Categories
2023 HOT News-EN

HACKS OF TODAY 05-06-07/08/2023

news

HACKS OF TODAY 05-06-07/08/2023

Today’s HOT includes 22 victims:

21 ransomware by the notorious Akira, LockBit 3.0, ALPHV/BlackCat, 8Base, Arvin Club gangs and 1 data breach.

The average Cyber Risk Factor is 3.9.

Read below the full list.

Disclaimer:

Data are collected from public info published on Dark Web.
The Cyber Risk factor is calculated on cyber attacks’ impact based on available data.

It shows the severity of an event: 1 = low, 5 = critical

SBS CONSTRUCTION

Victim website:

sbsworld.net

Victim country:

USA

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

729 GB

Exfiltrated data type:

Sensitive data included photos and technical designs

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

RAYDEN SOLICITORS

Victim website:

raydensolicitors.co.uk

Victim country:

United Kingdom

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

801 GB

Exfiltrated data type:

Internal Company Data (Employees personal data, CV’s, DL’s, ID’s, SSN’s, Financial reports, accounting data, Loans data, Insurance, Agreements and much more), Clients’ documentation (DL’s, ID’s, SSN’s, Financial data, Credit cards information, Loans data, Agreements and much more), Complete network map including credentials for local and remote services

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

HENLAW

Victim website:

henlaw.com

Victim country:

USA

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

2,35 TB

Exfiltrated data type:

Internal Company Data (Employees personal data, CV’s, DL’s, ID’s, SSN’s, Financial reports, accounting data, Loans data, Insurance, Agreements and much more), confidential data, Clients’ documentation (DL’s, ID’s, SSN’s, Financial data, Credit cards information, Loans data, Agreements and much more), database include other commercial confidential data

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

VARIAN MEDICAL SYSTEMS

Victim website:

varian.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Databases and patient data

Leaked data:

/

Ransom deadline:

17th Aug 23

Cyber Risk Factor:

5

GALICIA EN GOLES

Victim website:

g24.gal

Victim country:

Spain

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

415 GB

Exfiltrated data type:

Miscellaneous including photos, financial and PII documents

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

PREMIER BPO

Victim website:

premierbpo.com

Victim country:

USA

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

57,7 GB

Exfiltrated data type:

Customer databases, containing an appalling amount of PHI

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

IBL HEALTHCARE

Victim website:

iblhc.com

Victim country:

Pakistan

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

161 GB

Exfiltrated data type:

Payments, contracts, agreements, salaries, registration documents, financial data, quality control, medicine recipes, medicine tests, medicine preparation guides, IBL OPS data, United Brands data, IBL Logistics data, Searle pharma data

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

KOURY ENGINEERING

Victim website:

kouryengineering.com

Victim country:

USA

Attacker name:

Akira

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

80 GB

Exfiltrated data type:

Confidential contracts, agreements and NDAs, complete employees’ data, projects information and much other documents

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

MISSION PETROLEUM CARRIERS

Victim website:

mipe.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

50 GB

Exfiltrated data type:

Miscellaneous including invoices, financial data, agreements, clients’ information

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

10th Aug 23

Cyber Risk Factor:

4

ARMORTEX

Victim website:

armortex.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

20 GB

Exfiltrated data type:

Miscellaneous including financial, agreements, HR, scans documents

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

10th Aug 23

Cyber Risk Factor:

4

IQ CORPORATION

Victim website:

iqcontrols.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

14 GB

Exfiltrated data type:

Miscellaneous including technical designs, financial data and PII documents

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

10th Aug 23

Cyber Risk Factor:

4

SCOTTEVEST

Victim website:

scottevest.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

17 GB

Exfiltrated data type:

Miscellaneous including employees’ information, financial data, non-disclosure agreements

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

10th Aug 23

Cyber Risk Factor:

4

ATSER SYSTEMS

Victim website:

atser.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

69 GB

Exfiltrated data type:

Miscellaneous documents

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

10th Aug 23

Cyber Risk Factor:

4

DELANEY BROWNE RECRUITMENT

Victim website:

delaneybrowne.co.uk

Victim country:

United Kingdom

Attacker name:

8Base

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Invoice, Receipts, Accounting documents, Personal data, Certificates, Employment contracts, A huge amount of confidential information, Confidentiality agreements, Personal files of employees/clients

Leaked data:

/

Ransom deadline:

13th Aug 23

Cyber Risk Factor:

4

OREGON SPORTS MEDICINE

Victim website:

sportsmedicineoregon.com

Victim country:

USA

Attacker name:

8Base

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Invoice, Receipts, Accounting documents, Personal data, Certificates, Employment contracts, A huge amount of confidential information, Confidentiality agreements, Personal files of patients

Leaked data:

/

Ransom deadline:

13th Aug 23

Cyber Risk Factor:

4

SATCOM MARKETING

Victim website:

satcommarketing.com

Victim country:

USA

Attacker name:

8Base

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Invoice, Receipts, Accounting documents, Personal data, Certificates, Employment contracts, A huge amount of confidential information, Confidentiality agreements, Personal files of employees/client

Leaked data:

/

Ransom deadline:

13th Aug 23

Cyber Risk Factor:

4

TETCO

Victim website:

tetco.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including invoices

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

08th Aug 23

Cyber Risk Factor:

3

HAYNES INTERNATIONAL

Victim website:

haynesintl.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

09th Aug 23

Cyber Risk Factor:

3

DRAJE

Victim website:

draje.ir

Victim country:

Iran

Attacker name:

Arvin Club

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

1,36 MB

Exfiltrated data type:

N/A

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

3

SEASIDE-KISH

Victim website:

Not available

Victim country:

Iran

Attacker name:

Arvin Club

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

9,84 MB

Exfiltrated data type:

N/A

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

3

MAGICDUEL

Victim website:

magicduel.com

Victim country:

USA

Attacker name:

/

Attacker class:

Cybercrime

Attack technique:

Data breach

Ransom demand:

N/A

Exfiltrated data amount:

138,443 accounts

Exfiltrated data type:

Player names, email and IP addresses and bcrypt password hashes

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

3

PARSIAN BITUMEN

Victim website:

parsianbitumen.com

Victim country:

Iran

Attacker name:

Arvin Club

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

26,8 MB

Exfiltrated data type:

N/A

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

3

Stay safe!

Hackmanac Team

Latest news

HACKS OF TODAY 08/12/2023

Today's HOT includes 30 ransomware victims by the notorious BianLian, LockBit 3.0, INC Ransom, Rhysida and Play gangs. The average Cyber Risk Factor is 3.5. Read below the full...

Read More

HACKS OF TODAY 07/12/2023

Today's HOT includes 18 ransomware victims by the notorious ALPHV/BlackCat, LockBit 3.0, Medusa, 8Base, Akira, INC Ransom, Monti, Cactus, Metaencryptor and Qilin gangs. The average Cyber Risk Factor is 4.1....

Read More

HACKS OF TODAY 06/12/2023

Today's HOT includes 18 ransomware victims by the notorious  ALPHV/BlackCat, ThreeAM,  LockBit 3.0, Medusa, 8Base, Akira and BianLian gangs. The average Cyber Risk Factor is 3.8. Read below the...

Read More
Categories
2023 HOT News-EN

HACKS OF TODAY 22-23-24/07/2023

news

HACKS OF TODAY 21-22-23/07/2023

Today’s HOT includes 19 victims:

18 ransomware and 1 data breach by the notorious ALPHV/BlackCat, Medusa, D#nut leaks, Rhysida, Monti, 8Base, Cyclops, BianLian, BlackBasta, Play, Mallox, LockBit 3.0 and Arvin Club gangs. 

The average Cyber Risk Factor is 3.7.

Read below the full list.

Disclaimer:

Data are collected from public info published on Dark Web.
The Cyber Risk factor is calculated on cyber attacks’ impact based on available data.

It shows the severity of an event: 1 = low, 5 = critical

THE COLLINS LAW FIRM

Victim website:

collinslaw.com

Victim country:

USA

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

750 GB

Exfiltrated data type:

Internal Company Data (Employees personal data, CV’s, DL’s, ID’s, SSN’s, Financial reports, Accounting data, Loans data, Insurance, Agreements and much more); of course it include absolutely and highly confidential data. – Clients documentation (DL’s, ID’s, SSN’s, Financial data, Credit cards information, Loans data, Agreements and much more)

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

CAFE BRITT

Victim website:

cafebritt.com

Victim country:

USA

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 800,000

Exfiltrated data amount:

Large amount of data

Exfiltrated data type:

Miscellaneous including financial and employees’ information

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

31st Jul 23

Cyber Risk Factor:

5

CHAMPION GSE

Victim website:

championgse.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 500,000

Exfiltrated data amount:

14 GB

Exfiltrated data type:

Blueprints, documentation, and classified military information

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

04th Aug 23

Cyber Risk Factor:

5

JACKSON TOWNSHIP POLICE DEPARTMENT AND ADMINISTRATION

Victim website:

jacksontwp.com

Victim country:

USA

Attacker name:

D#nut leaks

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

At least 500 GB

Exfiltrated data type:

Miscellaneous including data from phones of suspects and police officers and much more

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

AXITY

Victim website:

axity.com

Victim country:

Mexico

Attacker name:

Rhysida

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

9 BTC

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

29th Jul 23

Cyber Risk Factor:

4

SIDEN & ASSOCIATES

Victim website:

sidenlaw.com

Victim country:

USA

Attacker name:

Monti

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including huge information about their clients

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

30th Jul 23

Cyber Risk Factor:

4

HUNGARIAN INVESTMENT PROMOTION AGENCY

Victim website:

hipa.hu

Victim country:

Hungary

Attacker name:

Monti

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

60 GB

Exfiltrated data type:

Miscellaneous including passports of internal Samsung workers

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

30th Jul 23

Cyber Risk Factor:

4

CHAN AND ASSOCIATES

Victim website:

chanandassociates.ca

Victim country:

Canada

Attacker name:

8Base

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Receipts, Correspondence, Bank documents, Personal documents, Internal documents, Accounting documents, Invoice, Certificates, Driver’s license, Credit\Debit cards, and much more

Leaked data:

/

Ransom deadline:

29th Jul 23

Cyber Risk Factor:

4

SUN PAIN MANAGEMENT AND SPINE SPECIALISTS

Victim website:

sunpainmanagement.com

Victim country:

USA

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 100,000

Exfiltrated data amount:

Large amount of data

Exfiltrated data type:

Miscellaneous including employees’ information, insurance and financial documents, etc

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

31st Jul 23

Cyber Risk Factor:

4

PECHEXPORT

Victim website:

pechexport.mg

Victim country:

Madagascar

Attacker name:

Cyclops

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

Large amount of data

Exfiltrated data type:

Miscellaneous including PII documents

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

CVLAN

Victim website:

cvlan.it

Victim country:

Italy

Attacker name:

Cyclops

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

1,25 GB

Exfiltrated data type:

Miscellaneous including PII documents

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

EXBON DEVELOPMENT

Victim website:

exbon.com

Victim country:

USA

Attacker name:

8Base

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Receipts, Designs, Internal documents, Personal documents, Accounting documents, SSN, Driver’s license, Various certificates, Forms with personal information, A huge number of personal files, Passports, A huge number of correspondences, Much more

Leaked data:

/

Ransom deadline:

30th Jul 23

Cyber Risk Factor:

4

COLLINS AEROSPACE

Victim website:

collinsaerospace.com

Victim country:

USA

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

At least 20 GB

Exfiltrated data type:

Personal data of employees of this company’s partners (aviation companies) stored in its network (pilots, airplane personnel, etc.) from Saudi Arabia, USA, Europe, South Africa, etc. (more than 20 GB), Operational information and aircraft certificates, Operational business files

Leaked data:

/

Ransom deadline:

28th Jul 23

Cyber Risk Factor:

4

BARTLETT DAIRY

Victim website:

bartlettny.com

Victim country:

USA

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

60% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

3

SAMSON ELECTRIC

Victim website:

sei-ak.com

Victim country:

USA

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential data, clients and employee documents, IDs, contracts, finance and etc

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

26th Jul 23

Cyber Risk Factor:

3

EJM ENGINEERED SYSTEMS

Victim website:

ejmrefrigeration.co.uk

Victim country:

United Kingdom

Attacker name:

8Base

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Personal information of the company’s clients, Personal correspondence, Financial statements, Documents containing confidential information

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

3

FRANKLINS EUROPEAN BATHROOMS

Victim website:

franklins.co.nz

Victim country:

New Zealand

Attacker name:

Mallox

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

08th Aug 23

Cyber Risk Factor:

2

EBP SUPPLY SOLUTIONS

Victim website:

ebpsupply.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

2

DOOSHEH DAIRY

Victim website:

doosheh.com

Victim country:

Iran

Attacker name:

Arvin Club

Attacker class:

Cybercrime

Attack technique:

Data breach

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

2

Stay safe!

Hackmanac Team

Latest news

HACKS OF TODAY 08/12/2023

Today's HOT includes 30 ransomware victims by the notorious BianLian, LockBit 3.0, INC Ransom, Rhysida and Play gangs. The average Cyber Risk Factor is 3.5. Read below the full...

Read More

HACKS OF TODAY 07/12/2023

Today's HOT includes 18 ransomware victims by the notorious ALPHV/BlackCat, LockBit 3.0, Medusa, 8Base, Akira, INC Ransom, Monti, Cactus, Metaencryptor and Qilin gangs. The average Cyber Risk Factor is 4.1....

Read More

HACKS OF TODAY 06/12/2023

Today's HOT includes 18 ransomware victims by the notorious  ALPHV/BlackCat, ThreeAM,  LockBit 3.0, Medusa, 8Base, Akira and BianLian gangs. The average Cyber Risk Factor is 3.8. Read below the...

Read More
Categories
2023 HOT News-EN

HACKS OF TODAY 11/07/2023

news

HACKS OF TODAY 11/07/2023

Today’s HOT includes 36 victims:
15 ransomware
and 1 data leak by the notorious
Cuba, LockBit 3.0, Qilin, Rhysida, Akira, Ragnar Locker, RansomHouse, 8Base and Arvin Club gangs and 20 zero-day exploit by Cl0p.

The average Cyber Risk Factor is 4.1.

Read below the full list.

Disclaimer:

Data are collected from public info published on Dark Web.
The Cyber Risk factor is calculated on cyber attacks’ impact based on available data.

It shows the severity of an event: 1 = low, 5 = critical

JP RMP

Victim website:

jprmp.com

Victim country:

USA

Attacker name:

Cl0p

Attacker class:

Cybercrime

Attack technique:

Zero-Day Vulnerability in MOVEit (CVE-2023-34362)

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

5

FRANKLIN MINT FEDERAL CREDIT UNION

Victim website:

fmfcu.org

Victim country:

USA

Attacker name:

Cl0p

Attacker class:

Cybercrime

Attack technique:

Zero-Day Vulnerability in MOVEit (CVE-2023-34362)

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

5

GRUPO BANCOLOMBIA

Victim website:

bam.com.gt

Victim country:

Guatemala

Attacker name:

Cl0p

Attacker class:

Cybercrime

Attack technique:

Zero-Day Vulnerability in MOVEit (CVE-2023-34362)

Ransom demand:

N/A

Exfiltrated data amount:

57 GB

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

5

SPACE COAST CREDIT UNION

Victim website:

sccu.com

Victim country:

USA

Attacker name:

Cl0p

Attacker class:

Cybercrime

Attack technique:

Zero-Day Vulnerability in MOVEit (CVE-2023-34362)

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

5

VILLAGE OF ADDISON

Victim website:

gis4.addison-il

Victim country:

USA

Attacker name:

Cuba

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

Large amount of data

Exfiltrated data type:

Financial documents, correspondence with bank employees, account movements, balance sheets, tax documents, compensation, source code

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

PANORAMA EYECARE

Victim website:

panoramaeyecare.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

798 GB

Exfiltrated data type:

Miscellaneous including PII and PHI documents, insurance, agreements etc. They claim to have downloaded data from all these companies: eyecenternoco.com ; denvereyesurgeons.com ; cheyenneeyeclinic.com ; 2020visioncenter.com.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

15th Jul 23

Cyber Risk Factor:

5

MICROPORT SCIENTIFIC

Victim website:

microport.com

Victim country:

China

Attacker name:

Qilin

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

Terabytes of data

Exfiltrated data type:

Miscellaneous including financial data

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

CITTA NUOVA

Victim website:

cittanuova.it

Victim country:

Italy

Attacker name:

Rhysida

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

5 BTC

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including invoices and PII documents

Leaked data:

/

Ransom deadline:

17th Jul 23

Cyber Risk Factor:

4

GREEN DIAMOND

Victim website:

greendiamond.com

Victim country:

USA

Attacker name:

Akira

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

30 GB

Exfiltrated data type:

Business information, including personal information

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

HAMRE SCHUMANN MUELLER & LARSON

Victim website:

hsml.com

Victim country:

USA

Attacker name:

Akira

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

102 GB

Exfiltrated data type:

Confidential documents, contracts, clients’ personal information

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

BELIZE ELECTRICITY LIMITED

Victim website:

bel.com.bz

Victim country:

Belize

Attacker name:

Ragnar Locker

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

355 GB

Exfiltrated data type:

Miscellaneous including personal information

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

RADISSON HOTELS AMERICAS

Victim website:

radissonhotelsamericas.com

Victim country:

USA

Attacker name:

Cl0p

Attacker class:

Cybercrime

Attack technique:

Zero-Day Vulnerability in MOVEit (CVE-2023-34362)

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

WESTAT

Victim website:

westat.com

Victim country:

USA

Attacker name:

Cl0p

Attacker class:

Cybercrime

Attack technique:

Zero-Day Vulnerability in MOVEit (CVE-2023-34362)

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

JOHNS HOPKINS UNIVERSITY

Victim website:

jhu.edu

Victim country:

USA

Attacker name:

Cl0p

Attacker class:

Cybercrime

Attack technique:

Zero-Day Vulnerability in MOVEit (CVE-2023-34362)

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

VISIONWARE

Victim website:

visionware.ca

Victim country:

Canada

Attacker name:

Cl0p

Attacker class:

Cybercrime

Attack technique:

Zero-Day Vulnerability in MOVEit (CVE-2023-34362)

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

UMASS CHAN MEDICAL SCHOOL

Victim website:

umassmed.edu

Victim country:

USA

Attacker name:

Cl0p

Attacker class:

Cybercrime

Attack technique:

Zero-Day Vulnerability in MOVEit (CVE-2023-34362)

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

VRM

Victim website:

vrm.de

Victim country:

Germany

Attacker name:

Cl0p

Attacker class:

Cybercrime

Attack technique:

Zero-Day Vulnerability in MOVEit (CVE-2023-34362)

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

SMA SOLAR TECHNOLOGY

Victim website:

sma.de

Victim country:

Germany

Attacker name:

Cl0p

Attacker class:

Cybercrime

Attack technique:

Zero-Day Vulnerability in MOVEit (CVE-2023-34362)

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

RICOH

Victim website:

ricohacumen.com

Victim country:

USA

Attacker name:

Cl0p

Attacker class:

Cybercrime

Attack technique:

Zero-Day Vulnerability in MOVEit (CVE-2023-34362)

Ransom demand:

N/A

Exfiltrated data amount:

193 GB

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

EMERSON

Victim website:

emerson.com

Victim country:

USA

Attacker name:

Cl0p

Attacker class:

Cybercrime

Attack technique:

Zero-Day Vulnerability in MOVEit (CVE-2023-34362)

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

TOMTOM

Victim website:

tomtom.com

Victim country:

Netherlands

Attacker name:

Cl0p

Attacker class:

Cybercrime

Attack technique:

Zero-Day Vulnerability in MOVEit (CVE-2023-34362)

Ransom demand:

N/A

Exfiltrated data amount:

82 GB

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

PIONEER ELECTRONICS

Victim website:

pioneerelectronics.com

Victim country:

USA

Attacker name:

Cl0p

Attacker class:

Cybercrime

Attack technique:

Zero-Day Vulnerability in MOVEit (CVE-2023-34362)

Ransom demand:

N/A

Exfiltrated data amount:

106 GB

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

RITE AID

Victim website:

riteaid.com

Victim country:

USA

Attacker name:

Cl0p

Attacker class:

Cybercrime

Attack technique:

Zero-Day Vulnerability in MOVEit (CVE-2023-34362)

Ransom demand:

N/A

Exfiltrated data amount:

32 GB

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

ARVATO

Victim website:

arvato.com

Victim country:

Germany

Attacker name:

Cl0p

Attacker class:

Cybercrime

Attack technique:

Zero-Day Vulnerability in MOVEit (CVE-2023-34362)

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

AGILYSYS

Victim website:

agilysys.com

Victim country:

USA

Attacker name:

Cl0p

Attacker class:

Cybercrime

Attack technique:

Zero-Day Vulnerability in MOVEit (CVE-2023-34362)

Ransom demand:

N/A

Exfiltrated data amount:

128 GB

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

CUSTOMER ELATION

Victim website:

customerelation.com

Victim country:

USA

Attacker name:

RansomHouse

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

At least 100 GB

Exfiltrated data type:

N/A

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

WEITKAMP HIRSCH & KOLLEGEN

Victim website:

whk-schleswig.de

Victim country:

Germany

Attacker name:

8Base

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

200 GB

Exfiltrated data type:

Internal documents, customer data, official letters and correspondence, tax declarations of clients, checks, payments

Leaked data:

/

Ransom deadline:

15th Jul 23

Cyber Risk Factor:

4

KANSAS MEDICAL CENTER

Victim website:

ksmedcenter.com

Victim country:

USA

Attacker name:

8Base

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Personal documents, identity cards, health insurance, patient data (numbers, addresses, registration numbers, and others), personal data of employees, internal documents, accounts, financial documents

Leaked data:

/

Ransom deadline:

15th Jul 23

Cyber Risk Factor:

4

ADVANCED FIBERGLASS INDUSTRIES

Victim website:

afi.ae

Victim country:

UAE

Attacker name:

8Base

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

tender reviews, official letters, presentations and product mockups, checks, accounting report data, tax statements, internal documents, salary data, personal data of employees, passports, confidential data, waybills

Leaked data:

/

Ransom deadline:

15th Jul 23

Cyber Risk Factor:

4

MOTOR COMPONENTS

Victim website:

facet-purolator.com

Victim country:

USA

Attacker name:

8Base

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Company internal documents, contact list with information about partners and clients, employee data base, checks, invoices, financial indicators and balance sheet, official letters, faxes, shipment information in different countries, confidential data about employees and their salaries, IT infrastructure with detailed network map and access

Leaked data:

/

Ransom deadline:

18th Jul 23

Cyber Risk Factor:

4

KALE AERO

Victim website:

kaleaero.com

Victim country:

Turkey

Attacker name:

Cl0p

Attacker class:

Cybercrime

Attack technique:

Zero-Day Vulnerability in MOVEit (CVE-2023-34362)

Ransom demand:

N/A

Exfiltrated data amount:

43 GB

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

CONSOL ENERGY

Victim website:

consolenergy.com

Victim country:

USA

Attacker name:

Cl0p

Attacker class:

Cybercrime

Attack technique:

Zero-Day Vulnerability in MOVEit (CVE-2023-34362)

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

PESQUERA DIAMANTE

Victim website:

diamante.com.pe

Victim country:

Peru

Attacker name:

8Base

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Internal documents, Official letters, Waybills, Checks, payments

Leaked data:

/

Ransom deadline:

15th Jul 23

Cyber Risk Factor:

3

DANBURY PUBLIC SCHOOLS

Victim website:

danbury.k12.ct.us

Victim country:

USA

Attacker name:

8Base

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Internal documents, personal data of employees, students and parents, checks, official letters, and much more

Leaked data:

/

Ransom deadline:

15th Jul 23

Cyber Risk Factor:

3

CITELIS MOBILITY

Victim website:

citelis.com.mx

Victim country:

Mexico

Attacker name:

8Base

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Internal documents, regulations, information about all employees, their mail, position, invoices, invoices, checks of all dealerships of the company, official letters, bank statements

Leaked data:

/

Ransom deadline:

18th Jul 23

Cyber Risk Factor:

3

BITIMEN

Victim website:

bitimen.com

Victim country:

Iran

Attacker name:

Arvin Club

Attacker class:

Cybercrime

Attack technique:

Data leak

Ransom demand:

N/A

Exfiltrated data amount:

56,000 users

Exfiltrated data type:

Users accounts

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

3

Stay safe!

Hackmanac Team

Latest news

HACKS OF TODAY 08/12/2023

Today's HOT includes 30 ransomware victims by the notorious BianLian, LockBit 3.0, INC Ransom, Rhysida and Play gangs. The average Cyber Risk Factor is 3.5. Read below the full...

Read More

HACKS OF TODAY 07/12/2023

Today's HOT includes 18 ransomware victims by the notorious ALPHV/BlackCat, LockBit 3.0, Medusa, 8Base, Akira, INC Ransom, Monti, Cactus, Metaencryptor and Qilin gangs. The average Cyber Risk Factor is 4.1....

Read More

HACKS OF TODAY 06/12/2023

Today's HOT includes 18 ransomware victims by the notorious  ALPHV/BlackCat, ThreeAM,  LockBit 3.0, Medusa, 8Base, Akira and BianLian gangs. The average Cyber Risk Factor is 3.8. Read below the...

Read More
				
					-----BEGIN PGP PUBLIC KEY BLOCK----- xsFNBFyONI0BEAC3wJRo5qhtr1KsqVdMz7b5JqHmt7H0ZZr14oJ9TV/hD9LMfrKpnQ94dFGnpfGa BKC1wSoJN4Yfs5lg5YmN4hmHmm6PkjgQdenVgL4YDfLDodwn5DgXKuywRBqIFbbnTDvFAb03DX2A FPnc+4g2QHsfiFycz+ISg/Z+8i21gY3j5oZlrdMKVWrNczrNc/lDJqJ36RSYDn1QzAW1ZGY/pUXk imPRvLew5Idr3462sZVVhuUFMD3Uf/W1SaS3bSEQM89pSYKZfo8AFpAs659Mn7gqKru6ndxilRdF wJGQuepqR8kz+vVPLyxJj68ii2ZBIY50RQvSBgJRnNF/Htp30cuk3v8jfSGZit9XYTTGQThVbfGR ZcKWze/iF+es110+mNXA/8s7jKs95PI+z1Foc9o74Ujs8dvjEGHTaESIEzX3JtEZUCZUiPt/P8pU Jw0ewbj1XCacYxYVsR7ODlf6GEsjt868WcjiqsuuZo2rzO4og9hFU5DlBzuePklfhw8dO5CiMN2H vtSkAn4DkgHqC+JiciHc9h5Cvvfjp52oQPj1eYmU3LkOvGFmPXVIts3VfxsQT3gk+DmrQ4J//fAl tNRSbMBnGu5F/qnLLkJmKRKPKNNcpjptFznKxLZbxW5QbAeDok3ho8YQACfADKcrmaIRkoPr8/mn PxZgMSMB87W7sQARAQABzSRTb2ZpYSBTY296emFyaSA8c29maWFAaGFja21hbmFjLmNvbT7CwZQE EwEIAD4WIQTNwEbcXbH0vegGlHCd6fr0nsTifwUCXI40jQIbIwUJEswDAAULCQgHAgYVCgkICwIE FgIDAQIeAQIXgAAKCRCd6fr0nsTifwKuD/4+3MaN+9eFiltI06fFBjr1Csh0OLFw89jFnpuYl9Sm ImVqmBwrnm+APxxLK4M+FMuNm4fW08X249t09Nsf0ba6UJ0HR/7/fRTipjzRLqHSr0+ZjVUGHhon fuuFZgNzPA5RmQZZCyiwyqZJs7pLn1QI/CtlDP6MsQhadywbkO/5LlDoBoYh/2DYNA/mtEfJbvc/ cOvfk47thj5OzcXJEWFxz7h2P5C2ELwxdhNPC+uqcOQkTScnuIBJooheJPhdmqOtOwrbUUIfaryM