news
HACKS OF TODAY 15/06/2023

Today’s HOT includes 34 victims:
21 ransomware by the notorious LockBit 3.0, RansomHouse, ALPHV/BlackCat, NoEscape, MedusaLocker, BlackBasta, Rhysida, Rancoz, BlackByte, Black Suit and 8Base gangs, 12 zero-day exploit by Cl0p and 1 data leak.
The average Cyber Risk Factor is 3.8.
Read below the full list.
Disclaimer:
Data are collected from public info published on Dark Web.
The Cyber Risk factor is calculated on cyber attacks’ impact based on available data.
It shows the severity of an event: 1 = low, 5 = critical
GRANULES INDIA
Victim website: | granules.com |
Victim country: | India |
Attacker name: | LockBit 3.0 |
Attacker class: | Cybercrime |
Attack technique: | Ransomware |
Ransom demand: | N/A |
Exfiltrated data amount: | Large amount of data |
Exfiltrated data type: | Miscellaneous including financial, employees, customers, partners and investors documents |
Leaked data: | 50% of the exfiltrate data (the resto of the archive along with information about vulnerabilities is for sale) |
Ransom deadline: | 14th Jun 23 |
Cyber Risk Factor: | 5 |
WISON ENGINEERING
Victim website: | wison.com |
Victim country: | China |
Attacker name: | RansomHouse |
Attacker class: | Cybercrime |
Attack technique: | Ransomware |
Ransom demand: | N/A |
Exfiltrated data amount: | 2,5 TB |
Exfiltrated data type: | Miscellaneous including confidential documents |
Leaked data: | Sample with proof of the exfiltrated data |
Ransom deadline: | N/A |
Cyber Risk Factor: | 5 |
ALPHA DATA
Victim website: | alpha.ae |
Victim country: | UAE |
Attacker name: | ALPHV/BlackCat |
Attacker class: | Cybercrime |
Attack technique: | Ransomware |
Ransom demand: | N/A |
Exfiltrated data amount: | N/A |
Exfiltrated data type: | Personal information of employees, clients and partners – Financial and banking documents of the company and its clients – Internal business documents, strategic and analytical data – NDA contracts with clients and partners – Passport data of employees and clients – Engineering and technical information about the company’s services with detailed descriptions and drawings – Top management personal data including passports, plate numbers, contacts – Company sales data – Logistics data |
Leaked data: | Sample with proof of the exfiltrated data |
Ransom deadline: | 17th Jun 23 |
Cyber Risk Factor: | 5 |
PLOTT CORPORATION
Victim website: | plott.co.jp |
Victim country: | Japan |
Attacker name: | ALPHV/BlackCat |
Attacker class: | Cybercrime |
Attack technique: | Ransomware |
Ransom demand: | N/A |
Exfiltrated data amount: | Large amount of data |
Exfiltrated data type: | Products source code |
Leaked data: | 100% of the exfiltrated data |
Ransom deadline: | N/A |
Cyber Risk Factor: | 5 |
CENTRE HOSPITALIER RÉGIONAL DE NAMUR
Victim website: | chrn.be |
Victim country: | Belgium |
Attacker name: | NoEscape |
Attacker class: | Cybercrime |
Attack technique: | Ransomware |
Ransom demand: | N/A |
Exfiltrated data amount: | 127 GB |
Exfiltrated data type: | N/A |
Leaked data: | Sample with proof of the exfiltrated data |
Ransom deadline: | 19th Jun 23 |
Cyber Risk Factor: | 4 |
NEW HORIZONS MEDICAL
Victim website: | newhorizonsmedical.org |
Victim country: | USA |
Attacker name: | ALPHV/BlackCat |
Attacker class: | Cybercrime |
Attack technique: | Ransomware |
Ransom demand: | N/A |
Exfiltrated data amount: | N/A |
Exfiltrated data type: | Miscellaneous including financial and confidential data |
Leaked data: | Sample with proof of the exfiltrated data |
Ransom deadline: | N/A |
Cyber Risk Factor: | 4 |
ARBORS OF HOP BROOK
Victim website: | arborsct.com |
Victim country: | USA |
Attacker name: | MedusaLocker |
Attacker class: | Cybercrime |
Attack technique: | Ransomware |
Ransom demand: | $ 60,000 |
Exfiltrated data amount: | N/A |
Exfiltrated data type: | Client Case, agreement, email(.msg), financial documents etc. |
Leaked data: | Sample with proof of the exfiltrated data |
Ransom deadline: | N/A |
Cyber Risk Factor: | 4 |
MARCHANT SCHMIDT
Victim website: | marchantschmidt.com |
Victim country: | USA |
Attacker name: | BlackBasta |
Attacker class: | Cybercrime |
Attack technique: | Ransomware |
Ransom demand: | N/A |
Exfiltrated data amount: | N/A |
Exfiltrated data type: | N/A |
Leaked data: | 100% of the exfiltrated data |
Ransom deadline: | N/A |
Cyber Risk Factor: | 4 |
IECM COMPANY LIMITED
Victim website: | iecm.co.th |
Victim country: | Thailand |
Attacker name: | Qilin |
Attacker class: | Cybercrime |
Attack technique: | Ransomware |
Ransom demand: | N/A |
Exfiltrated data amount: | 6,29 GB |
Exfiltrated data type: | Miscellaneous documents |
Leaked data: | 100% of the exfiltrated data |
Ransom deadline: | N/A |
Cyber Risk Factor: | 4 |
ASZ GMBH & CO
Victim website: | asz-gmbh.de |
Victim country: | Germany |
Attacker name: | Qilin |
Attacker class: | Cybercrime |
Attack technique: | Ransomware |
Ransom demand: | N/A |
Exfiltrated data amount: | 106,91 GB |
Exfiltrated data type: | Miscellaneous including invoices |
Leaked data: | 100% of the exfiltrated data |
Ransom deadline: | N/A |
Cyber Risk Factor: | 4 |
1ST SOURCE BANK
Victim website: | 1stsource.com |
Victim country: | USA |
Attacker name: | Cl0p |
Attacker class: | Cybercrime |
Attack technique: | Zero-Day Vulnerability in MOVEit |
Ransom demand: | N/A |
Exfiltrated data amount: | N/A |
Exfiltrated data type: | N/A |
Leaked data: | / |
Ransom deadline: | N/A |
Cyber Risk Factor: | 4 |
DATASITE
Victim website: | datasite.com |
Victim country: | USA |
Attacker name: | Cl0p |
Attacker class: | Cybercrime |
Attack technique: | Zero-Day Vulnerability in MOVEit |
Ransom demand: | N/A |
Exfiltrated data amount: | N/A |
Exfiltrated data type: | N/A |
Leaked data: | / |
Ransom deadline: | N/A |
Cyber Risk Factor: | 4 |
PUTNAM INVESTMENTS
Victim website: | putnam.com |
Victim country: | USA |
Attacker name: | Cl0p |
Attacker class: | Cybercrime |
Attack technique: | Zero-Day Vulnerability in MOVEit |
Ransom demand: | N/A |
Exfiltrated data amount: | N/A |
Exfiltrated data type: | N/A |
Leaked data: | / |
Ransom deadline: | N/A |
Cyber Risk Factor: | 4 |
NATIONAL STUDENT CLEARINGHOUSE
Victim website: | studentclearinghouse.org |
Victim country: | USA |
Attacker name: | Cl0p |
Attacker class: | Cybercrime |
Attack technique: | Zero-Day Vulnerability in MOVEit |
Ransom demand: | N/A |
Exfiltrated data amount: | N/A |
Exfiltrated data type: | N/A |
Leaked data: | / |
Ransom deadline: | N/A |
Cyber Risk Factor: | 4 |
ÖKK
Victim website: | oekk.ch |
Victim country: | Switzerland |
Attacker name: | Cl0p |
Attacker class: | Cybercrime |
Attack technique: | Zero-Day Vulnerability in MOVEit |
Ransom demand: | N/A |
Exfiltrated data amount: | N/A |
Exfiltrated data type: | N/A |
Leaked data: | / |
Ransom deadline: | N/A |
Cyber Risk Factor: | 4 |
UNITEDHEALTHCARE STUDENT RESOURCES
Victim website: | uhcsr.com |
Victim country: | USA |
Attacker name: | Cl0p |
Attacker class: | Cybercrime |
Attack technique: | Zero-Day Vulnerability in MOVEit |
Ransom demand: | N/A |
Exfiltrated data amount: | N/A |
Exfiltrated data type: | N/A |
Leaked data: | / |
Ransom deadline: | N/A |
Cyber Risk Factor: | 4 |
LANDAL
Victim website: | landal.com |
Victim country: | Belgium |
Attacker name: | Cl0p |
Attacker class: | Cybercrime |
Attack technique: | Zero-Day Vulnerability in MOVEit |
Ransom demand: | N/A |
Exfiltrated data amount: | N/A |
Exfiltrated data type: | N/A |
Leaked data: | / |
Ransom deadline: | N/A |
Cyber Risk Factor: | 4 |
HEIDELBERGER
Victim website: | heidelberg.com |
Victim country: | Germany |
Attacker name: | Cl0p |
Attacker class: | Cybercrime |
Attack technique: | Zero-Day Vulnerability in MOVEit |
Ransom demand: | N/A |
Exfiltrated data amount: | N/A |
Exfiltrated data type: | N/A |
Leaked data: | / |
Ransom deadline: | N/A |
Cyber Risk Factor: | 4 |
FIRST NATIONAL BANKERS BANKSHARES
Victim website: | bankers-bank.com |
Victim country: | USA |
Attacker name: | Cl0p |
Attacker class: | Cybercrime |
Attack technique: | Zero-Day Vulnerability in MOVEit |
Ransom demand: | N/A |
Exfiltrated data amount: | N/A |
Exfiltrated data type: | N/A |
Leaked data: | / |
Ransom deadline: | N/A |
Cyber Risk Factor: | 4 |
LEGGETT & PLATT
Victim website: | leggett.com |
Victim country: | USA |
Attacker name: | Cl0p |
Attacker class: | Cybercrime |
Attack technique: | Zero-Day Vulnerability in MOVEit |
Ransom demand: | N/A |
Exfiltrated data amount: | N/A |
Exfiltrated data type: | N/A |
Leaked data: | / |
Ransom deadline: | N/A |
Cyber Risk Factor: | 4 |
UNIVERSITY OF GEORGIA
Victim website: | uga.edu |
Victim country: | USA |
Attacker name: | Cl0p |
Attacker class: | Cybercrime |
Attack technique: | Zero-Day Vulnerability in MOVEit |
Ransom demand: | N/A |
Exfiltrated data amount: | N/A |
Exfiltrated data type: | N/A |
Leaked data: | / |
Ransom deadline: | N/A |
Cyber Risk Factor: | 4 |
SHELL
Victim website: | shell.com |
Victim country: | United Kingdom |
Attacker name: | Cl0p |
Attacker class: | Cybercrime |
Attack technique: | Zero-Day Vulnerability in MOVEit |
Ransom demand: | N/A |
Exfiltrated data amount: | N/A |
Exfiltrated data type: | N/A |
Leaked data: | / |
Ransom deadline: | N/A |
Cyber Risk Factor: | 4 |
LAW SOCIETY OF SOUTH AFRICA
Victim website: | lssa.org.za |
Victim country: | South Africa |
Attacker name: | 8Base |
Attacker class: | Cybercrime |
Attack technique: | Ransomware |
Ransom demand: | N/A |
Exfiltrated data amount: | Large amount of data |
Exfiltrated data type: | Names, addresses, phone numbers, payroll details, etc. |
Leaked data: | / |
Ransom deadline: | 21st Jun 23 |
Cyber Risk Factor: | 4 |
SALEM COMMUNITY SCHOOLS
Victim website: | salemschools.com |
Victim country: | USA |
Attacker name: | Medusa |
Attacker class: | Cybercrime |
Attack technique: | Ransomware |
Ransom demand: | $ 100,000 |
Exfiltrated data amount: | Large amount of data |
Exfiltrated data type: | Miscellaneous including students’ information |
Leaked data: | Sample with proof of the exfiltrated data |
Ransom deadline: | 23rd Jun 23 |
Cyber Risk Factor: | 4 |
KOPER AUTOMATISERING
Victim website: | koper-it.nl |
Victim country: | Netherlands |
Attacker name: | Rhysida |
Attacker class: | Cybercrime |
Attack technique: | Ransomware |
Ransom demand: | N/A |
Exfiltrated data amount: | Large amount of data |
Exfiltrated data type: | Miscellaneous including backups, invoices and users’data |
Leaked data: | 100% of the exfiltrated data |
Ransom deadline: | N/A |
Cyber Risk Factor: | 4 |
AIR COMFORT
Victim website: | aircomfort.ac |
Victim country: | USA |
Attacker name: | Rancoz |
Attacker class: | Cybercrime |
Attack technique: | Ransomware |
Ransom demand: | N/A |
Exfiltrated data amount: | 14 GB |
Exfiltrated data type: | N/A |
Leaked data: | 15% of the exfiltrated data |
Ransom deadline: | N/A |
Cyber Risk Factor: | 3 |
FIEGE SP. Z O.O.
