Skip to content

Hack Tuesday

Hacks of today 22–23–24–25/03/2024

Today's HOT includes 32 ransomware victims by the notorious Qilin, LockBit 3.0, Medusa, Kill Security, RansomHub, BlackBasta, BianLian, Cactus, Ra World, Cloak, ThreeAM, RansomEXX and INC Ransom gangs.

The average Cyber Risk Factor is  4.2.

Read below the full list.

Disclaimer:

Data are collected from public info published on Dark Web.
The Cyber Risk factor is calculated on cyber attacks' impact based on available data.

It shows the severity of an event: 1 = low, 5 = critical

SANTIVIERI

Victim website:

santiveri.com

Victim country:

Spain

Attacker name:

Qilin

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

300 GB

Exfiltrated data type:

Confidential data

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Santiveri

PERUVIAN ARMY (EJÉRCITO DEL PERÚ)

Victim website:

ejercito.mil.pe

Victim country:

Peru

Attacker name:

INC Ransom

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

500 GB

Exfiltrated data type:

Classified information, including the personal details of the train with passports and fingerprints, orders, secret documents, etc.

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

5

Image:

Peruvian Army

NORTHERN CASKET 1976

Victim website:

northerncasket.com

Victim country:

Canada

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

0.3 GB

Exfiltrated data type:

Miscellaneous including customers’ data

Leaked data:

Fully published

Ransom deadline:

23rd Mar 24

Cyber Risk Factor:

4

Image:

Northern Casket 1976

INSTITUTE OF PATHOLOGY AT THE RUHR UNIVERSITY BOCHUM

Victim website:

pathologie-bochum.de

Victim country:

Germany

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

3.2 GB

Exfiltrated data type:

N/A

Leaked data:

Fully published

Ransom deadline:

23rd Mar 24

Cyber Risk Factor:

4

Image:

Institute of Pathology at the Ruhr University Bochum

TRANS MARITIME

Victim website:

tmbs.ch

Victim country:

Switzerland

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

23rd Mar 24

Cyber Risk Factor:

3

Image:

Trans Maritime

HENRY COUNTY ILLINOIS

Victim website:

henrycty.com

Victim country:

USA

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 500,000

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous documents including personal information, ID cards, etc.

Leaked data:

Sample

Ransom deadline:

29th Mar 24

Cyber Risk Factor:

5

Image:

Henry County Illinois

KERALA POLICE

Victim website:

keralapolice.gov.in

Victim country:

India

Attacker name:

Kill Security

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

€ 2,500 ($ 2,700)

Exfiltrated data amount:

N/A

Exfiltrated data type:

Locked house, appointment management, offense reporting management, etc.

Leaked data:

Sample

Ransom deadline:

25th Mar 24

Cyber Risk Factor:

4

Image:

Kerala Police

EXCEL LIFE COACHING SERVICES

Victim website:

excellifecoaching.com

Victim country:

USA

Attacker name:

Kill Security

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

0.2 GB

Exfiltrated data type:

Database, WP plugins data, theme, WooCommerce data etc.

Leaked data:

Fully published

Ransom deadline:

N/A

Cyber Risk Factor:

3

Image:

Excel Life Coaching Services

PASCHIM BANGA GRAMIN BANK

Victim website:

pbgbank.com

Victim country:

India

Attacker name:

Kill Security

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

€ 10,000 ($ 10,800)

Exfiltrated data amount:

N/A

Exfiltrated data type:

Branches, chairman desk, E-Learnings, e-reference, My colleagues, PBGB Business Dashboard, Policies, Scheme, Seniority List

Leaked data:

Sample

Ransom deadline:

11th Apr 24

Cyber Risk Factor:

4

Image:

Paschim Banga Gramin Bank

RABITBD

Victim website:

rabitbd.com

Victim country:

Bangladesh

Attacker name:

Kill Security

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

€ 2,000 ($2,160)

Exfiltrated data amount:

0.5 MB

Exfiltrated data type:

Locked House, Appointment Management, Offense Reporting Management etc.

Leaked data:

Fully published

Ransom deadline:

N/A

Cyber Risk Factor:

3

Image:

Rabitbd

ROMANIAN POLICE

Victim website:

politiaromana.ro

Victim country:

Romania

Attacker name:

Kill Security

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

€ 1,500 ($ 1,600) - Paid

Exfiltrated data amount:

200,000 records

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Romanian Police

INDUSTRIAL DE ALIMENTOS

Victim website:

industrialdealimentos.com

Victim country:

Spain

Attacker name:

RansomHub

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

17 GB

Exfiltrated data type:

Financial documents, HR, IT, databases from the SAP system, suppliers’ recipes, etc.

Leaked data:

/

Ransom deadline:

26th Mar 24

Cyber Risk Factor:

3

Image:

Industrial de Alimentos

PT SARANA MULTI INFRASTRUKTUR

Victim website:

ptsmi.co.id

Victim country:

Indonesia

Attacker name:

Qilin

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Financial data, invoices, PII documents, etc.

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

PT Sarana Multi Infrastruktur

FLYNN GROUP OF COMPANIES

Victim website:

flynncompanies.com

Victim country:

Canada

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

4 TB

Exfiltrated data type:

Personal users’ confidential folders and documents, company data, etc.

Leaked data:

Sample

Ransom deadline:

29th Mar 24

Cyber Risk Factor:

5

Image:

Flynn Group of Companies

CHAMBERS CONSTRUCTION

Victim website:

chambersconstruction.com

Victim country:

USA

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

4.2 TB

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

5

Image:

Chambers Construction

BIRA 91

Victim website:

bira91.com

Victim country:

India

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

1.9 TB

Exfiltrated data type:

Finance data, HR data, recipes and other trade secrets, data of Indian and international partners, customers, and vendors, mailboxes, internal and external email correspondence with attachments, SQL databases.

