Hacks of today 27–28–29/01/2024

Victim website:

bbp.com.br

Victim country:

Brazil

Attacker name:

Akira

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

20 GB

Exfiltrated data type:

Accounting, operational files, projects, agreements, confidential documents, etc.

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Victim website:

vtc.net

Victim country:

USA

Attacker name:

Akira

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

310 GB

Exfiltrated data type:

NDAs, confidential agreements, customers information, operational files, etc.

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Victim website:

kcata.org

Victim country:

USA

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 2,000,000

Exfiltrated data amount:

N/A

Exfiltrated data type:

PII documents, employees and users’ data, email correspondence, confidentiality and non-disclosure of trade secrets agreements, financial data, etc.

Leaked data:

Sample

Ransom deadline:

06^th Feb 24

Cyber Risk Factor:

5

Image:

Victim website:

sipicorp.com

Victim country:

USA

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

145 GB

Exfiltrated data type:

Users’ personal folders, accounting details, corporate documents etc.

Leaked data:

Fully published

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Victim website:

ehsd.org

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

X

Exfiltrated data type:

Employees (lists with SSN numbers, residential address, telephone, email, passport scans, DOB, contracts, information on salaries, bonuses, and other confidential documents) Finance (budget, audit, tax returns, YTD reports, many other financial documents) Working documentation (contracts, agreements, analytics, many internal documents, Board Meeting results)

Leaked data:

/

Ransom deadline:

28^th Jan 24

Cyber Risk Factor:

4

Image:

Victim website:

shomagroup.com

Victim country:

USA

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

2 TB

Exfiltrated data type:

Accidents, accounting, budget, financial data, contract data and NDAs, email and message archives, files from CFO's PC, personal data, investor data, operational and business files, technical data.

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

5

Image:

Victim website:

imcraft.com

Victim country:

USA

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

1.9 TB

Exfiltrated data type:

Accounting, budget, financial data, drawings, contract data and NDA’s, personal data, user personal folders, etc.

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

5

Image:

Victim website:

cisloandthomas.com

Victim country:

USA

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

3 TB

Exfiltrated data type:

Legal paper works, client data, financial data, file server data, folders of network users, including company management, personnel data, email archives, etc.

Leaked data:

/

Ransom deadline:

08^th Feb 24

Cyber Risk Factor:

5

Image:

Victim website:

elandenergy.com

Victim country:

USA

Attacker name:

Mydata/Alphalocker

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

100 GB

Exfiltrated data type:

Accounting documents

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Victim website:

vidalung.ai

Victim country:

USA

Attacker name:

Abyss

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

1.7 TB

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

03^rd Feb 24

Cyber Risk Factor:

5

Image:

Victim website:

oogp.com

Victim country:

USA

Attacker name:

Cactus

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

63 GB

Exfiltrated data type:

Agreements, financial data, PII documents, etc.

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Victim website:

mordfin.com

Victim country:

USA

Attacker name:

Qilin

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Financial data, forms, PII documents, clients’ data, confidential agreements, employees’ data, etc.

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Victim website:

na.edu

Victim country:

USA

Attacker name:

INC Ransom

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

108 GB

Exfiltrated data type:

Student records, HR, financial data, admission documents, etc.

Leaked data:

Fully published

Ransom deadline:

29^th Jan 24

Cyber Risk Factor:

4

Image:

Victim website:

cdep.ro

Victim country:

Romania

Attacker name:

Knight

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

250 GB

Exfiltrated data type:

Documents and contracts and information from Chamber of Deputies of Romania

Leaked data:

Sample

Ransom deadline:

31^st Jan 24

Cyber Risk Factor:

5

Image:

Victim website:

blackbuttecoal.com

Victim country:

USA

Attacker name:

INC Ransom

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

213 GB

Exfiltrated data type:

Financial documents, HR, employees’ data, legal, corporate, engineering, etc.

Leaked data:

Fully published

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Victim website:

waterfordcountryschool.org

Victim country:

USA

Attacker name:

INC Ransom

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

0.9 GB

Exfiltrated data type:

Confidential, psychiatric and abuse documents, children’s data.

Leaked data:

Fully published

Ransom deadline:

N/A

Cyber Risk Factor:

5

Image:

Victim website:

benjaminplumbing.com

Victim country:

USA

Attacker name:

INC Ransom

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

188 GB

Exfiltrated data type:

HR, insurance, forms, financial data, agreements, etc.

Leaked data:

Fully published

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Victim website:

corbettexterminating.com

Victim country:

USA

Attacker name:

INC Ransom

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

20 GB

Exfiltrated data type:

Accounting, tax, financial, invoices, sales, payrolls, etc.

Leaked data:

Fully published

Ransom deadline:

N/A

Cyber Risk Factor:

3

Image:

Victim website:

abecom.com.br

Victim country:

Brazil

Attacker name:

Knight

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

170 GB

Exfiltrated data type:

Company files, contracts, finances, projects, customer and employee data, reports, sales and purchase documents, returns, freight, invoices, photos of employees' cars, photos of employees, vehicle checks, repair and warranty submissions, thermography, signatures, photos, and videos.

Leaked data:

Fully published

Ransom deadline:

10^th Feb 24

Cyber Risk Factor:

5

Image:

Victim website:

getawaytoday.com

Victim country:

USA

Attacker name:

Akira

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Databases with personal information of their clients

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image: