February 29, 2024

Chinese Hackers Exploiting Ivanti VPN Flaws to Deploy New Malware

At least two different suspected China-linked cyber espionage clusters, tracked as UNC5325 and UNC3886, have been attributed to the exploitation of security flaws in Ivanti Connect Secure VPN appliances. CVE-2024-21893 is actively exploited. As part of the attack chain, CVE-2024-21893 is combined with a previously disclosed command injection vulnerability tracked as CVE-2024-21887 to gain unauthorized access to vulnerable devices. In […]
February 29, 2024

Black Basta ransomware attacks ZircoDATA company

ZircoDATA is the leading provider of secure document storage and records management (RIM) solutions from information governance and digital conversion to storage, language services and secure shredding since 1995.ZircoDATA has been attacked by the Black Basta Group, claiming 395 GB of data, including financial documents, personal user folders, and confidentiality agreements. There are at least 46 passport scans and 12 […]
June 9, 2023

HWL Ebsworth declare they won’t meet APLHV ransomware gang’s demands

On Friday 9th of June 2023, one of Australia’s largest law firms HWL Ebsworth confirmed to local media outlets that its network was hacked after the ALPHV ransomware gang began leaking data they claim was stolen from the company. The ALPHV ransomware gang has published 1.45 terabytes of data containing over a million documents allegedly stolen from the law firm’s […]
June 8, 2023

MOVEit extortion attacks claimed by Clop ransomware gang

The Clop ransomware gang has confirmed that they are behind the MOVEit Transfer attacks where they have been exploiting a zero-day vulnerability to breach servers belonging to “hundreds of companies” and steal data. It has been revealed that the gang had started exploiting the vulnerability on Saturday 27th of May 2023, during the US Memorial Day holiday. At this time, the […]
June 8, 2023

Japanese pharmaceutical giant Eisai discloses ransomware attack

On Tuesday 6th of June 2023, Eisai, a Tokyo-based pharmaceutical company Eisai disclosed it suffered a ransomware incident over the weekend that impacted its operations following the threat actors encrypting some of its servers. In response to the attack, Eisai has taken many of its IT systems offline to contain the damage and prevent the spread of the locker to […]
June 1, 2023

2.5 million individuals impacted following ransomware against Harvard Pilgrim Health Care

Last week, Harvard Pilgrim Health Care (HPHC), a Massachusetts-based non-profit health services provider released a data breach notice disclosing that a ransomware attack it suffered in April 2023 impacted 2,550,922 people, as well as the threat actors stealing their sensitive data from compromised systems. The notice revealed that the threat actors had maintained access to HPHC’s systems between March 28 […]
May 29, 2023

8.9 million people impacted by MCNA Dental data breach after ransomware attack

On Friday 26th of May 2023, one of the largest government-sponsored (Medicaid and CHIP) dental care and oral health insurance providers in the U.S., Managed Care of North America (MCNA) Dental released a data breach notification, disclosing almost 9 million patients had their personal data were compromised. MCNA announced in the notice that it had become aware of unauthorized access […]
May 26, 2023

Attack against City of Augusta claimed by BlackByte ransomware gang

On Friday 2nd of June 2023, the city of Augusta in Georgia, U.S. confirmed that the recent IT system outage was caused by unauthorized access to its network. The city explained that it started experiencing technical difficulties on Sunday, May 21, which disrupted some of its computer systems. “Augusta’s Information Technology Department continues to work diligently to investigate the incident, to confirm […]
May 23, 2023

German arms maker Rheinmetall confirms BlackBasta ransomware attack

German automotive and arms manufacturer Rheinmetall AG has confirmed that it suffered a BlackBasta ransomware attack that impacted its civilian business. The incident was revealed following the BlackBasta ransomware group naming Rheinmetall on its extortion site on Saturday 20th of May 2023. The group also released samples of the data the hackers claimed to have stolen from the German company. […]
Prev page
12345678910111213141516171819202122232425262728293031323334
Next page

Collaboration can mitigate the effects of Ransomware Attacks

Archives
Categories
Privacy Policy
RSS NCSC Threat Reports Feed

© 2021 CyberEnsō – Nihon Cyber Defence Co., Ltd. All Rights Reserved.