January 18, 2022

Fashion giant, Moncler releases statement confirming data breach after Christmas Eve ransomware attack

On Tuesday 18th of January 2022, Moncler, an Italian luxury fashion giant announced that they received a ransom demand related to a cyber-attack they had experienced on Friday 24th of December 2021. Originally, the incident was labelled as a malware assistance attack which resulted in a temporary outage of Moncler’s IT services to stop the spread of the attack. Therefore, […]
January 10, 2022

Ransomware attack against FinalSite results in thousands of schools being impacted

On Tuesday 4th of January 2022, FinalSite, a leading school website services provider who provides solutions to over 8,000 schools and universities across 115 different countries suffered a ransomware attack which resulted in websites and critical messaging services hosted by FinalSite being brought down. “This impact may include, but is not limited to, Groups Manager, Constituent Manager, Login, Forms Manager (old), […]
January 7, 2022

FBI release flash alert against FIN7’s use of BadUSB devices to deploy ransomware

Recently the US Federal Bureau of Investigation (FBI) released a flash alert about the financially motivated cybercrime group FIN7 that has been targeting the US companies over the past few months with packages containing malicious USB devices to deploy ransomware. Since August, FBI has been getting reports that have detailed how FIN7 has been impersonating Amazon and the US Department […]
December 29, 2021

Vietnamese crypto platform suffers Log4j-related ransomware attack

On Tuesday 28th of December 2021, ONUS, one of the largest Vietnamese crypto trading platforms announced they suffered a ransomware attack that targeted their payment system. It was discovered that the payment system was running a vulnerable Log4j version that was exploited by threat actors between 11th and 13th of December and resulted in the threat actors installing backdoors on their Cyclos […]
December 28, 2021

Shutterfly services interrupted by Conti ransomware attack

On Sunday 26th of December 2021, Shutterfly, a personalized photography giant disclosed they had recently experienced a ransomware attack on parts of their network. Although they have stated that the incident has not impacted their Shutterfly.com, Snapfish, TinyPrints or Spoonflower sites. However, portions of their Lifetouch and BorrowLenses business, Groovebook, manufacturing and some corporate systems have been experiencing interruptions because of […]
December 21, 2021

Health Ministry of Brazil experiences two ransomware attacks within four days of each other

Brazil’s Health Ministry is experiencing extended downtime after experiencing two ransomware attack, one on 10th of December 2021 and 14th of December 2021. It is believed that these attacks are linked to an act of activism related to Covid-19 vaccination data and Brazil’s digital inoculation certificates. A group called Lapsus$ Group has claimed responsible for these attacks. The first ransomware attack resulted […]
December 16, 2021

IT systems of McMenamins taken down after Conti ransomware gang

On Sunday 12th of December 2021, McMenamins, a popular chain of restaurants, pubs, breweries, and hotels located in Oregon and Washington experienced a ransomware that resulted in McMenamins being forced to shut down their IT systems, credit card point-of-sale systems, and corporate email to prevent the further spread of the attack. Although their IT systems were shut down, McMenamins hasn’t been forced […]
December 16, 2021

Minecraft releases an emergency security update after observations of log4j exploits being used against Minecraft servers

On Friday 10th of December 2021, Mojang Studios, the Swedish video game developer behind Minecraft has released an emergency security update to address the bug CVE-2021-44228 in the Apache Log4j Java logging library which is used by Minecraft’s Java Edition client and multiplayer servers. Microsoft has warned all admins to immediately install the latest Minecraft server updates to defend them against any […]
December 13, 2021

Ransomware attack against Ultimate Kronos Group might result in weeks of downtime for HR solutions

On Monday 13th of December 2021, Ultimate Kronos Group (UKG), one of the most popular and widely used payroll and workforce tracking systems for public finance entities disclosed that they suffered a ransomware attack on Saturday 11th of December 2021, that resulted in the Kronos Private Cloud being taken down and it may take several weeks before system will be available to […]