RansomHub

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

50 GB

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

14th Mar 24

Cyber Risk Factor:

4

Image:

Merchant ID

SP MUNDI

Victim website:

spmundi.com.br

Victim country:

Brazil

Attacker name:

RansomHub

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

8 GB

Exfiltrated data type:

Customer information, documents, and operations, databases containing names, documents, addresses, CPF, phone numbers, amount paid and much more.

Leaked data:

Sample

Ransom deadline:

13th Mar 24

Cyber Risk Factor:

4

Image:

SP Mundi

EN ACT - ARCHITECTURE

Victim website:

enact-architecture.fr

Victim country:

France

Attacker name:

Qilin

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Financial data, invoices, legal documents, technical designs, etc.

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

En Act - Architecture

PALMER CONSTRUCTION

Victim website:

palmerconstruction.net

Victim country:

USA

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

475 GB

Exfiltrated data type:

Personal data, accounting, budget, financial data, contract data, NDAs, and employee profiles.

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Palmer Construction

NEW YORK HOME HEALTHCARE

Victim website:

nyhhc.com

Victim country:

USA

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

330 GB

Exfiltrated data type:

Personal data, accounting, budget, financial data, contract data, NDAs, and employee profiles.

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

5

Image:

New York Home Healthcare

RMH FRANCHISE

Victim website:

rmhfranchise.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

1.5 TB

Exfiltrated data type:

Confidential documents, insurance data, invoices, contracts, legal, financial, accounting, criminal incidents, customers’ data, and so on.

Leaked data:

Sample

Ransom deadline:

26th Mar 24

Cyber Risk Factor:

5

Image:

RMH Franchise

MISSION RÉGIONALE POUR L'EMPLOI DE LIÈGE (MIREL)

Victim website:

mirelasbl.be

Victim country:

Belgium

Attacker name:

DoNex

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

19 GB

Exfiltrated data type:

Forms, work certificates, application letters, etc.

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Mirel

VAN DER HELM

Victim website:

vanderhelmlogistics.com

Victim country:

Netherlands

Attacker name:

DoNex

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

39 GB

Exfiltrated data type:

Miscellaneous documents including invoices, agreements, personal documents, financial data, etc.

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Van der Helm

P-FLEET

Victim website:

pfleet.com

Victim country:

USA

Attacker name:

DoNex

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

22 GB

Exfiltrated data type:

Transaction details, financial data, full credential with plain text passwords, reports, customers’ data, and so on.

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

P-Fleet

CHOCOTOPIA

Victim website:

chocotopia.cz

Victim country:

Czech Republic

Attacker name:

DoNex

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

33 GB

Exfiltrated data type:

Miscellaneous data including personal documents, pictures, invoices, and so on.

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Chocotopia

ELSAP SPA

Victim website:

elsap.it

Victim country:

Italy

Attacker name:

DoNex

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

49 GB

Exfiltrated data type:

Technical designs, invoices, ID cards, employees’ data, and so on.

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Elsap Spa

Stay safe!

Hackmanac Team!

← Hacks of today 06/03/2024 Hacks of today 09–10–11/03/2024 →

More from Hack Tuesday

Clearer decisions. Better budgeting. Fewer losses.

From "how many attacks?" to "how much damage?" — the clarity needed for sharper strategy.

Book a demo Open HackRisk Open HackLoss