December 16, 2021

IT systems of McMenamins taken down after Conti ransomware gang

On Sunday 12th of December 2021, McMenamins, a popular chain of restaurants, pubs, breweries, and hotels located in Oregon and Washington experienced a ransomware that resulted in McMenamins being forced to shut down their IT systems, credit card point-of-sale systems, and corporate email to prevent the further spread of the attack. Although their IT systems were shut down, McMenamins hasn’t been forced […]
December 16, 2021

Minecraft releases an emergency security update after observations of log4j exploits being used against Minecraft servers

On Friday 10th of December 2021, Mojang Studios, the Swedish video game developer behind Minecraft has released an emergency security update to address the bug CVE-2021-44228 in the Apache Log4j Java logging library which is used by Minecraft’s Java Edition client and multiplayer servers. Microsoft has warned all admins to immediately install the latest Minecraft server updates to defend them against any […]
December 13, 2021

Ransomware attack against Ultimate Kronos Group might result in weeks of downtime for HR solutions

On Monday 13th of December 2021, Ultimate Kronos Group (UKG), one of the most popular and widely used payroll and workforce tracking systems for public finance entities disclosed that they suffered a ransomware attack on Saturday 11th of December 2021, that resulted in the Kronos Private Cloud being taken down and it may take several weeks before system will be available to […]
December 10, 2021

80,000 Australian government employees impacted by ransomware attack on Frontier Software

On Thursday 9th of December 2021, South Australian government disclosed that the sensitive personal information belonging to up to 80,000 Australian government employees have been compromised following a ransomware attack that targeted the systems of Frontier Software who are responsible for the South Australian government’s payroll software. “The ongoing forensic investigation and other response activities conducted by Frontier Software and CyberCX has now […]
December 10, 2021

Research and development information stolen from Volvo Cars during ransomware attack

On Friday 10th of December 2021, Volvo Cars, a Swedish carmaker disclosed that they discovered that threat actors have stolen research and development information from one of their file repositories. Volvo Cars have concluded that there is an expected impact on the company’s operations.   “Investigations so far confirm that a limited amount of the company’s R&D property has been stolen during […]
December 7, 2021

Nordic Choice Hotels IT systems impacted by Conti ransomware

On Monday 6th of December 2021, Nordic Choice Hotels have disclosed they had experienced a ransomware attack on Thursday 2nd of December 2021 which impacted the IT systems that handle reservations, payments, check-in, check-out and creation of new room keys. Because of the incident, the staff had to switch to manual procedures to carry out business operations. “Our investigations do not currently give […]
December 3, 2021

FBI releases flash alert against the Cuba ransomware gang

On Thursday 2nd of December 2021, the United States Federal Bureau of Investigation (FBI) released a joint TLP:WHITE flash alert which revealed the Cuba ransomware gang have compromised at least 49 organizations in five critical infrastructure sectors, including the financial, government, healthcare, manufacturing, and information technology sectors. The FBI also revealed that the Cuba ransomware variant is commonly distributed through […]
November 30, 2021

Australian government-owned energy company, CS Energy confirms they were a target of a ransomware attack

On Tuesday 30th of November 2021, CS Energy, an Australian government-owned energy generator in the Queensland confirmed they had suffered a ransomware attack on Saturday, 27th of November 2021 which occurred on their corporate network but did not impact the electricity generation at either of their power stations in Callide and Kogan Creek. CS Energy CEO Andrew Bills stated they were […]
November 29, 2021

Vestas, Danish wind turbine manufacturer announces they suffered a ransomware attack

On Monday 29th of November 2021, Vestas, a Danish manufacturer, seller, installer, and servicer of wind turbines confirmed they had suffered a ransomware attack on Friday, 19th of November 2021 which resulted in Vestas shutting down their IT systems across multiple business units and locations in the hope to contain the ransomware. Vestas revealed they had been working with their external […]