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Bira 91

POWER GENERATION ENGINEERING AND SERVICES COMPANY (PGESCO)

Victim website:

pgesco.com

Victim country:

Egypt

Attacker name:

RansomHub

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

8 TB

Exfiltrated data type:

financial documents, HR, customer info, PII, internal and confidential documents, and also CEO's documents.

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

5

Image:

Power Generation Engineering and Services Company (PGESCo)

KELSON MECHANICAL

Victim website:

kelson.on.ca

Victim country:

Canada

Attacker name:

Cactus

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

1.5 TB

Exfiltrated data type:

Accountingpayroll documents, Personal Identifying information, EngineeringQA data, projects and confidential design documents, contracts, tenders, various customer data, employees and executive managers personal folders, database exports, etc.

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

5

Image:

Kelson Mechanical

NEWAGESYS

Victim website:

newagesys.com

Victim country:

USA

Attacker name:

Cactus

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

319 GB

Exfiltrated data type:

Accountingpayrolltax documents, HR data, Personal Identifying information, background reports, corporate correspondencemailbox backups, employees personal folders, etc.

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

NewAgeSys

IMPAC MORTGAGE HOLDINGS

Victim website:

impaccompanies.com

Victim country:

USA

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 500,000

Exfiltrated data amount:

592.2 GB

Exfiltrated data type:

Financial data, employees’ data, email correspondence, etc.

Leaked data:

Sample

Ransom deadline:

01st Apr 24

Cyber Risk Factor:

5

Image:

Impac Mortgage Holdings

REGINA DENTAL GROUP

Victim website:

reginadentalgroup.com

Victim country:

Canada

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 100,000

Exfiltrated data amount:

N/A

Exfiltrated data type:

Invoices, patients’ data, financial documents, etc.

Leaked data:

Sample

Ransom deadline:

31st Mar 24

Cyber Risk Factor:

4

Image:

Regina Dental Group

PASCOE INTERNATIONAL

Victim website:

pascoeinternational.com

Victim country:

United Kingdom

Attacker name:

Ra World

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

270 GB

Exfiltrated data type:

Financial documents, Business contract, Design drawings, Customer information, etc.

Leaked data:

Sample

Ransom deadline:

26th Mar 24

Cyber Risk Factor:

4

Image:

Pascoe International

TITLE MANAGEMENT

Victim website:

titlemanagement.org

Victim country:

United Kingdom

Attacker name:

Ra World

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

107 GB

Exfiltrated data type:

Financial documents, Title insurance contract, Contract documents, etc.

Leaked data:

/

Ransom deadline:

26th Mar 24

Cyber Risk Factor:

4

Image:

Title Management

SCHWARZ & GRANTZ HAMBURG

Victim website:

schwarz-grantz.de

Victim country:

Germany

Attacker name:

INC Ransom

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

300 GB

Exfiltrated data type:

Financial documents, Business Contract, HR documents

Legal Documents, etc.

Leaked data:

Sample

Ransom deadline:

26th Mar 24

Cyber Risk Factor:

4

Image:

Schwarz & Grantz Hamburg

EQUATORIAL ENERGIA

Victim website:

equatorialenergia.com.br

Victim country:

Brazil

Attacker name:

Cloak

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

214 GB

Exfiltrated data type:

N/A

Leaked data:

Fully published

Ransom deadline:

Expired

Cyber Risk Factor:

4

Image:

Equatorial Energia

GASCONTEC

Victim website:

gascontec.com

Victim country:

Germany

Attacker name:

Cloak

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

180 GB

Exfiltrated data type:

N/A

Leaked data:

Fully published

Ransom deadline:

Expired

Cyber Risk Factor:

4

Image:

GasConTec

VHS VATERSTETTEN

Victim website:

vhs-vaterstetten.de

Victim country:

Germany

Attacker name:

Cloak

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

150 GB

Exfiltrated data type:

N/A

Leaked data:

Fully published

Ransom deadline:

Expired

Cyber Risk Factor:

4

Image:

Vhs Vaterstetten

PANTANA ACCOUNTING & TAX

Victim website:

pantanacpa.com

Victim country:

Georgia

Attacker name:

INC Ransom

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Financial documents, customers’ data, confidential documents, etc.

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Pantana Accounting & Tax

LAW OFFICES OF JOHN V. ORRICK

Victim website:

orrickinjurylaw.com

Victim country:

USA

Attacker name:

INC Ransom

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Financial data, PII documents, customers’ data, etc.

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Law Offices of John V. Orrick

KOOTENAI HEALTH

Victim website:

kh.org

Victim country:

USA

Attacker name:

ThreeAM

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Kootenai Health

MINISTRY OF DEFENSE OF PERU

Victim website:

mindef.gob.pe

Victim country:

Peru

Attacker name:

RansomEXX

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

763.8 GB

Exfiltrated data type:

N/A

Leaked data:

Fully published

Ransom deadline:

N/A

Cyber Risk Factor:

5

Image:

MINISTRY OF DEFENSE OF PERU

AFFILIATED DERMATOLOGISTS AND DERMATOLOGIC SURGEONS

Victim website:

affiliateddermatologists.com

Victim country:

USA

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Affiliated Dermatologists and Dermatologic Surgeons


Stay safe!

Hackmanac Team!

Clearer decisions. Better budgeting. Fewer losses.

From "how many attacks?" to "how much damage?" — the clarity needed for sharper strategy.