February 9, 2023

US and UK announce sanction against TrickBot and Conti ransomware members

On Thursday 9th of February 2023, the United States and the United Kingdom sanctioned seven individuals for their involvement in the TrickBot malware operation. This sanction is the first of its kind for the UK to disrupt Russian cybercrime and ransomware. As a result of these sanctions, all property and funds in the United States and the United Kingdom belonging […]
February 8, 2023

Pharmaceutical distributor AmerisourceBergen confirms subsidiary data breach

This week, the Pharmaceutical distributor AmerisourceBergen confirmed that they suffered a cyber attack against one of its subsidiaries following the Lorenz ransomware gang listing AmerisourceBergen with allegedly stolen data on its extortion site. AmerisourceBergen also confirmed that the threat actors compromised the IT system of the targeted subsidiary which could have given the ransomware group a chance to exfiltrate data […]
February 2, 2023

LockBit ransomware group claim a cyber attack against ION Group

On the 31st of January 2023, ION Group, a UK-based software company that provides products to financial institutions, banks, and corporations for trading, investment management, and market analytics, disclosed that they had been targeted by a cyber attack that impacted their ION Cleared Derivatives. As a result of the attack, all the affected servers are disconnected which led to a […]
February 1, 2023

LockBit ransomware group announce a new encryptor based on the leaked source code of Conti ransomware

This week, it was revealed that the LockBit ransomware gang has released their latest encryptor named “LockBit Green”. After analyse by cyber security analysts and information disclosed by the ransomware group, it has been revealed that the new encryptor “LockBit Green” is based on the leaked source code of the former Conti ransomware. Furthermore, the cybersecurity firm PRODAFT stated that […]
January 26, 2023

US Department of Justice announce an international law enforcement operation against the Hive ransomware operation

On the 26th of January 2023, the US Department of Justice along with the FBI and Europol announced an international law enforcement operation against the Hive ransomware operation which resulted in the Hive ransomware operation’s Tor payment and data leak sites being seized. The law enforcement operation involved the FBI and other international partners secretly infiltrating the Hive ransomware gang’s […]
January 20, 2023

LAUSD reveals Vice Society ransomware gang stole contractors’ personal information

This week, the Los Angeles Unified School District (LAUSD) revealed that the Vice Society ransomware gang had stolen files containing contractors’ personal information, including Social Security Numbers (SSNs) during a cyber attack that spanned over two months, between the 31st of July 2022, and the 3rd of September 2022. “Through our ongoing investigation, we determined that between July 31, 2022, […]
January 12, 2023

Cyber attack on Fire Rescue Victoria claimed by Vice Society ransomware gang

On Thursday 15th of December 2022, an Australian fire and rescue service operating in the state of Victoria, Fire Rescue Victoria experienced a cyber attack that caused several internal servers to be affected. However, the agency’s emergency response services were not impacted as they were able to operate through mobile phones, pagers, and radio. The agency has also confirmed that […]
November 26, 2022

Ragnar Locker ransomware gang claims to target Belgian municipality, hits police instead

On Wednesday 16th of November 2022, the Ragnar Locker ransomware gang released a posting on their TOR data leak site where they claimed to have stolen data from the municipality of Zwijndrecht. However, it was discovered that the stolen data was from Zwijndrecht police, a local police unit in Antwerp, Belgium. The leaked data reportedly exposed thousands of car number plates, […]
October 17, 2022

German newspaper stops circulation after a ransomware attack

On Friday 14th of October 2022, the german newspaper ‘Heilbronn Stimme’ experienced a ransomware attack that crippled its printing systems as well as phone and email services. On Saturday, the newspaper released an “emergency” six-page edition while all planned obituaries were posted on the website and today, they published a 28-page issue in an e-paper format. The Editor-in-chief Uwe Ralf […]