November 24, 2021

Lewis & Clark Community College Campuses in Illinois shutdown due to ransomware attack

On Wednesday 24th of November 2021, Lewis and Clark Community College, a public community college in Godfrey, Illinois announced that they had experienced a ransomware attack late on Tuesday 23rd which resulted in all of Lewis and Clark campuses having to be shut down on Wednesday 24th to prevent further spreading of the ransomware. The announcement came in the form of […]
November 22, 2021

Joint advisory released by FBI and CISA in preparation for the upcoming holiday season

On Monday 22nd of November 2021, Federal Bureau of Investigation (FBI), and the Cybersecurity and Infrastructure Security Agency (CISA), released a joint cybersecurity advisory where they warned of upcoming spikes in cyberattacks as the holiday season approaches. The advisory was aimed at all organisations although it had a heavy emphasis on critical networks, systems and infrastructure. The CISA and FBI also emphasised a caution […]
November 20, 2021

Personal information leaked after Pacific City Bank hit by AvosLocker Ransomware

This week, Pacific City Bank, one of the largest Korean American community banking service providers in America, has disclosed that they experienced a ransomware attack that occurred on the 30th of August 2021. The bank informed their clients of an incident and disclosed that the threat actors had obtained information from their systems including Loan application forms, Tax return documents, […]
November 17, 2021

US releases joint advisory warning companies of Iranian APT group that has been involved in ransomware attacks

On Wednesday 17th of November 2021, Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), the Australian Cyber Security Centre (ACSC), and the United Kingdom’s National Cyber Security Centre (NCSC) released a joint cybersecurity advisory where they warned of ongoing malicious cyber activity that FBI, CISA, ACSC, and NCSC have observed and associated with an advanced persistent threat (APT) group that is […]
November 15, 2021

Israeli organisations are being targeted and disrupted by Moses Staff with ransomless encryptions

In the recent weeks, a new hacker group called Moses Staff has been recently claiming responsibility for multiple attacks against Israeli entities, where they have gaining access to networks and systems owned by Israeli organisations and encrypt the files on the systems before leaking copies of the stolen files to the public. Based on the attacks that they have conducted […]
November 9, 2021

Europe’s largest consumer electronics retailer, MediaMarkt suffers ransomware attack

On Monday 8th of November 2021, MediaMarkt, Europe’s largest consumer electronics retailer experienced a ransomware attack which has led to IT systems being shut down and disrupts to stores in Netherlands, Germany, Belgium and Luxembourg. No ransomware gang has been named yet. Although a MediaMarkt spokesperson has confirmed that the company had been hit by a cyber-attack on the morning […]
November 3, 2021

BlackMatter affiliates move to LockBit to continue extortion of BlackMatter ransomware victims after BlackMatter shutdown

With the threat actors behind BlackMatter Ransomware announcing they were shutting down on Monday 1st of November 2021, the remaining affiliates have been moving their victims to the competing ransomware gang. LockBit to continue the extortion of their victims. This has been proven by the fact that in existing BlackMatter negotiation chats to victims, affiliates are now providing victims links […]
November 3, 2021

UK Labour Party announce data breach after being informed of ransomware attack

On Wednesday 3rd of November 2021, the Labour Party, a political party in the United Kingdom released a statement that revealed on 29th October 2021, they were contacted by a third party about a cyber incident that had resulted in a large volume of the Party’s data being made inaccessible. “We were informed of the cyber incident by the third […]
November 3, 2021

BlackMatter ransomware gang announce the shutdown of operations due to pressure from authorities

On Monday 1st of November 2021, the threat actors behind the BlackMatter Ransomware released an announcement on their ransomware-as-a-service (RaaS) website which is used by their affiliates to communicate with the core ransomware operators and receive support during operations. The announcement stated that the operation was going to shut down after 48 hours of the release of the announcement. Due […]