February 14, 2022

Japanese sports brand Mizuno experiences system outages from possible ransomware attack

On Tuesday 8th of February 2022, Mizuno, a Japanese sports equipment and sportswear company with locations throughout Asia, Europe, and North America started to experience system outages involving phone outages and order delays. It is believed that it is due to a ransomware attack on their US corporate network over the weekend of the 4th of February. Many customers have […]
February 13, 2022

NFL’s San Francisco 49ers experience a Blackbyte ransomware attack

On Saturday 12th of February 2022, the BlackByte ransomware group announced that they had stolen data from the NFL’s San Francisco 49ers team during a ransomware attack. The 49ers have confirmed that they have experienced a cyber-attack which has resulted in disruptions in portions of their IT network. It is believed that the incident involved ransomware as the 49ers stated […]
February 10, 2022

US releases joint advisory warning organisations against observed behaviours and trends of ransomware operations from 2021

On Wednesday 9th of February 2022, Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), the Australian Cyber Security Centre (ACSC), and the United Kingdom’s National Cyber Security Centre (NCSC) released a joint cybersecurity advisory where they warned of an increase globalized threat of ransomware as FBI, CISA, NSA, ACSC, and NCSC have […]
February 5, 2022

FBI releases flash alert against LockBit 2.0 ransomware

On Friday 4th of February 2022, the US Federal Bureau of Investigation (FBI) released a flash alert about indicators of compromise associated with LockBit 2.0 ransomware. The flash alert details the advances to the LockBit 2.0 since the LockBit ransomware gang became active in September 2019. LockBit 2.0 is the second iteration of the original LockBit ransomware which was released […]
February 4, 2022

Flights suffer delays after ransomware attack hit Swissport

On Thursday 3rd of February 2022, Swissport, one of the largest aviation services companies in the world, announced that it had experienced a ransomware attack which resulted in their IT infrastructure and services being impacted and causing flights to be delayed. The attack was believed to have occurred at 6 AM on Thursday morning and led to minor delays between […]
February 2, 2022

Energy giant, Shell forced to reroute supplies after cyber-attack on two German oil suppliers

On Saturday 29th of January 2022, Shell, the energy giant had to re-routing oil supplies due to a cyber-attack against two subsidiaries of two German oil suppliers, Oiltanking GmbH Group and Mabanaft GmbH & Co. KG Group. The incident resulted in disruptions to their IT systems and therefore caused disruptions to their supply chains. There have been concerns around shortages […]
January 30, 2022

Ransomware attack results in Curo Fund Services being locked out of systems for five days

On Wednesday 19th of January 2022, Curo Fund Services, South Africa’s biggest provider of investment administration services suffered a ransomware attack resulted in the company being locked out of their IT system for 5 days. This impacted some of their operations including the daily valuation for their clients. Although their clients’ investments were kept safe from the threat actors. Curo […]
January 28, 2022

QNAP forces automatic update after DeadBolt ransomware encrypts thousands of devices

On Tuesday 25th of January 2022, a new ransomware variant called “DeadBolt” was observed targeting devices from Network Attached Storage vendor QNAP. The ransomware variant has been observed demanding a ransom of 0.03BTC (equivalent to $1,100) to unlock the victim’s device. On the ransom note that is attached, there is a link titled “important message for QNAP,” which displays a […]
January 20, 2022

Bank Indonesia confirms ransomware attack after Conti leaks stolen documents

On the 20th of January 2022, Bank Indonesia, the central bank of the Republic of Indonesia announced that it experienced a ransomware attack last month although Bank Indonesia stated that the bank’s operations are not disrupted because of the incident. According to CNN Indonesia, a Bank Indonesia spokesman said no critical data was leaked although the bank has stated that […]