Victim website: | global.fiege.com |
Victim country: | Poland |
Attacker name: | BlackByte |
Attacker class: | Cybercrime |
Attack technique: | Ransomware |
Ransom demand: | N/A |
Exfiltrated data amount: | N/A |
Exfiltrated data type: | Miscellaneous including financial documents |
Leaked data: | Sample with proof of the exfiltrated data |
Ransom deadline: | N/A |
Cyber Risk Factor: | 3 |
YAMAHA CORPORATION OF AMERICA
Victim website: | usa.yamaha.com |
Victim country: | USA |
Attacker name: | BlackByte |
Attacker class: | Cybercrime |
Attack technique: | Ransomware |
Ransom demand: | N/A |
Exfiltrated data amount: | N/A |
Exfiltrated data type: | Miscellaneous documents |
Leaked data: | Sample with proof of the exfiltrated data |
Ransom deadline: | N/A |
Cyber Risk Factor: | 3 |
NEBRASKALAND
Victim website: | nebraskaland.com |
Victim country: | USA |
Attacker name: | BlackByte |
Attacker class: | Cybercrime |
Attack technique: | Ransomware |
Ransom demand: | N/A |
Exfiltrated data amount: | N/A |
Exfiltrated data type: | Miscellaneous including tax bills |
Leaked data: | Sample with proof of the exfiltrated data |
Ransom deadline: | N/A |
Cyber Risk Factor: | 3 |
THE TEXWIPE
Victim website: | texwipe.com |
Victim country: | USA |
Attacker name: | BlackByte |
Attacker class: | Cybercrime |
Attack technique: | Ransomware |
Ransom demand: | N/A |
Exfiltrated data amount: | N/A |
Exfiltrated data type: | Miscellaneous including invoices |
Leaked data: | Sample with proof of the exfiltrated data |
Ransom deadline: | N/A |
Cyber Risk Factor: | 3 |
BATON ROUGE METROPOLITAN AIRPORT
Victim website: | flybtr.com |
Victim country: | USA |
Attacker name: | LockBit 3.0 |
Attacker class: | Cybercrime |
Attack technique: | Ransomware |
Ransom demand: | N/A |
Exfiltrated data amount: | N/A |
Exfiltrated data type: | N/A |
Leaked data: | / |
Ransom deadline: | 29th Jun 23 |
Cyber Risk Factor: | 3 |
STAINLESS TANK & EQUIPMENT COMPANY
Victim website: | ste-usa.com |
Victim country: | USA |
Attacker name: | LockBit 3.0 |
Attacker class: | Cybercrime |
Attack technique: | Ransomware |
Ransom demand: | N/A |
Exfiltrated data amount: | N/A |
Exfiltrated data type: | N/A |
Leaked data: | / |
Ransom deadline: | 29th Jun 23 |
Cyber Risk Factor: | 3 |
VENTURE LOGISTICS
Victim website: | venturelogistics.com |
Victim country: | USA |
Attacker name: | Black Suit |
Attacker class: | Cybercrime |
Attack technique: | Ransomware |
Ransom demand: | N/A |
Exfiltrated data amount: | N/A |
Exfiltrated data type: | N/A |
Leaked data: | / |
Ransom deadline: | N/A |
Cyber Risk Factor: | 2 |
MYSHOPCASA
Victim website: | myshopcasa.it |
Victim country: | Italy |
Attacker name: | / |
Attacker class: | Cybercrime |
Attack technique: | Data leak |
Ransom demand: | N/A |
Exfiltrated data amount: | 8778 excel row |
Exfiltrated data type: | Social Title, Name, Surname, Email Address, Sales, Registration, Last Visit. |
Leaked data: | 100% of the exfiltrated data |
Ransom deadline: | N/A |
Cyber Risk Factor: | 2 |
Stay safe!
Hackmanac Team
Latest news
CORRECTION ON MALASLOCKER ACTIVITIES
Following further information provided to us directly by the Italian company BeeVoip, it is necessary to correct a detail from our previous post regarding the...
Read MoreHACKS OF TODAY 28/09/2023
Today's HOT includes 7 ransomware victims by the notorious Akira, NoEscape, ALPHV/BlackCat, ThreeAM, 8Base and Cactus gangs. The average Cyber Risk Factor is 3.7. Read below the...
Read MoreHACKS OF TODAY 27/09/2023
Today's HOT includes 13 ransomware victims by the notorious Dunghill Leak, ALPHV/BlackCat, NoEscape, Medusa, Akira, Qilin, 8Base and Cactus gangs. The average Cyber Risk Factor is 4.1....
Read More