IESrol3Jg3/MUOe7FLXhwCSQGY1iefzl4py2jTeK936GMBHifLSUCA88lpE7ALkbf3+qJ9ABra9G e9e0dirIlPvFgBkEBBXsoIReQLrhHKFBtvKdrrE9Rb7kAwon+sW+3Uf6Ie3M8nTisGy2AmlI/tQ5 V0MHU2UJUNcc59hk7ADIlXN64eeqELgsMtlR4wEHd6nwcEpoPCTWfrVSwzsPtXUGNAGbgGxISv/F ltcFJ6Qw6Zy4f+YBEyCx/7GA3kjLllkcHv4kwHpP+WQCzbjh2JdkGEp5AY7puil1AtOFcbirbHbR 83KVeqx4Vvlyh2jhIDQYB/9qpTDC1xDKpndn40gnNd5hvjK0I0Xvbhb0PLhCpJQ5tsvPiQHjhOMF Wye3ZigaX1gTZxE29MLtwBbOYdGCYG0MrM7BTQRcjjSNARAAupAKTZXLRktriUVqhkZpU8zUVwrW ik6siStg7BppSJuKVW+Ic8QIagW0I48d2jZIIXrQRvqVBixn8eeBTE8Cujum1mZyhTw2sri3gE9i 81gisF17T/uewzRyYwx8obMfSEBnwJa44td7VjtbfLMRtfneK9R40+kELhhvXZa3DBbcG86zHVPU f1YkLX4RNSyjz4vOCX3WlcIAOr6MJA8DT+F5mUCVEhnkeUbflXtxRSeTUTfOw/3MYLs+mc6hWwLq gqTMcIQhDrYEY5wUgb5Mj86NR/uvsThL6MtWCJWVbfxHxM575woyTdD9E6HGO6loHYdky/7I+XFZ twgxsGn6HJYT+Gwn9BI5/DiwT1Qb/AyADktN1jGmZGTlniS+hly7rm0EHb2CTTM5zT1fh/sCOtQb nYIUf2in2cIfcFvzeFrUbDk2HfJMp5FmY6tBEV5xyNCww/mBkW2nuZy9CvAheJEOGoO8lyonPU2u ARq345LdbS6l+VdivPmZoLNpIMRw9MSTYmzm08h7C+/6hxzpjw1/nWZ+W2k9VpLutEs7KMtsbZR4 WhVFVS1uhqxrnjoeBHznh360Ou8SR+PFO0HIrYz4W7ayfcBhqcsGrM9u1E892gjUVTbPv8UoXQ8S Zm9ra2jqbfZGbyOpMIlyMzHTak7r0IZvCedEUDCimitbw98AEQEAAcLBfAQYAQgAJhYhBM3ARtxd sfS96AaUcJ3p+vSexOJ/BQJcjjSNAhsMBQkSzAMAAAoJEJ3p+vSexOJ/C+wP/iGvKG1NldCT2gR7 oWhmvgBnsD7qjC57RX0Go7WD1lmrWP4xWpvM6Tj0V4ZsXnyB8zUR38p49PPymjwy51FAss5PYh8S bVC1/sKC5Sae3kiAoMGH29MBAwL1IkJ8PNw6uOJHhUIJgKT5RWk2f7q3+Tha19slXwD/FC1IcBJK baxyVkG3cG5AnNvvKZyFAUNZ9FiBycaNHO4o6bCcCzSsaRLL2azudJLrF8UYPfTNBQ6Cr4QLqaRb t+ZqL2nqmcadO1AtxLtq5lQjxbhJ3jSYIcQJRq0ztbIBcPrdR2B/dfVED9cU5leSmNXxrh09gJ7N tmUpVo5fBcbf6fP7h2HIFBpH+G/8UUlcbm9pQ5Jcb8FEom0JrfaIAuv1gEIJAk1mkqLNzWUs8KuL nCBBVT2+2hfEZjtjUYbCLVB4LRCsLs9CY1wS3yKca90S8m0tfKcSj3K3k8qlKodkE2raX2GW2dm9 b200ENbb41B1uZlPts4Yh/AMfLqoNv8wyw0GlUQ2DqgDqviLANYbg4/GHwTLwO2b9UMHuTVU3woS 1LRKt0iPPsd+ir+9YRAVt5LB5XTS5C5cdIW9JSXQ+0cnbr3LPZCBulOew/M72liBINKWKGoUyueF 73ckNO9S7pzTOCpjn3+gAuzN/itwgwrMLoqUqqBuxzd7cKNJHTFdTIfTm53f =KIMs -----END PGP PUBLIC KEY BLOCK-----